2.2.6 KERB-AD-RESTRICTION-ENTRY

The KERB-AD-RESTRICTION-ENTRY structure specifies additional restrictions for the client.<5> Its structure is defined using ASN.1 notation and the syntax is as follows:

 KERB-AD-RESTRICTION-ENTRY ::= SEQUENCE {
 restriction-type             [0] Int32,
 restriction                  [1] OCTET STRING
 }

Restriction-Type: MUST be set to 0x00000000.

Restriction: An LSAP_TOKEN_INFO_INTEGRITY structure that contains the integrity information for the client.

Show: