[cifs-protocol] [EXTERNAL] Re: [MS-ADTS] SID as DN alternative for querying groups by member - TrackingID#2209290040008412

[Jeff McCashland (He/him)]

Hi Christof,

This appears to be a scenario where referral chasing is needed to return the full results. Are you able to turn on referral chasing for this query, or query the global catalog directly? 

Here is an blog article in case it's helpful: 

Referral Chasing
https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/referral-chasing/ba-p/243177

Best regards,
Jeff McCashland (He/him) | Senior Escalation Engineer | Microsoft Protocol Open Specifications Team 
Phone: +1 (425) 703-8300 x38300 | Hours: 9am-5pm | Time zone: (UTC-08:00) Pacific Time (US and Canada)
Local country phone number found here: http://support.microsoft.com/globalenglish | Extension 1138300

-----Original Message-----
From: Jeff McCashland (He/him) 
Sent: Thursday, October 20, 2022 11:19 AM
To: Christof Schmitt <cs at samba.org>
Cc: Andrew Bartlett <abartlet at samba.org>; cifs-protocol at lists.samba.org; Microsoft Support <supportmail at microsoft.com>
Subject: RE: [EXTERNAL] Re: [cifs-protocol] [MS-ADTS] SID as DN alternative for querying groups by member - TrackingID#2209290040008412

Hi Christof,

I am currently discussing the issue with our ADTS team. There are other instances where the alternative DNs are not interchangeable, such as for objects that do not have SIDs. 

We are determining the root cause for lack of results for your filtered query across domains. 

Best regards,
Jeff McCashland (He/him) | Senior Escalation Engineer | Microsoft Protocol Open Specifications Team
Phone: +1 (425) 703-8300 x38300 | Hours: 9am-5pm | Time zone: (UTC-08:00) Pacific Time (US and Canada) Local country phone number found here: http://support.microsoft.com/globalenglish | Extension 1138300

-----Original Message-----
From: Christof Schmitt <cs at samba.org>
Sent: Monday, October 17, 2022 1:41 PM
To: Jeff McCashland (He/him) <jeffm at microsoft.com>
Cc: Andrew Bartlett <abartlet at samba.org>; cifs-protocol at lists.samba.org; Microsoft Support <supportmail at microsoft.com>
Subject: Re: [EXTERNAL] Re: [cifs-protocol] [MS-ADTS] SID as DN alternative for querying groups by member - TrackingID#2209290040008412

On Thu, Oct 06, 2022 at 08:05:18PM +0000, Jeff McCashland (He/him) wrote:
> Thank you for the fast response!

Hi Jeff,

do you have an update on this issue? Is there anything else i could provide to help with the investigation?

Regards,

Christof