OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Zijing Yin (zyinSECURENET.COM.AU)
Date: Wed Sep 12 2001 - 00:51:38 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi Alex,

    Thanks for your advice. I have tried your methods, it is good.

    We designed to start our encryption service by hooked GINA originaly.
    It has been worked all ok, except one of our customers' got the problem
    recently (Perhaps their network settings). The PC failed to discover
    the PDC because encryption start after NetBIOS and couldn't establish
    encryption session by the other end. I don't know how NetLogon
    re-discover PDC or how I can force the local PC to re-discover the PDC.
    In alternative approach, we try to start our encryption service before
    NetBIOS and it works fine for external SCard reader. As I mentioned
    before of using internal reader, I set the encryption service dependency
    to Group "NDIS" and Service "SCardSvr" and I have got error "Detected
    circular dependencies auto-starting service" from Cold-Start. This
    error doesn't effect anything, our encryption API works fine and Laptop
    running normal. I think some system process detected Gpr400 and
    re-starts SCardSvr automatically after post error MSG. I want to avoid
    this error message.

    Any suggestion will be great help.

    Regards

    Zijing

    -----Original Message-----
    From: Alexander Keck [mailto:akeckCARDLOGON.COM]
    Sent: Monday, 10 September 2001 8:09 PM
    To: SmartCardSDKDISCUSS.MICROSOFT.COM
    Subject: Re: Access SCReader before NetBios startup

    **************************************************************
    This message has been scanned for viruses.
    **************************************************************

    Hi,

    I had a similar problem with our GINA replacement.
    Before we used PC/SC, I even had to wait that the serial port becomes
    available, because GINA was started before the serial.sys.
    Anyway, since we used PC/SC, I had a problem (blue screen) when
    searching
    for the domain controller, because the workstation service was not
    started....

    I think you can solve your problem by either starting the Workstation
    service before continuing (or by your hooked GINA), or make your service
    depended on the Workstation service.

    Hope this helps!
    Alexander Keck
    Microsoft Certified Systems Engineer
    Microsoft Certified Database Administrator
    Microsoft Certified Professional + Internet
    Microsoft Certified Solution Developer IN PROGRESS!

    LOGICO Smartcard Solutions GmbH
    Microsoft Gold Certified Partner

    ----- Original Message -----
    From: "Zijing YIN" <zyinSECURENET.COM.AU>
    To: <SmartCardSDKDISCUSS.MICROSOFT.COM>
    Sent: Thursday, September 06, 2001 1:00 AM
    Subject: Access SCReader before NetBios startup

    > Hi,
    >
    > I am writing an service program in Windows NT workstation 4. This
    service
    > program handles all encryption keys exchange with remote PC, so that
    it
    > needs to start up in the very early stage when PC power up. When the
    > service starts up, it needs to access smartcard to get keys. We
    re-wrote
    > GINA to start our encryption service and they all work OK.
    >
    > But we have faced a problem recently we could not solve it so far.
    Our
    > customer use Laptop with smartcard reader Gpr400(GemPC 400) wants to
    login
    > from their local network to remote network through ISDN. They have
    only
    > one Primary Domain Controller on remote network and they use roaming
    > profile. We found NetBIOS starts before our encryption service so
    that
    > NetLogon failed and pupup "No Domain Controller found... using local
    > profile". But we still can access network resource after that because
    > encryption start up now. User only logon fail from cold start PC.
    >
    > Question: Has anyone had this problem yet?
    >
    > We have changed our service to auto-start not demend-start by GINA and
    > group it into "Extended base" group because it needs to talk serial
    port.
    > For external reader (GCR410) it works alright. For internal reader, I
    set
    > my service program dependency to service "Gpr400", but it doesn't
    work.
    It
    > also doesn't work if I change dependency to service "SCardSvr", or
    > group "Smart Card Service" or group "Smart Card Reader", the laptop
    has
    > warning "Detected circular dependencies auto-starting service" or "The
    > SmartCard Resource Manager Service depends on the smart card reader
    group
    > and no menber of this group start". All Smart Card groups are not in
    > ServiceGroupOrder List.
    >
    > Question: How can I access smartcard when my service start before
    Winlogon?
    >
    > Any suggestion would be appreciated.
    >
    >
    > Regards
    >
    > Zijing
    >

    For all the current SecureNet news and events please visit our website on www.securenet.com.au

    **********************************************************************
    This email and any files transmitted with it are confidential and
    intended solely for the use of the individual or entity to whom they
    are addressed. If you have received this email in error please notify
    the system manager.

    This footnote also confirms that this email message has been swept by
    MIMEsweeper for the presence of computer viruses.

    www.mimesweeper.com
    **********************************************************************