Kerberos/ADS and many groups

[Matthew Geddes]

Volker Lendecke wrote:

>On Thu, Dec 14, 2006 at 11:25:18AM -0800, Matthew Geddes wrote:
>  
>
>>Any other suggestions?
>>    
>>
>
>Send the sniffs?
>

I'm working on that. I have a packet capture here generated by rpcclient 
-k DCNAME. I'm not on my network though -- it's a customer site, so I 
need to check with a few people first. The user accounts and ADS domains 
involved are all from test labs, but I don't think they'd see the funny 
side if I didn't ask first. ;-)

In the meantime I'll try and reproduce it in my VMWare network, which 
isn't connected to their network at all.

thx,
Matt