[cifs-protocol] [REG:110021555585893] RE: question on DNS TSIG dynamic updates

[tridge at samba.org]

Hi John,

 >     There was a foul up in communications Friday as you should have
 > been sent a reply that day.

no worries. The initial ack doesn't really matter that much :-)

 > I also received the email regarding your findings and request to
 > update the [MS-GSSA] document. I think what you are looking for is
 > a reference to information indicating that a windows client will
 > only try the signed update if the response from the DNS server for
 > the unsigned request includes fields from the request. Please let
 > me know if I am understanding this correctly. I think that I am but
 > I want to make sure we are on the same page.

yes, assuming that we have correctly diagnosed the problem, then that
is what we'd like. If there are any other conditions for MS clients
doing TSIG-GSS requests then please add those too.

Cheers, Tridge