[FR] [Kerberos] [Linux] Add SID Claims under Linux when using kerberos auth.
Open
area-auth
- Dominant language
- C#
- Stars
- 38.4k
- Forks
- 10.9k
- Avg merge
- 2d 6h
- Merged PRs (30d)
- 290
Description
ActiveDirectory (Windows) specific claims should be added when using Negotiate Kerberos auth under Linux implementation.
```
primarysid
primarygroupsid
groupsid
denyonlysid
```
Under Linux, claims described above are currently received using LDAP.
Kerberos has mechanisms to avoid any additional queries to get group SIDs and user SIDs.
However, currently under Linux the only claim receivced without using LDAP is `name` claim.
Contributor guide
Assessment
This issue has not been assessed yet.