[cifs-protocol] Secret 'last set times' doc incorrect in 2008

Andrew Bartlett abartlet at samba.org
Tue Aug 26 00:00:36 GMT 2008


In MS-LSAD 3.1.4.6.3 LsarSetSecret it states that:

The server MUST also maintain "time stamp" values for current and old values of the secret object.
The following table lists the rules by which the time stamps are computed.
                          Value         Effect on old time                 Effect on new time
  Old secret value        NULL          Old value of "new secret time"     Not applicable
  Old secret value        Non-NULL      Current server time                Not applicable
  New secret value        NULL          Not applicable                     Current server time
  New secret value        Non-NULL      Not applicable                     Current server time

However, tests against Window 2008 show that setting the old value (but
not the new) removes the new value, and sets the time to 'current server
time'

Please update the docs,

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/cifs-protocol/attachments/20080826/1289bf0e/attachment.bin


More information about the cifs-protocol mailing list