Share via

3.3.5.6.4.7 PAC_ATTRIBUTES_INFO Structure

  • Article

The KDC SHOULD<59> include the PAC_ATTRIBUTES_INFO structure ([MS-PAC] section 2.14) only in TGTs (including referrals and tickets to RODCs).

The KDC SHOULD populate the bits in the structure as follows:

  • PAC_WAS_REQUESTED is set if the ticket was issued in response to an Authentication Service (AS) request in which the client requested that a PAC be included. The request to include a PAC is expressed with a KERB-PA-PAC-REQUEST structure (section 2.2.3) padata type that is set to TRUE:

  • PAC_WAS_GIVEN_IMPLICITLY is set if the ticket was issued in a different transaction where PACs are mandatory, such as delegation ticket issued as specified in [MS-SFU].