Implementing a Custom Windows Authentication Package

Question

I am creating a custom signature subpackage for MSV1_0 for Windows 7. I used the msvsubauth sample from the Windows SDK and I have 2 questions regarding some of the problems I am facing:

• When I try to only make sure that the get procedure is called and set the Auth0 property in the registry to my package and add simple code to the end of Msv1_0SubAuthenticationRoutine, which creates the file:

  //
  // Cleanup up before returning.
  //
  
  
  Cleanup:
  hTestFile = CreateFile(
                TEXT("C:\\lsa\\lsa.txt"), 
                GENERIC_READ|GENERIC_WRITE, 0, 
                NULL, CREATE_ALWAYS, 
                FILE_ATTRIBUTE_NORMAL, NULL);
  
  
  if(hTestFile != INVALID_HANDLE_VALUE) {
        CloseHandle(hTestFile);
  }
  
  
  return Status;
  
  
  }  // Msv1_0SubAuthenticationRoutine
  

  -, , , , " ", . ? .exe, . " " "". ? SDK , LSA auth.

• - AP. , , System32 . ?

!

Answer 1

Winlogon LSASS .

, -, . , _ap

• .
• LoadLibrary - DLL, GetProcAddress , DLL.
• ,
• ( AP ) FreeLibrary 2

, , dll , , , .

LogonUI.exe , LSASS.exe .

+ CVSNT (http://cvsnt.sourcearchive.com/). , su. psexec -s ( Microsoft/SysInternals pstools)

Answer 2

, , ? .

Process Monitor . / .

• http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx

" " " ", , - , , .

, , , , , Nth ..