Windows 10 Custom Credential Provider: Authenticate without Windows password

丶灬走出姿态 提交于 2021-01-29 11:13:27

问题


Is it possible using Custom Credential Provider to make windows logon without real password of local user?

I'm already able to install/register sample code from Microsoft, and even able to debug it.

My expectation from this mechanism: User inputs some password and my implementation performs some comparison against local database of my password (stored as sqlite database).

Reality: local user password MUST be passed to LSA subsystem within ICredentialProviderCredential::GetSerialization(...)

Frankly speaking I'm trying to use some sort of -one-time-coupon codes as passwords, to login to a kiosk-like workstation.


回答1:


This is the main reason for developing custom credential provider.

Your provider must return to the Logon UI or Cred UI the authentication information. It can be a login/password pair or a certificate based authentication.

Inside of your database you can store a real user's password and return it after checking your own OTP.



来源:https://stackoverflow.com/questions/57121718/windows-10-custom-credential-provider-authenticate-without-windows-password

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!