CVS update: samba/source/rpcclient

Luke Leighton lkcl at samba.anu.edu.au
Wed Feb 23 11:37:07 EST 2000


Date:	Wednesday February 23, 2000 @ 11:37
Author:	lkcl

Update of /data/cvs/samba/source/rpcclient
In directory samba:/tmp/cvs-serv26632/rpcclient

Modified Files:
      Tag: SAMBA_TNG
	cmd_lsarpc.c lsa_cmds.c 
Log Message:
dammit!  lsa_set_secret() works DIFFERENTLY depending on the target!
nt4, nt4sp4+ and nt5!

adding an lsa querysecretsecobj command (gets a security descriptor
of a secret, e.g $MACHINE.ACC) to see if it's possible to do a SET
SEC_OBJ command, in order to bypass some of the [good] security
settings that microsoft improved on LSA secrets, i.e you can only
set them, you can't _read_ them.

dammit!

i need to know the format of these, and lsadump2 doesn't help very
much because it uses LsarQuerySecret directly in lsass.exe, it doesn't
get data over-the-wire.  (http://razor.bindview.com).

<a href=" mailto:lkcl at samba.org" > Luke Kenneth Casson Leighton    </a>
<a href=" http://cb1.com/~lkcl"  > Samba and Network Development   </a>
<a href=" http://samba.org"      > Samba Web site                  </a>
<a href=" http://www.iss.net"    > Internet Security Systems, Inc. </a>
<a href=" http://mcp.com"        > Macmillan Technical Publishing  </a>
 
ISBN1578701503 DCE/RPC over SMB: Samba and Windows NT Domain Internals


More information about the samba-cvs mailing list