Re: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-05 Thread Stefan (metze) Metzmacher
Andrew Bartlett schrieb: > On Fri, 2008-09-05 at 22:25 +0200, Stefan (metze) Metzmacher wrote: >> Hongwei Sun schrieb: >>> Metze/Andrew, >>> >>> The subkey in the EncAPRepPart of the AP-REP should be used as the >>> session key when the mutual authentication is enabled(as described in RFC >>> 4

Re: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-05 Thread Andrew Bartlett
On Fri, 2008-09-05 at 22:25 +0200, Stefan (metze) Metzmacher wrote: > Hongwei Sun schrieb: > > Metze/Andrew, > > > > The subkey in the EncAPRepPart of the AP-REP should be used as the > > session key when the mutual authentication is enabled(as described in RFC > > 4121).When DES and RC4 a

Re: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-05 Thread Stefan (metze) Metzmacher
Hongwei Sun schrieb: > Metze/Andrew, > > The subkey in the EncAPRepPart of the AP-REP should be used as the session > key when the mutual authentication is enabled(as described in RFC 4121). > When DES and RC4 are used in Kerberos, the implementation is based on RFC1964 > (instead of RFC41

RE: Subject: [cifs-protocol] CAR - NTCreateX options

2008-09-05 Thread John Dunning
Hello Tridge, I have answers for two of your questions and I would like clarification for question number 1. Please let me know if the answers for questions 2 and 3 are satisfactory. Also would you please clarify what data you are using to support the behavior you are seeing in #1. Questio

RE: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-05 Thread Hongwei Sun
Metze/Andrew, The subkey in the EncAPRepPart of the AP-REP should be used as the session key when the mutual authentication is enabled(as described in RFC 4121). When DES and RC4 are used in Kerberos, the implementation is based on RFC1964 (instead of RFC4121). According to RFC1964, you c

[cifs-protocol] Status: raw NTLMSSP tokens in GSS-API/SPNEGO (SRX080803600053)

2008-09-05 Thread Bill Wesse
Good morning Adam. Documentation development advises me they are waiting for feedback from the Security team on Windows Behaviors with regards to NTLM and SPNEGO blobs. Thanks for your patience. Regards, Bill Wesse MCSE / Escalation Engineer, US-CSS DSC PROTOCOL TEAM 8055 Microsoft Way Charlott

[cifs-protocol] RE: Meaning of ACB_PWNOTREQ / UF_PASSWD_NOTREQD

2008-09-05 Thread Bill Wesse
Good morning Andrew. Thanks for your question. I have created the below case for you on this matter; one of my colleagues or I will take ownership of this and contact you shortly. SRX080905600018 [MS-ADTS] 2.2.15 ADS_UF_PASSWD_NOTREQD semantics Regards, Bill Wesse MCSE / Escalation Engineer, US