search for: sid45_

...ealmname] does not match principal name in ticket The ticket could be different than the PAC name because the ticket was obtained using S4U extension. Any help will be really appreciated. Cheers, Ephi Background: http://searchwindowssecurity.techtarget.com/news/article/0,289142,sid45_ gci1013484,00.html Kerberos' ability to support delegation is a consequence of its unique ticketing mechanism. When sending a ticket to a server, the Kerberos client can add additional information to it so the server can reuse it to request other tickets on the user's behalf to the Kerb...