[cifs-protocol] Re: [Pfif] How are 'supported enc types' determined in trusts? - 600253

2008-09-08 Thread Stefan (metze) Metzmacher
Richard Guthrie schrieb: > Andrew, > > If you have a windows 2008 server acting as a member server in a downlevel > domain (for this discussion we will assume 2003 functional level), this > attribute will only exist if you extend the schema to a level that is > compatible with 2008 functional l

[cifs-protocol] Re: [Pfif] How are 'supported enc types' determined in trusts? - 600253

2008-09-08 Thread Andrew Bartlett
On Mon, 2008-09-08 at 16:35 +0200, Stefan (metze) Metzmacher wrote: > Richard Guthrie schrieb: > > Andrew, > > > > If you have a windows 2008 server acting as a member server in a > downlevel domain (for this discussion we will assume 2003 functional > level), this attribute will only exist if you

[cifs-protocol] RE: [Pfif] How are 'supported enc types' determined in trusts? - 600253

2008-09-24 Thread Richard Guthrie
Andrew/Stefan, I have completed my research with regard to your question regarding what value LSA would return in the case that the domain functional level is set to 2003. The value returned is dependent on the OS version of the domain controller responding to the query: If the domain control

[cifs-protocol] RE: [Pfif] How are 'supported enc types' determined in trusts? - 600253

2008-10-15 Thread Richard Guthrie
Andrew, I wanted to follow up on our discussion around msds-supportedEncryptionTypes. Taking the call LsarQueryInfoTrustedDomain, this call will return STATUS_INVALID_PARAMETER (0xC00D) if the domain controller that services the call is a windows 2003 domain controller. If the domain cont

[cifs-protocol] RE: [Pfif] How are 'supported enc types' determined in trusts? - 600253

2008-10-16 Thread Andrew Bartlett
On Wed, 2008-10-15 at 07:24 -0700, Richard Guthrie wrote: > Andrew, > > I wanted to follow up on our discussion around > msds-supportedEncryptionTypes. Taking the call > LsarQueryInfoTrustedDomain, this call will return > STATUS_INVALID_PARAMETER (0xC00D) if the domain controller that > servi