Displaying 1 result from an estimated 1 matches for "open_pipe".
2005 Aug 18
0
Samba Auth: NETLOGON vs. lsarpc
...obably because user credientials
haven't been validated yet. Next it identifies the computer by way of
the SID. Both authentication methods get this far.
Now, this is the code where something is different between the
successful authentication and the unsuccessful one:
- Unsuccessful: nt_open_pipe: Known pipe NETLOGON opening.
- Successful: nt_open_pipe: Known pipe lsarpc opening.
From this point, the NETLOGON one essentially does some pushing and
poping, frees the pipe, tries "api_rpcTNP: RPC command: NET_AUTH2,
the a few lines later does:
setting_sec_ctx(0,0) - sec_ctx_stack_n...