[cifs-protocol] TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION not defined in MS-LSAD - TrackingID#2503210040009805

[Sreekanth Nadendla]

Hello Stefan, I will file a request to get MS-LSAD updated with TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION. It does use value 0x00000800.



Regards,

Sreekanth Nadendla

Microsoft Windows Open Specifications


________________________________
From: Jeff McCashland (He/him)
Sent: Friday, March 21, 2025 12:41 PM
To: Stefan Metzmacher
Cc: cifs-protocol at lists.samba.org; Microsoft Support
Subject: TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION not defined in MS-LSAD - TrackingID#2503210040009805

[DocHelp to BCC, support on CC, SR in Subject]

Hi Stefan,

Thank you for your questions. I will respond twice, once for each question to split them into 2 email threads. We created SR 2503210040009805 to address your first question below. One of our engineers will respond soon.

"I'm wondering why TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION is only documented
in MS-KILE, but not in MS-LSAD. I'm wondering if the value 0x00000800 is the correct one?"


Best regards,
Jeff McCashland (He/him) | Senior Escalation Engineer | Microsoft Corporation

Phone: +1 (425) 703-8300 x38300 | Hours: 9am-5pm | Time zone: (UTC-08:00) Pacific Time (US and Canada)

Local country phone number found here: http://support.microsoft.com/globalenglish | Extension 1138300



________________________________
From: Stefan Metzmacher
Sent: Friday, March 21, 2025 7:24 AM
To: Interoperability Documentation Help
Cc: cifs-protocol at lists.samba.org
Subject: [EXTERNAL] TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION is only defined in MS-KILE, but not MS-LSAD

Hi DocHelp,

I'm wondering why TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION is only documented
in MS-KILE, but not in MS-LSAD.

I'm wondering if the value 0x00000800 is the correct one?

I'm also wondering if TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION ( 0x00000200 )
and TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION are still evaluated
even if LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION ( 0x00000010 ) is not present.

Thanks!
metze
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20250328/d97cf5ec/attachment.htm>