[PATCH 8/9] kerberos: Don't include GSS_C_DCE_STYLE in default gss_init_sec_context() flags.

Tue Jan 30 05:50:33 CST 2018

On Tue, 2018-01-30 at 18:55 +0800, Dmitry Timoshkov wrote:
> It detects the authentication type as Kerberos.
> 
> That's a good starting point. Does KRB5_TRACE=/dev/stdout in addition to
> WINEDEBUG=+secur32,+kerberos help to shed some light on the reason of
> the failure? Or you didn't try to run the Kerberos Tester on the Wine

Here's the log.
-------------- next part --------------
0009:fixme:thread:SetThreadStackGuarantee (0x32fcb0): stub
0009:fixme:shell:URL_ParseUrl failed to parse L"System.Windows.Forms"
0009:fixme:shell:URL_ParseUrl failed to parse L"System"
0009:fixme:shell:URL_ParseUrl failed to parse L"System.Drawing"
0009:trace:secur32:SECUR32_initializeProviders 
0009:trace:kerberos:SpLsaModeInitialize 0x10000,0x32e060,0x32e070,0x32e064
0009:trace:secur32:lsa_AllocateLsaHeap 9
0009:trace:secur32:lsa_AllocateLsaHeap 8
0009:trace:secur32:load_package L"Kerberos" => 0x7ddc0000, name "Kerberos", version 0x10000, api table 0x7ddcc580, table count 1
0009:trace:kerberos:kerberos_SpInitialize 1,(nil),(nil)
0009:trace:kerberos:SpUserModeInitialize 0x10000,0x32e068,0x32e074,0x32e06c
0009:fixme:kerberos:kerberos_SpInstanceInit 65536,0x7e21b3a0,(nil): stub
0009:trace:kerberos:kerberos_SpGetInfo 0x162870
0009:trace:secur32:LsaConnectUntrusted 0x862dd8
0009:trace:secur32:LsaLookupAuthenticationPackage 0x161268 0x862e0c 0x862ddc
0009:fixme:gdiplus:GdipGetFamilyName No support for handling of multiple languages!
0009:fixme:shell:URL_ParseUrl failed to parse L"KerberosAuthenticationTester.resources"
0009:fixme:msvcrt:__clean_type_info_names_internal (0x60345090) stub
0009:fixme:shell:URL_ParseUrl failed to parse L"KerberosAuthenticationTester.resources"
0009:fixme:gdiplus:GdipCreateHalftonePalette stub
0009:fixme:shell:URL_ParseUrl failed to parse L"System.Configuration"
0009:fixme:shell:URL_ParseUrl failed to parse L"System.Xml"
0009:fixme:ras:RasEnumConnectionsW (0x198c78,0x32ec68,0x32ec64),stub!
0009:fixme:ras:RasEnumConnectionsW RAS support is not implemented! Configure program to use LAN connection/winsock instead!
0009:err:winsock:WSAIoctl -> SIO_ADDRESS_LIST_CHANGE request failed with status 0x2733
0009:fixme:ras:RasConnectionNotificationW (0xffffffff,0x174,0x00000003),stub!
0009:fixme:winhttp:get_system_proxy_autoconfig_url no support on this platform
0009:fixme:winhttp:WinHttpDetectAutoProxyConfigUrl discovery via DHCP not supported
0009:err:winsock:WSAIoctl -> SIO_ADDRESS_LIST_CHANGE request failed with status 0x2733
0009:trace:secur32:EnumerateSecurityPackagesW (0x32d9f0, 0x32d95c)
0009:trace:secur32:EnumerateSecurityPackagesW Name[0] = L"Microsoft Unified Security Protocol Provider"
0009:trace:secur32:EnumerateSecurityPackagesW Comment[0] = L"Microsoft Unified Security Protocol Provider"
0009:trace:secur32:EnumerateSecurityPackagesW Name[1] = L"Schannel"
0009:trace:secur32:EnumerateSecurityPackagesW Comment[1] = L"Schannel Security Package"
0009:trace:secur32:EnumerateSecurityPackagesW Name[2] = L"NTLM"
0009:trace:secur32:EnumerateSecurityPackagesW Comment[2] = L"NTLM Security Package"
0009:trace:secur32:EnumerateSecurityPackagesW Name[3] = L"Kerberos"
0009:trace:secur32:EnumerateSecurityPackagesW Comment[3] = L"Microsoft Kerberos V1.0"
0009:trace:secur32:EnumerateSecurityPackagesW Name[4] = L"Negotiate"
0009:trace:secur32:EnumerateSecurityPackagesW Comment[4] = L"Microsoft Package Negotiator"
0009:trace:secur32:EnumerateSecurityPackagesW <-- 0x00000000
0009:trace:secur32:AcquireCredentialsHandleW (null) L"Negotiate" 2 (nil) (nil) (nil) (nil) 0x8fcdc0 0x32e8c0
0009:trace:secur32:nego_AcquireCredentialsHandleW (null), L"Negotiate", 0x00000002, (nil), (nil), (nil), (nil), 0x32e808, 0x32e8c0
0009:trace:secur32:lsa_AcquireCredentialsHandleW (null) L"Kerberos" 0x2 (nil) (nil) (nil) 0x32e778 0x32e8c0
0009:trace:kerberos:kerberos_SpAcquireCredentialsHandle (<null> 0x00000002 (nil) (nil) (nil) (nil) 0x32e6e0 0x32e8c0)
0009:trace:kerberos:kerberos_SpAcquireCredentialsHandle gss_acquire_cred returned 00000000 minor status 00000000
0009:fixme:secur32:lsa_AcquireCredentialsHandleW lsa_package 0x162840
0009:trace:secur32:SECUR32_makeSecHandle 0x32e808 0x162890 0x32e778
0009:trace:secur32:SECUR32_makeSecHandle 0x8fcdc0 0x162910 0x32e808
0009:trace:secur32:InitializeSecurityContextW 0x32e81c (nil) L"HTTP/wintest2.test.local" 0x0000081f 0 0 (nil) 0 0x8ffedc 0x8ffe88 0x8fcda4 0x32e814
0009:trace:secur32:nego_InitializeSecurityContextW 0x1aac20, (nil), L"HTTP/wintest2.test.local", 0x0000081f, 0, 0, (nil), 0, 0x32e748, 0x8ffe88, 0x8fcda4, 0x32e814
0009:trace:secur32:lsa_InitializeSecurityContextW 0x1aac08 (nil) L"HTTP/wintest2.test.local" 0x81f 0 0 (nil) 0 0x32e6a8 0x8ffe88 0x8fcda4 0x32e814
0009:fixme:secur32:lsa_InitializeSecurityContextW credential 0x162840
0009:trace:kerberos:kerberos_SpInitLsaModeContext (7d84ab70 0 L"HTTP/wintest2.test.local" 0x0000081f 0 (nil) 0x32e604 0x8ffe88 0x8fcda4 0x32e814 0x32e603 (nil))
0009:fixme:kerberos:kerberos_SpInitLsaModeContext flags 0x00000801 not supported
0009:trace:kerberos:name_sspi_to_gss gss_import_name returned 00000000 minor status 00000000
[31026] 1517311835.553238: Getting credentials wintest2 at TEST.LOCAL -> HTTP/wintest2.test.local at TEST.LOCAL using ccache FILE:/tmp/krb5cc_1000
[31026] 1517311835.553346: Retrieving wintest2 at TEST.LOCAL -> HTTP/wintest2.test.local at TEST.LOCAL from FILE:/tmp/krb5cc_1000 with result: 0/Success
[31026] 1517311835.553476: Retrieving wintest2 at TEST.LOCAL -> krbtgt/TEST.LOCAL at TEST.LOCAL from FILE:/tmp/krb5cc_1000 with result: 0/Success
[31026] 1517311835.553489: Get cred via TGT krbtgt/TEST.LOCAL at TEST.LOCAL after requesting krbtgt/TEST.LOCAL at TEST.LOCAL (canonicalize off)
[31026] 1517311835.553517: Generated subkey for TGS request: aes256-cts/493E
[31026] 1517311835.553567: etypes requested in TGS request: rc4-hmac
[31026] 1517311835.553641: Encoding request body and padata into FAST request
[31026] 1517311835.553713: Sending request (1664 bytes) to TEST.LOCAL
[31026] 1517311835.565964: Resolving hostname 192.168.178.137
[31026] 1517311835.566077: Initiating TCP connection to stream 192.168.178.137:88
[31026] 1517311835.569194: Sending TCP request to stream 192.168.178.137:88
[31026] 1517311835.594784: Received answer (1366 bytes) from stream 192.168.178.137:88
[31026] 1517311835.594830: Terminating TCP connection to stream 192.168.178.137:88
[31026] 1517311835.659273: Response was not from master KDC
[31026] 1517311835.659324: Decoding FAST response
[31026] 1517311835.676250: TGS reply is for wintest2 at TEST.LOCAL -> krbtgt/TEST.LOCAL at TEST.LOCAL with session key rc4-hmac/BE67
[31026] 1517311835.676298: Got cred; 0/Success
[31026] 1517311835.676398: Creating authenticator for wintest2 at TEST.LOCAL -> HTTP/wintest2.test.local at TEST.LOCAL, seqnum 963779697, subkey rc4-hmac/BC1B, session key rc4-hmac/030F
[31026] 1517311835.676415: Negotiating for enctypes in authenticator: aes256-cts, aes128-cts, aes256-sha2, aes128-sha2, des3-cbc-sha1, rc4-hmac, camellia128-cts, camellia256-cts
0009:trace:kerberos:kerberos_SpInitLsaModeContext gss_init_sec_context returned 00000001 minor status 00000000 ret_flags 0000113f
0009:fixme:secur32:lsa_InitializeSecurityContextW status 00090312
0009:trace:secur32:SECUR32_makeSecHandle 0x32e748 0x162890 0x32e6a8
0009:trace:secur32:SECUR32_makeSecHandle 0x8ffedc 0x162910 0x32e748
0009:trace:secur32:QueryContextAttributesW 0x8ffedc 12 0x902818
0009:trace:secur32:nego_QueryContextAttributesW 0x1aac50, 12, 0x902818
0009:trace:secur32:lsa_QueryContextAttributesW 0x1aac38 12 0x902818
0009:trace:kerberos:kerberos_SpQueryContextAttributes (7dc75900 12 0x902818)
0009:trace:secur32:QueryContextAttributesW 0x8ffedc 12 0x90df2c
0009:trace:secur32:nego_QueryContextAttributesW 0x1aac50, 12, 0x90df2c
0009:trace:secur32:lsa_QueryContextAttributesW 0x1aac38 12 0x90df2c
0009:trace:kerberos:kerberos_SpQueryContextAttributes (7dc75900 12 0x90df2c)
0009:trace:secur32:DeleteSecurityContext 0x8ffedc
0009:trace:secur32:nego_DeleteSecurityContext 0x1aac50
0009:trace:secur32:lsa_DeleteSecurityContext 0x1aac38
0009:trace:kerberos:kerberos_SpDeleteContext (7dc75900)
0009:trace:kerberos:kerberos_SpDeleteContext gss_delete_sec_context returned 00000000 minor status 00000000
0009:fixme:ole:CoGetApartmentType (0x32fd3c, 0x32fd38): semi-stub
0031:fixme:process:FlushProcessWriteBuffers : stub
002c:fixme:secur32:LsaDeregisterLogonProcess 0x161268 stub
002c:trace:secur32:FreeCredentialsHandle 0x8fcdc0
002c:trace:secur32:nego_FreeCredentialsHandle 0x1aac20
002c:trace:secur32:lsa_FreeCredentialsHandle 0x1aac08
002c:trace:kerberos:kerberos_SpFreeCredentialsHandle (7d84ab70)
002c:trace:kerberos:kerberos_SpFreeCredentialsHandle gss_release_cred returned 00000000 minor status 00000000