[cifs-protocol] [REG:111071166110452] access denied in NetrLogonSamLogonEx

Edgar Olougouna edgaro at microsoft.com
Tue Jul 12 11:05:14 MDT 2011


I copied over the files you previously sent to Hongwei. But unfortunately my debugger cannot open them. It's not clear whether they are corrupted. I tried both 32bit and 64bit debuggers. 

I need you capture new traces with the version of TTT utility I uploaded for you at the workspace. You need to download this TTT, uninstall any previous version you had and install the one I sent. It is in MSExternal.zip. 
Workspace location: https://sftemea.one.microsoft.com/choosetransfer.aspx?key=11d7e2fb-4f3e-48ff-ad69-e46f60c84cf6
I am re-sending the password in a separate email.

Please send the new TTT trace and a full network capture as well.


-----Original Message-----
From: Hongwei Sun 
Sent: Monday, July 11, 2011 4:52 PM
To: Edgar Olougouna; mat at samba.org
Cc: pfif at tridgell.net; cifs-protocol at samba.org
Subject: RE: [cifs-protocol] [REG:111071166110452] access denied in NetrLogonSamLogonEx


  Matthieu already transferred the files to one workspace I created for him in another case.  I will give you the access to that workspace.   


  You don't need to do it again.


-----Original Message-----
From: cifs-protocol-bounces at cifs.org [mailto:cifs-protocol-bounces at cifs.org] On Behalf Of Edgar Olougouna
Sent: Monday, July 11, 2011 4:50 PM
To: mat at samba.org
Cc: pfif at tridgell.net; cifs-protocol at samba.org
Subject: [cifs-protocol] [REG:111071166110452] access denied in NetrLogonSamLogonEx

[Adding case information in subject]


I am happy to look into this for you. I have created the following workspace for this case. Please upload the traces to this location. I will be sending the password in a separate email.
Workspace location: https://sftemea.one.microsoft.com/choosetransfer.aspx?key=11d7e2fb-4f3e-48ff-ad69-e46f60c84cf6

For case tracking record, please note that we use one workspace per customer support case. That way, once you upload a trace and send us data, they are linked to that particular case and available to whoever is investigating the case. 


-----Original Message-----
From: Matthieu Patou [mailto:mat at samba.org]
Sent: Monday, July 11, 2011 1:18 PM
To: mat at samba.org
Cc: Interoperability Documentation Help; pfif at tridgell.net; cifs-protocol at samba.org
Subject: Re: [cifs-protocol] access denied in NetrLogonSamLogonEx

On 11/07/2011 21:39, Matthieu Patou wrote:
> Dear doc help,
> I'm receving a STATUS_ACCESS_DENIED when using ntlm_auth against a 
> Windows 2003 DC.
> According to the NRPC.pdf paragraph, the server is supposed 
> to return ACCESS_DENIED if the client is not using a secure RPC 
> (schannel).
> In this particular case it's not the case as we can see that the 
> information are encapsulated in a schannel communication. What are the 
> other reasons for Windows to return this error ?
> The same call on a Samba4 DC in the same domain is OK, I configured 
> the domain to not keep the lan manager password.
> Matthieu.
I'm also uploading in the link sent by hongwei on the first of july (the one which finish by c3ef297d3290) a  tttrace, the network capture and the extract of the netrlogonsamlogonex for packet 115.


Matthieu Patou
Samba Team        http://samba.org
Private repo      http://git.samba.org/?p=mat/samba.git;a=summary

cifs-protocol mailing list
cifs-protocol at cifs.org

More information about the cifs-protocol mailing list