<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
[DocHelp to BCC, support on CC, Updated Subject w/SR ID]</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Hi Andrew,</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Thank you for your question. We have created SR 2404100040000280 to track this issue. One of our engineers will respond soon. </div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<p><span style="font-family: Arial, sans-serif; font-size: 10pt; color: blue;">Best regards,</span><span style="font-family: Arial, sans-serif; font-size: 10pt; color: navy;"><b><br>
<i>Jeff M</i></b></span><span style="font-family: Arial, sans-serif; font-size: 10pt; color: rgb(0, 32, 96);"><b><i><sup>c</sup></i></b></span><span style="font-family: Arial, sans-serif; font-size: 10pt; color: navy;"><b><i>Cashland (He/him)
</i>| Senior Escalation Engineer<i> | Microsoft</i></b></span><span style="font-family: Arial, sans-serif; color: navy;"><b> </b></span><span style="font-family: Arial, sans-serif; font-size: 10pt; color: navy;"><b>Protocol Open Specifications Team</b></span></p>
<p><span style="font-family: Arial, sans-serif; font-size: 9pt; color: blue;">Phone: +1 (425) 703-8300 x38300 | Hours: 9am-5pm | Time zone: (UTC-08:00) Pacific Time (US and Canada)</span></p>
<p><span style="font-family: Arial, sans-serif; font-size: 8pt; color: blue;">Local country phone number found here:
</span><span style="font-family: Arial, sans-serif; font-size: 8pt; color: rgb(47, 84, 150);"><a href="http://support.microsoft.com/globalenglish" id="OWA75534ba9-5639-db68-8a30-4814260256a8" class="OWAAutoLink" data-loopstyle="linkonly" style="margin-top: 0px; margin-bottom: 0px;">http://support.microsoft.com/globalenglish</a></span><span style="font-family: Arial, sans-serif; font-size: 8pt; color: blue;"> |
Extension 1138300</span></p>
<p> </p>
<div id="appendonsend"></div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<hr style="display: inline-block; width: 98%;">
<div id="divRplyFwdMsg" dir="ltr"><span style="font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"><b>From:</b> Andrew Bartlett <abartlet@samba.org><br>
<b>Sent:</b> Tuesday, April 9, 2024 4:52 PM<br>
<b>To:</b> Interoperability Documentation Help <dochelp@microsoft.com><br>
<b>Cc:</b> cifs-protocol mailing list <cifs-protocol@lists.samba.org><br>
<b>Subject:</b> [EXTERNAL] Looking for missing documentation (MS-KILE?) for CVE-2024-21427, CVE-2024-20674 and PAC signature changes</span>
<div> </div>
</div>
<div class="elementToProof" style="font-size: 11pt;">Kia Ora Dochelp,<br>
<br>
Recently I saw "KB5037754: How to manage PAC Validation changes related<br>
to CVE-2024-26248 and CVE-2024-29056" was published.<br>
<br>
Can I have a pointer to the new NETLOGON behaviour and the new<br>
structures for the SamLogon PAC validation, and the new required<br>
behaviours so a Samba AD DC can handle this?<br>
<br>
I don't see any errata that looks relevant yet.<br>
<br>
Thanks,<br>
<br>
Andrew Bartlett<br>
--<br>
<br>
Andrew Bartlett (he/him) <a href="https://samba.org/~abartlet/" id="OWAb23f809f-438d-226f-ecb4-3fcb6b30e3b7" class="OWAAutoLink" data-auth="NotApplicable" data-loopstyle="linkonly">
https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsamba.org%2F~abartlet%2F&data=05%7C02%7Cjeffm%40microsoft.com%7Cb2822682bbe44e3d0d1408dc58f0416f%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638483036148287662%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C40000%7C%7C%7C&sdata=DoJv%2Fk%2FvbO065BiRFszlshQA22xOg48Dog5Slvkf%2BwU%3D&reserved=0</a><br>
Samba Team Member (since 2001) <a href="https://samba.org/" id="OWA3ed07bca-1431-08bc-cc33-5ab34465c49e" class="OWAAutoLink" data-auth="NotApplicable" data-loopstyle="linkonly">
https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsamba.org%2F&data=05%7C02%7Cjeffm%40microsoft.com%7Cb2822682bbe44e3d0d1408dc58f0416f%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638483036148294830%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C40000%7C%7C%7C&sdata=iqXfl5Npw3y8oT3gCVqhg1tMa7RBaWrmDS1yNY%2FDhS8%3D&reserved=0</a><br>
Samba Team Lead <a href="https://catalyst.net.nz/services/samba" id="OWA52639773-d87a-c8cf-8eea-c766db0b3f90" class="OWAAutoLink" data-auth="NotApplicable" data-loopstyle="linkonly">
https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcatalyst.net.nz%2Fservices%2Fsamba&data=05%7C02%7Cjeffm%40microsoft.com%7Cb2822682bbe44e3d0d1408dc58f0416f%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638483036148298984%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C40000%7C%7C%7C&sdata=7iA%2F%2FgX1QA6n04F9d7nsyTdPCEYJ1abbGket9g4b1E8%3D&reserved=0</a><br>
Catalyst.Net Ltd<br>
<br>
<br>
Proudly developing Samba for Catalyst.Net Ltd - a Catalyst IT group<br>
company<br>
<br>
Samba Development and Support: <a href="https://catalyst.net.nz/services/samba" id="OWA6c0ba2b9-2c4f-f551-1e7c-ac1bcb13ab50" class="OWAAutoLink" data-auth="NotApplicable" data-loopstyle="linkonly">
https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcatalyst.net.nz%2Fservices%2Fsamba&data=05%7C02%7Cjeffm%40microsoft.com%7Cb2822682bbe44e3d0d1408dc58f0416f%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638483036148301821%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C40000%7C%7C%7C&sdata=NvjLgvKGmHyq%2FQkJX2DrxX62nsmQEa4G4e%2BzkgRCMJc%3D&reserved=0</a><br>
<br>
Catalyst IT - Expert Open Source Solutions<br>
<br>
<br>
<br>
</div>
</body>
</html>