[cifs-protocol] Secret 'last set times' doc incorrect in 2008
Andrew Bartlett
abartlet at samba.org
Tue Aug 26 00:00:36 GMT 2008
In MS-LSAD 3.1.4.6.3 LsarSetSecret it states that:
The server MUST also maintain "time stamp" values for current and old values of the secret object.
The following table lists the rules by which the time stamps are computed.
Value Effect on old time Effect on new time
Old secret value NULL Old value of "new secret time" Not applicable
Old secret value Non-NULL Current server time Not applicable
New secret value NULL Not applicable Current server time
New secret value Non-NULL Not applicable Current server time
However, tests against Window 2008 show that setting the old value (but
not the new) removes the new value, and sets the time to 'current server
time'
Please update the docs,
Thanks,
Andrew Bartlett
--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Red Hat Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/cifs-protocol/attachments/20080826/1289bf0e/attachment.bin
More information about the cifs-protocol
mailing list