+#ifdef HAVE_GSSKRB5_EXTRACT_AUTHZ_DATA_FROM_SEC_CONTEXT
+ {
+ gss_buffer_desc pac_buffer;
+ gss_maj = gsskrb5_extract_authz_data_from_sec_context(&gss_min,
+ gse_ctx->gss_ctx,
+ KRB5_AUTHDATA_WIN2K_PAC,
+ &pac_buffer);
+
+
+ if (gss_maj == 0) {
+ *pac = data_blob_talloc(mem_ctx, pac_buffer.value, pac_buffer.length);
+ gss_release_buffer(&gss_min, &pac_buffer);
+
+ } else {
+ DEBUG(0, ("gsskrb5_extract_authz_data_from_sec_context failed [%s]\n",
+ gse_errstr(talloc_tos(), gss_maj, gss_min)));
+
+ return NT_STATUS_NOT_FOUND;
+ }
+ }
+#else