Hello Max,

i found that where you can troubleshoot the error 0x2105 (8453).

https://www.itprotoday.com/active-directory/identifying-and-solving-active-directory-replication-problems

Regards

Fabrice


Le 19-03-01 à 16 h 37, Max McGrath via PacketFence-users a écrit :
Hello!

I'm working on setting up NTLM Caching in order to optimize my PF setup even more.

I've followed all instructions here -- https://packetfence.org/doc/PacketFence_Installation_Guide.html#_ntlm_authentication_caching -- however, all my attempts to start caching have failed.

All of my attempts are met with:

Impacket v0.9.15 - Copyright 2002-2016 Core Security Technologies

[*] Dumping Domain Credentials (domain\uid:rid:lmhash:nthash)
[*] Using the DRSUAPI method to get NTDS.DIT secrets
*[-] DRSR SessionError: code: 0x2105 - ERROR_DS_DRA_ACCESS_DENIED - Replication access was denied.* [*] Something wen't wrong with the DRSUAPI approach. Try again with -use-vss parameter
[*] Cleaning up...

Presumably the problem is with my AD Permissions, but based on what I know, and the documentation I've found, everything seems to be correct.

Has anybody successfully gotten NTLM Caching to work in PF?  If so, would you be willing to discuss AD rights?

Thanks!

Max
--
Max McGrath <http://www.linkedin.com/in/max-mcgrath-a299124b>
Infrastructure and Security Manager
Carthage College
262-551-6666
[email protected] <mailto:[email protected]>


_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to