PAC with kerberoes
- by Varun
I am currently working on kerberoes, and for now have this doubt on PAC in MS-KILE kerberoes extension.
Can pac included in pactype strcuture withtin authorization data, is meant for client to decrypt and decode.
It seems (if my understanding is correct), that PAC is encrypted with target server's encryption key, which is known only to kdc and target server, and therefore, client just needs to forward that to server when requesting a service, and isn't suppose to decrypt and extract details about its credentails.
Is there a way to try to decrypt this on the fly? ( is there sufficient information available in AS-REP for me extract and decrypt this?