Microsoft PAC field

[Sam Hartman]

>>>>> "Markus" == Markus Moeller <huaraz at moeller.plus.com> writes:

    Markus> Sam, I get now some authorisation data on the server after
    Markus> krb5_rd_req, but I still cannot get the MS details. From
    Markus> the below I would think the
    tkt-> enc_part2->authorisation_data.contents could be associated
    tkt-> with the
    Markus> PACTYPE structure, but it doesn't fit (meaning cBuffers
    Markus> and version values don't make sense). In my case
    Markus> tkt->enc_part2->authorisation_data.ad_type is 1 which I
    Markus> think is the "IF-RELEVANT (ID 1) portion of the
    Markus> authorization data".  Is the authorisation_data.contents
    Markus> still encoded ? I didn't find anything about "encoded
    Markus> KERB_AUTH_DATA_PAC".

    Markus> Thanks Markus

Yes, it is still encoded; you will need to decode it.