0

In case of Kerberos constraint delegation do we need to pass AuthIdentity correct credentials to AcquireCredentialsHandle function?

As per my understanding we need to pass AuthIdentity as NULL to AcquireCredentialsHandle(apsPackageName, SECPKG_CRED_OUTBOUND, NULL, &arcSeqConext.mhCred, &iLifetime);

and it will take the current user login details when function InitializeSecurityContext() gets called.

But it always fails with SEC_E_NO_CREDENTIALS error.

Is anyone know about this can you please help me to authenticate current user correctly.

Improve this question
1
  • we can pass both 0 (current user login) or SEC_WINNT_AUTH_IDENTITY_W. without concrete code or debugging lsass on your system, hard say why you got SEC_E_NO_CREDENTIALS error. may be this is local account logon (KERB_CRED_LOCAL_ACCOUNT) ? Commented May 26, 2025 at 17:48
Related questions
5
Kerberos authentication with SSPI
11
Kerberos, delegation and how to do this correctly?
3
ASP double hop request in kerberos delegation scenario
Load 3 more related questions Show fewer related questions

0

Reset to default

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.