<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:"Segoe UI Semibold";
panose-1:2 11 7 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">[Jeff to Bcc]<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi Douglas,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks for reaching out. I’ll be looking into this ABNF issue you’ve presented. I’ll get back to you once I have more information.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
<p class="MsoNormal">Kristian<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:2.0pt;margin-right:0in;margin-bottom:2.0pt;margin-left:0in;background:white;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Segoe UI Semibold",sans-serif;color:#222A35;mso-fareast-language:JA">Kristian Smith</span><span style="font-size:10.0pt;color:#222A35;mso-fareast-language:JA"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:2.0pt;margin-right:0in;margin-bottom:2.0pt;margin-left:0in;background:white;text-autospace:none">
<span style="font-size:8.0pt;font-family:"Segoe UI",sans-serif;color:#737373;mso-fareast-language:JA">Support Escalation Engineer<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:2.0pt;margin-right:0in;margin-bottom:2.0pt;margin-left:0in;background:white;text-autospace:none">
<span style="font-size:8.0pt;font-family:"Segoe UI",sans-serif;color:#737373;mso-fareast-language:JA">Windows Open Spec Protocols</span><span style="color:#222A35;mso-fareast-language:JA"><o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:2.0pt;margin-right:0in;margin-bottom:2.0pt;margin-left:0in;background:white;text-autospace:none">
<span style="font-size:8.0pt;font-family:"Segoe UI",sans-serif;color:#737373;mso-fareast-language:JA">Office: (425) 421-4442<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:2.0pt;margin-right:0in;margin-bottom:2.0pt;margin-left:0in;background:white;text-autospace:none">
<span style="font-size:8.0pt;font-family:"Segoe UI",sans-serif;color:black;mso-fareast-language:JA"><a href="mailto:kristian.smith@microsoft.com"><span style="color:#0563C1">kristian.smith@microsoft.com</span></a></span><span style="font-size:8.0pt;font-family:"Segoe UI",sans-serif;color:#737373;mso-fareast-language:JA">
</span><span style="color:#222A35;mso-fareast-language:JA"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Jeff McCashland (He/him) <jeffm@microsoft.com> <br>
<b>Sent:</b> Thursday, February 2, 2023 7:32 AM<br>
<b>To:</b> Douglas Bagnall <douglas.bagnall@catalyst.net.nz>; cifs-protocol@lists.samba.org<br>
<b>Cc:</b> Microsoft Support <supportmail@microsoft.com><br>
<b>Subject:</b> Re: [EXTERNAL] [MS-DTYP] 2.5.1.1 another SDDL syntax ABNF inaccuracy - TrackingID#2302020040006024<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="background:white"><span style="color:black">[DocHelp to BCC, support on CC, SR ID on Subject]<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:black">Hi Douglas,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="color:black">Thanks for your question. One of the Open Specifications team members will respond to assist you. In the meantime, we’ve created case 2302020040006024 to track this request. Please leave
the case number in the subject when communicating with our team about this request.<o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
</div>
<div id="Signature">
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:blue">Best regards,</span><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:navy"><br>
<i>Jeff M</i></span></b><b><i><sup><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#002060">c</span></sup></i></b><b><i><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:navy">Cashland (He/him)
</span></i></b><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:navy">| Senior Escalation Engineer<i> | Microsoft</i></span></b><b><span style="font-family:"Arial",sans-serif;color:navy">
</span></b><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:navy">Protocol Open Specifications Team
</span></b><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:blue">Phone: +1 (425) 703-8300 x38300 | Hours: 9am-5pm | Time zone: (UTC-08:00) Pacific Time (US and Canada)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:blue">Local country phone number found here:
</span><span style="color:#2F5496"><a href="https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsupport.microsoft.com%2Fglobalenglish&data=05%7C01%7CKristian.Smith%40microsoft.com%7C10226e9b5bc6436f700a08db0532afea%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638109487490218295%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=jD7dQrK0Ckt32mraa2JTWZsBuhZb2Kmzq8R3%2BOlLhn0%3D&reserved=0"><span style="font-size:8.0pt;font-family:"Arial",sans-serif">http://support.microsoft.com/globalenglish</span></a></span><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:blue">
| Extension 1138300</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial",sans-serif;color:blue"> </span><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="98%" align="center">
</div>
<div id="divRplyFwdMsg">
<p class="MsoNormal"><b><span style="color:black">From:</span></b><span style="color:black"> Douglas Bagnall <<a href="mailto:douglas.bagnall@catalyst.net.nz">douglas.bagnall@catalyst.net.nz</a>><br>
<b>Sent:</b> Thursday, February 2, 2023 2:24 AM<br>
<b>To:</b> Interoperability Documentation Help <<a href="mailto:dochelp@microsoft.com">dochelp@microsoft.com</a>>;
<a href="mailto:cifs-protocol@lists.samba.org">cifs-protocol@lists.samba.org</a> <<a href="mailto:cifs-protocol@lists.samba.org">cifs-protocol@lists.samba.org</a>><br>
<b>Subject:</b> [EXTERNAL] [MS-DTYP] 2.5.1.1 another SDDL syntax ABNF inaccuracy</span>
<o:p></o:p></p>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal">hi Dochelp,<br>
<br>
I think this bit is wrong in the SDDL ABNF. We have (with irrelevant bits <br>
omitted):<br>
<br>
conditional-ace = ... ";" "(" cond-expr ")" ")"<br>
<br>
cond-expr = term /<br>
term [wspace] ("||" / "&&" ) [wspace] cond-expr /<br>
(["!"] [wspace] "(" cond-expr ")")<br>
<br>
<br>
which says a conditional expression compounded with '&&' or '||' can only <br>
have a simple term on the left hand side. That doesn't seem right, nor is <br>
it in keeping with the text.<br>
<br>
Not least of all, examples 2 and 3 in 2.4.4.17.9 have compound expressions <br>
on either side of a central operator, like so:<br>
<br>
(@User.smartcard==1 || @Device.managed==1) && (@Resource.dept <br>
Any_of{"Sales","HR"})<br>
<br>
My belief is the example is correct and the ABNF is wrong. It should <br>
probably say something more like this:<br>
<br>
cond-expr = term /<br>
cond-expr [wspace] ("||" / "&&" ) [wspace] cond-expr /<br>
(["!"] [wspace] "(" cond-expr ")")<br>
<br>
<br>
though that doesn't explain when you need parentheses and when you don't.<br>
<br>
Douglas<o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>