On Feb 19 11:53, Roger Orr wrote: > I've tested again with the first patched cygwin1.dll: > CYGWIN_NT-6.1-WOW LCLDN-DEV24 1.7.35(0.286/5/3) 2015-02-16 13:18 i686 Cygwin > > I can confirm the connections are occurring within the ldap_search_s > call - here is one of the call stacks: > [...]
AFAICS that's expected when enumerating accounts. > Connection->Bind (enter username and password) > (no new sessions) > > Browse->Search > > Base Dn - first naming context > Filter: (&(objectClass=trustedDomain)(name=wibble)) > Gets 0 entries, quickly, no extra sessions visible > > > Click 'Options' > Select 'Chase Referrals' > Click Ok > > Search again. > Gets 0 entries, takes some seconds, and establishes nuermous TCP/IP > connections. Hunting down the other DCs I assume. > (1) LDAP_OPT_REFERRALS is on by default > (2) The fix added CN=System to the Base Dn - this seems to turn off referrals I don't think it does. The domain info is available on the DC you're contacting so it doesn't have to ask others. I assume here that "wibble" is no valid domain name ;) > -- > *aside* > Sysinternals "ADInsight" is a 32bit only tool and, in order to work on > a 64bit Windows you seem to have to manually inject the DLL > ADInsightDll.dll (which is extracted into %TEMP%) into the target > (32-bit!) process. Uh, too bad. Thanks, Corinna -- Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat
pgpNDdUmjJIbX.pgp
Description: PGP signature
