473,804 Members | 3,638 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

WlxLoggedOnSAS called from Winlogon while WlxWkStaLockedS AS still executing

We have a cascaded GINA for 2K and XP wich provides our proprietery
Smart Card authentication. While unlocking the workstation with a
Smart Card there is an amount of data (filestructure on smartcard
etc.) that need to be read of the card. because of that in the call to
WlxWkstaLockedS AS before reading the data I call
WlxDisplayStatu sMessage saying something like "please wait ..
connecting to the SC" after the heavy smartcard part is done there is
a call to WlxRemoveStatus Message to remove that message.
The interesting part is that if while the message is displayed the
user is quick enough and hits Ctrl+Alt+Del the workstation gets
unlocked!!

I traced and I can see that right after the finishing of the call to
WlxRemoveStatus Message (so we are still in WlxWkstaLockedS AS)
WlxLoggedOnSAS gets called. There I see an abnormall situation
(WlxLoggedOnSAS should only be called while we are logged in and have
the session not while lockedworkstati on) and return
WLX_SAS_ACTION_ NONE what results in user getting the active user
session.
The method WlxLoggedOnSAS should not be called from Winlogon in this
state at all, or? This is a big security problem since the user can login
without providing credentials.

If the calls to WlxRemoveStatus Message (or WlxDisplayStatu sMessage
and WlxRemoveStatus Message) is commented out the problem is not
reproducable.

I hope I have done something wrong but this code has worked perfect
for several years until one very quick user reported this. What can be
the reason for this call from Winlogon to WlxLoggedOnSAS at this stage
(WlxWkstaLocked SAS )? Any help will be appreciated.

Igi
Nov 22 '05 #1
3 2130

"Igor Jovanovski" <ig************ @yahoo.com> wrote in message
I hope I have done something wrong but this code has worked perfect
for several years until one very quick user reported this. What can be
the reason for this call from Winlogon to WlxLoggedOnSAS at this stage
(WlxWkstaLocked SAS )? Any help will be appreciated.


Sorry but your question is off-topic here. You should try asking on MS
newsgroups at msnews.microsof t.com.

Nov 22 '05 #2
What newsgroup are you referring to?
==
rlh

"Sharad Kala" <no************ ******@yahoo.co m> wrote in message
news:2r******** *****@uni-berlin.de...

"Igor Jovanovski" <ig************ @yahoo.com> wrote in message
I hope I have done something wrong but this code has worked perfect
for several years until one very quick user reported this. What can be
the reason for this call from Winlogon to WlxLoggedOnSAS at this stage
(WlxWkstaLocked SAS )? Any help will be appreciated.


Sorry but your question is off-topic here. You should try asking on MS
newsgroups at msnews.microsof t.com.

Nov 22 '05 #3
What newsgroup are you referring to?
==
rlh

"Sharad Kala" <no************ ******@yahoo.co m> wrote in message
news:2r******** *****@uni-berlin.de...

"Igor Jovanovski" <ig************ @yahoo.com> wrote in message
I hope I have done something wrong but this code has worked perfect
for several years until one very quick user reported this. What can be
the reason for this call from Winlogon to WlxLoggedOnSAS at this stage
(WlxWkstaLocked SAS )? Any help will be appreciated.


Sorry but your question is off-topic here. You should try asking on MS
newsgroups at msnews.microsof t.com.

Nov 22 '05 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
416
by: Michal Wargacki | last post by:
Hi, Is it possible to call c# class methods from within my custom gina.dll (winlogon enviroment) ? Have you ever faced similar problem? Particularly, I'd like to call xml web services methods through .Net proxy class exposed as a COM object. Is my divagation right or is there better way of doing this? MW
2
371
by: Igor Jovanovski | last post by:
We have a cascaded GINA for 2K and XP wich provides our proprietery Smart Card authentication. While unlocking the workstation with a Smart Card there is an amount of data (filestructure on smartcard etc.) that need to be read of the card. because of that in the call to WlxWkstaLockedSAS before reading the data I call WlxDisplayStatusMessage saying something like "please wait .. connecting to the SC" after the heavy smartcard part is done...
0
1369
by: Cris | last post by:
Hello All.. We are attempting to load a .Net assembly DLL from a GINA (Winlogon) DLL. This is a C# DLL, signed and GAC'ed. In Windows XP, this works fine. In Windows 2000 however, we get this exception: System.IO.FileLoadException: The given assembly name or codebase, 'MyDLL', wa
3
2025
by: Shannon McMillan | last post by:
Hey, I want to change the name and workgroup/domain of a computer at first boot prior to winlogon. I've written code that will successfully change the computer's name and workgroup/domain, but I'm having problems trying to work out how this may then be implemented prior to a user logging on. Any suggestions would be greatly appreciated. Thanks,
0
3856
by: Robert Scarab | last post by:
I've added a entry to the registry to recieve logon events from Winlogon. In the WLX_NOTIFICATION_INFO control block there is a member nToken which contains a handle to the newly logged in user. I would like to pass this handle to other processes which are running as system services under the SYSTEM account. When the service gets notified about the login, I would like to impersonate the newly logged on user and change the security context...
7
2814
by: tshad | last post by:
I thought I understood how the SaveViewState is working and was trying to use this (as per some code I found) to detect refreshes. It seemed to be working but I found that the SaveViewState was executing twice on load of page and can't figure out why. I was writing out to a text file in the SaveViewState event and it was writing it twice everytime a page was loaded (whether on an initial load of the page or Postback). I took out the...
8
3127
by: lovecreatesbea... | last post by:
K&R 2, sec 2.4 says: If the variable in question is not automatic, the initialization is done once only, conceptually before the program starts executing, ... . "Non-automatic variables are initialized before the program starts executing." -- What does this mean? What is the name of the stage in which the mentioned initialization is performed? Compile-time or run-time? In the following snippet, variables b and c are defined at line 7...
5
2486
by: reycri | last post by:
Hi, I need to be able to do this: var func = new Function("var me = <selfRef>; alert(me.params);"); func.params = "This is a test parameter"; window.setTimeout(func, 500); Basically, I need to add properties to a function object and access them within the function when it is executing. Therefore, I need to be
3
2120
by: Kirk | last post by:
Let me start by saying that I am a complete idiot when it comes to JS. However, I need help with something that apparently can only be done this way. I am using an ASP.NET AJAX control (ValidatorCallout) that requires client-side validation to work with a custom validator I added. This is an example of some code that works: <asp:CustomValidator ID="CV_PartNumberExists" runat="server" OnServerValidate="PrimeNumberCheck"
0
1692
by: =?Utf-8?B?UmFuZ2VyODAx?= | last post by:
Hi All My virus software detected a trojan horse virus in the smss.exe and winlogon.exe files that were located in my C:\Program Files\Common Files\ Since then I can no longer log onto my MS network nor can I modify any of the settings in 'Tools" "Folder Options" "View" Hopefully someone can help me here. Thanks, -- Ranger801
0
9579
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10575
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10330
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
0
10076
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
9144
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
7616
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
6851
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5520
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
1
4297
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.