Sometimes Windows sends us a DsAddEntry request with a level 3. This is almost the same as the level except that we need to process the credential passed in the input blob and use those credential to make ldb calls. kpasswdd_process in ./source4/kdc/kpasswdd.c is an example on how to create a gensec structure from a blob.