http://bugs.winehq.org/show_bug.cgi?id=18815
Summary: Single-Sign-On with authenticated RPCs won't work Product: Wine Version: 1.1.23 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: secur32 AssignedTo: wine-bugs@winehq.org ReportedBy: winesku@googlemail.com CC: kai.blin@gmail.com
Single-Sign-On with authenticated RPC-Clients in a domain joined environment won't work with Wine version 1.1.23. The culprit is the two latest changes to ntlm.c which were at least in part based on wrong information given from my side to Kai. The latest working version for this scenario is "2009-02-16 Alexandre Julliard secur32: Properly initialize the helper structure when... ". If that version of the file is built together with Wine version 1.1.23, RPC clients running under Wine using the ncacn_tcpip protocol sequence can successfully authenticate against an RPC server on a Windows box. So if possible, please revert this file to this version (the two latest changes made by Kai were made because it took us a while to find out that rpc clients running on Wine work only without "signing-and-sealing").
http://bugs.winehq.org/show_bug.cgi?id=18815
Kai Blin kai.blin@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |ASSIGNED AssignedTo|wine-bugs@winehq.org |kai.blin@gmail.com Ever Confirmed|0 |1
--- Comment #1 from Kai Blin kai.blin@gmail.com 2009-06-07 04:58:31 --- Ok. Just to be sure, I'll go set up a test box for ntlm_auth testing first. I'm happy to re-add the --use-cred-cache parameter, but the error handling needs to be improved. So far the code assumes that we can always get the session key if we can authenticate. That's not the case with cached credentials. Could take me a little while.
http://bugs.winehq.org/show_bug.cgi?id=18815
--- Comment #2 from Kai Blin kai.blin@gmail.com 2009-08-12 11:59:25 --- Requested revert is in git. Can you please check if it works for you now?
http://bugs.winehq.org/show_bug.cgi?id=18815
--- Comment #3 from Stefan Kuhr winesku@googlemail.com 2009-08-17 05:29:51 --- The reverted file looks good. I could not fully test it, because another bug that affects rpc client functionality in general seems to have crept in in 1.1.25. But all my tests with the reverted file in 1.1.23 and 1.1.24 worked.
http://bugs.winehq.org/show_bug.cgi?id=18815
Mike Kaplinskiy mike.kaplinskiy@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |mike.kaplinskiy@gmail.com
--- Comment #4 from Mike Kaplinskiy mike.kaplinskiy@gmail.com 2009-08-17 14:11:18 --- (In reply to comment #3)
The reverted file looks good. I could not fully test it, because another bug that affects rpc client functionality in general seems to have crept in in 1.1.25. But all my tests with the reverted file in 1.1.23 and 1.1.24 worked.
There is a patch for that on bug 19767 's page.
http://bugs.winehq.org/show_bug.cgi?id=18815
Kai Blin kai.blin@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED
--- Comment #5 from Kai Blin kai.blin@gmail.com 2009-08-18 01:43:45 --- Marking as fixed as requested by reporter
http://bugs.winehq.org/show_bug.cgi?id=18815
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #6 from Alexandre Julliard julliard@winehq.org 2009-08-21 12:52:17 --- Closing bugs fixed in 1.1.28.