Class SidMapping

Contains information about how to map SIDs from untrusted forest during access checks.
Identity from untrusted forest must be mapped explicitly to user from AD forest where PDS is installed (or any other trusted forest)
When calling PDS interface, SID mappings help to validate caller's permissions on objects in untrusted forests.

Inheritance

System.Object

SidMapping

Namespace: AdmPwd.Types

Assembly: AdmPwd.PDSWrapper.dll

Syntax

public class SidMapping : Object

Constructors

SidMapping(SecurityIdentifier, SecurityIdentifier, string)

Default constructor

Declaration

public SidMapping(SecurityIdentifier primarySid, SecurityIdentifier mappedSid, string description)

Parameters

Type	Name	Description
System.Security.Principal.SecurityIdentifier	primarySid	SID from untrusted forest
System.Security.Principal.SecurityIdentifier	mappedSid	SID from PDS forest to map primary SID to
string	description	Description of mapping

Properties

Description

Description of SidMapping entry

Declaration

public string Description { get; set; }

Property Value

Type	Description
string

MappedSid

SID from PDS forest that typically represents caller

Declaration

public SecurityIdentifier MappedSid { get; set; }

Property Value

Type	Description
System.Security.Principal.SecurityIdentifier

PrimarySid

SID from untrusted forest that is granted permissions to read/reset passwords there.

Declaration

public SecurityIdentifier PrimarySid { get; set; }

Property Value

Type	Description
System.Security.Principal.SecurityIdentifier