PAC missing from service tickets why?

Michael B Allen ioplex at
Wed Apr 23 21:28:56 EDT 2008

Hi All,

Sorry for the MS specific question.

Regarding the Privilege Attribute Certificate in the
authorization-data field, someone using my SPNEGO HTTP server product
is getting an error that indicates no PAC is present in the service
ticket supplied by the client. The server is Windows 2003 Server and
the client is Vista SP1. If they try a non-Vista client, SSO works

Does anyone know of a reason why the PAC would be left out of the
service ticket?

Is there some new security policy that I don't know about?

Any help would be appreciated,


Michael B Allen
PHP Active Directory SPNEGO SSO

More information about the Kerberos mailing list