3.1.4.2 S4U2proxy Triggered Events

  • Article

A service uses a KRB_TGS_REQ message with the Service for User to Proxy (S4U2proxy) extension when the service determines that it needs to contact another service on behalf of a user for which it has a service ticket. S4U2proxy is used when the request to the second service must use the user's credentials, not the credentials of the first service. The service sends a KRB_TGS_REQ with the S4U2proxy information to obtain a service ticket to another service.