Domain authentication

[Guest]

Hello,

We are using Hyena in our business for a long time. I'd like to know something about the authentication between NT domains.

I found out that Hyena is able to view (user/groups) objects in a domain, without requiring the user to logon on to this domain, EVEN if this user have no account on the specified domain.

How does Hyena perform this action??

Thanks in advance!

[cmccullough]

Re: Domain authentication

There is a known issue (feature?) within NT that allows anonymous IPC$ connections. What Hyena does when it attempts to make a secure connection, is if it fails, it will make the anonymous IPC$ connection. This allows you to see the user list but a user without permissions will not be able to make any changes.

There is a Technet article: Q143474 that you can read that explains it, and tells you how to block anonymous connections.