[cifs-protocol] TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION not defined in MS-LSAD - TrackingID#2503210040009805

Jeff McCashland (He/him) jeffm at microsoft.com
Fri Mar 21 16:41:46 UTC 2025


[DocHelp to BCC, support on CC, SR in Subject]

Hi Stefan,

Thank you for your questions. I will respond twice, once for each question to split them into 2 email threads. We created SR 2503210040009805 to address your first question below. One of our engineers will respond soon.

"I'm wondering why TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION is only documented
in MS-KILE, but not in MS-LSAD. I'm wondering if the value 0x00000800 is the correct one?"


Best regards,
Jeff McCashland (He/him) | Senior Escalation Engineer | Microsoft Corporation

Phone: +1 (425) 703-8300 x38300 | Hours: 9am-5pm | Time zone: (UTC-08:00) Pacific Time (US and Canada)

Local country phone number found here: http://support.microsoft.com/globalenglish | Extension 1138300



________________________________
From: Stefan Metzmacher
Sent: Friday, March 21, 2025 7:24 AM
To: Interoperability Documentation Help
Cc: cifs-protocol at lists.samba.org
Subject: [EXTERNAL] TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION is only defined in MS-KILE, but not MS-LSAD

Hi DocHelp,

I'm wondering why TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION is only documented
in MS-KILE, but not in MS-LSAD.

I'm wondering if the value 0x00000800 is the correct one?

I'm also wondering if TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION ( 0x00000200 )
and TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION are still evaluated
even if LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION ( 0x00000010 ) is not present.

Thanks!
metze
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20250321/37b25d0e/attachment.htm>


More information about the cifs-protocol mailing list