Possible to retrieve names of groups from PAC data?

Zheng, Kai kai.zheng at intel.com
Tue Jul 8 05:06:20 EDT 2014


Would anyone help confirm that it's possible or not to retrieve the names of groups by inspecting PAC data in service ticket regarding MS-PAC?
I can only get SIDs. Sure I can query the names via LDAP protocol from AD using the SID, but it involves extra effort. If we can't get the names,
then how such SIDs are expected to be used in Windows or non-Windows environments? Thanks.


More information about the krbdev mailing list