]
Sent: Freitag, 29. August 2003 05:04
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Problems with too many nested group memberships
Hey Guido.
It seems that the notechain I have involves the fix in 327825 and that
applying that change to the DC's should be enough because the client
pieces were
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Joe
Sent: Thursday, August 28, 2003 7:19 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Problems with too many nested group memberships
Also I seem to recall them saying that the functionality has been on the
client receiving side for some time
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad
Sent: Wednesday, August 27, 2003 8:10 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Problems with too many nested group memberships
By extension, if you're got nested groups that carry
Message-
From: Joe [mailto:[EMAIL PROTECTED]
Sent: Mittwoch, 27. August 2003 14:11
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Problems with too many nested group memberships
I agree on the cleanup the sid history's. Also the number of groups you
are in before you break can vary greatly based
this - thanks,
Guido
-Original Message-
From: Joe [mailto:[EMAIL PROTECTED]
Sent: Mittwoch, 27. August 2003 14:11
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Problems with too many nested group memberships
I agree on the cleanup the sid history's. Also the number of groups you
are in before you
PROTECTED]
Sent: Thursday, August 28, 2003 7:16 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Problems with too many nested group memberships
I'll see if I can dig up the note I have from PSS on it.
joe
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
Title: RE: [ActiveDir] Problems with too many nested group memberships
Here is some info just to understand what sits inside the ticket and how its used,
To validate the request and the digital signature on it, the KDC will first validate a certificate. The KDC will query the Active
Tony, I believe that the 1000 SID limit is only relevant for NTLM
authentication - the Kerberos ticket excepts a far smaller number of SIDs in
the Token by default (roughly 120).
With the number of group-memberships that you have (likely more than 120),
it sounds like you'll have to increase the
. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.
-Original Message-
From: GRILLENMEIER,GUIDO (HP-Germany,ex1)
[mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 27, 2003 7:41 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Problems with too many nested group
:[EMAIL PROTECTED] On Behalf Of
GRILLENMEIER,GUIDO (HP-Germany,ex1)
Sent: Wednesday, August 27, 2003 7:41 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Problems with too many nested group memberships
Tony, I believe that the 1000 SID limit is only relevant for NTLM
authentication - the Kerberos
: Wednesday, August 27, 2003 7:41 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Problems with too many nested group memberships
Tony, I believe that the 1000 SID limit is only relevant for NTLM
authentication - the Kerberos ticket excepts a far smaller number of
SIDs in the Token by default
Message-
From: GRILLENMEIER,GUIDO (HP-Germany,ex1)
[mailto:[EMAIL PROTECTED]
Sent: Wednesday, August 27, 2003 6:41 AM
To: [EMAIL PROTECTED]
Subject:RE: [ActiveDir] Problems with too many nested group
memberships
Tony, I believe that the 1000 SID limit is only relevant for NTLM
for this.
/Guido
-Original Message-
From: Roger Seielstad [mailto:[EMAIL PROTECTED]
Sent: Mittwoch, 27. August 2003 14:10
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Problems with too many nested group memberships
By extension, if you're got nested groups that carry SID-history baggage,
does
]
[mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad
Sent: Wednesday, August 27, 2003 8:10 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Problems with too many nested group memberships
By extension, if you're got nested groups that carry SID-history
baggage, does that mean that you're
14 matches
Mail list logo