On Sat, 2008-06-14 at 22:55 +1000, Andrew Bartlett wrote:
> On Thu, 2008-06-12 at 08:38 -0700, Richard Guthrie wrote:
> > Andrew,
> > 
> > I wanted to ensure I understand your question so please validate the 
> > following:
> > 
> > The MS-ADTS document, section 3.1.1.4.4 Extended Access checks is
> > missing information that describes the format of the attributes listed
> > in the table.  Your question relates to syncing these attributes via
> > Directory Replication as described in MS-DRSR.  The table indicates
> > "Access is never granted." What is the format of these attributes when
> > synced via DRS?
> 
> The MS-ADTS document, section 3.1.1.4.4 Extended Access checks lists
> attributes over which "Access is never granted.".  Naturally this makes
> them harder to inspect to determine their format.  What is the format of
> these attributes when synced via DRS (which does permit their access)?
>  
> I'm picking on this table because almost all these attributes listed
> here as 'access is never granted' are in some way complex in their
> representation (because they deal with passwords and similar
> information), but most (all?) are described simply as 'octect string' in
> the documentation. 
> 
> > Is this a correct interpretation of your question?
> 
> No, see my revised attempt. 

Has there been any progress in documenting the format of these
attributes?

Thanks,

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
cifs-protocol mailing list
cifs-protocol@cifs.org
https://lists.samba.org/mailman/listinfo/cifs-protocol

Reply via email to