On 8/24/23 02:18, Ondrej Valousek wrote:
I am wondering if it is reasonable to request the MIT library to support PAC 
decoding (possibly in form of Named Attributes) so that the information there 
could be used in calling application, I.e.:

PAC buffers are available via these name attributes:

  urn:mspac: (for the whole PAC)
  urn:mspac:logon-info
  urn:mspac:credentials-info
  urn:mspac:server-checksum
  urn:mspac:privsvr-checksum
  urn:mspac:client-info
  urn:mspac:delegation-info
  urn:mspac:upn-dns-info

libkrb5 doesn't do any NDR decoding, so that part has to be done by the application.
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to