[cifs-protocol] [REG:117121117303710] Missing and duplicate rightGuid values for Extended Rights in MS-ADTS

[Edgar Olougouna]

Andrew,
Regarding this statement “RE: Some (for property sets) can be found in other tables, but they should be listed under each right.” 
Can you help me find the section (s) where “some” DisplayName (s) are documented? I have been combing through MS-ADTS. Are you referring to “Control access right symbol” in the table in 5.1.3.2.1 Control Access Rights?
Besides, I’d like to make sure we are on the same page and are having the right conversation. What is the protocol relevance of DisplayName? Or are you suggesting that we consider including displayName for each extended right?

Thanks,
Edgar

-----Original Message-----
From: Edgar Olougouna 
Sent: Monday, December 11, 2017 3:55 PM
To: Andrew Bartlett <abartlet at samba.org>; cifs-protocol at lists.samba.org
Cc: MSSolve Case Email <casemail at corp.microsoft.com>
Subject: [REG:117121117303710] Missing and duplicate rightGuid values for Extended Rights in MS-ADTS

[bcc dochelp, + cc casemail]
Hello Andrew,
We have created the case number 117121117303710 to track this inquiry. I will review this and follow-up with you as soon as I have an update.

Thanks,
Edgar

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org] 
Sent: Monday, December 11, 2017 2:51 PM
To: cifs-protocol at lists.samba.org; Interoperability Documentation Help <dochelp at microsoft.com>
Subject: Missing and duplicate rightGuid values for Extended Rights in MS-ADTS

As you know, I've been working to update our extended rights in Samba, and have been using the MS-ADTS document as the reference, combined with the adprep ldif from WindowsServerDocs (which is more complete).

Aside from the already-discussed missing localizationDisplayId and validAccesses, claimed as 'implementation specific', the other thing that is missing compared with the adprep LDIF, even from the template in 6.1.1.2.7.1 controlAccessRight objects, is the displayName.  Some (for property sets) can be found in other tables, but they should be listed under each right. 

Can the docs please be updated to include displayName?

Thanks,

Andrew Bartlett


--
Andrew Bartlett
https://na01.safelinks.protection.outlook.com/?url=https:%2F%2Fsamba.org%2F~abartlet%2F&data=04%7C01%7Cdochelp%40windows.microsoft.com%7C07e31fc18ba34b0db42f08d540d8d474%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636486222390282071%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=ZDCDXF03YYmiwM09cYCxpBli69l7nVKkkPr0DxDETf0%3D&reserved=0
Authentication Developer, Samba Team         https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsamba.org&data=04%7C01%7Cdochelp%40windows.microsoft.com%7C07e31fc18ba34b0db42f08d540d8d474%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636486222390282071%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=X67LhmVbz57eZrlReU50TVjyOlrcfIqH8QH4cKK8qJo%3D&reserved=0
Samba Development and Support, Catalyst IT   
https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcatalyst.net.nz%2Fservices%2Fsamba&data=04%7C01%7Cdochelp%40windows.microsoft.com%7C07e31fc18ba34b0db42f08d540d8d474%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636486222390282071%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwifQ%3D%3D%7C-1&sdata=MtWdPN59h1kB3b%2FTU1RE3QV98rBb%2BHiWp1oKFhgrbDk%3D&reserved=0