MS GSS-TSIG Interoperability
Microsoft has extended Kerberos to include authorization information
Microsoft Active Directory needs that authorization information
Microsoft has not documented their Kerberos extension for implementation
- They have documented it for security review