Ureader.com  
Microsoft software help and Community
   home   |   control panel login   |   archive   |  
 
platform
active.directory
adsi
adsi.iis-admin
base
com_ole
complus_mts
component_svcs
database
directx
gdi
graphics_mm
internet.client
internet.server
internet.server.isapi-dev
localization
mapi
messaging
msi
mslayerforunicode
multimedia
networking
networking.ipv6
sdk_install
security
shell
telephony.tapi_2
telephony.tapi_3
telephony.tsp
telephony.wte
tools
ui
ui_shell
win_base_svcs
win16
  
 
date: 13 Jun 2008 17:11:25 GMT,    group: microsoft.public.platformsdk.security        back       


Authentication providers again   
Hello,

What is the minimum I need to do to get Windows to call LsaApLogonUser in 
my custom authentication provider?  I could work on making things work, 
but I can't even get Windows to call the function.  I'm not trying to 
replace the login dialog or anything like that.  Right now, I'd be 
thrilled with success at just beeping and then crashing the system every 
time someone tries to log in.  At least it would be something different, 
and then I could figure out the rest.

Thanks,

Chris Smith
date: 13 Jun 2008 17:11:25 GMT   author:   Chris Smith

RE: Authentication providers again   
Hi,

Each authentication package has its own specific message format used by 
LsaCallAuthenticationPackage. The MS default implementation of logon 
operations in W2K et XP ( in the dll msgina.dll) knows only the formats 
associated with the packages "MSV1_0" and "Kerberos".  This is why msgina.dll 
use (in a hard coded way) only these authentication packages.
If you want your authentication package to be called, you must implement 
your own gina dll that will call it explicitly. you can also create a stub 
gina dll that will rely on msgina.dll after doing some hooking on it that 
will redirect the Lsa API calls to your package thus tricking msgina.

Cheers,
-- 
Mounir IDRASSI
IDRIX
http://www.idrix.fr

to reach : mounir_idrix_fr (replace the underscores with the at and dot 
characters respectively)


"Chris Smith" wrote:

> Hello,
> 
> What is the minimum I need to do to get Windows to call LsaApLogonUser in 
> my custom authentication provider?  I could work on making things work, 
> but I can't even get Windows to call the function.  I'm not trying to 
> replace the login dialog or anything like that.  Right now, I'd be 
> thrilled with success at just beeping and then crashing the system every 
> time someone tries to log in.  At least it would be something different, 
> and then I could figure out the rest.
> 
> Thanks,
> 
> Chris Smith
>
date: Sat, 14 Jun 2008 09:11:00 -0700   author:   Mounir IDRASSI am

Google
 
Web ureader.com


    COPYRIGHT 2007, YARDI TECHNOLOGY LIMITED, ALL RIGHT RESERVE  |   contact us