[cifs-protocol] Need some help with LDAP_SERVER_SD_FLAGS_OID control

2009-11-19 Thread Nadezhda Ivanova
Hello, I have been working on the implementation of LDAP_SERVER_SD_FLAGS_OID in Samba, and I have a question. Is this control relevant for an LDAP add request? I have been testing against Win2008. Adding this control to the request does not seem to have any effect. When I set it to Critical, I

Re: [cifs-protocol] Need some help with LDAP_SERVER_SD_FLAGS_OID control (SRX091119600169)

2009-11-19 Thread Bill Wesse
Hi Nadya - I will be your contact for this one. Here is the case number: SRX091119600169: [MS-ADTS] 7.1.3.2 LDAP_SERVER_SD_FLAGS_OID I will begin my investigation today! Regards, Bill Wesse MCSE, MCTS / Senior Escalation Engineer, US-CSSĀ DSC PROTOCOL TEAM 8055 Microsoft Way Charlotte, NC 28273

Re: [cifs-protocol] Need some help with LDAP_SERVER_SD_FLAGS_OID control (SRX091119600169)

2009-11-19 Thread Bill Wesse
Nadya - I don't think the LDAP_SERVER_SD_FLAGS_OID control should have any effect during an add operation, since the flags for the control indicate which security descriptor parts to retrieve during a search, which should explain why LDAP_UNAVAILABLE_CRIT_EXTENSION is not being returned

[cifs-protocol] Object(OR-Name) syntax implementation

2009-11-19 Thread Kamen Mazdrashki
Hi, While I was trying to implement Object(OR-Name) syntax handling in Samba, I've got some unexpected results. There are several places to describe this syntax: http://msdn.microsoft.com/en-us/library/cc223181%28PROT.13%29.aspx - from ADTS

Re: [cifs-protocol] Need some help with LDAP_SERVER_SD_FLAGS_OID control (SRX091119600169)

2009-11-19 Thread Nadezhda Ivanova
Hi Bill, It's definitely not just used for searches. Some management tools such as Active Directory Users and Computers send this control along with a modify request - we have a bug about this in bugzilla: https://bugzilla.samba.org/show_bug.cgi?id=6401 I have proven with tests that in modify

Re: [cifs-protocol] Need some help with LDAP_SERVER_SD_FLAGS_OID control (SRX091119600169)

2009-11-19 Thread Nadezhda Ivanova
P.S. In the links you sent me, http://msdn.microsoft.com/en-us/library/cc223323(PROT.13).aspx add is mentioned as well: It is also used with LDAP Add and Modify requests to control the portion of a Windows security descriptor to modify. The DC modifies only the specified portion of the security

Re: [cifs-protocol] Object(OR-Name) syntax implementation

2009-11-19 Thread John Dunning
Hello Karmen, My name is John Dunning and I am a member of the Microsoft Protocols Documentation team. I will be working on your question Object(OR-Name) syntax implementation. I will keep you up to date as things progress on my end. In the meantime if you have any additional questions

Re: [cifs-protocol] Object(OR-Name) syntax implementation

2009-11-19 Thread Dominic Salemno
Kamen, We have received your inquiry and one of our engineers will follow-up with you in regards to this issue. Dominic Michael Salemno Senior Support Escalation Engineer US-CSS DSC Protocols Team -Original Message- From: Kamen Mazdrashki [mailto:kamen.mazdras...@postpath.com] Sent: