PAC missing from service tickets why?

[Michael B Allen]

Hi All,

Sorry for the MS specific question.

Regarding the Privilege Attribute Certificate in the
authorization-data field, someone using my SPNEGO HTTP server product
is getting an error that indicates no PAC is present in the service
ticket supplied by the client. The server is Windows 2003 Server and
the client is Vista SP1. If they try a non-Vista client, SSO works
fine.

Does anyone know of a reason why the PAC would be left out of the
service ticket?

Is there some new security policy that I don't know about?

Any help would be appreciated,

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/