[cifs-protocol] [REG:111101553031054] SystemLibraryDTC

[Bryan Burgin]

[Hongwei to bcc]

Andrew,

I'm filling in for Hongwei on this issue.  I am engaged with several document groups here to sort this issue out.  Presently I'm working with Neil Martin, who you know, and the current thinking is that this might be addressed in an update to [MS-DTYP].  I'll let you know the outcome or ping you if we need any further information.

Going forward, I'll be your primary contact for this issue.

Bryan

-----Original Message-----
From: Bryan Burgin 
Sent: Wednesday, January 04, 2012 2:18 PM
To: "Hongwei Sun" <hongweis at microsoft.com>
Cc: "cifs-protocol at cifs.org" <cifs-protocol at cifs.org>; "MSSolve Case Email" <casemail at microsoft.com>
Subject: [REG:111101553031054] [cifs-protocol] SystemLibraryDTC

On Tue, 2011-11-15 at 03:56 +0000, Hongwei Sun wrote: 
> Andrew,
> 
>   After reviewing code,  we confirmed that this fixed session key are 
> used by some SAMR/LSAD RPC functions.  We are working on updating all 
> the related documents.  When they are available , I will let you know.
Thanks! 

Now would also be a good time to work out a way to remove them :-).  I would be very happy to work with your developers on a secure way we can indicate to a server that these keys should not be used, or that they should only be available over encrypted transports. 

Andrew Bartlett 

--
Andrew Bartlett
http://samba.org/~abartlet/ 
Authentication Developer, Samba Team           http://samba.org