Share via

3.3.5.6.4.8 PAC_REQUESTOR SID

  • Article

The KDC SHOULD<60> include the PAC_REQUESTOR SID ([MS-PAC] section 2.15) only in TGTs (including referrals and tickets to RODCs).

The KDC SHOULD populate the PAC_REQUESTOR SID with the SID of the account that requested the ticket. This will be the same as the account named in the cname ([MS-SFU] section 2.2.2) except in delegation scenarios as documented in [MS-SFU], where this will be the delegating service.