[cifs-protocol] [REG: 110030871487040] LsaLogonUser and s4u2self

[Edgar Olougouna]

Matthieu,

[MS-SFU] specifies s4u2self. You should find all the requirements and needed references in the document.
[MS-SFU]: Kerberos Protocol Extensions: Service for User and Constrained Delegation Protocol Specification
http://msdn.microsoft.com/en-us/library/cc246071.aspx

Please contact us if you have any specific clarification question.

Best regards,
Edgar


-----Original Message-----
From: Edgar Olougouna 
Sent: Monday, March 08, 2010 3:26 PM
To: Matthieu Patou; cifs-protocol at samba.org; pfif at tridgell.net
Cc: MSSolve Case Email
Subject: [REG: 110030871487040] LsaLogonUser and s4u2self

Matthieu,

I have taken ownership of this case. I am researching your question and will update you as soon I have news.  

Best regards,

Edgar


-----Original Message-----
From: Mark Miller (MBD) 
Sent: Monday, March 08, 2010 1:54 PM
To: Matthieu Patou; Interoperability Documentation Help; cifs-protocol at samba.org; pfif at tridgell.net
Subject: RE: LsaLogonUser and s4u2self

Hi Matthieu,

Thank you for your question.  A colleague will follow up with you soon.

Regards,
Mark Miller
Escalation Engineer
US-CSS DSC PROTOCOL TEAM

-----Original Message-----
From: Matthieu Patou [mailto:mat+Informatique.Samba at matws.net] 
Sent: Monday, March 08, 2010 2:34 PM
To: Interoperability Documentation Help; cifs-protocol at samba.org; pfif at tridgell.net
Subject: LsaLogonUser and s4u2self

Dear dochelp team,
We are implementing s4u2self in samba4 (mostly Andrew Bartlett actually).
And while searching for more information about this I found this article:
  http://msdn.microsoft.com/en-us/magazine/cc188757.aspx

My question is the following what are the call (kerberos and DS) 
generated by the the Win32 API call LsaLogonUser. The goal is to know 
what we will have to implement in order to make this call succeed when 
the server executing this call is a samba 4 domain member.

Regards.

Matthieu.