[18888] in Kerberos_V5_Development
Possible to retrieve names of groups from PAC data?
daemon@ATHENA.MIT.EDU (Zheng, Kai)
Tue Jul 8 05:06:35 2014
From: "Zheng, Kai" <kai.zheng@intel.com>
To: "krbdev@mit.edu" <krbdev@mit.edu>
Date: Tue, 8 Jul 2014 09:06:20 +0000
Message-ID: <8D5F7E3237B3ED47B84CF187BB17B666118FB385@SHSMSX103.ccr.corp.intel.com>
Content-Language: en-US
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Hi,
Would anyone help confirm that it's possible or not to retrieve the names of groups by inspecting PAC data in service ticket regarding MS-PAC?
I can only get SIDs. Sure I can query the names via LDAP protocol from AD using the SID, but it involves extra effort. If we can't get the names,
then how such SIDs are expected to be used in Windows or non-Windows environments? Thanks.
Regards,
Kai
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
