[PATCH] Test the netlogon challenge cache better and add helpful logs

Stefan Metzmacher metze at samba.org
Mon Jun 26 08:50:31 UTC 2017


Hi Andrew,

> Debugging incorrect machine accounts on netlogon is really painful, as
> there are essentially no useful logs on the AD DC for wrong machine
> account passwords.  
> 
> This fixes it.  In the long run a proper hook into the audit logs are
> due, but this is a good start. 

Can you please add a bug for the proper solution, I think it's needed
before 4.7.0 final.

> I started this due to a suggestion that our challenge cache wasn't
> right and so I added tests to demonstrate better the capabilities and
> limitations. 
> 
> Please review and push,

Reviewed by me.

metze


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170626/c771ed03/signature.sig>


More information about the samba-technical mailing list