[cifs-protocol] access denied in NetrLogonSamLogonEx

Matthieu Patou mat at samba.org
Mon Jul 11 12:17:31 MDT 2011


On 11/07/2011 21:39, Matthieu Patou wrote:
> Dear doc help,
>
> I'm receving a STATUS_ACCESS_DENIED when using ntlm_auth against a 
> Windows 2003 DC.
>
> According to the NRPC.pdf paragraph 3.5.4.4.1, the server is supposed 
> to return ACCESS_DENIED if the client is not using a secure RPC 
> (schannel).
>
> In this particular case it's not the case as we can see that the 
> information are encapsulated in a schannel communication. What are the 
> other reasons for Windows to return this error ?
>
> The same call on a Samba4 DC in the same domain is OK, I configured 
> the domain to not keep the lan manager password.
>
> Matthieu.
>
I'm also uploading in the link sent by hongwei on the first of july (the 
one which finish by c3ef297d3290) a  tttrace, the network capture and 
the extract of the netrlogonsamlogonex for packet 115.

Matthieu.

-- 
Matthieu Patou
Samba Team        http://samba.org
Private repo      http://git.samba.org/?p=mat/samba.git;a=summary




More information about the cifs-protocol mailing list