[cifs-protocol] Scope of a File.LeaseKey on the client

2012-10-18 Thread Stefan (metze) Metzmacher
Hi DocHelp, is it correct that the LeaseKey on a file is shared between different user contexts? From 3.2.4.3 Application Requests Opening a File: [...] If the client implements the SMB 2.1 or SMB 3.0 dialect and Connection.SupportsFileLeasing is TRUE, the client MUST search the

Re: [cifs-protocol] [REG: 112091915263549] clarification for application instance ID

2012-09-19 Thread Stefan (metze) Metzmacher
Hi Edgar, The case number 112091915263549 has been created to track this inquiry. I will assist you in resolving this issue. In the SMB2_CREATE_APP_INSTANCE_ID Create Context: DataOffset: 36 (0x24) should be DataOffset: 32 (0x20) and no padding is required. You have 4 extra bytes of

Re: [cifs-protocol] [REG: 112080853508014] SMB3 channel sequence questions. When is Open.OutstandingPreRequestCount supposed to be decremented or reset

2012-08-21 Thread Stefan (metze) Metzmacher
Hi Edgar, Regarding “when should the server decrement OutstandingPreRequestCount or OutstandingRequestCount”, the following logic will be reflected in a future release of the MS-SMB2 document. This occurs during post processing check of the ChannelSequence. 3.3.4.1 Sending Any

[cifs-protocol] SMB3 encryption over multiple requests

2012-08-08 Thread Stefan (metze) Metzmacher
Hi, I just found out that windows2012 RC sends multiple compound requests within just one encrypted SMB2_TRANSFORM message. From reading [MS-SMB2] version 37.0 I had the impression that each request would be encrypted on its own, similar to how signing works. Can the other receiver side rely on

[cifs-protocol] SMB3 channel sequence

2012-08-07 Thread Stefan (metze) Metzmacher
Hi DocHelp, I have some questions regarding the channel sequence verification of SMB 3.00. - When is Open.OutstandingPreRequestCount supposed to be decremented or reset? - What happens on an 16-bit overflow? From the documentation it looks like, the server would always reject

[cifs-protocol] When will clients/applications do a smb2 session reauth

2012-04-27 Thread Stefan (metze) Metzmacher
Hi, with SMB 2.1 (and higher) it's possible to do a session re-authentication without getting a STATUS_NETWORK_SESSION_EXPIRED. With SMB 2.0 STATUS_REQUEST_NOT_ACCEPTED is returned. In what situations do clients do a (pro active) reauthentication without getting STATUS_NETWORK_SESSION_EXPIRED

[cifs-protocol] When will clients/applications do a smb2 session reauth

2012-04-20 Thread Stefan (metze) Metzmacher
Hi, with SMB 2.1 (and higher) it's possible to do a session re-authentication without getting a STATUS_NETWORK_SESSION_EXPIRED. With SMB 2.0 STATUS_REQUEST_NOT_ACCEPTED is returned. In what situations do clients do a (pro active) reauthentication without getting STATUS_NETWORK_SESSION_EXPIRED

[cifs-protocol] SMB2: ioctl max size

2011-10-12 Thread Stefan (metze) Metzmacher
Hi dochelp, I wondering if there are any size limitations based on MaxTransactSize, MaxReadSize and/or MaxWriteSize in SMB2 IOCTL? I can't find anything related in the docs, but I guess there is a size limitation too. metze signature.asc Description: OpenPGP digital signature

Re: [cifs-protocol] [REG:111080856926389] Nameconflict with ss vs. ß

2011-09-15 Thread Stefan (metze) Metzmacher
Hi Obaid, Please let me know if my reply resolved your problem. Yes, sorry for the late response. metze signature.asc Description: OpenPGP digital signature ___ cifs-protocol mailing list cifs-protocol@cifs.org

[cifs-protocol] Nameconflict with ss vs. ß

2011-08-08 Thread Stefan (metze) Metzmacher
Hi, I found that objects with ss and ß in the DN conflict with each other. e.g.: If I create CN=User_ß,OU=test,DC=example,DC=com on DC1 and CN=User_ss,OU=test,DC=example,DC=com on DC2, CN=User_ss,OU=test,DC=example,DC=com gets renamed to

Re: [cifs-protocol] [MS-NRPC] Problem encrypting data when use AES based Netlogon SChannel

2011-07-05 Thread Stefan (metze) Metzmacher
Hi, According to MS-NRPC pg 111, bit 17 (indicated as bit R) of negotiable flag is actually referring to supports the NetrServerPasswordSet2 functionality. In the packet trace that attached earlier, I had successfully negotiated the session key (from pkt 519-523) with the DC using

Re: [cifs-protocol] [Pfif] [REG:110011477385004] RE: userParameters attribute

2011-05-22 Thread Stefan (metze) Metzmacher
Am 23.05.2011 05:50, schrieb Andrew Bartlett: On Mon, 2010-06-21 at 22:54 +, Hongwei Sun wrote: Andrew, Sorry about the delay to give you a confirmation. We have been spending time to review the usage of UserParameters in other Windows components based on the information you

Re: [cifs-protocol] [REG: 110080417580961] [MS-BKRP] 3.1.4.1 misc 0x00020000 value

2010-08-19 Thread Stefan (metze) Metzmacher
Hi Matthieu, Issue verbatim -- So page 31 of MS-BKRP.pdf state that the message format for exchange is : NET_API_STATUS BackuprKey( [in] handle_t h, [in] GUID* pguidActionAgent, [in, size_is(cbDataIn)] byte* pDataIn, [in] DWORD cbDataIn, [out, size_is(,*pcbDataOut)]

Re: [cifs-protocol] Bug in MS-WINSRA section 2.2.10.1 Name Record

2010-02-18 Thread Stefan (metze) Metzmacher
partners. I'll try to produce it next week. metze -Original Message- From: Edgar Olougouna Sent: Friday, February 12, 2010 12:09 PM To: Stefan (metze) Metzmacher Cc: Bill Wesse; p...@tridgell.net; cifs-proto...@samba.org Subject: RE: Bug in MS-WINSRA section 2.2.10.1 Name Record

Re: [cifs-protocol] Bug in MS-WINSRA section 2.2.10.1 Name Record

2010-02-04 Thread Stefan (metze) Metzmacher
Server 2008 Standard 6.0.6001 Service Pack 1 Build 6001 It's the 32-Bit Version. metze Best regards, Edgar -Original Message- From: Edgar Olougouna Sent: Monday, February 01, 2010 9:39 AM To: Stefan (metze) Metzmacher; Bill Wesse Cc: p...@tridgell.net; cifs-proto...@samba.org

Re: [cifs-protocol] How to get the expanded group memberships for a user

2009-11-20 Thread Stefan (metze) Metzmacher
Hi Edgar, I am looking into this and will update you on my progress. Any updates? metze signature.asc Description: OpenPGP digital signature ___ cifs-protocol mailing list cifs-protocol@cifs.org

Re: [cifs-protocol] [Pfif] MS-NRPC: AES Schannel problems

2009-09-16 Thread Stefan (metze) Metzmacher
Hi Hongwei, I think that Nick already informed you that AES 128 with 8 bit CFB mode has to be used. I filed a request to add the information into 3.1.4.4 of MS-NRPC. I also noticed that in mxnrpc.c you attached , you used AES_cfb128_encrypt() (128 bit CFB mode) for computing server

Re: [cifs-protocol] [Pfif] MS-NRPC: AES Schannel problems

2009-08-29 Thread Stefan (metze) Metzmacher
. Meanwhile, I will work on the AES encryption details for Schannel. Thanks! metze -Original Message- From: Stefan (metze) Metzmacher [mailto:me...@samba.org] Sent: Friday, August 28, 2009 12:00 PM To: Hongwei Sun Cc: p...@tridgell.net; cifs-proto...@samba.org Subject: Re: [Pfif] MS-NRPC

Re: [cifs-protocol] [Pfif] MS-NRPC: AES Schannel problems

2009-08-28 Thread Stefan (metze) Metzmacher
Stefan (metze) Metzmacher schrieb: Hongwei, The SharedSecret used for AES session key computation, as described in 3.1.4.3 MS-NRPC , should be the NTOWF (MD4(UNICODE(Passwd))) of the plaintext password. The section 3.1.1 of MS-NRPC explains what a SharedSecret is used for session

[cifs-protocol] Status of [MS-RAIW]?

2009-07-30 Thread Stefan (metze) Metzmacher
Hi, I got a draft for preview of the MS-RAIW document last december. I'm wondering when this will appear in the WSPP docs. metze signature.asc Description: OpenPGP digital signature ___ cifs-protocol mailing list cifs-protocol@cifs.org

Re: [cifs-protocol] CAR - SMB2 Write and Read in Windows 7

2009-07-15 Thread Stefan (metze) Metzmacher
A. Olougouna Sr. SEE, Microsoft DSC Protocol Team -Original Message- From: Stefan (metze) Metzmacher [mailto:me...@samba.org] Sent: Wednesday, July 08, 2009 3:22 AM To: Edgar Olougouna Cc: p...@tridgell.net; cifs-proto...@samba.org Subject: Re: CAR - SMB2 Write and Read in Windows 7

Re: [cifs-protocol] Re: CAR - SMB2 Write and Read in Windows 7

2009-07-09 Thread Stefan (metze) Metzmacher
- From: cifs-protocol-bounces+neilm=thetestplace.co...@cifs.org [mailto:cifs-protocol-bounces+neilm=thetestplace.co...@cifs.org] On Behalf Of Stefan (metze) Metzmacher Sent: Wednesday, July 08, 2009 9:22 AM To: Edgar Olougouna Cc: p...@tridgell.net; cifs-proto...@samba.org Subject: [cifs-protocol

Re: [cifs-protocol] Sharing /home with Samba/CIFS

2008-10-23 Thread Stefan (metze) Metzmacher
Hi Tom, the cifs-protocol mailing list is for technical discussions about protocol details, please use [EMAIL PROTECTED] for samba related user questions. metze I would like to use Samba to share the /home directory from one machine to another. So, I need the following to work: 1. In the

Re: [Pfif] [cifs-protocol] Clarify AEAD behaviour for GSSAPIwith AES

2008-10-19 Thread Stefan (metze) Metzmacher
Hi Hongwei, We finished adding an example for GSS_WrapEx with AES128-CTS-HMAC-SHA1-96 in [MS-KILE]. The attached PDF document is the newly added section(4.3) of the [MS-KILE] document. We really appreciate your suggestion. Please let us know if you have further questions regarding

Re: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-19 Thread Stefan (metze) Metzmacher
that all 32 bytes of the session key are needed. metze Thanks ! Hongwei -Original Message- From: Stefan (metze) Metzmacher [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 17, 2008 10:57 AM To: Hongwei Sun Cc: Andrew Bartlett; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re

Re: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-17 Thread Stefan (metze) Metzmacher
when the correct session key is avaliable. metze -Original Message- From: Stefan (metze) Metzmacher [mailto:[EMAIL PROTECTED] Sent: Friday, September 05, 2008 3:25 PM To: Hongwei Sun Cc: Andrew Bartlett; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [cifs-protocol] Session keys

Re: [cifs-protocol] FW: SAMBA4 Test suite interoperability testing in preparation for the upcoming event.

2008-09-11 Thread Stefan (metze) Metzmacher
Hi Darryl, As we discussed, you recommended that Stefan review the RPC issue below identified during initial test results from a few test scenarios.As noted by the test suite developer below, this required the test suite to bind w/o the UUID. could you please send me that network

[cifs-protocol] Re: [Pfif] Other types of Kerberos messages on SamLogon Generic

2008-09-09 Thread Stefan (metze) Metzmacher
Hongwei Sun schrieb: Andrew, We ran Smbtortue RPC-PAC testing on windows 2008 DC and got the following output. [EMAIL PROTECTED] source]# bin/smbtorture -k yes //VM-W2K8.nick.com/public RPC-PAC Using seed 1220896649 Running PAC Password for [NICKDOM\root]: Domain join

[cifs-protocol] Re: [Pfif] How are 'supported enc types' determined in trusts? - 600253

2008-09-08 Thread Stefan (metze) Metzmacher
Richard Guthrie schrieb: Andrew, If you have a windows 2008 server acting as a member server in a downlevel domain (for this discussion we will assume 2003 functional level), this attribute will only exist if you extend the schema to a level that is compatible with 2008 functional level.

Re: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-05 Thread Stefan (metze) Metzmacher
Hongwei Sun schrieb: Metze/Andrew, The subkey in the EncAPRepPart of the AP-REP should be used as the session key when the mutual authentication is enabled(as described in RFC 4121). When DES and RC4 are used in Kerberos, the implementation is based on RFC1964 (instead of RFC4121).

Re: [cifs-protocol] Session keys are not always 16 bytes long

2008-09-05 Thread Stefan (metze) Metzmacher
Andrew Bartlett schrieb: On Fri, 2008-09-05 at 22:25 +0200, Stefan (metze) Metzmacher wrote: Hongwei Sun schrieb: Metze/Andrew, The subkey in the EncAPRepPart of the AP-REP should be used as the session key when the mutual authentication is enabled(as described in RFC 4121).When DES

[cifs-protocol] Re: Answer: SRX080626600802 : WINS administrative RPC interface

2008-08-14 Thread Stefan (metze) Metzmacher
-AF57-05A82B88383Estart=1interval=10SortCol=DatePosted -Original Message- From: Stefan (metze) Metzmacher [mailto:[EMAIL PROTECTED] Sent: Thursday, August 14, 2008 4:50 AM To: Bill Wesse Cc: [EMAIL PROTECTED] Subject: Re: Answer: SRX080626600802 : WINS administrative RPC interface

Re: [cifs-protocol] DCE_STYLE, AES and sequence numbers

2008-08-12 Thread Stefan (metze) Metzmacher
Andrew Bartlett schrieb: The documentation in MS-KILE 3.4.5.1 on DCE_STYLE is very terse, and fails to clarify a few points, one of which is preventing interoperability with Windows Vista. The client MUST generate an additional AP reply message exactly as the server would ([RFC4120]

Re: [Pfif] [cifs-protocol] Clarify AEAD behaviour for GSSAPI with AES

2008-08-08 Thread Stefan (metze) Metzmacher
Hongwei, The encryption function in Kerberos is described in details in 5.3 [RFC3961] (http://www.ietf.org/rfc/rfc3961.txt), which is referenced by [MS-KILE]. I can summarize as follows * conf is actually a random confounder prefix of length c ,such as 16. *