2.2.7.11 LSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION

  • Article

The LSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION structure communicates authentication material. The following structure corresponds to the TrustedDomainAuthInformation information class. Domain trust authentication is specified in [MS-ADTS] section 6.1.6.9.1. This structure maps to the Incoming and Outgoing Trust Password fields, as specified in section 3.1.1.5.

 typedef struct _LSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION {
   [range(0,1)] unsigned long IncomingAuthInfos;
   PLSAPR_AUTH_INFORMATION IncomingAuthenticationInformation;
   PLSAPR_AUTH_INFORMATION IncomingPreviousAuthenticationInformation;
   [range(0,1)] unsigned long OutgoingAuthInfos;
   PLSAPR_AUTH_INFORMATION OutgoingAuthenticationInformation;
   PLSAPR_AUTH_INFORMATION OutgoingPreviousAuthenticationInformation;
 } LSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION,
  *PLSAPR_TRUSTED_DOMAIN_AUTH_INFORMATION;

IncomingAuthInfos: The count of LSAPR_AUTH_INFORMATION entries (section 2.2.7.17) in the IncomingAuthenticationInformation field.<35>

IncomingAuthenticationInformation: An array of LSAPR_AUTH_INFORMATION structures. The values are used to compute keys used in inbound trust validation, as specified in [MS-ADTS] section 6.1.6.9.1.

IncomingPreviousAuthenticationInformation: Same as IncomingAuthenticationInformation, but the data is the previous version of the authentication information.

OutgoingAuthInfos: The count of LSAPR_AUTH_INFORMATION entries in the OutgoingAuthenticationInformation field.<36>

OutgoingAuthenticationInformation: An array of LSAPR_AUTH_INFORMATION structures. The values are used to compute keys used in outbound trust validation, as specified in [MS-ADTS] section 6.1.6.9.1.

OutgoingPreviousAuthenticationInformation: Same as OutgoingAuthenticationInformation, but the data is the previous version of the authentication information.