RE: [ActiveDir] Problems with too many nested group memberships

2003-08-31 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
] Sent: Freitag, 29. August 2003 05:04 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Problems with too many nested group memberships Hey Guido. It seems that the notechain I have involves the fix in 327825 and that applying that change to the DC's should be enough because the client pieces were

RE: [ActiveDir] Problems with too many nested group memberships

2003-08-29 Thread Joe
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Sent: Thursday, August 28, 2003 7:19 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Problems with too many nested group memberships Also I seem to recall them saying that the functionality has been on the client receiving side for some time

RE: [ActiveDir] Problems with too many nested group memberships

2003-08-28 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent: Wednesday, August 27, 2003 8:10 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Problems with too many nested group memberships By extension, if you're got nested groups that carry

RE: [ActiveDir] Problems with too many nested group memberships

2003-08-28 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
Message- From: Joe [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 27. August 2003 14:11 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Problems with too many nested group memberships I agree on the cleanup the sid history's. Also the number of groups you are in before you break can vary greatly based

RE: [ActiveDir] Problems with too many nested group memberships

2003-08-28 Thread Joe
this - thanks, Guido -Original Message- From: Joe [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 27. August 2003 14:11 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Problems with too many nested group memberships I agree on the cleanup the sid history's. Also the number of groups you are in before you

RE: [ActiveDir] Problems with too many nested group memberships

2003-08-28 Thread Joe
PROTECTED] Sent: Thursday, August 28, 2003 7:16 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Problems with too many nested group memberships I'll see if I can dig up the note I have from PSS on it. joe -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

RE: [ActiveDir] Problems with too many nested group memberships

2003-08-28 Thread Carlos Magalhaes
Title: RE: [ActiveDir] Problems with too many nested group memberships Here is some info just to understand what sits inside the ticket and how its used, To validate the request and the digital signature on it, the KDC will first validate a certificate. The KDC will query the Active

RE: [ActiveDir] Problems with too many nested group memberships

2003-08-27 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
Tony, I believe that the 1000 SID limit is only relevant for NTLM authentication - the Kerberos ticket excepts a far smaller number of SIDs in the Token by default (roughly 120). With the number of group-memberships that you have (likely more than 120), it sounds like you'll have to increase the

RE: [ActiveDir] Problems with too many nested group memberships

2003-08-27 Thread Roger Seielstad
. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: GRILLENMEIER,GUIDO (HP-Germany,ex1) [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 27, 2003 7:41 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Problems with too many nested group

RE: [ActiveDir] Problems with too many nested group memberships

2003-08-27 Thread Joe
:[EMAIL PROTECTED] On Behalf Of GRILLENMEIER,GUIDO (HP-Germany,ex1) Sent: Wednesday, August 27, 2003 7:41 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Problems with too many nested group memberships Tony, I believe that the 1000 SID limit is only relevant for NTLM authentication - the Kerberos

RE: [ActiveDir] Problems with too many nested group memberships

2003-08-27 Thread Tony Murray
: Wednesday, August 27, 2003 7:41 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Problems with too many nested group memberships Tony, I believe that the 1000 SID limit is only relevant for NTLM authentication - the Kerberos ticket excepts a far smaller number of SIDs in the Token by default

RE: [ActiveDir] Problems with too many nested group memberships

2003-08-27 Thread Peck, John C SITI-ITDPAD
Message- From: GRILLENMEIER,GUIDO (HP-Germany,ex1) [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 27, 2003 6:41 AM To: [EMAIL PROTECTED] Subject:RE: [ActiveDir] Problems with too many nested group memberships Tony, I believe that the 1000 SID limit is only relevant for NTLM

RE: [ActiveDir] Problems with too many nested group memberships

2003-08-27 Thread GRILLENMEIER,GUIDO (HP-Germany,ex1)
for this. /Guido -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 27. August 2003 14:10 To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Problems with too many nested group memberships By extension, if you're got nested groups that carry SID-history baggage, does

RE: [ActiveDir] Problems with too many nested group memberships

2003-08-27 Thread Joe
] [mailto:[EMAIL PROTECTED] On Behalf Of Roger Seielstad Sent: Wednesday, August 27, 2003 8:10 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Problems with too many nested group memberships By extension, if you're got nested groups that carry SID-history baggage, does that mean that you're