| Previous | Next |
| STATUS_STACK_OVERFLOW | STATUS_BAD_FUNCTION_TABLE |
STATUS_NO_SUCH_PACKAGE
Windows Authentication Package identifies the the Dynamic-Link Library (DLL) loaded and used by theLocal Security Authority (LSA) along with configuration information stored in the Windows registry.
Loading multiple Windows Authentication Packages permits the LSA to support multiple logon processes and multiple security protocols.
LSA Protection prevents unsigned Windows Authentication Packages from being loaded.
Important
Windows Logon use Windows Authentication Package to analyze logon data by following the rules and procedures set forth in a security protocol.Windows Authentication Package are responsible for the following tasks:
- Analyzing logon data to determine whether a security principal is allowed to Access a system or Resource.
- Establishing a new logon session and creating a unique logon identifier for the successfully authenticated principal.
- Passing security information to the LSA for the principal's security token.
Windows Authentication Packages provide Authentication Mechanism services by implementing package-specific functionality for the LsaLogonUser and LsaCallAuthenticationPackage functions provided by the LSA.
After a Windows Logon session is created and associated with a principal, subsequent authentication requests made on behalf of the principal are handled differently than the initial logon. The Windows Authentication Package does not create a new Windows Logon session nor return information for creating a token. The Windows Authentication Package can, however, associate supplemental credentials obtained during a subsequent authentication with the principal's existing Windows Logon session. Supplemental credentials are obtained when access to a requested resource requires information beyond the credentials established by the initial Windows Logon.
Msv1_0.dll is an example of a Windows Authentication Package which accepts a user name and a Hashed password, which it looks up in the Security Account Manager (SAM) database. Depending on the results of the lookup, the MSV1_0 Windows Authentication Package accepts or rejects the authentication attempt.