Luke Howard e50033aec2 kdc: add canonical principal name to authz data ...

Use the UPN_DNS_INFO buffer of the PAC to include the canonical principal name.

Arguably we should use AD-LOGIN-ALIAS as defined in RFC6806, but we may not
always know all the principal's aliases, and this approach allows us to share
application service logic with Windows.

2021-12-22 10:36:26 +11:00

44 KiB

Raw Blame History

View Raw