Re: logon failure from subauth in 2006-08-02 snapshot

2006-08-14 Thread Corinna Vinschen
On Aug 12 09:47, David Rothenberger wrote: > On Sat, Aug 12, 2006 at 06:25:14PM +0200, Corinna Vinschen wrote: > > Where do you get this message and how? Can you a bit explain how you test > > it and send the matching strace snippet? > [...] > 1127 9891574 [main] CRON 4980 extract_nt_dom_user: p

Re: logon failure from subauth in 2006-08-02 snapshot

2006-08-12 Thread David Rothenberger
On Sat, Aug 12, 2006 at 06:25:14PM +0200, Corinna Vinschen wrote: > On Aug 11 10:35, David Rothenberger wrote: > > On 8/11/2006 12:40 AM, Corinna Vinschen wrote: > > > On Aug 10 09:42, David Rothenberger wrote: > > >> On 8/10/2006 12:21 AM, Corinna Vinschen wrote: > > >>> On Aug 9 11:37, David Rot

Re: logon failure from subauth in 2006-08-02 snapshot

2006-08-12 Thread Corinna Vinschen
On Aug 11 10:35, David Rothenberger wrote: > On 8/11/2006 12:40 AM, Corinna Vinschen wrote: > > On Aug 10 09:42, David Rothenberger wrote: > >> On 8/10/2006 12:21 AM, Corinna Vinschen wrote: > >>> On Aug 9 11:37, David Rothenberger wrote: > I've noticed repeated logon failures in my Security

Re: logon failure from subauth in 2006-08-02 snapshot

2006-08-11 Thread David Rothenberger
On 8/11/2006 12:40 AM, Corinna Vinschen wrote: > On Aug 10 09:42, David Rothenberger wrote: >> On 8/10/2006 12:21 AM, Corinna Vinschen wrote: >>> On Aug 9 11:37, David Rothenberger wrote: I've noticed repeated logon failures in my Security event log with the 2006-08-02 snapshot. (I have

Re: logon failure from subauth in 2006-08-02 snapshot

2006-08-11 Thread Corinna Vinschen
On Aug 10 09:42, David Rothenberger wrote: > On 8/10/2006 12:21 AM, Corinna Vinschen wrote: > >On Aug 9 11:37, David Rothenberger wrote: > >>I've noticed repeated logon failures in my Security event log with > >>the 2006-08-02 snapshot. (I have security auditing enabled.) > >> > >>I'm not sure whe

Re: logon failure from subauth in 2006-08-02 snapshot

2006-08-10 Thread David Rothenberger
On 8/10/2006 12:21 AM, Corinna Vinschen wrote: On Aug 9 11:37, David Rothenberger wrote: I've noticed repeated logon failures in my Security event log with the 2006-08-02 snapshot. (I have security auditing enabled.) I'm not sure whether this is expected behavior or not. It's expected behav

Re: logon failure from subauth in 2006-08-02 snapshot

2006-08-10 Thread Corinna Vinschen
On Aug 9 11:37, David Rothenberger wrote: > I've noticed repeated logon failures in my Security event log with > the 2006-08-02 snapshot. (I have security auditing enabled.) > > It looks like these failures occur when cron runs a job. I attached > strace to cron and saw the following: > > 2315

logon failure from subauth in 2006-08-02 snapshot

2006-08-09 Thread David Rothenberger
I've noticed repeated logon failures in my Security event log with the 2006-08-02 snapshot. (I have security auditing enabled.) It looks like these failures occur when cron runs a job. I attached strace to cron and saw the following: 2315 31545159 [main] CRON 4164 subauth: LsaLogonUser: -1073741