Mslogon Windows98SE

teosuper · Post by **teosuper** » 2004-12-13 11:23

I have a problem with windows 98SE and mslogon. The utility testauth.exe not retrieve the list of group and give an error message:
NetGetDCName95() returned 2453
No Domain Controller Found

I configure Windows 98 as user-level but have the service "files and printer sharing for microsoft" not installed.
I have installed the Active Directory Client for Windows 98 from Windows 2000 Server CD in Italian language.
Windows 98 SE in in italian language.
The version of Ultravnc is v.1.0.0 RC18

Marscha · Post by **Marscha** » 2004-12-13 17:03

see http://ultravnc.sourceforge.net/mslogon3.htm for some Win9x specific configuration details.
You can also try to use RC19.4, there are some changes in ms-logon.

teosuper · Post by **teosuper** » 2004-12-14 00:18

I have already tried also with the version rc19.4 . With the version rc19.4 it does not work not even l'utility of authentication test. Give Error on netapi32.dll. I have used also the r*.dll downloaded from the site one instead that those of active directory always without happening. The version of Windows 98SE has the last updates from WIndows Update.
I have writed the name of group in uppercase.
Have you any idea?

Marscha · Post by **Marscha** » 2004-12-14 07:33

If Win9x is detected, then radmin32.dll is used instead of netapi32.dll.
If radmin32.dll cannot be found, testauth prints an errormessage: "Netapi not found,radmin32.dll is missing".

Is a Windows 2000 Domain Controller available from the Win98 client?
Is DNS set up correctly on this DC?

teosuper · Post by **teosuper** » 2004-12-14 14:53

I have a mixed DOMAIN. There are:
2 Windows 2000 Server
1 Windows NT4.0 (Backup domain controller)

One of windows 2000 server is the PDC emulator.
The dns of domain i a Linux Box. In the linux box dns there are the information of domain.
What i can search in the dns to identify errors?
Today i have tryed with another domain with only NT 4.0 Domain controller. It's all OK.
My problems there are with the mixed domain.....
If is nedded i can send the file of dns configuration.......

teosuper · Post by **teosuper** » 2004-12-14 16:19

With XP,mixed domain and linux box as dns it's all ok.
Only with 98 give problems......

Marscha · Post by **Marscha** » 2004-12-15 07:44

Could you provide the complete output of testauth.exe from Win98 and WinXP both in your mixed domain environment.
I can't exactly figure out where the problem comes from.

tesosuper · Post by **tesosuper** » 2004-12-15 11:33

testauth.exe for XP
__________________________________

C:\Programmi\UltraVNC>testauth
Enter user name : test

Enter password : xxxxxxxx

Enter group : VNCGROUP

loc=1 dom=3 local+domain=3 : 3

Trying authlogonuser.dll
This only works on XP>
test is runnning as application and not a service
------------------------
------------------------
Logonuser: test .
Logonuser: test MOLINET
based on authlogonuser.dll user has NO access
Trying auth.dll
------------------------
------------------------
Client NT4 or later
Domain controler found\\NTSERVE6
------------------------------
Checking Local groups for user: TEST
group: VNCGROUP
New added ---- just for testing
Detected domain = MOLINET
MOLINET\test
compare USERS V
no match ...
No group found
New added ---- just for testing
Detected domain = MOLINET
test
compare VNCGROUP V
match ...
compare DOMAIN USERS V
no match ...
group found ...
Domain password check OK
Acces to vnc OK
based on auth.dll user has access
-------------------------
For testing we cont, but access was already granted
-------------------------

Trying authaddll
------------------------
------------------------
Client NT4 or later
Domain controler found\\NTSERVE6
------------------------------
user: TEST
group: VNCGROUP
WinNT://./TEST,userlocal account not found
Perhaps account is domain based, check MOLINET
domain account not found
Account not found
based on authad.dll user has NO access
Trying ldapauth .dll
------------------------
------------------------
LDAP://rootDSE
LDAP://DC=molinette,DC=piemonte,DC=it
ADsPath: LDAP://CN=test,CN=Users,DC=molinette,DC=piemonte,DC=it
ADsPath: LDAP://CN=vncgroup,CN=Users,DC=molinette,DC=piemonte,DC=it
Group found OK
Object

LDAP://CN=test,CN=Users,DC=molinette,DC=piemonte,DC=it

IS a member of the following Group:

LDAP://CN=vncgroup,CN=Users,DC=molinette,DC=piemonte,DC=it

based on ldapauth.dll user has access Enter to quit

testauth.exe with Windows 98SE
____________________________________________

C:\Programmi\UltraVNC>testauth
Enter user name : test

Enter password : xxxxxxxx

Enter group : VNCGROUP

loc=1 dom=3 local+domain=3 : 3

Trying authlogonuser.dll
This only works on XP>
test is runnning as application and not a service
------------------------
------------------------
authlogonuser.dll not foundbased on authlogonuser.dll user has NO access
Trying auth.dll
------------------------
------------------------
NetGetDCName95() returned 2453
No domain controler found
based on auth.dll user has NO access Enter to quit

Guest · Post by **Guest** » 2004-12-15 12:34

Does your win98 use the dns server of the AD domain.

If your win98 use another dns server the domain can not be found.

tesosuper · Post by **tesosuper** » 2004-12-15 14:19

I'm using the same dns of the domain.
I have found the problem.
If the workgroup name of windows 98 in not equal to the domain name the authentication fails.
If the workgroup name of windows 98 is equal to the domain name the authentication it's ok.
There is a way to do that windows use the name of domain specified in "access control" menu and not the name of workgroup????

Marscha · Post by **Marscha** » 2004-12-16 06:57

At the moment you cannot specify a domain/workgroup name on Win98.
MS-Logon I does not allow specification of domain/workgroup name

.
With MS-Logon II you can specify the domain but it doesn't work on Win9x yet

.
I hope to get this consolidated in the future but it will require some modifications.