When authenticating a screw user, it is necessary to get a SID from the ticket, as WinAPI does:
QuerySecurityContextToken(&ctx, &hToken); GetTokenInformation(hToken, TokenUser, ptUser, len, &len); CloseHandle(hToken); len = GetLengthSid(ptUser->User.Sid); What analogue exists in GSSAPI?
ps: it is not necessary to write authorization in GSSAPI and use additional requests in LDAP , you only need an analog of the call GetTokenInformation