Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.411 (Entity 5.404)
Subject: MSLSA ccache uses ticket TicketFlags as KdcOptions in the TGS
    request without mapping between types
X-RT-Original-Encoding: iso-8859-1
Content-Length: 335

GetMSCacheTicketFromCacheInfo() uses the tktinfo->TicketFlags as the
value to assign to TicketRequest->TicketFlags.  This field is blindly
inserted into the kdc-options[0] field of the TGS_REQ.  If there are
bits such as TRANSIT_POLICY_CHECKED in the TicketFlags, this will result
in an unknown TGS_OPTION being processed by the KDC.