CVS update: samba/source/rpc_parse

Luke Kenneth Casson Leighton lkcl at samba.org
Tue Nov 2 09:59:34 EST 1999


On Tue, 2 Nov 1999, Matt Chapman wrote:

> On Tue, Nov 02, 1999 at 09:27:01AM +1100, Luke Leighton wrote:
> > 
> > attempting to get blood out of a stone^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H^H
> > querysecret to work, it keeps returning access denied.
> 
> In my experience it only works on domain controllers and Terminal Servers.
> LSA seems to deliberately restrict access on workstations.

yep.  tried against a DC.  failed.
 
> You need to open the secret and possibly the domain with more privs than we 
> do by default. I usually change everything to MAX_ALLOWED before using it; 
> I'm not sure what it should really be.

tried MAX_ALLOWED too.  i happened to capture a set secret $MACHINE.ACC
which is good, and the permissions on that were 0x00020003.



More information about the samba-cvs mailing list