[prev in list] [next in list] [prev in thread] [next in thread]
List: krbdev
Subject: Re: The PAC must be the first ad-element
From: Andrew Bartlett <abartlet () samba ! org>
Date: 2020-01-31 18:25:29
Message-ID: 9f638130f9269056a2822380ed0ced4a58d485be.camel () samba ! org
[Download RAW message or body]
On Fri, 2020-01-31 at 13:46 +0100, Isaac Boukris wrote:
> Hi,
>
> When I recently confirmed that windows hosts have no problem with
> other ad-elements along side the PAC, I was lazy to test change of
> order. Today I tested it and found that Windows servers are not happy
> when the PAC is not the first ad-if-relevant element.
Also, the original Samba PAC handling code was the same way, it very
much assumed that the PAC was the first AD-IF-RELEVANT element.
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic