You ever work out what was happening Brad?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Smith, Brad
Sent: Wednesday, August 24, 2005 11:25 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
Just incase anyone else is still
t failing again.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: 07 October 2005 02:55
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
You ever work out what was happening Brad?
-Original Message-
From: [EMAIL PROTECTED]
Brad, did you happen to catch this part of the kb?
MORE INFORMATION
Previously, if users experienced this problem, you had to adjust the Kerberos
MaxTokenSize value to resume operations. To resolve this problem, you had to
update this value on all domain workstations.
If you use the hotfix t
ckSent: 19 August 2005 14:06To:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] User
SIDs...
Brad, did you happen to catch
this part of the kb?
MORE INFORMATION
Previously, if users experienced this problem, you had to
adjust the Kerberos MaxTokenSize value to resume operations. To res
The URL you supplied does not relate to a problem with the length of any one
specific SID, it is describing a problem relating to the overall size of all
of the SIDs that represent the identity of a particular user, i.e. user SID,
group SID, SID history. This identity information is known as the u
it up later when I return.
--
Dean Wells
MSEtechnology
* Email: [EMAIL PROTECTED]
http://msetechnology.com
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells
Sent: Friday, August 19, 2005 9:29 AM
To: Send - AD mailing list
Subject: RE: [ActiveDir]
Tokensz results:
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells
Sent: 19 August 2005 14:56
To: Send - AD mailing list
Subject: RE: [ActiveDir] User SIDs...
... it still doesn't look quite right, I'm thinking the issuing auth. is
: RE: [ActiveDir] User SIDs...
Tokensz results:
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells
Sent: 19 August 2005 14:56
To: Send - AD mailing list
Subject: RE: [ActiveDir] User SIDs...
... it still doesn't look quite right, I'm th
AIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dean Wells
Sent: 19 August 2005 14:56
To: Send - AD mailing list
Subject: RE: [ActiveDir] User SIDs...
... it still doesn't look quite right, I'm thinking the issuing auth. is 48
bits by itself but I've no recollection as to where I&#
EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Smith, Brad
Sent: Friday, August 19, 2005 10:49 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
Looks like the PAC is intact, and all SIDs are well within the limit. This
is done from the user account that is exhibitin
lf Of Smith, Brad
Sent: Friday, August 19, 2005 10:49 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
Looks like the PAC is intact, and all SIDs are well within the limit. This is
done from the user account that is exhibiting the problem. I am at a loss on
this on
MAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: 19 August 2005 16:36
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
As Dean keeps saying, how about describing the actual problem as you
see/experience it. Could be something totally different. I'll
Having read through most of the replies on this, it's interesting that there
was an internal (to Microsoft - just to clarify) discussion on this same
topic yesterday.
Seems that a customer was having problems with a function calling APIs for
SID creation when the SID exceeded 68 bytes.
I'll let y
handle
this as referenced in the various Emails below.
Thanks,
-Steve
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan
Sent: Friday, August 19, 2005 12:43 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
Having read
ubject: RE: [ActiveDir] User SIDs...
Having read through most of the replies on this, it's interesting that
there
was an internal (to Microsoft - just to clarify) discussion on this same
topic yesterday.
Seems that a customer was having problems with a function calling APIs
for
SID creation when the
|
// +---+
//
//
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Friday, August 19, 2005 2:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User
EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Friday, August 19, 2005 1:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
A SID of 68 bytes would have the 15 RIDs, which is as far as I can tell
the highest number of RIDs a SID can hold. There is
14 + 1 RID, however you want to slice it).
Thanks,
Joe K.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Friday, August 19, 2005 4:21 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
Sorry, I have just been lurking occasiona
19, 2005 4:21 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
Sorry, I have just been lurking occasionally lately, I am quite busy with
the book and some stupid things with Exchange I am looking into at work in
how failovers are detected and reported and the fact that the
.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan
Sent: Friday, August 19, 2005 10:42 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
:o) Right, Joe! They don't come from us, as far as I can tell. If you
ent: Friday, August 19, 2005 10:48 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
LOL!
The great irony of this message is that Dean emailed me offline to ask me
something about it too and I lamented that I had probably under-engineered
my response, but I had assumed
veDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
>> joe: If I heard someone was trying to create a SID greater than 68
>> bytes
I would ask... Why?
[RTK] No worries, as it fails, so it doesn't matter. However, over 8 is
not really supported - it's a hack, nothing more.
In
Behalf Of Dean Wells
Sent: Friday, August 19, 2005 9:56 AM
To: Send - AD mailing list
Subject: RE: [ActiveDir] User SIDs...
... it still doesn't look quite right, I'm thinking the issuing auth. is 48
bits by itself but I've no recollection as to where I'm getting that from.
I
12:19 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] User SIDs...
Sorry Ppl. Contributors to this list are so helpful that I forget that they
aren't quite smart enough to read my mind, they have been able to do
everything else ;-)
The problem is thus: I have a user in a group, which thro
isn't the
easiest route forward.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: 21 August 2005 18:46
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
Well to rule out number of groups or the nesting, start with a single
EMAIL PROTECTED] On Behalf Of Smith, Brad
Sent: Monday, August 22, 2005 6:32 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
I am going to duplicate the users account (can't really be bothering them much
more :-) and then remove half the groups they are in and tro
ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
It sounds like you may want to consider changing your group/access strategy
as well. If it takes this long to troubleshoot, I think it's worthwhile to
see if it can be done better/more simply for future use.
My $0.04 anyway.
em.
I will have to get the developer to add in some extra debug info me thinks.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Smith, Brad
Sent: 22 August 2005 15:31
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] User SIDs...
That is a good idea,
28 matches
Mail list logo
