[cifs-protocol] Timer events in MS-BKRP - when should we roll over keys?

[Andrew Bartlett]

MS-BKRP has no timer events in MS-BKRP 3.1.4, but I wonder:  When does
windows roll over these keys, and what policy or other configuration is
used to control this?

I'm assuming the ClientWrap certificate needs to be rolled over one a
year, as it has a 365 day lifetime.

Thanks!

Andrew Bartlett
-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba