[cifs-protocol] [MS-SAMR] SamrSetInformationUser2 over an authenticated DCERPC connection [119040819792364]

Andreas Schneider asn at samba.org
Wed Apr 10 12:47:27 UTC 2019

On Wednesday, April 10, 2019 12:35:35 AM CEST Obaid Farooqi wrote:
> Hi Andreas:

Hi Obaid,

> 10. Zip the network trace and lsass01.run file and upload them to the
> workspace and let me know.

I've uploaded the logs as a zip file. It includes two traces. One which denies 
the login and the section works using "SystemLibraryDTC" as the session key to 
encrypt the password buffer with RC4.

Let me know if I can help with anything else.


Best regards,


Andreas Schneider                      asn at samba.org
Samba Team                             www.samba.org
GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D

More information about the cifs-protocol mailing list