[16755] in Kerberos_V5_Development
Re: PACs (was: Re: Delegation and Moonshot)
daemon@ATHENA.MIT.EDU (Luke Howard)
Tue Apr 5 10:40:07 2011
Mime-Version: 1.0 (Apple Message framework v1084)
From: Luke Howard <lukeh@padl.com>
In-Reply-To: <E1Q779J-0000gu-9F@intern.SerNet.DE>
Date: Wed, 6 Apr 2011 00:39:47 +1000
Message-Id: <EFE85D75-8E19-40E5-827E-75C505EB28B4@padl.com>
To: Volker.Lendecke@SerNet.DE
Cc: "Scott E. Cantor" <cantor.2@osu.edu>,
Nico Williams <nico@cryptonector.com>, krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
>> I think I'll stick with http://www.dcerpc.org/ -- given I
>> worked on that code for quite a few years ;-)
>
> Last I heard was that it was pretty difficult to separate
> the pure [un]marshalling routines to and from blobs from
> the RPC engine. Has that changed?
I added support for Microsoft Encoding Services (as used in the PAC) back in 2003, although this wasn't available until Novell open sourced it in 2007. It's in the dcerpc.org code, as part of the IDL library.
The flag you want for the PAC is IDL_ES_MIDL_COMPAT (which turns MES compatibility on). IDL_ES_NO_HEADER gets you the raw NDR data.
-- Luke
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev