|
I'm developing a firewall that authenticate users with ntlm against Active Directory.
My ntlm secnario is complete and work truly but my LsaLogonUser has problem.
When I pass NTLM Challenge,User Name,Lan Manager Response, NTLM Response,WorkStation Name, Domain Name to MSV1_0_LM20_LOGON structure and pass it to LsaLogonUser
function, LsaLogonUser return error,
Dose anybody have a sample or code that can help me?
My code is here:
UNICODE_STRING TempString;
UNICODE_STRING TempString2;
PMSV1_0_LM20_LOGON Auth;
PCHAR Auth1[40*5]; /* lots o' space */
PUCHAR Strings;
Auth = (PMSV1_0_LM20_LOGON) Auth1;
Strings = (PUCHAR)(Auth + 1);
Auth->MessageType = MsV1_0Lm20Logon;
RtlMoveMemory( Auth->ChallengeToClient,challenge,MSV1_0_CHALLENGE_LENGTH );
RtlInitUnicodeString( &TempString, L"Administrator" );
NlpPutString( &Auth->UserName, &TempString, &Strings );
RtlInitUnicodeString( &TempString, L"TOSHIBA" );
NlpPutString( &Auth->Workstation, &TempString, &Strings );
Auth->CaseSensitiveChallengeResponse.Length = 0;
Auth->CaseSensitiveChallengeResponse.MaximumLength = 0;
Auth->CaseSensitiveChallengeResponse.Buffer = NULL;
TempString2.Buffer = (PWSTR)lmPassword;
TempString2.Length = (USHORT)cbLmResp;
TempString2.MaximumLength = TempString2.Length;
if( TempString2.Length > 24 ) {
TempString2.Length = 24;
}
NlpPutString((PUNICODE_STRING)&Auth->CaseInsensitiveChallengeResponse,(PUNICODE_STRING)&TempString2,&Strings);
RtlInitUnicodeString( &TempString, L"KHARAZM.SERVER" );
NlpPutString( &Auth->LogonDomainName, &TempString, &Strings );
UNICODE_STRING OrgnName;
RtlInitUnicodeString( &OrgnName, L"TOSHIBA" );
ULONG ProfileBufferSize;
sysLog("Len=%d",Strings - (PUCHAR)Auth);
Status = LsaLogonUser(
gLsaHandle,
(PSTRING)&OrgnName,
Network,
gAuthPackageId,
// LATER? AuthenticationPackage | LSA_CALL_LICENSE_SERVER,
Auth,
Strings - (PUCHAR)Auth,
NULL,
&SourceContext,
(PVOID *)&pProfileBuffer,
&ProfileBufferSize,
&LogonLuid,
pLogonToken,
&Quotas,
&SubStatus );
|
|
|
|
|
What is the error that LsaLogonUser() is returning?
Nobody can give you wiser advice than yourself. - Cicero
.·´¯`·->Rajesh<-·´¯`·.
...formerly known as brahmma
Codeproject.com: Visual C++ MVP
|
|
|
|
|
It's return -1073741715 means Invalid Username/Password.
My code is here:
//////////////////////////////////////////////////////////////////////////
UNICODE_STRING TempString;
UNICODE_STRING TempString2;
PMSV1_0_LM20_LOGON Auth;
PCHAR Auth1[40*5]; /* lots o' space */
PUCHAR Strings;
Auth = (PMSV1_0_LM20_LOGON) Auth1;
Strings = (PUCHAR)(Auth + 1);
Auth->MessageType = MsV1_0Lm20Logon;
RtlMoveMemory( Auth->ChallengeToClient,challenge,MSV1_0_CHALLENGE_LENGTH );
RtlInitUnicodeString( &TempString, L"Administrator" );
NlpPutString( &Auth->UserName, &TempString, &Strings );
RtlInitUnicodeString( &TempString, L"TOSHIBA" );
NlpPutString( &Auth->Workstation, &TempString, &Strings );
Auth->CaseSensitiveChallengeResponse.Length = 0;
Auth->CaseSensitiveChallengeResponse.MaximumLength = 0;
Auth->CaseSensitiveChallengeResponse.Buffer = NULL;
TempString2.Buffer = (PWSTR)lmPassword;
TempString2.Length = (USHORT)cbLmResp;
TempString2.MaximumLength = TempString2.Length;
if( TempString2.Length > 24 ) {
TempString2.Length = 24;
}
NlpPutString((PUNICODE_STRING)&Auth->CaseInsensitiveChallengeResponse,(PUNICODE_STRING)&TempString2,&Strings);
RtlInitUnicodeString( &TempString, L"KHARAZM.SERVER" );
NlpPutString( &Auth->LogonDomainName, &TempString, &Strings );
UNICODE_STRING OrgnName;
RtlInitUnicodeString( &OrgnName, L"TOSHIBA" );
ULONG ProfileBufferSize;
sysLog("Len=%d",Strings - (PUCHAR)Auth);
Status = LsaLogonUser(
gLsaHandle,
(PSTRING)&OrgnName,
Network,
gAuthPackageId,
// LATER? AuthenticationPackage | LSA_CALL_LICENSE_SERVER,
Auth,
Strings - (PUCHAR)Auth,
NULL,
&SourceContext,
(PVOID *)&pProfileBuffer,
&ProfileBufferSize,
&LogonLuid,
pLogonToken,
&Quotas,
&SubStatus );
//////////////////////////////////////////////////////////////////////////
|
|
|
|
|
Member 405269 wrote: means Invalid Username/Password.
So, isn't that error message clear enough?
On an additional note:
Please don't post code unless you're asked to. And instead of copy pasting the entire function, post the code that is relevant to the problem. I suggest that while posting code, please enclose it within the <pre> </pre> tags.
Nobody can give you wiser advice than yourself. - Cicero
.·´¯`·->Rajesh<-·´¯`·.
...formerly known as brahmma
Codeproject.com: Visual C++ MVP
|
|
|
|
|
Do you have a link or sample code that work truly?
However do you know another way to authenticate users with ntlm hash password?
|
|
|
|
|
Here is a link that might help you: LsaLogonUser - The function from hell[^]
Also, check if the function LogonUser() would help you.
Nobody can give you wiser advice than yourself. - Cicero
.·´¯`·->Rajesh<-·´¯`·.
...formerly known as brahmma
Codeproject.com: Visual C++ MVP
|
|
|
|
|
But LogonUser() only accept clear text password.
|
|
|
|
|
Hi,
In a com component ,I took a dialog resource added a class
for it and even inserted an Activex Control on dialog
(with activex variable m_ctrlHMFAx).
I am creating the dialog dynamically as shown below
pDialog = new CMyDialog();
if(pDialog != NULL)
{
BOOL ret = pDialog->Create(IDD_MYDIALOG,this);
if(!ret)
AfxMessageBox("Error creating Dialog");
pDialog->ShowWindow(SW_SHOW);
}
Now as my dialog is created I am trying to work with my
ActiveX variable as pDialog->m_ctrlHMFAx.AddItem(); but
it throws an assertion
when I debug I recognized that m_ctrlHMFAx is showing NULL
value.I tried creating the activex control dynamically in
OnInitdialog but no use.
I also placed AfxEnableControlContainer() in initinstance.
What could be the reason ? Any suggestions would be helpful.
Thanks
Satya
Today is a gift, that's why it is called the present.
|
|
|
|
|
narayanagvs wrote: I tried creating the activex control dynamically in
OnInitdialog but no use.
Usually you can have a quit amount of info (from HRESULT return value) whenever a step of such a operation fails.
If the Lord God Almighty had consulted me before embarking upon the Creation, I would have recommended something simpler.
-- Alfonso the Wise, 13th Century King of Castile.
[my articles]
|
|
|
|
|
narayanagvs wrote: BOOL ret = pDialog->Create(IDD_MYDIALOG,this);
if(!ret) //Create failed.
AfxMessageBox("Error creating Dialog");
pDialog->ShowWindow(SW_SHOW);
If Create() fails, why proceed with calling ShowWindow()?
"Normal is getting dressed in clothes that you buy for work and driving through traffic in a car that you are still paying for, in order to get to the job you need to pay for the clothes and the car and the house you leave vacant all day so you can afford to live in it." - Ellen Goodman
"To have a respect for ourselves guides our morals; to have deference for others governs our manners." - Laurence Sterne
|
|
|
|
|
narayanagvs wrote:
BOOL ret = pDialog->Create(IDD_MYDIALOG,this);
if(!ret) //Create failed.
AfxMessageBox("Error creating Dialog");
pDialog->ShowWindow(SW_SHOW);
You must use of
if(!ret)
AfxMessageBox("Error creating Dialog");
else
pDialog->ShowWindow(SW_SHOW);
|
|
|
|
|
Hello everyone,
This question is about when it is allowed to call throw to re-throw exception -- make the exception re-throw.
I can only think of two situations,
1. in catch block of an exception;
2. in unexpected handler.
For (2), in unexpected handler, since the input parameter is null, so in order to get the exception information, we need to re-throw it and catch it to get exception informaiton.
Is my understanding correct? Here is some pseudo code from Bjarne's book.
void throwY() throw (Yunexpected)
{
try{
throw;
} catch (Network_exception& p)
{
throw (Yunexpected (&p));
} catch (...)
{
throw (Yunexpected (0));
}
}
thanks in advance,
George
|
|
|
|
|
Yes, and they're really the same as the unexpected handler is just like an ultimate catch block for when all others have failed to catch. If you want to understand how this works in the real world, as opposed to how Bjarne says it should work, then take a look at the source code for the C Runtime that ships with Visual Studio. C++ exception handling in the MS world relies on both the runtime and special code injected into your functions by the Compiler. There's also a good article on here somewhere called something like How C++ Exception Handling Really Works. Enjoy
Nothing is exactly what it seems but everything with seems can be unpicked.
|
|
|
|
|
Hi Matthew,
I can not find the article you mentioned "How C++ Exception Handling Really Works" from Google. Could you provide a link please?
regards,
George
|
|
|
|
|
My mistake George the title is somewhat different. This[^] is the one I'd seen a link to. It comes up every now and then in the list of related popular articles at the bottom of one page or another on CP. If you soak up all that you'll know more about exception handling than I do so you can answer the next query that comes up in that area
Nothing is exactly what it seems but everything with seems can be unpicked.
|
|
|
|
|
Thanks Matthew,
Great article! About my original question, do you agree?
--------------------
For (2), in unexpected handler, since the input parameter is null, so in order to get the exception information, we need to re-throw it and catch it to get exception informaiton.
Is my understanding correct?
--------------------
regards,
George
|
|
|
|
|
Hello everyone,
The following swap technique is used to make assignment operator exception safe (means even if there is exception, the current object instance's state is invariant).
It used a temporary object "temp" in this sample, and assignment is made on a to temp ar first. Even if there is exception, the current this object's state is not corrupted.
My question is, the pattern works only if there is no exception thrown by swap function. If there are exception in swap function, the state of current object instance may still be corrupted (swap may invoke the assignment operator of member variables). Is my understanding correct?
class A;
A& A::operator= (const A& a)
{
A temp;
temp = a;
swap (*this, temp);
return *this;
}
thanks in advance,
George
|
|
|
|
|
Hey George, wait a moment, throw out your book, that's recursive junk!!!!!!!!!!!
If the Lord God Almighty had consulted me before embarking upon the Creation, I would have recommended something simpler.
-- Alfonso the Wise, 13th Century King of Castile.
[my articles]
|
|
|
|
|
Why CPallini? More information please?
regards,
George
|
|
|
|
|
George you're a quite smart guy: I think you'll soon reckon than calling the equal operator inside its very definition causes a theoretical endless function call loop and a practical stack overflow.
If the Lord God Almighty had consulted me before embarking upon the Creation, I would have recommended something simpler.
-- Alfonso the Wise, 13th Century King of Castile.
[my articles]
|
|
|
|
|
Hi CPallini,
I agree and I think it depends on how swap is implemented. If swap is implemented by assignments of POD types, I think it is safe.
regards,
George
|
|
|
|
|
Nope, my friend, the line
temp = a;
causes infinite recursion no matter how swap is implemented.
BTW could you please post the original B. Stroustrup's sample (toxcct told me about...  )?
If the Lord God Almighty had consulted me before embarking upon the Creation, I would have recommended something simpler.
-- Alfonso the Wise, 13th Century King of Castile.
[my articles]
|
|
|
|
|
Hi CPallini,
This is not Bjarne's sample.
This question is what I learned that swap could be used to design and implement an exception safe assignment operator. Yes, there is some issues in my code.
I think you are well known about how to use swap to implement exception safe assignment opeator from your replies. Could you help to correct my code please?
regards,
George
|
|
|
|
|
George_George wrote: This question is what I learned that swap could be used to design and implement an exception safe assignment operator.
Well, I think you learned about reading any book (or article). Please reference it, if you can.
George_George wrote: I think you are well known about how to use swap to implement exception safe assignment opeator from your replies. Could you help to correct my code please?
In fact, no. I've grasped the main idea from your sample code, but I wasn't aware of that technique, hence I cannot try to fix the code simply guessing about (if it is a well established pattern, then we need a state-of-art example)
If the Lord God Almighty had consulted me before embarking upon the Creation, I would have recommended something simpler.
-- Alfonso the Wise, 13th Century King of Castile.
[my articles]
|
|
|
|
|
Thanks for your comment, CPallini!
Let us wait for other MVP's reply.
regards,
George
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
