[cifs-protocol] RE: LSA and trusted domains

[Bill Wesse]

Good morning again Andrew. I meant to update you yesterday, but was out of the office due to minor illness.

I am currently working on detailing the gaps between the below link/documents and the sort of high level / overview descriptions you are asking after. I hope to have a descriptive format ready for your review within the next several days - and will send you what I have developed as soon as I can, and certainly before our next conference call.

The following links are fairly comprehensive for TechNet content that covers trusts.

Managing Trusts
http://technet.microsoft.com/en-us/library/cc771568.aspx

        (Windows Server 2008)
        Understanding Trusts
        http://technet.microsoft.com/en-us/library/cc731335.aspx

(Active Directory Concepts)
Understanding Trusts
http://technet.microsoft.com/en-us/library/cc736874.aspx

Managing Forest Trusts
http://technet.microsoft.com/en-us/library/cc772440.aspx

Trust Technologies
http://technet.microsoft.com/en-us/library/cc759554.aspx

        How Domain and Forest Trusts Work
        http://technet.microsoft.com/en-us/library/cc773178.aspx
        * Component and trust relationship diagrams

Logon and Authentication Technologies
http://technet.microsoft.com/en-us/library/cc780455.aspx
* LSA Architecture diagram

Regards,
Bill Wesse
MCSE / Escalation Engineer, US-CSS DSC PROTOCOL TEAM
8055 Microsoft Way
Charlotte, NC 28273
TEL:  +1(980) 776-8200
CELL: +1(704) 661-5438
FAX:  +1(704) 665-9606
We're Hiring http://members.microsoft.com/careers/search/details.aspx?JobID=A976CE32-B0B9-41E3-AF57-05A82B88383E&start=1&interval=10&SortCol=DatePosted


-----Original Message-----
From: Bill Wesse
Sent: Tuesday, September 02, 2008 9:08 AM
To: 'Andrew Bartlett'; Interoperability Documentation Help
Cc: pfif at tridgell.net; cifs-protocol at samba.org
Subject: RE: LSA and trusted domains

Good morning Andrew - thank you for your questions. I have opened a new case for you concerning this (SRX080902600070 [MS-ADTS]: LSA and trusted domains overview); since I am working another case in this area for you (SRX080811600226 [MS-NRPC] 2.2.1.3.12  Trust Account Details), I have taken ownership of the new case, and will begin my investigations as soon as possible.

I will advise you of my progress by close of business tomorrow, at the latest.

Regards,
Bill Wesse
MCSE / Escalation Engineer, US-CSS DSC PROTOCOL TEAM
8055 Microsoft Way
Charlotte, NC 28273
TEL:  +1(980) 776-8200
CELL: +1(704) 661-5438
FAX:  +1(704) 665-9606
We're Hiring http://members.microsoft.com/careers/search/details.aspx?JobID=A976CE32-B0B9-41E3-AF57-05A82B88383E&start=1&interval=10&SortCol=DatePosted


-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org]
Sent: Monday, September 01, 2008 9:07 PM
To: Interoperability Documentation Help
Cc: pfif at tridgell.net; cifs-protocol at samba.org
Subject: LSA and trusted domains

MS-LSAD and MS-ADTS discuss trusted domains, but no-where is there a good protocol overview, showing the actions and impacts from the top down.

I had thought I would just work on the details, and look at network traces for the high level, but in retorpsect this was a poor approach.
Could you please provide an overview of this area?

Thanks,

Andrew Bartlett
--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.