CAR: userParameters attribute
Locked
 
|
|
|
|
|
|
|
|
|
|
In reply to this post by Andrew Tridgell-3
Tridge,
We finished updating the protocol document for the userParameters attribute. Since this attribute is used by the Terminal Services Terminal Server Runtime Interface, it is documented in [MS-TSTS]: Terminal Services Terminal Server Runtime Interface Protocol Specification (http://msdn.microsoft.com/en-us/library/cc248570(v=PROT.10).aspx) , which is a part of MCPP document set. The information below has been added to the document and will appear in the future release on MSDN. The following are the updated sections in MS-TSTS. I attached a separate PDF file for your reference. 1. The table in Section 2.3, Directory Service Schema Elements, was modified to denote that the attributes listed previously are not used by Microsoft Terminal Services and a new attribute, userParameters, was added to the table. 2. The section 2.3.1, UserParameters, was added. 3. The section 2.3.2, Encoding and decoding PropValue field, was added. 4. The section 4.5, example for Encoding/Decoding, was added Please let us know if you need any more information for this topic. Thanks! Hongwei -----Original Message----- From: [hidden email] [mailto:[hidden email]] Sent: Thursday, January 14, 2010 2:55 PM To: Interoperability Documentation Help Cc: [hidden email]; [hidden email]; Michael Ströder Subject: CAR: userParameters attribute Dear Dochelp, The userParameters attribute on a user in AD seems to be a bit of a puzzle. Could you add some docs on it at some stage? Not a really high priority, but we would eventually like to be able to offer admin tools that manage things like session activity timeouts, and it seems that we need to know how to parse and create userParameters to do that. An example userParameters attribute from w2k8r2 (in base64 form) is this: userParameters:: Q3R4Q2ZnUHJlc2VudCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgI CAgUAsaCAFDdHhDZmdQcmVzZW5045S15pSx5oiw44GiIAIBQ3R4V0ZQcm9maWxlUGF0aOOAsBgCAU N0eFdGSG9tZURpcuOAsCICAUN0eFdGSG9tZURpckRyaXZl44CwEggBQ3R4U2hhZG9344Sw44Cw44C w44CwLggBQ3R4TWF4RGlzY29ubmVjdGlvblRpbWXjgaXjjLnjkLDjgLAoCAFDdHhNYXhDb25uZWN0 aW9uVGltZeOAtOOct+aIseOAsBwIAUN0eE1heElkbGVUaW1l44Gj45yy46Sw44CwIAIBQ3R4V29ya 0RpcmVjdG9yeeOAsBgIAUN0eENmZ0ZsYWdzMeOAsOOBpuOYsuOAuCICAUN0eEluaXRpYWxQcm9ncm Ft44Cw the above came from using the windows user admin tool to change the session activity timeout for a test user. Michael Ströder has also pointed out this page: http://daduke.org/linux/userparameters.html which documents a previous effort by the Linux thin client community to work out the format of userParameters. I'm guessing the strange encoding is used to try to keep the attribute as valid UTF8. If you can confirm that the attribute is always valid UTF8 that would be great (as otherwise we might corrupt it during replication with windows). As I mentioned, this is not a high priority, but it would be nice to know the format at some stage. Cheers, Tridge _______________________________________________ cifs-protocol mailing list [hidden email] https://lists.samba.org/mailman/listinfo/cifs-protocol |
MS-TSTS-update.pdf (227K) |
|
|
On Tue, 2010-04-13 at 18:18 +0000, Hongwei Sun wrote:
> Tridge, > > I just want to check with you to see if you have any question regarding the newly added documentation for this attribute. If not, I will close this CAR. Can you make sure this information is referenced from the schema docs and available under WSPP? Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Cisco Inc. _______________________________________________ cifs-protocol mailing list [hidden email] https://lists.samba.org/mailman/listinfo/cifs-protocol |
|
|
|
|
In reply to this post by Hongwei Sun
On Tue, 2010-04-13 at 18:18 +0000, Hongwei Sun wrote:
> Tridge, > > I just want to check with you to see if you have any question regarding the newly added documentation for this attribute. If not, I will close this CAR. The reference is good, but it seems there is a problem because of the way this parameter is split between products. In particular, while this may be true for MS-TSTS: [MS-TSTS] 2.3.1 UserParamerters: MSProductData (96 bytes): A 96 byte Unicode character array containing 48 Unicode characters. This field is not used by Microsoft Terminal Services. We need to know the full decode of the structure, regardless of which product or document owns it. In short, what is the meaning and expected contents of MSProductData? Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Cisco Inc. _______________________________________________ cifs-protocol mailing list [hidden email] https://lists.samba.org/mailman/listinfo/cifs-protocol |
|
|
|
|
|
|
On Wed, 2010-05-26 at 23:07 +0000, Hongwei Sun wrote:
> Andrew, > > We have confirmed that currently "UserParameter" attribute is only used by the Terminal Service and there is no any other Microsoft product that also uses this attribute. The Terminal Service doesn't use the first 96 bytes of the "UserParameter" attribute. In order to avoid any confusion, we will rename "MSProductData" to "UnusedData" in the 2.3.1 of the future release of MS-TSTS. > > Please let us know if you have any more question, if not, I will consider this case closed. That's weird. For ages, this was referred to in samba as the 'munged dialback field', because (from memory) the first part was meant to contain the phone number to call back for old-style modem-callback security. I take it that this does not exist any more? For reference, we finally got rid of the field in this commit: http://www.mail-archive.com/samba-cvs@.../msg49021.html UNISTR2 uni_munged_dial ; /* munged path name and dial-back tel no */ Where the field after 'comment' on SAM_USER_INFO_23 became 'parameters' from the IDL. This 'parameters' maps to userParameter in LDAP. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Cisco Inc. _______________________________________________ cifs-protocol mailing list [hidden email] https://lists.samba.org/mailman/listinfo/cifs-protocol |
|
|
|
|
On Tue, 2010-06-01 at 22:51 +0000, Hongwei Sun wrote:
> Andrew, > > This 96 bytes unused data is not currently used by Terminal Service. The following is the update to the documentation: > > UnusedData (96 bytes): A 96 byte array of unused data. This array is filled with the ASCII character for space (0x20). So I take it that the 'dial back number' stuff no longer exists? Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Cisco Inc. _______________________________________________ cifs-protocol mailing list [hidden email] https://lists.samba.org/mailman/listinfo/cifs-protocol |
|
|
|
|
|
|
|
Am 23.05.2011 05:50, schrieb Andrew Bartlett:
> On Mon, 2010-06-21 at 22:54 +0000, Hongwei Sun wrote: >> Andrew, >> >> Sorry about the delay to give you a confirmation. We have been spending time to review the usage of UserParameters in other Windows components based on the information you provided. We found that this attribute is indeed still used by at least one other Microsoft product, such as RAS Server. The related product team is working on this to find how to document it. During my vacation, I will ask one of my team member (Obaid) to monitor the progress and send you the update when it is available. > > Out of pure curiosity, did this ever turn into documentation? BTW: is it documented that the userParameters attribute is stored as utf8 string, while the samr interface uses UTF16? See https://bugzilla.samba.org/show_bug.cgi?id=8077 (I haven't uploaded examples, but I plan to do so in the next weeks) metze _______________________________________________ cifs-protocol mailing list [hidden email] https://lists.samba.org/mailman/listinfo/cifs-protocol |
Loading...
| Powered by Nabble | See how NAML generates this page |
