[xad] Re: Kerberos PAC info on MSDN Library

[Luke Howard]

> the OSF DCE PAC "fits" into kerberos5 without modification,
> unlike the NT5 PAC, which requires modded krb5 as we know.

The OSF DCE PAC was dispensed from a separate privilege
service, but from what I remember of the code they implemented
these all within the same process. And they had to modify
the KDC anyway to use their security registry instead of
the default backend. So I think this is a moot point now,
given that the modifications to the KDC for the Microsoft
PAC are not that extensive -- the real work is in the
DCE RPC services and LDAP server.

-- Luke

--
Luke Howard | lukehoward.com
PADL Software | www.padl.com