LogonUI / LSA when submiting credentials?

Posted: 12-10-2008, 06:01 PM
This might seem not very reliable case, but stay with me on this
explanation, it seems that windows has a bug here:

We have a Credential Provider for proprietery logon with Smart Cards.
In the Crededntial Provider I read the accounts from the Smart Card
and submit them in the GetSerialization method packed in
KERB_INTERACTIVE_LOGON. The login works fine. When I write the domain/
computer name of anoter OS installation from the same machine, the
logon still works! I checked the trace up to the moment where the data
are returned back via GetSerializaion method. If I enter I dumy
computer name and try the same again, it will report the error
"unknown user name or bad password..." It seems that it works only if
I enter the computer name of the other OS installation. I discovered
this by mistake because on the same laptop I have vista 32 bit and
then vista 64 bit. On the SmartCard I had and account
"igorvista64\administrator" with password 1234 and managed to login on
the system igorvista32 with the account "igorvista32\administrator"
with the same passowrd 1234. This coincidence led me to the
conclusion. The same goes for the unlock scenario.
Can MS support / insiders elaborate on this?

Thanks,
Igor Jovanovski

LogonUI / LSA when submiting credentials?


Responses to "LogonUI / LSA when submiting credentials?"

DaveMo
Guest
Posts: n/a
 
Re: LogonUI / LSA when submiting credentials?
Posted: 12-11-2008, 04:55 PM
On Dec 10, 10:01*am, igor.jovanov...@gmail.com wrote:
> This might seem not very reliable case, but stay with me on this
> explanation, it seems that windows has a bug here:
>
> We have a Credential Provider for proprietery logon with Smart Cards.
> In the Crededntial Provider I read the accounts from the Smart Card
> and submit them in the GetSerialization method packed in
> KERB_INTERACTIVE_LOGON. The login works fine. When I write the domain/
> computer name of anoter OS installation from the same machine, the
> logon still works! I checked the trace up to the moment where the data
> are returned back via GetSerializaion method. If I enter I dumy
> computer name and try the same again, it will report the error
> "unknown user name or bad password..." It seems that it works only if
> I enter the computer name of the other OS installation. I discovered
> this by mistake because on the same laptop I have vista 32 bit and
> then vista 64 bit. On the SmartCard I had and account
> "igorvista64\administrator" with password 1234 and managed to login on
> the system igorvista32 with the account "igorvista32\administrator"
> with the same passowrd 1234. This coincidence led me to the
> conclusion. The same goes for the unlock scenario.
> Can MS support / insiders elaborate on this?
>
> Thanks,
> Igor Jovanovski
Igor,

There are some odd shortcut cases where the domain parameter might be
ignored during logon. This allows some very old down-level scenarios
to work the way people wanted them to work before there were domains.
Since the account and password are correct the logon is working. It's
not usually a problem and probably shouldn't concern you for what you
are doing.

I could be wrong and there could be some horrible new bug here but I
don't see a cause for concern.

HTH,
Dave
igor.jovanovski@gmail.com
Guest
Posts: n/a
 
Re: LogonUI / LSA when submiting credentials?
Posted: 02-02-2009, 06:26 PM
On Dec 11 2008, 5:55*pm, DaveMo <david.mow...@gmail.com> wrote:
> On Dec 10, 10:01*am,igor.jovanov...@gmail.com wrote:
>
>
>
>
>
> > This might seem not very reliable case, but stay with me on this
> > explanation, it seems that windows has a bug here:
>
> > We have aCredentialProviderfor proprietery logon withSmartCards.
> > In the CrededntialProviderI read the accounts from theSmartCard
> > and submit them in the GetSerialization method packed in
> > KERB_INTERACTIVE_LOGON. The login works fine. When I write the domain/
> > computer name of anoter OS installation from the same machine, the
> > logon still works! I checked the trace up to the moment where the data
> > are returned back via GetSerializaion method. If I enter I dumy
> > computer name and try the same again, it will report the error
> > "unknown user name or bad password..." It seems that it works only if
> > I enter the computer name of the other OS installation. I discovered
> > this by mistake because on the same laptop I have vista 32 bit and
> > then vista 64 bit. On the SmartCard I had and account
> > "igorvista64\administrator" with password 1234 and managed to login on
> > the system igorvista32 with the account "igorvista32\administrator"
> > with the same passowrd 1234. This coincidence led me to the
> > conclusion. The same goes for the unlock scenario.
> > Can MS support / insiders elaborate on this?
>
> > Thanks,
> >IgorJovanovski
>
> Igor,
>
> There are some odd shortcut cases where the domain parameter might be
> ignored during logon. This allows some very old down-level scenarios
> to work the way people wanted them to work before there were domains.
> Since the account and password are correct the logon is working. It's
> not usually a problem and probably shouldn't concern you for what you
> are doing.
>
> I could be wrong and there could be some horrible new bug here but I
> don't see a cause for concern.
>
> HTH,
> Dave- Hide quoted text -
>
> - Show quoted text -

Hi Dave,

Thank you for your feedback.
This issue still makes me think as it appears only when the computer
name is an existing one on the laptop (just another partition)

Igor

 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
What is the registry key to showing detailed activity in logonui? Guest Windows NT/2000/XP 0 04-22-2008 03:00 AM
windows xp hangs when logonui.exe starts to load vedant.lath@gmail.com Windows XP Setup 0 11-16-2004 01:05 PM
logonui.exe Dale Owens Windows XP Performance & Maintenance 0 07-22-2004 02:13 PM
Changing logonui Neil Brown Customize Windows XP 2 02-23-2004 08:09 PM
Faulting application logonui.exe, M Nazir Windows XP Performance & Maintenance 0 08-07-2003 04:18 PM