How samba 3.0 get the NT token for a domain user?

Anthony Liguori aliguor at
Fri May 9 18:59:55 GMT 2003

We just figured out the format of the authorization data and are still 
experimenting with it.  Right now you can find the routines in 

Anthony Liguori
Linux/Active Directory Interoperability
Linux Technology Center (LTC) - IBM Austin
E-mail: aliguor at
Phone: (512) 838-1208
Tie Line: 678-1208

Chere Zhou <qzhou at>
Sent by: at
05/09/2003 01:17 PM
Please respond to qzhou

        To:     lukeh at PADL.COM
        cc:     samba-technical at
        Subject:        Re: How samba 3.0 get the NT token for a domain user?

Why doesn't samba use the decoded SIDs?  Sounds strange to me. 

Can you point me to the functions that does the decoding of the SIDs?  I 
curious to have a look at it.


On Thursday 08 May 2003 05:36 pm, Luke Howard wrote:
> >So if my understanding above is correct, it means that we can not 
> > the access token yet?  Or what else that we do not get the group list
> > from the access token?  Or my understanding of the process is totally
> > wrong?
> The token is included in the authorization data in the Kerberos ticket. 
> present SAMBA decodes the authorization data but does not use the SIDs
> within it.
> -- Luke

More information about the samba-technical mailing list