Douglas E. Engert wrote: > Yes, but the TGT is not send via rx over UDP, only the service ticket
If the service ticket is issued by a MIT/Heimdal realm using a cross-realm authentication from AD, then the PAC that is provided by AD in the cross-realm TGT will be included by the MIT/Heimdal realm within the afs service ticket. The PAC provided in the cross-realm TGT is critical and cannot be removed by the MIT/Heimdal KDC. I agree that I do not believe this problem is service ticket related. Jeffrey Altman _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
