Leaked source code of windows server 2003
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
|
|
special notes for s4uproxy:
s4uproxy extends SSPI, the cred of ISC caller PROCESS is used
1) S4UProxy must be on a server
2) must set Trusted-to-Authenticate-for-Delegation (T2A4D) via ldp.exe
#define UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION 0x1000000
in the userAccountControl attribute, note ldp.exe only accepts decimal
3) must set Allowed-to-Delegate-to (A2D2) via "delegation tab" after raising domain functionality levels
|
