[29738] in Kerberos
PAC missing from service tickets why?
daemon@ATHENA.MIT.EDU (Michael B Allen)
Wed Apr 23 21:30:43 2008
Message-ID: <78c6bd860804231828j45d1c083l8be623a0781c682e@mail.gmail.com>
Date: Wed, 23 Apr 2008 21:28:56 -0400
From: "Michael B Allen" <ioplex@gmail.com>
To: kerberos <kerberos@mit.edu>
MIME-Version: 1.0
Content-Disposition: inline
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi All,
Sorry for the MS specific question.
Regarding the Privilege Attribute Certificate in the
authorization-data field, someone using my SPNEGO HTTP server product
is getting an error that indicates no PAC is present in the service
ticket supplied by the client. The server is Windows 2003 Server and
the client is Vista SP1. If they try a non-Vista client, SSO works
fine.
Does anyone know of a reason why the PAC would be left out of the
service ticket?
Is there some new security policy that I don't know about?
Any help would be appreciated,
Mike
--
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
