Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The KDC SHOULD<60> include the PAC_REQUESTOR SID ([MS-PAC] section 2.15) only in TGTs (including referrals and tickets to RODCs).
The KDC SHOULD populate the PAC_REQUESTOR SID with the SID of the account that requested the ticket. This will be the same as the account named in the cname ([MS-SFU] section 2.2.2) except in delegation scenarios as documented in [MS-SFU], where this will be the delegating service.