<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-2022-jp">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hello Jo, you may have gotten an invitation to upload files by now. Please check your e-mail folders and let me know otherwise.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<p style="margin-top: 0px; margin-bottom: 0px;"><span style="font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px; color: black;">Regards,</span></p>
<p style="margin-top: 0px; margin-bottom: 0px;"><span style="font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px; color: black;">Sreekanth Nadendla</span></p>
<p style="margin-top: 0px; margin-bottom: 0px;"><span style="font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px; color: black;">Microsoft Windows Open
Specifications</span></p>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Jo Sutton <jsutton@samba.org><br>
<b>Sent:</b> Monday, July 1, 2024 10:01 PM<br>
<b>To:</b> Sreekanth Nadendla <srenaden@microsoft.com>; cifs-protocol@lists.samba.org <cifs-protocol@lists.samba.org><br>
<b>Cc:</b> Microsoft Support <supportmail@microsoft.com><br>
<b>Subject:</b> [EXTERNAL] Re: [cifs-protocol] [MS-APDS] NETLOGON_TICKET_LOGON_INFO message - TrackingID#2405210040011397</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">On second thoughts, I$B!G(Bd rather not send traces via unencrypted email.
<br>
Can you provide somewhere for me to upload them?<br>
<br>
Cheers,<br>
Jo (she/her)<br>
<br>
On 2/07/24 1:57 pm, Jo Sutton via cifs-protocol wrote:<br>
> [moving back to cifs-protocol]<br>
> <br>
> Hi Sreekanth,<br>
> <br>
> Call me Jo :)<br>
> <br>
> As I can$B!G(Bt seem to upload the traces via the link you sent me, I$B!G(Bll try <br>
> to email them to you directly.<br>
> <br>
> The reason for asking about NETLOGON_TICKET_LOGON_INFO is that we$B!G(Bre <br>
> looking to address <a href="https://bugzilla.samba.org/show_bug.cgi?id=15249">https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbugzilla.samba.org%2Fshow_bug.cgi%3Fid%3D15249&data=05%7C02%7Csrenaden%40microsoft.com%7C83670b065fbc4d16899808dc9a3af045%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638554825139640803%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=aQFBXTi1EROEIq9H1Nj39tDjsQ6BA9FyVNhfmfwj6MI%3D&reserved=0</a>.<br>
> <br>
> Cheers,<br>
> Jo (she/her)<br>
> <br>
> On 14/06/24 3:39 am, Sreekanth Nadendla wrote:<br>
>> Hello Joseph, I've sent you instructions to download time travel trace <br>
>> tool to collect traces for lass process earlier. But we were informed <br>
>> by Andrew Bartlet that the reason why you've raised the login issue <br>
>> with [MS-APDS] NETLOGON_TICKET_LOGON_INFO is that you are looking to <br>
>> resolve a privilege escalation problem via enforcement of PAC <br>
>> verification. I could not see how these two issues are connected <br>
>> hence I'm unable to continue the investigation on my own (while you <br>
>> are away dealing with a personal issue).<br>
>> Please let us know whenever you are ready and we will gather the <br>
>> details, data to investigate the issue you are experiencing.<br>
>><br>
>> Regards,<br>
>><br>
>> Sreekanth Nadendla<br>
>><br>
>> Microsoft Windows Open Specifications<br>
>><br>
>><br>
>><br>
>><br>
>><br>
>><br>
>> From: Jo Sutton <jsutton@samba.org><br>
>><br>
>> Sent: Monday, May 20, 2024 9:49 PM<br>
>> To: cifs-protocol@lists.samba.org <cifs-protocol@lists.samba.org>; <br>
>> Interoperability Documentation Help <dochelp@microsoft.com><br>
>> Subject: [EXTERNAL] [MS-APDS] NETLOGON_TICKET_LOGON_INFO message<br>
>> [Some people who received this message don't often get email from <br>
>> jsutton@samba.org. Learn why this is important at <br>
>> <a href="https://aka.ms/LearnAboutSenderIdentification">https://aka.ms/LearnAboutSenderIdentification</a> ]<br>
>><br>
>> Hi dochelp,<br>
>><br>
>> I$B!G(Bm trying to follow [MS-APDS] 2.2.2.1, $B!H(BNETLOGON_TICKET_LOGON_INFO<br>
>> Message$B!I(B, in order to create a NETLOGON_TICKET_LOGON_INFO message that<br>
>> will be accepted by Windows Server 2019. However, in my attempts so far,<br>
>> all I$B!G(Bve got is STATUS_INVALID_PARAMETER codes from NetrLogonSamLogonEx.<br>
>><br>
>> Although [MS-APDS] doesn$B!G(Bt mention it, I assume<br>
>> NETLOGON_TICKET_LOGON_INFO should contain an unsigned 32$B!>(Bbit MessageType<br>
>> field, set to 0x00000026, that indicates the message is a<br>
>> NETLOGON_TICKET_LOGON_INFO message. Other than that, I$B!G(Bm not sure what<br>
>> I$B!G(Bm doing wrong. Are the ticket fields arrays, are depicted in the<br>
>> diagram, or pointers, as claimed in the documentation?<br>
>><br>
>> I can provide traces showing the problem if you would like.<br>
>><br>
>> Cheers,<br>
>> Jo (she/her)<br>
> <br>
> <br>
> _______________________________________________<br>
> cifs-protocol mailing list<br>
> cifs-protocol@lists.samba.org<br>
> <a href="https://lists.samba.org/mailman/listinfo/cifs-protocol">https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.samba.org%2Fmailman%2Flistinfo%2Fcifs-protocol&data=05%7C02%7Csrenaden%40microsoft.com%7C83670b065fbc4d16899808dc9a3af045%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638554825139647864%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=d8RdLMIv1vB7GGJzluzMBC%2Fhf5MdBJy%2BGF3wNHCMb0o%3D&reserved=0</a><br>
</div>
</span></font></div>
</body>
</html>