In MS-LSAD 2.2.58 LSAPR_TRUSTED_DOMAIN_AUTH_BLOB The table includes:
Array of LSAPR_AUTH_INFORMATION [1...count]
(outgoing previous authentication info)
However, the attached blob, captured from Windows 2003 trying to join
Samba4 as a trusted domain shows that the previous password is not part
of the structure.
The IDL for the parser we use is at:
http://gitweb.samba.org/?p=samba.git;a=blob;f=source4/librpc/idl/drsblobs.idl;h=31fe8a359e848d0e7cdf1e61cc91662ec8882fe5;hb=HEAD
(Discussed with Richard)
Andrew Bartlett
--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Red Hat Inc.
decrypted-auth_blob.dat
Description: Binary data
decode_trustDomainPasswords: struct decode_trustDomainPasswords
in: struct decode_trustDomainPasswords
blob: struct trustDomainPasswords
confounder: ARRAY(512)
[0] : 0x9e (158)
[1] : 0xa0 (160)
[2] : 0x58 (88)
[3] : 0x4f (79)
[4] : 0x3a (58)
[5] : 0x02 (2)
[6] : 0x8a (138)
[7] : 0x6c (108)
[8] : 0x83 (131)
[9] : 0xf2 (242)
[10] : 0xf2 (242)
[11] : 0x8d (141)
[12] : 0x8c (140)
[13] : 0xa4 (164)
[14] : 0xfb (251)
[15] : 0x8f (143)
[16] : 0xd7 (215)
[17] : 0xf9 (249)
[18] : 0xf4 (244)
[19] : 0x66 (102)
[20] : 0x0d (13)
[21] : 0x8c (140)
[22] : 0xa3 (163)
[23] : 0xf8 (248)
[24] : 0x02 (2)
[25] : 0x0a (10)
[26] : 0xed (237)
[27] : 0x52 (82)
[28] : 0x6d (109)
[29] : 0x1a (26)
[30] : 0xe1 (225)
[31] : 0x66 (102)
[32] : 0x20 (32)
[33] : 0x6b (107)
[34] : 0x49 (73)
[35] : 0x43 (67)
[36] : 0xce (206)
[37] : 0x1a (26)
[38] : 0x0f (15)
[39] : 0xc4 (196)
[40] : 0x94 (148)
[41] : 0xfe (254)
[42] : 0x00 (0)
[43] : 0x38 (56)
[44] : 0x30 (48)
[45] : 0x96 (150)
[46] : 0xbd (189)
[47] : 0xa1 (161)
[48] : 0x6f (111)
[49] : 0xbe (190)
[50] : 0x38 (56)
[51] : 0x42 (66)
[52] : 0x77 (119)
[53] : 0x06 (6)
[54] : 0x25 (37)
[55] : 0x5c (92)
[56] : 0x22 (34)
[57] : 0xaa (170)
[58] : 0x05 (5)
[59] : 0xdf (223)
[60] : 0xae (174)
[61] : 0x7b (123)
[62] : 0xd8 (216)
[63] : 0x35 (53)
[64] : 0x87 (135)
[65] : 0xaa (170)
[66] : 0x05 (5)
[67] : 0x44 (68)
[68] : 0x80 (128)
[69] : 0x65 (101)
[70] : 0x0a (10)
[71] : 0xe4 (228)
[72] : 0x56 (86)
[73] : 0xfe (254)
[74] : 0x81 (129)
[75] : 0x85 (133)
[76] : 0x3d (61)
[77] : 0xea (234)
[78] : 0x97 (151)
[79] : 0x55 (85)
[80] : 0x95 (149)
[81] : 0x02 (2)
[82] : 0x09 (9)
[83] : 0xcd (205)
[84] : 0xfa (250)
[85] : 0x27 (39)
[86] : 0x64 (100)
[87] : 0xbc (188)
[88] : 0x67 (103)
[89] : 0x89 (137)
[90] : 0x83 (131)
[91] : 0xf3 (243)
[92] : 0xe3 (227)
[93] : 0xd3 (211)
[94] : 0x70 (112)
[95] : 0x8c (140)
[96] : 0x37 (55)
[97] : 0xd9 (217)
[98] : 0xb0 (176)
[99] : 0x16 (22)
[100] : 0xbe (190)
[101] : 0x38 (56)
[102] : 0xc2 (194)
[103] : 0x2e (46)
[104] : 0x28 (40)
[105] : 0xa0 (160)
[106] : 0xbc (188)
[107] : 0x67 (103)
[108] : 0xa4 (164)
[109] : 0x7b (123)
[110] : 0xab (171)
[111] : 0xed (237)
[112] : 0x51 (81)
[113] : 0x1e (30)
[114] : 0x06 (6)
[115] : 0xc1 (193)
[116] : 0xe1 (225)
[117] : 0xe6 (230)
[118] : 0xbc (188)
[119] : 0xb8 (184)
[120] : 0x28 (40)
[121] : 0x98 (152)
[122] : 0xa3 (163)
[123] : 0x25 (37)
[124] : 0xc9 (201)
[125] : 0x3b (59)
[126] : 0xfd (253)
[127] : 0x98 (152)
[128] : 0xaa (170)
[129] : 0xd6 (214)
[130] : 0xf6 (246)
[131] : 0x95 (149)
[132] : 0x68 (104)
[133] : 0x60 (96)
[134] : 0x7c (124)
[135] : 0x27 (39)
[136] : 0xd1 (209)
[137] : 0x8c (140)
[138] : 0x3f (63)
[139] : 0x29 (41)
[140] : 0xa3 (163)
[141] : 0xf7 (247)
[142] : 0x99 (153)
[143] : 0x0b (11)
[144] : 0x4d (77)
[145] : 0xcc (204)
[146] : 0x64 (100)
[147] : 0xb3 (179)
[148] : 0x1b (27)
[149] : 0x5e (94)
[150] : 0x60 (96)
[151] : 0x7d (125)
[152] : 0x74 (116)
[153] : 0x79 (121)
[154] : 0xd8 (216)
[155] : 0xcf (207)
[156] : 0xcd (205)
[157] : 0x67 (103)
[158] : 0xf7 (247)
[159] : 0x06 (6)
[160] : 0xc0 (192)
[161] : 0x0a (10)
[162] : 0xed (237)
[163] : 0x07 (7)
[164] : 0xfb (251)
[165] : 0xbd (189)
[166] : 0xbd (189)
[167] : 0x57 (87)
[168] : 0xe7 (231)
[169] : 0x89 (137)
[170] : 0x4e (78)
[171] : 0xc9 (201)
[172] : 0x8e (142)
[173] : 0x09 (9)
[174] : 0x96 (150)
[175] : 0xd8 (216)
[176] : 0xcf (207)
[177] : 0x32 (50)
[178] : 0x1e (30)
[179] : 0x7e (126)
[180] : 0x5e (94)
[181] : 0x3e (62)
[182] : 0x39 (57)
[183] : 0x99 (153)
[184] : 0x5d (93)
[185] : 0x54 (84)
[186] : 0xa3 (163)
[187] : 0x25 (37)
[188] : 0x64 (100)
[189] : 0xcf (207)
[190] : 0x83 (131)
[191] : 0x20 (32)
[192] : 0xf2 (242)
[193] : 0x14 (20)
[194] : 0x6b (107)
[195] : 0x2d (45)
[196] : 0xbf (191)
[197] : 0x07 (7)
[198] : 0x8f (143)
[199] : 0x71 (113)
[200] : 0x09 (9)
[201] : 0xfb (251)
[202] : 0x59 (89)
[203] : 0x54 (84)
[204] : 0xac (172)
[205] : 0xf1 (241)
[206] : 0x2b (43)
[207] : 0x40 (64)
[208] : 0x25 (37)
[209] : 0x65 (101)
[210] : 0x1c (28)
[211] : 0x2b (43)
[212] : 0x6d (109)
[213] : 0x64 (100)
[214] : 0x69 (105)
[215] : 0x64 (100)
[216] : 0x3b (59)
[217] : 0x7e (126)
[218] : 0x4b (75)
[219] : 0x29 (41)
[220] : 0x24 (36)
[221] : 0x97 (151)
[222] : 0x27 (39)
[223] : 0x37 (55)
[224] : 0xc7 (199)
[225] : 0x84 (132)
[226] : 0x5b (91)
[227] : 0x8a (138)
[228] : 0x37 (55)
[229] : 0x3e (62)
[230] : 0x53 (83)
[231] : 0x42 (66)
[232] : 0x5c (92)
[233] : 0xd9 (217)
[234] : 0x4c (76)
[235] : 0xe3 (227)
[236] : 0x53 (83)
[237] : 0xba (186)
[238] : 0x30 (48)
[239] : 0x68 (104)
[240] : 0xf3 (243)
[241] : 0xfe (254)
[242] : 0xca (202)
[243] : 0xa4 (164)
[244] : 0xf3 (243)
[245] : 0x5a (90)
[246] : 0xb5 (181)
[247] : 0x74 (116)
[248] : 0x66 (102)
[249] : 0x0d (13)
[250] : 0xa7 (167)
[251] : 0xb7 (183)
[252] : 0xc6 (198)
[253] : 0x6d (109)
[254] : 0xff (255)
[255] : 0x7d (125)
[256] : 0xe2 (226)
[257] : 0xfc (252)
[258] : 0xc2 (194)
[259] : 0x49 (73)
[260] : 0xc4 (196)
[261] : 0x1c (28)
[262] : 0x4f (79)
[263] : 0x1f (31)
[264] : 0x01 (1)
[265] : 0x86 (134)
[266] : 0xc1 (193)
[267] : 0x61 (97)
[268] : 0x9c (156)
[269] : 0xb3 (179)
[270] : 0xbe (190)
[271] : 0xc0 (192)
[272] : 0x12 (18)
[273] : 0x99 (153)
[274] : 0x0c (12)
[275] : 0x36 (54)
[276] : 0xf1 (241)
[277] : 0x88 (136)
[278] : 0x2d (45)
[279] : 0xac (172)
[280] : 0x44 (68)
[281] : 0xc9 (201)
[282] : 0xa9 (169)
[283] : 0x37 (55)
[284] : 0x2c (44)
[285] : 0x56 (86)
[286] : 0x2c (44)
[287] : 0x5e (94)
[288] : 0x61 (97)
[289] : 0x81 (129)
[290] : 0xa1 (161)
[291] : 0x6f (111)
[292] : 0x59 (89)
[293] : 0xb9 (185)
[294] : 0xc7 (199)
[295] : 0xbb (187)
[296] : 0xfd (253)
[297] : 0xe1 (225)
[298] : 0x2e (46)
[299] : 0x15 (21)
[300] : 0xe8 (232)
[301] : 0x8d (141)
[302] : 0x72 (114)
[303] : 0xa8 (168)
[304] : 0x20 (32)
[305] : 0x50 (80)
[306] : 0x9b (155)
[307] : 0x4a (74)
[308] : 0x11 (17)
[309] : 0x43 (67)
[310] : 0xb2 (178)
[311] : 0x9f (159)
[312] : 0x81 (129)
[313] : 0x20 (32)
[314] : 0x4f (79)
[315] : 0xcc (204)
[316] : 0xe3 (227)
[317] : 0xd2 (210)
[318] : 0x52 (82)
[319] : 0x6d (109)
[320] : 0xff (255)
[321] : 0x34 (52)
[322] : 0x9f (159)
[323] : 0x89 (137)
[324] : 0xe8 (232)
[325] : 0xc5 (197)
[326] : 0x18 (24)
[327] : 0x0f (15)
[328] : 0xf9 (249)
[329] : 0x73 (115)
[330] : 0x63 (99)
[331] : 0xcb (203)
[332] : 0x8d (141)
[333] : 0x1f (31)
[334] : 0xee (238)
[335] : 0xce (206)
[336] : 0xc9 (201)
[337] : 0xbc (188)
[338] : 0x81 (129)
[339] : 0x20 (32)
[340] : 0x85 (133)
[341] : 0x29 (41)
[342] : 0x36 (54)
[343] : 0xc2 (194)
[344] : 0xdd (221)
[345] : 0xf7 (247)
[346] : 0x6c (108)
[347] : 0xfc (252)
[348] : 0xa7 (167)
[349] : 0xe5 (229)
[350] : 0x09 (9)
[351] : 0x97 (151)
[352] : 0x27 (39)
[353] : 0x2e (46)
[354] : 0x8d (141)
[355] : 0x05 (5)
[356] : 0xbc (188)
[357] : 0x67 (103)
[358] : 0xee (238)
[359] : 0x69 (105)
[360] : 0x5b (91)
[361] : 0x8a (138)
[362] : 0xe5 (229)
[363] : 0xd2 (210)
[364] : 0x74 (116)
[365] : 0x4b (75)
[366] : 0xfb (251)
[367] : 0xa3 (163)
[368] : 0x25 (37)
[369] : 0x13 (19)
[370] : 0xe8 (232)
[371] : 0x0e (14)
[372] : 0xf5 (245)
[373] : 0x47 (71)
[374] : 0x6a (106)
[375] : 0x44 (68)
[376] : 0x13 (19)
[377] : 0xfb (251)
[378] : 0x3d (61)
[379] : 0x50 (80)
[380] : 0x6d (109)
[381] : 0xff (255)
[382] : 0x47 (71)
[383] : 0x6a (106)
[384] : 0xb1 (177)
[385] : 0xff (255)
[386] : 0xe9 (233)
[387] : 0xc9 (201)
[388] : 0x56 (86)
[389] : 0x7d (125)
[390] : 0x98 (152)
[391] : 0xaa (170)
[392] : 0xf1 (241)
[393] : 0x24 (36)
[394] : 0x8f (143)
[395] : 0xde (222)
[396] : 0xbd (189)
[397] : 0x6b (107)
[398] : 0xff (255)
[399] : 0xe2 (226)
[400] : 0x69 (105)
[401] : 0xdb (219)
[402] : 0xb9 (185)
[403] : 0xb3 (179)
[404] : 0xa2 (162)
[405] : 0x2a (42)
[406] : 0x69 (105)
[407] : 0x5b (91)
[408] : 0x8a (138)
[409] : 0xe5 (229)
[410] : 0xb8 (184)
[411] : 0x27 (39)
[412] : 0x4a (74)
[413] : 0x77 (119)
[414] : 0x19 (25)
[415] : 0x5e (94)
[416] : 0xd8 (216)
[417] : 0xcf (207)
[418] : 0xba (186)
[419] : 0x01 (1)
[420] : 0xcf (207)
[421] : 0x9e (158)
[422] : 0x7d (125)
[423] : 0x90 (144)
[424] : 0xf5 (245)
[425] : 0x19 (25)
[426] : 0x8b (139)
[427] : 0x20 (32)
[428] : 0xd0 (208)
[429] : 0x9a (154)
[430] : 0xc6 (198)
[431] : 0xe5 (229)
[432] : 0x37 (55)
[433] : 0x5a (90)
[434] : 0xb4 (180)
[435] : 0x1f (31)
[436] : 0x1d (29)
[437] : 0xb8 (184)
[438] : 0x4b (75)
[439] : 0xfb (251)
[440] : 0xc6 (198)
[441] : 0x89 (137)
[442] : 0x4e (78)
[443] : 0x49 (73)
[444] : 0x3b (59)
[445] : 0x98 (152)
[446] : 0x90 (144)
[447] : 0xbf (191)
[448] : 0xbd (189)
[449] : 0x22 (34)
[450] : 0xd7 (215)
[451] : 0x66 (102)
[452] : 0x21 (33)
[453] : 0x38 (56)
[454] : 0xdd (221)
[455] : 0x78 (120)
[456] : 0x8b (139)
[457] : 0x9f (159)
[458] : 0x01 (1)
[459] : 0x34 (52)
[460] : 0x1f (31)
[461] : 0x6e (110)
[462] : 0x03 (3)
[463] : 0x0d (13)
[464] : 0x8c (140)
[465] : 0xb6 (182)
[466] : 0x55 (85)
[467] : 0xc3 (195)
[468] : 0x18 (24)
[469] : 0x3d (61)
[470] : 0xa2 (162)
[471] : 0xd8 (216)
[472] : 0xd0 (208)
[473] : 0x22 (34)
[474] : 0x8f (143)
[475] : 0x72 (114)
[476] : 0x0c (12)
[477] : 0x1c (28)
[478] : 0x2c (44)
[479] : 0x3c (60)
[480] : 0xcc (204)
[481] : 0x5b (91)
[482] : 0x9d (157)
[483] : 0x4a (74)
[484] : 0x92 (146)
[485] : 0x2d (45)
[486] : 0x24 (36)
[487] : 0x0e (14)
[488] : 0xa4 (164)
[489] : 0x7b (123)
[490] : 0x2a (42)
[491] : 0x1f (31)
[492] : 0x53 (83)
[493] : 0x3b (59)
[494] : 0x19 (25)
[495] : 0xf9 (249)
[496] : 0x87 (135)
[497] : 0x96 (150)
[498] : 0xbd (189)
[499] : 0xbd (189)
[500] : 0x6b (107)
[501] : 0xb5 (181)
[502] : 0x0f (15)
[503] : 0x79 (121)
[504] : 0x3d (61)
[505] : 0xea (234)
[506] : 0x32 (50)
[507] : 0x31 (49)
[508] : 0x63 (99)
[509] : 0x80 (128)
[510] : 0xb7 (183)
[511] : 0x47 (71)
outgoing: struct trustCurrentPasswords
count : 0x00000001 (1)
current: ARRAY(1)
current : *
current: struct AuthenticationInformation
LastUpdateTime : Mon Sep 29 14:27:18
2008 PDT
AuthType :
TRUST_AUTH_TYPE_CLEAR (2)
AuthInfo : union AuthInfo(case
2)
clear: struct AuthInfoClear
size : 0x0000001c (28)
password: ARRAY(28)
[0] : 0x89 (137)
[1] : 0xf7 (247)
[2] : 0x2f (47)
[3] : 0x75 (117)
[4] : 0x14 (20)
[5] : 0x99 (153)
[6] : 0xa1 (161)
[7] : 0x70 (112)
[8] : 0x38 (56)
[9] : 0x73 (115)
[10] : 0xda (218)
[11] : 0xed (237)
[12] : 0x55 (85)
[13] : 0xd3 (211)
[14] : 0x1e (30)
[15] : 0xee (238)
[16] : 0x78 (120)
[17] : 0x82 (130)
[18] : 0xb7 (183)
[19] : 0xa8 (168)
[20] : 0x6f (111)
[21] : 0x6c (108)
[22] : 0x23 (35)
[23] : 0xe6 (230)
[24] : 0x83 (131)
[25] : 0x83 (131)
[26] : 0x00 (0)
[27] : 0x1f (31)
_pad : DATA_BLOB length=0
incoming: struct trustCurrentPasswords
count : 0x00000001 (1)
current: ARRAY(1)
current : *
current: struct AuthenticationInformation
LastUpdateTime : Mon Sep 29 14:27:18
2008 PDT
AuthType :
TRUST_AUTH_TYPE_CLEAR (2)
AuthInfo : union AuthInfo(case
2)
clear: struct AuthInfoClear
size : 0x0000001c (28)
password: ARRAY(28)
[0] : 0x89 (137)
[1] : 0xf7 (247)
[2] : 0x2f (47)
[3] : 0x75 (117)
[4] : 0x14 (20)
[5] : 0x99 (153)
[6] : 0xa1 (161)
[7] : 0x70 (112)
[8] : 0x38 (56)
[9] : 0x73 (115)
[10] : 0xda (218)
[11] : 0xed (237)
[12] : 0x55 (85)
[13] : 0xd3 (211)
[14] : 0x1e (30)
[15] : 0xee (238)
[16] : 0x78 (120)
[17] : 0x82 (130)
[18] : 0xb7 (183)
[19] : 0xa8 (168)
[20] : 0x6f (111)
[21] : 0x6c (108)
[22] : 0x23 (35)
[23] : 0xe6 (230)
[24] : 0x83 (131)
[25] : 0x83 (131)
[26] : 0x00 (0)
[27] : 0x1f (31)
_pad : DATA_BLOB length=0
outgoing_size : 0x00000038 (56)
incoming_size : 0x00000038 (56)
pull returned NT_STATUS_OK
dump OK
signature.asc
Description: This is a digitally signed message part
_______________________________________________ cifs-protocol mailing list [email protected] https://lists.samba.org/mailman/listinfo/cifs-protocol
