自定义验证包 [英] Custom Authentication Package

问题描述

所以，这是一个场景。我正在Windows 7中开发一个登录系统。我创建了一个Credential Provider，其中包含一个Credential。凭证有三个输入字段，用户名，密码和PIN。

So, here is the scenario. I am developing a logon system in windows 7. I have created a Credential Provider, containing one Credential. The Credential has three input fields, username, password, and PIN.

我学到的文档（CMIIW）是当我们填写字段并单击登录时，WINLOGON将检索用户名和密码，并通过调用LSALogonUser（）进行身份验证将其发送到LSA。 LSA然后将尝试与Authentication
包KERBEROS（用于远程登录）或MSV1_0（用于本地登录）进行协商。

What I have learnt the documentation (CMIIW) is that when we fill in the fields and click logon, WINLOGON will retrieve the username and password, and send it to LSA by calling LSALogonUser() to authenticate. LSA then will try negotiate with Authentication Package KERBEROS (for remote logon) or MSV1_0 (for local logon).

假设现在只有本地方案，用户名和密码将传递给MSV1_0，并与SAM数据库中的那些一起检查。现在的问题是，我不希望用SAM数据库检查它。假设我有一个文件C：\users.txt，其中包含条目
作为三元组：{username;密码;销}。这里的所有用户名都是Windows中的现有用户。如何使身份验证遵循我的方式（检查文件C：\users.txt）。

Assume only the local scenario for now, the username and password will be passed to MSV1_0, and be checked with those in SAM database. Now the thing is, I don't want it to be checked with SAM database. Lets say I have a file C:\users.txt which contains entries as triplets: {username ; password ; PIN}. All the username here is an existing user in windows. How do I make it so that the authentication is following my way (checking the file C:\users.txt).

如果我没有弄错，我们可以创建自己的身份验证'包装'MSV1_0的包。你们有一个示例代码吗？或者还有另一种更合适的方式吗？

If I'm not mistaken, we can create our own Authentication Package that 'wraps' the MSV1_0. Do you guys have a sample code for that? Or is there another more appropriate way?

推荐答案

我试图基本上做同样的事情，我在同一点上。  你有没有想过这个或让它运作？

I am trying to do basically the same thing, and I am at the same point.  Did you ever figure this out or get it working?

谢谢

Thanks

这篇关于自定义验证包的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！