[cifs-protocol] 120020624002916 MS-ADTS Relation between various CROSS_ORGANIZATION flags

[Sreekanth Nadendla]

Hello Isaac,
TRUST_ATTRIBUTE_CROSS_ORGANIZATION is a flag of trustAttributes attribute which contains the value of trust relationship.
It is SET when the trust is to another domain or forest i.e. not part of this organization

TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION and TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION which are also part of trustAttributes attribute control whether the tickets granted are delegatable.

Other than that, there is no special relationship between these. Hope this helps.

Regards,
Sreekanth Nadendla
Microsoft Windows Open Specifications

-----Original Message-----
From: Sreekanth Nadendla 
Sent: Thursday, February 6, 2020 10:35 AM
To: Isaac Boukris <iboukris at gmail.com>; Stefan Metzmacher <metze at samba.org>; cifs-protocol at lists.samba.org
Cc: support <support at mail.support.microsoft.com>
Subject: 120020624002916 MS-ADTS Relation between various CROSS_ORGANIZATION flags

Hello Isaac, We have created incident 120020624002916 for investigating this issue. I will be assisting you with your question. 


Regards,
Sreekanth Nadendla
Microsoft Windows Open Specifications

-----Original Message-----
From: Isaac Boukris <iboukris at gmail.com> 
Sent: Thursday, February 6, 2020 10:06 AM
To: Interoperability Documentation Help <dochelp at microsoft.com>; Stefan Metzmacher <metze at samba.org>; cifs-protocol at lists.samba.org
Subject: [EXTERNAL] MS-ADTS Relation between various CROSS_ORGANIZATION flags

Hello dochelp,

Can you please elaborate if the TRUST_ATTRIBUTE_CROSS_ORGANIZATION
flag bears any relation to the tgt-delegation flags TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION and TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION.

The name suggests some relation, but I can't find any in the doc, please confirm if they are independent.

Thank you