3.2.5.2 Receiving a Kerberos Message Response

When the KKDCP server receives the Kerberos message response, it SHOULD:

Create a KDC_PROXY_MESSAGE (section 2.2.2) where:

  1. kerb-message is set to the Kerberos message response.

    • target-domain is not used.

    • dclocator-hint is not used.

  2. Send the KDC_PROXY_MESSAGE using the HTTP connection to the KKDCP client.