1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

dial-up connection login used for Kerberos ticket request

Discussion in 'General Malware And Security' started by Ondrej Sevecek, Apr 10, 2008.

  1. hello,

    I have a rather complicated setup:

    - Vista SP0 (localized unfortunatelly)
    - logging on with a domain user (may be from cache when offline)
    - CDMA dial-up connection using a login of a form: 5849490303@o2....cz
    - giving me 10.166.1.x
    - NetBIOS disabled
    - VPN connection to a company network using a login of a form: domain\user
    - giving me 10.2.x.x
    - NetBIOS disabled
    - Use default gateway on remote network: ON
    - workaround (hotfix requested, not having arrived yet) of the NetBIOS file
    sharing problem made according to:


    Once I dial CDMA and also the VPN, this is a fact:
    - ping "dir.domain.local" works correctly
    - ping "dir" works correctly
    - portqry -n dir.domain.local -e 445 works well as is the case with a short
    name
    - which means the name translation and TCP connections are working all well
    - \\dir.domain.local\sysvol connects ok
    - system askes for Kerberos ticket (TGT) and also for the TGS
    - tickets are received, authentication done by using them and the list
    is displayed.

    BUT
    - \\dir\sysvol returns "The specified user does not exist."
    - because the system tries to obtain Kerberos ticket for the CDMA login
    - sying: give me TGT for
    584930453@o2....cz
    - which certainly cannot succeeed

    QUESTION:
    how to prevent the kerberos client from trying to obtain a ticket for the
    CDMA login and use the logged on user's name and password instead?

    thanks.

    ondra.
     

Share This Page