kerberos - Calling AcquireCredentialsHandle after ImpersonateSecurityContext returns no credentials -
i writing server supporting kerberos needs accept delegated credentials client, impersonate client, , perform kerberos conversation remote server acting client.
currently, server completes negotiation client using acceptsecuritycontext. after calling querysecuritycontext flags, indicate both asc_ret_delegate , asc_ret_mutual_auth. call impersonatesecuritycontext succeeds (sec_e_ok).
at point, i'm little unclear on do. act client, assume should call acquirecredentialshandle without sec_winnt_auth_identity struct default credentials current "thread", should i've impersonated. however, call returns sec_e_no_credentials.
i can't seem find code samples out there doing , running through delegation/impersonation checklists yield "boxes" checked in active directory correctly.
what supposed doing instead or doing wrong? can provide more information requested, unsure of be.
Comments
Post a Comment