Hi,

attach with this mail, you will find my version of smb_login.nasl,
The last fix made 24 september does not solve the bug of
the Authentication Failure when using  local credential on a host attached
to a domain.

I patch it with comment in,  and i  test it successfully on my host with de
following usecase :

My host have the following account to authenticate:
*mydomain\\admin
*admin_local

i run plugin giving :
   1/ login : admin  - domain : mydomain
->  Success trying mydomain\\admin!!
AUTHENTICATION OK

   2/ login : admin  - domain : ""
   plugin guess the domain : mydomain from other plugins
-> Success  trying mydomain\\admin !!!
AUTHENTICATION OK

  3/ login : admin_local  - domain : ""
   plugin guess the domain : mydomain from other plugins
-> Failure  trying mydomain\\admin_local !!!
-> Success  using admin_local  and no domain !!
AUTHENTICATION OK

  4/ login : noone  - domain : ""
   plugin guess the domain : mydomain from other plugins
-> Failure  trying mydomain\\ noone !!!
-> Failure with noone  !!
AUTHENTICATION FAILURE

please review it, comment it, and if agree commit it ;-)


-- 

Sebastien Aucouturier , R&D Manager and Senior Technologist,

<http://secludit.com/>
Amazon WS Solutions Provider :
http://www.aws-partner-directory.com/PartnerDirectory/PartnerDetail?Name=SecludIT
HP Cloud Security Partner :
https://marketplace.hpcloud.com/secludit-elastic-detector

Agence Toulouse
GSM: 06.20.60.77.24

Attachment: smb_login.nasl
Description: Binary data

_______________________________________________
Openvas-plugins mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-plugins

Reply via email to