Background The constrained delegation extension, also called S4Uproxy , is one of the Service for User (S4U) extensions to Kerberos protocol. It allows a service to obtain service tickets to a subset of other services on behalf of the user. The service...

Although the march of progress steadily tramples the old tried and true in favor of enlightened file formats designed for the new era of the web, some of us take joy in digging deeper into bits and bytes of binary file formats. I’m one of those and I...

Suppose your application requirement is to programmatically create password “protected” Office Open XML (OOXML) documents. Or, perhaps the requirement is to programmatically convert a batch of unprotected OOXML documents to password protected ones. The...

In this blog, I would like to help the reader understand the rules that govern unique attributes in Active Directory (AD) along with the Open Protocols documentation set. I provide examples for user naming attributes. I also clarify common misunderstandings...

J ust when you think that you have figured out SPNEGO, boom! NegTokenInit2 hits you. At least, that was the case with yours truly. NegTokenInit2 is a part of extension to SPNEGO introduced by Microsoft. SPNEGO stands for Simple and Protected Generic...