Weirdness in LogonUser

[David Thielen]

If I call

IntPtr tokenHandle = new IntPtr(0);
bool returnValue = LogonUser("dave", "windward", "bogus",
LOGON32_LOGON_NEW_CREDENTIALS, LOGON32_PROVIDER_DEFAULT, ref tokenHandle);

The returnValue == true and I can successfully create a WindowsIdentity from
the passed in tokenHandle, impersonate it, etc. The thing is - that is not my
password.

Any ideas?

--
thanks - dave
david_at_windward_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm

 

[Luke Zhang [MSFT]]

Hello Dave,

What did you mean "that is not my password."? The password value you
specify in LogonUser() is "bogus". Is it not your actual password?

Sincerely,

Luke Zhang

Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[David Thielen]

correct - that is not my password. That's what is so weird to me.

--
thanks - dave
david_at_windward_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm

 

[Henning Krause [MVP - Exchange]]

Hello,

this is the normal bevhavior with LOGON32_LOGON_NEW_CREDENTIALS, as Windows
can not validate the credential.

But remote access will fail if the password is wrong.

Best regards,
Henning Krause

 

[David Thielen]

Thank you - yes you are right on this.

God security is a PITA to get right.

--
thanks - dave
david_at_windward_dot_net
http://www.windwardreports.com

Cubicle Wars - http://www.windwardreports.com/film.htm

 

[Dominick Baier]

no it is fun