[cifs-protocol] [MS-SAMR] SamrSetInformationUser2 over an authenticated DCERPC connection [119040819792364]

[Andreas Schneider]

On Wednesday, April 10, 2019 12:35:35 AM CEST Obaid Farooqi wrote:
> Hi Andreas:

Hi Obaid,

> 10. Zip the network trace and lsass01.run file and upload them to the
> workspace and let me know.

I've uploaded the logs as a zip file. It includes two traces. One which denies 
the login and the section works using "SystemLibraryDTC" as the session key to 
encrypt the password buffer with RC4.

Let me know if I can help with anything else.

Thanks.


Best regards,


	Andreas

-- 
Andreas Schneider                      asn at samba.org
Samba Team                             www.samba.org
GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D