windows的网络访问认证原则和实例

　　关于netbios的一些实例，原文见 http://support.microsoft.com/default.aspx?scid=kb;EN-US;q103390.按道理不应该贴到这个版的，呵呵，没办法，自己的版当然会有点特殊感情。。
　　我以前的翻译，并且加上自己的例子，大家凑合着看看吧
　　Network Access Validation Algorithm and Example
　　
　　网络访问认证原则和实例
　　
　　The information in this article applies to:
　　? Microsoft Windows NT Advanced Server, version 3.1
　　? Microsoft Windows NT Server versions 3.5, 3.51, 4.0
　　
　　The following is a simplified algorithm算法that explains how Windows NT Advanced Server account validation确认is observed to function during network access. This discussion does not cover the internal workings of this process. With this information, you can predict Windows NT network logon behavior under deterministic conditions. 你可以预知特定情况下NT的网络登陆过程。
　　
　　Keep in mind when following this article that the local database is the ONLY database on a domain controller. But on the other server and all workstations the local database is different than the domain controller.
　　需要说明的是，本文说明的本地数据库是一个在域控制器上本地数据库。但是其他的普通服务器和工作站的数据库和域控制器数据库是不一样的。
　　NOTE: All references提及to Windows NT Advanced Server in this article also include Windows NT Server.
　　
　　Background Information
　　When two Microsoft network systems communicate over a network, they use a high-level protocol called server message block (SMB). These commands are embedded within the transport protocols like NetBEUI or TCP/IP.
　　当两个微软网络操作系统进行网络通信时，他们使用SMB高层协议。这些操作包含在NETBEUI或者TCP/IP协议中。
　　When a client carries out a NET USE command, it sends out a "SMB Session Setup and X" frame.
　　当一个客户端发送一个NET USE命令，它发送一个"SMB Session Setup and X"帧。
　　
　　In Windows NT, the Session Setup SMB includes the user account, a
　　function of the encrypted password and login domain.
　　在NT中，一个SMB会话包括用户账号，加密的PASSWD函数和登陆域的信息。
　　An Advanced Server will look at all of this information to determine if the client has permissions to complete the NET USE command.
　　一个高级服务器会根据所有这些信息来判断客户端是否有权限完成NET USE命令。
　　Algorithm算法
　　Windows NT workstation sends the following command to an Advanced Server:
　　NET USE x: \\server\share
　　
　　The Windows NT client sends a Session Setup SMB that contains its
　　Login Domain, User Account and Password.
　　NT客户端发送一个包括用户账号，加密的PASSWD函数和登陆域的信息的SMB会话。
　　
　　一服务器检查这个SMB会话包含的域信息，如果是自己这个域，那么
　　The Advanced Server checks the SMB specified Domain name If the domain is the Advanced Server's own Domain then
　　It checks its own Domain SAM[Security Account Manager]database for
　　a matching account.
　　它从自己的 DOMAIN SAM 中寻找匹配的用户账号
　　If it finds a matching account then
　　如果找到匹配的用户账号
　　The SMB password is compared to the Domain Database password.
　　利用SMB会话中包含的密码和DOMAIN SAM中储存的用户密码进行比较
　　If the password matches then
　　如果密码匹配
　　The Command Completed Successfully.
　　命令执行成功
　　If the password does NOT match then
　　如果密码不匹配
　　User is prompted for a password.
　　提示用户输入密码
　　It is retested as above.
　　重新进行以上验证
　　System error 1326 has occurred. Logon failure: unknown
　　user name or bad password.
　　系统错误提示1326。登陆失败：未知的用户名或者错误的密码。
　　End
　　If it does NOT find the account in the domain SAM database then
　　如果在SAM中没有找到匹配的用户
　　Guest permissions are tested.
　　验证GUEST权限
　　If the Guest account is Enabled
　　如果GUEST账号是被激活
　　The Command Completed Successfully.
　　命令执行成功
　　If the Guest account is Disabled

[1] [2] 下一页