[cifs-protocol] RE: Other types of Kerberos messages on SamLogon Generic

2008-09-07 Thread Hongwei Sun
Andrew, I went through the logic of the generic pass through function in Kerberos package for both Windows server 2003 and 2008. I found that it only processes KerbVerifyPacMessage (0x03). For any other message types, STATUS_ACCESS_DENIED should be returned. Could you give me more

[cifs-protocol] RE: Other types of Kerberos messages on SamLogon Generic

2008-09-07 Thread Andrew Bartlett
On Sun, 2008-09-07 at 17:01 -0700, Hongwei Sun wrote: Andrew, I went through the logic of the generic pass through function in Kerberos package for both Windows server 2003 and 2008. I found that it only processes KerbVerifyPacMessage (0x03). For any other message types,

[cifs-protocol] RE: Secret 'last set times' doc incorrect in 2008 - 600578

2008-09-07 Thread Andrew Bartlett
On Wed, 2008-09-03 at 12:38 -0700, Richard Guthrie wrote: Andrew, I have completed my research on LsarSetSecret. The documentation provides information when you have an exception case such as when one updates EncryptedCurrentValue. I have included a scenario that might help clarify the