Re: Rpc Authentication with Server in a Workgroup

From: Scott St.Clair (sstclair_99_at_hotmail.com)
Date: 04/28/04 

Date: Wed, 28 Apr 2004 15:15:38 -0700

Greg,

Thanks for your help. The Extended Error Info was helpful. It turned out
that I had to change a setting in the Local Security Policy on the machine
in the netgroup to get things working.

I changed "Network Access: Sharing and Security model for Local Accounts" to
"Classic - local users authenticate as themselves."

-Scott

"Greg Kapoustin [MSFT]" <grigorik@online.microsoft.com> wrote in message
news:408f1d85$1@news.microsoft.com...
> You should enable RPC Extended Error Info (EEInfo) propagation and obtain
> RPC EEInfo as described in the MSDN. This will usually tell you where the
> error has originated from.
>
> Greg
>
> --
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
> "Scott St.Clair" <sstclair_99@hotmail.com> wrote in message
> news:uOAzoOLLEHA.624@TK2MSFTNGP11.phx.gbl...
> > Hi,
> >
> > I have run into a strange problem. My RPC application works great when
my
> > server application is running on a computer that is in a Windows NT
> Domain.
> > My application fails to authenticate if I move the server out of the
> domain
> > and into a workgroup.
> >
> > The server application calls RpcServerRegisterAuthInfo just like this...
> >
> > status = RpcServerRegisterAuthInfo(
> > NULL,
> > RPC_C_AUTHN_WINNT,
> > 0,
> > 0);
> >
> > The client application calls RpcBindingSetAuthInfo like this...
> >
> > rc = RpcBindingSetAuthInfo(
> > m_hBindingHandle,
> > NULL,
> > RPC_C_AUTHN_LEVEL_PKT,
> > RPC_C_AUTHN_WINNT,
> > &m_AuthInfo,
> > 0);
> >
> > The parameter m_AuthInfo is a SEC_WINNT_AUTH_IDENTITY structure where I
am
> > setting the username and password fields to the username and password of
> an
> > account that is local to the server machine. I have tried setting the
> > domain name field to the servername, NULL, an empty string, the
workgroup
> > name and "workgroupname\servername".
> >
> > The basic symptom is that any RPC call that I make fails with error code
5
> > (access denied). I have set breakpoints on the server side of my
> > application and I have found that the server side of the RPC routine is
> > never called.
> >
> > The client application is running on an XP box that is in a domain. I
> have
> > tried the server application on both Windows 2000 Pro and Windows XP
Pro.
> > The account on the server side is a member of the Administrators group.
> >
> > Any help or advice would be greatly appreciated.
> >
> > Scott St.Clair
> > Veritas Software
> > scott.stclair@veritas.com
> >
> >
> >
>
>

Relevant Pages