2.2.3 KERB-PA-PAC-REQUEST

The KERB-PA-PAC-REQUEST structure is a padata type that is defined to explicitly request to include or exclude a PAC in the ticket. Its structure is defined using ASN.1 notation and the syntax is as follows.

 KERB-PA-PAC-REQUEST ::= SEQUENCE { 
 include-pac[0] BOOLEAN --If TRUE, and no pac present, include PAC. 
                        --If FALSE, and PAC present, remove PAC 
 }

include-pac: a BOOLEAN data type ([MS-DTYP] section 2.2.4) contains one of two values:

  • TRUE: no PAC is present, include the PAC.

  • FALSE: a PAC is present, exclude or remove the PAC.