oiweiwei

Hello, @krasnovu. May I ask you to attach some test vector of PAC with claims if you have one?

@krasnovu anyway i've added support for remaining claims (some work is pending on decoding credentials, but other things should work)

@krasnovu credentials decoding is also done.

i've added pac-decoder tool in helpers dir: ``` $ go run examples/helpers/pac.go --format base64 --input CAAAAAAAAAABAAAA8AEAAIgAAAAAAAAADQAAAAAAAAB4AgAAAAAAAAoAAAAQAAAAeAIAAAAAAAAMAAAAiAAAAIgCAAAAAAAAEQAAAAgAAAAQAwAAAAAAABIAAAAcAAAAGAMAAAAAAAAGAAAAEAAAADgDAAAAAAAABwAAABAAAABIAwAAAAAAAAEQCADMzMzM4AEAAAAAAAAAAAIAIALBdQof2wH/////////f/////////9/hGgrEwEf2wGEKJU9yh/bAYTohAgCQNsBBgAGAAQAAgAAAAAACAACAAAAAAAMAAIAAAAAABAAAgAAAAAAFAACAAAAAAAYAAIAAQAAAE8EAAABAgAAAQAAABwAAgAgAAAAAAAAAAAAAAAAAAAAAAAAABgAGgAgAAIAFAAWACQAAgAoAAIAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAsAAIAAAAAAAAAAAAAAAAAAwAAAAAAAAADAAAAcwBhAHMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQIAAAcAAAANAAAAAAAAAAwAAABEAC0ARABTAC0AUwBNAEIARABDADAAMQALAAAAAAAAAAoAAABDAE8ATgBUAE8AUwBPAFMATQBCAAQAAAABBAAAAAAABRUAAAA0lam+sTDpGyNFuzECAAAAMAACAAcAAAA0AAIABwAAAAEAAAABAQAAAAAAEgEAAAAFAAAAAQUAAAAAAAUVAAAAAAAAAAAAAAAAAAAA8QEAAAAAAAAAUTWMCh/bAQYAcwBhAHMAJAAYABwAQAACAAAABgBgABwAZgAAAAAAcwBhAHMAQABjAG8AbgB0AG8AcwBvAHMAbQBiAC4AYwBvAG0AAAAAAEMATwBOAFQATwBTAE8AUwBNAEIALgBDAE8ATQAAAAAAcwBhAHMAAQUAAAAAAAUVAAAANJWpvrEw6RsjRbsxTwQAAAAAAAAAAAIAAAABAAAAAQUAAAAAAAUVAAAANJWpvrEw6RsjRbsxTwQAAAAAAAAQAAAAJ+RTg6B6X3YE3mO6EAAAAE4OoOMxSWM9fU6bqg== { "version": 0, "pac_info_buffer": [ { "type": 1, "buffer_length": 496, "offset": 136 }, {...

@krasnovu perhaps you are trying to use some string encoding (or encrypted bytes) as an input the pac.Unmarshal in your code instead of raw data you've provided here.

Closing the issue as requested support has been added.

Hello, @rtpt-erikgeiser! I was not anticipating the new authentication mechanism, so it was poorly documented. But, I can give a hint here: gssapi.Mechanism and gssapi.MechanismEx differ only in a way...

@rtpt-erikgeiser you understand the concept correctly, but: * for simplicity * for sequence numbers of SSP for DCE/RPC are irrelevant * and also the change of sequence numbers can be...

@rtpt-erikgeiser glad to hear you've managed to make it work. > Currently there is a deadlock in WrapEx returns an error. Here is the trace fixed. > The named pipe...