[cifs-protocol] Missing and duplicate rightGuid values for Extended Rights

Andrew Bartlett abartlet at samba.org
Mon Dec 11 00:09:12 UTC 2017


While working to re-construct the validAccesses value that is not
provides in MS-ATDS explicitly, I've been using the references
elsewhere in the docs and cross-referencing things.

This has shown up some puzzling things.  I noticed that these GUIDs 

domainWidePolicy has:
attributeSecurityGuid: a29b89fd-c7e8-11d0-9bae-00c04fd92ef5

domainPolicyReference has 
attributeSecurityGuid: a29b89fe-c7e8-11d0-9bae-00c04fd92ef5

localPolicyReference has
attributeSecurityGuid: a29b8a01-c7e8-11d0-9bae-00c04fd92ef5

However these are not listed in 3.1.1.2.3.3 Property Set

Also, 72E39547-7B18-11D1-ADEF-00C04FD8D5CD is documented as a
rightsGuid for DNS Host Name Attributes and for Validated-DNS-Host-
Name.

Can you please shed some light on what is going on here?


Thanks,

Andrew Bartlett	


-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT   
https://catalyst.net.nz/services/samba







More information about the cifs-protocol mailing list