[cifs-protocol] How are 'supported enc types' determined in trusts?

Andrew Bartlett abartlet at samba.org
Mon Aug 25 23:23:46 GMT 2008


In MS-LSAD 3.1.1.5 Supported Encryption Types

It states the mapping between bits are supported encryption types.  In MS-ADTS 
7.1.6.7.3 we find the backing attribute is
msDs-supportedEncryptionTypes.  

My question is, if a Windows 2008 server in a downlevel domain, and so
trusted domain objects do not include msDs-supportedEncryptionTypes (or
a 'set' was never performed on this LSA information level), what value
will this attribute have?  Is it dependent on the trust type/attributes
flags for example?

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/cifs-protocol/attachments/20080826/9f96081c/attachment.bin


More information about the cifs-protocol mailing list