PAC support from samba4

[Luke Howard]

>  Do you plan to integrate support for PAC that is now in samba4, so that 
>windows-clients could authenticate against MIT KDC?

Rereading this, I didn't really answer the question -- my apologies for
turning this into an advertisment. :-)

I can't speak for MIT, but we do intend to look at making the necessary
extensions to MIT Kerberos to support signing of authorization data, as
well as constrained delegation, protocol transition, etc. I don't have
a timeframe for this but it will probably be in the next 6-12 months.
Of course, don't let me stop anyone else working on this :-)

regards,

-- Luke

--