Possible to retrieve names of groups from PAC data?

[Nico Williams]

It's also possible to use LDAP for SID->name lookups.  In any case,
no, the Kerberos stack doesn't provide any SID->name lookups today.

Nico
--