On Sat, 2012-09-15 at 11:02 -0400, John Russell wrote: > Ran wireshark on the XP client while joining the domain and saw SAM LOGON > request from client and SAM Active Directory Response - user unknown. > > I noticed on the request and the response packets the user name field in > the packet is blank (yes, I am typing the user name and password into the > prompt from the XP machine!). > > Any ideas on what causes this?
While an odd feature of the protocol, this is actually a normal successful response to the expected packet. (Essentially, this is a historical oddity from a time when asking if a server knew about a user over an un-authenticated UDP packet wasn't considered a security/confidentially issue). -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
