[cifs-protocol] RE: Mapping of MS-LSAD onto LDAP and DRS replications

[Richard Guthrie]

Andrew,

I will be working with you to resolve your question.  I need to do some research on the MS-LSAD documentation, before we proceed to start resolving this issue, so that I accurately captured everything.  I will send you an update Monday with any questions I have based on that research.  Have a good weekend!

Richard Guthrie
Open Protocols Support Team
Support Escalation Engineer, US-CSS DSC PROTOCOL TEAM 7100 N Hwy 161, Irving, TX - 75039 "Las Colinas - LC2"
Tel: +1 469 775 7794
E-mail: rguthrie at microsoft.com
We're hiring http://members.microsoft.com/careers/search/details.aspx?JobID=A976CE32-B0B9-41E3-AF57-05A82B88383E&start=1&interval=10&SortCol=DatePosted


-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org]
Sent: Thursday, July 10, 2008 10:59 PM
To: Interoperability Documentation Help
Cc: pfif at tridgell.net; cifs-protocol at samba.org
Subject: Mapping of MS-LSAD onto LDAP and DRS replications

I am a PFIF subcontractor, and I am requesting correction assistance:

The documentation on the LSARPC protocol in MS-LSAD is very interesting,
and includes a good description of how a standalone LSA server might
operate.

However, what I have been unable to find a mapping of these operations
onto the objects that would appear in LDAP and would be replicated with
DRS replication, with the LSA server is a domain controller.

This information is replicated between domain controllers in NT4 samsync
replication (MS-NRPC 2.2.1.5.3), but I'm at a loss to see how this is
handled in DRS replication.

Any light you can shed on this would be most appreciated,

Thanks,

Andrew Bartlett
--
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com