[cifs-protocol] Status: SRX080909600334: [MS-APDS] Backing store and policy application information

[Bill Wesse]

Change request for [MS-NRPC]:
NETLOGON_VALIDATION_SAM_INFO4 Structure Member Derivations and References ([MS-NRPC] 2.2.1.4.13)
Status is that the information in the PasswordPolicyAndValidation.pdf document will not become part of the [MS-NRPC] document. This is because of the unwieldy amount of inter-document cross references in the tables.


Change request for [MS-SAMR]:
Password Policy Checks ([MS-SAMR] 3.1.5.14.2) 3. Password Validation Attributes ([MS-SAMR] 5.2)
- Documentation development has not yet responded; I have alerted them concerning this.

Regards,
Bill Wesse
MCSE, MCTS / Escalation Engineer, US-CSS DSC PROTOCOL TEAM
8055 Microsoft Way
Charlotte, NC 28273
TEL:  +1(980) 776-8200
CELL: +1(704) 661-5438
FAX:  +1(704) 665-9606


-----Original Message-----
From: Bill Wesse
Sent: Tuesday, October 14, 2008 6:18 AM
To: 'Andrew Bartlett'
Cc: 'pfif at tridgell.net'; 'cifs-protocol at samba.org'
Subject: RE: Resend: Response: SRX080909600334: [MS-APDS] Backing store and policy application information

Good morning Andrew. I have created document change requests, using the attached document as a source. The 3 topics below, from the attached document, have been submitted against the noted open protocol docs. I will keep you advised of progress. Thanks for your patience!


Change request for [MS-NRPC] created:

1. NETLOGON_VALIDATION_SAM_INFO4 Structure Member Derivations and References ([MS-NRPC] 2.2.1.4.13)

Change request for [MS-SAMR] created:

2. Password Policy Checks ([MS-SAMR] 3.1.5.14.2) 3. Password Validation Attributes ([MS-SAMR] 5.2)

Regards,
Bill Wesse
MCSE, MCTS / Escalation Engineer, US-CSS DSC PROTOCOL TEAM
8055 Microsoft Way
Charlotte, NC 28273
TEL:  +1(980) 776-8200
CELL: +1(704) 661-5438
FAX:  +1(704) 665-9606

-----Original Message-----
From: Bill Wesse
Sent: Thursday, October 09, 2008 2:37 PM
To: 'Andrew Bartlett'
Cc: 'pfif at tridgell.net'; 'cifs-protocol at samba.org'
Subject: RE: Resend: Response: SRX080909600334: [MS-APDS] Backing store and policy application information

Hi Andrew. I hope interop & SNIA went well (I heard some positive feedback on the interop, but SNIA is outside my working set <g>).

I am the sole author of PasswordPolicyAndValidation.pdf - and gather you are interested in the entire set of tables & information in it being inserted into the appropriate documents.

So, I will proceed to file document change requests as applicable, using PasswordPolicyAndValidation.pdf as the source for change proposals.

I wish I could say that the pdf will serve as a model - but I do know there is an ongoing conversation here about top-down versus bottom-up documentation style & content. I recognize much of the AD documentation is bottom-up, which doesn't provide the most straightforward route to an implementation...

Hence that other document I sent a (very) rough copy of a while back ([SCENARIO_DOMAIN_TRUST].pdf - which currently deconstructs most of the wired operations & some of data flow for trusts). As I noted in a separate email, I expect to be able to provide you with the latest copy soon. How much of that doc will end up on other forthcoming items under development is currently a big unknown.

Regards,
Bill Wesse
MCSE / Escalation Engineer, US-CSS DSC PROTOCOL TEAM
8055 Microsoft Way
Charlotte, NC 28273
TEL:  +1(980) 776-8200
CELL: +1(704) 661-5438
FAX:  +1(704) 665-9606


-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org]
Sent: Wednesday, October 08, 2008 4:53 PM
To: Bill Wesse
Cc: 'pfif at tridgell.net'; 'cifs-protocol at samba.org'
Subject: RE: Resend: Response: SRX080909600334: [MS-APDS] Backing store and policy application information

On Wed, 2008-10-08 at 08:09 -0700, Bill Wesse wrote:
> Good morning again Andrew! I am resending this since I have not
> received a response to my email of Sept 26. Could you advise me
> concerning how you would like the document to read?

>
> Good morning Andrew. I have completed my preliminary investigation
> concerning your questions about password policy, validation and
> concrete backing store for user and trust account attributes.

I'm so sorry I didn't get back to you.  As I said to everyone else (at the interop and SNIA events), I just wish the rest of the documentation was so clear and provided such a useful mapping.

Very well done!

Now, what is the long-term status of this document, and how can we make it a modal for other protocols?

Andrew Bartlett

--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.