[cifs-protocol] RE: What are the 'Service' levels in SamLogonEx?

[Obaid Farooqi]

Hi Andrew:
We have concluded our investigation on the question you raised about MS-APDS.

Modification to [MS-NRPC] about NetlogonServiceInformation explain why we do not use them.
In MS-APDS we specify what is used by each protocol. By design we do not specify LogonLevels that are not used.

While it is true that [MS-APDS] uses [MS-NRPC], there is no mention of NetlogonServiceInformation in [MS-APDS]. As such, there is no proper place or context in [MS-APDS] to mention the fact that none of the protocols described in this document use NetlogonServiceInformation.

Regards,
Obaid Farooqi
Sr. SEE | Microsoft

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org]
Sent: Tuesday, January 06, 2009 3:21 PM
To: Obaid Farooqi
Cc: pfif at tridgell.net; cifs-protocol at samba.org
Subject: RE: What are the 'Service' levels in SamLogonEx?

On Tue, 2009-01-06 at 07:54 -0800, Obaid Farooqi wrote:
> Hi Andrew:
> I went through the document MS-APDS but there is no mention of NetlogonServiceInformation for which we modified MS-NRPC. Do you have any specific section of MS-APDS in mind that you want modified as a result of modifications made to MS-NRPC?

Isn't that the point?

In NRPC you passed the definition of this off to other protocols - you said this is just a passthough to a receiving protocol, and it should not be fully described here.

So, I'm suggesting (and yes, this is by far the least important issue I'm raising, but it is an issue non-the-less) that APDS (I presume this is the receiving protocol) should also contain the final 'we don't actually use this' description.

Andrew Bartlett

--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.