[cvsnt] Re: Fwd: Problem aliasing to domain user, was Re: Error with 2.0.51a ends with "results may not be correct"

[Tony Hoyle]

Glen Starrett wrote:
> CVSNT is trying to get a login token from the DC as the aliased user, 
> but without the correct password maybe?

No, it's just a query for the user SID, not any kind of authentication.

For this to fail it suggests the user doesn't actually exist on the PDC 
for that domain for some reason (the error coming back is 'user not 
found' not permissions or anything like that).  I'm not sure why and it 
may be that it's getting a different PDC/BDC for the domain to the one 
that SSPI is using, and the user doesn't exist on that one.

I'm adding some more trace functionality to the code so I can find this 
kind of thing out... funny how these things happen in groups (two 
authentication problems at once, albeit different, after the code hasn't 
needed touching for years).

Tony