[cifs-protocol] RE: How to validate the PAC in NETLOGON

2008-09-04 Thread Andrew Bartlett
On Thu, 2008-09-04 at 06:54 -0700, Richard Guthrie wrote: Andrew, I am still researching the issue you are getting with NT_STATUS_INVALID_PARAMETER however I wanted to send you an update to the documentation based on your last feedback regarding computation of the KDC signature. Section

[cifs-protocol] RE: 601628 RE: Mapping of MS-LSAD onto LDAP and DRS replications

2008-09-04 Thread Andrew Bartlett
On Wed, 2008-09-03 at 06:37 -0700, Richard Guthrie wrote: Andrew, We have revised section 3.1.1.5 of MS-LSAD, as you suggested below, to contain: 1.) Links to LSA IDL definitions 2.) Cross-references to MS-ADTS sections related to the corresponding TDO discussion in section

[cifs-protocol] Meaning of ACB_PWNOTREQ / UF_PASSWD_NOTREQD

2008-09-04 Thread Andrew Bartlett
In Samba4, we map the userAccountControl flag UF_PASSWD_NOTREQD to the SAMR flag ACB_PWNOTREQ, and we use this to indicate 'no password (or any password) required for this account'. That is, when this flag is set, and NULL passwords are permitted (as a global setting 'null passwords = yes' in