Douglas E. Engert wrote:
The last note I just sent was asking about this same feture, and since they said their KDC was 1.2.27, is this a PAC size problem, and no TCP support on the 1.2.27?
MIT is still running 1.2.x for the ATHENA realm so I am sure that it is not a PAC size problem. PACs are not being sent to the MIT realm. The MIT realm is being used to obtain a TGT and then a cross-realm TGT to the AD. There should be no PAC involved in either of those requests.
The PAC only appears during the workstation to AD AS_REQ for logging
into the workstation.
Of course, we have not been given a network trace yet. Although I seem to remember looking at one last April and there was nothing obvious.
Jeffrey Altman
smime.p7s
Description: S/MIME Cryptographic Signature
