<div class="content" name="trustAuthInfo_attributes" uuid="c964fca9-c50e-426a-9173-5bf3cb720e2e"><p><span><a href="b645c125-a7da-4097-84a1-2fa7cea07714#gt_b0276eb2-4e65-4cf1-a718-e0920a614aca" data-linktype="relative-path">Domain</a></span> peers share a
password in order to validate protocol messages flowing between the <span><a href="b645c125-a7da-4097-84a1-2fa7cea07714#gt_5ee032d0-d944-4acb-bbb5-b1cfc7df6db6" data-linktype="relative-path">trusted</a></span>
domains. The password is only good in one direction of the trust. Each
direction is stored in its own <span><a href="b645c125-a7da-4097-84a1-2fa7cea07714#gt_108a1419-49a9-4d19-b6ca-7206aa726b3f" data-linktype="relative-path">attribute</a></span>: the <span><a href="../ms-ada3/811adef4-3ad5-42fa-8913-268ca096bc1a" data-linktype="relative-path">trustAuthIncoming</a></span>
and <span><a href="../ms-ada3/3545ff0e-4321-450f-a116-fa9cf3716bb1" data-linktype="relative-path">trustAuthOutgoing</a></span>
attributes. These are both <span><a href="b645c125-a7da-4097-84a1-2fa7cea07714#gt_d01d16a8-7864-4c7f-acaa-8c695508d6e0" data-linktype="relative-path">secret attributes</a></span> (<span><a href="../ms-drsr/f977faaa-673e-4f66-b9bf-48c640241d47" data-linktype="relative-path">[MS-DRSR]</a></span>
section <span><a href="../ms-drsr/294168d9-81bf-461b-91d7-95bd8a985737" data-linktype="relative-path">4.1.10.3.11</a></span>,
IsSecretAttribute), and are not readable outside of the context of the LSA on a
<span><a href="b645c125-a7da-4097-84a1-2fa7cea07714#gt_76a05049-3531-4abd-aec8-30e19954b4bd" data-linktype="relative-path">DC</a></span>.</p><p>Both trustAuthIncoming and trustAuthOutgoing are stored as a
String(Octet). The storage of this information in a <span><a href="b645c125-a7da-4097-84a1-2fa7cea07714#gt_f2ceef4e-999b-4276-84cd-2e2829de5fc4" data-linktype="relative-path">TDO</a></span> is described in
the following diagram.</p><table>
 <tbody><tr>
  <th><p><br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>1<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>2<br/>0</p></th>
  <th><p><br/>1</p></th>
  <th><p><br/>2</p></th>
  <th><p><br/>3</p></th>
  <th><p><br/>4</p></th>
  <th><p><br/>5</p></th>
  <th><p><br/>6</p></th>
  <th><p><br/>7</p></th>
  <th><p><br/>8</p></th>
  <th><p><br/>9</p></th>
  <th><p>3<br/>0</p></th>
  <th><p><br/>1</p></th>
 </tr>
 <tr>
  <td colspan="32">Count of auth infos</td>
 </tr>
 <tr>
  <td colspan="32">Byte offset to AuthenticationInformation</td>
 </tr>
 <tr>
  <td colspan="32">Byte offset to PreviousAuthenticationInformation</td>
 </tr>
 <tr>
  <td colspan="32">AuthenticationInformation (variable)</td>
 </tr>
 <tr>
  <td colspan="32">...</td>
 </tr>
 <tr>
  <td colspan="32">PreviousAuthenticationInformation (variable)</td>
 </tr>
 <tr>
  <td colspan="32">...</td>
 </tr>
</tbody></table><p><b>Count of auth infos (4 bytes): </b>A <span><a href="../ms-dtyp/32862b84-f6e6-40f9-85ca-c4faf985b822" data-linktype="relative-path">ULONG</a></span>
count of the pairs of LSAPR_AUTH_INFORMATION structures. Each current
Authentication Information structure is accompanied by a previous
Authentication Information structure (even if it is marked as invalid), and the
count of the pairs of elements is stored in this field.</p><p><b>Byte offset to AuthenticationInformation (4
bytes): </b>The <span><a href="../ms-dtyp/d7edc080-e499-4219-a837-1bc40b64bb04" data-linktype="relative-path">BYTE</a></span>
offset from the base of the structure to the array of LSAPR_AUTH_INFORMATION
structures representing the current <span><a href="b645c125-a7da-4097-84a1-2fa7cea07714#gt_8e961bf0-95ba-4f58-9034-b67ccb27f317" data-linktype="relative-path">authentication</a></span>
information.</p><p><b>Byte offset to PreviousAuthenticationInformation
(4 bytes): </b>The BYTE offset from the base of the structure to the array of
LSAPR_AUTH_INFORMATION structures representing the previous authentication
information.</p><p><b>AuthenticationInformation (variable): </b>Array of
LSAPR_AUTH_INFORMATION [1...Count].</p><dl>
<dd>
<p>Following the byte offset to
PreviousAuthenticationInformation is an array of <span><a href="dfe16abb-4dfb-402d-bc54-84fcc9932fad" data-linktype="relative-path">LSAPR_AUTH_INFORMATION</a></span>
structures representing the current authentication information.</p>
</dd></dl><p><b>PreviousAuthenticationInformation (variable): </b>Array
of LSAPR_AUTH_INFORMATION [1...Count].</p><dl>
<dd>
<p>Following the current authentication information is
an array of LSAPR_AUTH_INFORMATION structures representing the previous
authentication information. If authentication information has not been
previously stored, then the previous Authentication Information structure is an
exact copy of the current Authentication Information structure.</p>
</dd></dl></div>