2.2.5 PA-PAC-OPTIONS

The PA-PAC-OPTIONS structure ([MS-KILE] section 2.2.10) specifies explicitly requested options in the PAC. Using resource-based constrained delegation, S4U2proxy SHOULD<6> extend the PA-PAC-OPTIONS structure as follows:

 PA-PAC-OPTIONS ::= KerberosFlags 
   -- resource-based constrained delegation (3)