DCERPC sign & seal

[Stefan (metze) Metzmacher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Andrew,

here'are some info's about what I need for doing more research on the DRSUAPI pipe,

when you'll run the RCP-DRSUAPI test you'll allways got DCERPC_FAULT_LOGON_FAILURE (0x00000005)

I have upload some captures to samba.org:/data/samba-team/captures/metze
(w2k-103-become-dc.cap and native-2k-logon-ads.cap)

there are a few binds to the DRSUAPI from windows to windows boxes,

DCERPC_AUTH_TYPE_SPNEGO (9) (with krb5) works
DCERPC_AUTH_TYPE_KRB5 (16! not 1) works
DCERPC_AUTH_TYPE_NTLMSSP (10) with NULL username fails

It would be very cool to have that working soon with the samba4 code:-)

nice weekend!

- --
metze

Stefan Metzmacher <metze at samba.org> www.samba.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBJiHem70gjA5TCD8RAjybAKDIZrNocrVjz7o5cZQUeF/iOz/tiQCgsbul
sH2I4FyYTLsnmtPVvgsdHTo=
=8j9/
-----END PGP SIGNATURE-----