microsoft / WSL

Issues found on WSL
https://docs.microsoft.com/windows/wsl
MIT License
17.48k stars 822 forks source link

Accessing \\wsl.localhost results in logon failures being logged while \\wsl$ does not #11949

Open kitu-sbruce opened 2 months ago

kitu-sbruce commented 2 months ago

Windows Version

Microsoft Windows [Version 10.0.22631.4037]

WSL Version

2.2.4.0

Are you using WSL 1 or WSL 2?

Kernel Version

Linux version 5.15.153.1-microsoft-standard-WSL2 (root@941d701f84f1) (gcc (GCC) 11.2.0, GNU ld (GNU Binutils) 2.37) #1 SMP Fri Mar 29 23:14:13 UTC 2024

Distro Version

Ubuntu 22.04

Other Software

No response

Repro Steps

See https://github.com/microsoft/WSL/issues/11198

Expected Behavior

See https://github.com/microsoft/WSL/issues/11198

The workaround mentioned in the ticket above no longer works.

Actual Behavior

See https://github.com/microsoft/WSL/issues/11198

Diagnostic Logs

No response

github-actions[bot] commented 2 months ago

Logs are required for review from WSL team

If this a feature request, please reply with '/feature'. If this is a question, reply with '/question'. Otherwise please attach logs by following the instructions below, your issue will not be reviewed unless they are added. These logs will help us understand what is going on in your machine.

How to collect WSL logs Download and execute [collect-wsl-logs.ps1](https://github.com/Microsoft/WSL/blob/master/diagnostics/collect-wsl-logs.ps1) in an **administrative powershell prompt**: ``` Invoke-WebRequest -UseBasicParsing "https://raw.githubusercontent.com/microsoft/WSL/master/diagnostics/collect-wsl-logs.ps1" -OutFile collect-wsl-logs.ps1 Set-ExecutionPolicy Bypass -Scope Process -Force .\collect-wsl-logs.ps1 ``` The script will output the path of the log file once done. If this is a networking issue, please use [collect-networking-logs.ps1](https://github.com/Microsoft/WSL/blob/master/diagnostics/collect-networking-logs.ps1), following the instructions [here](https://github.com/microsoft/WSL/blob/master/CONTRIBUTING.md#collect-wsl-logs-for-networking-issues) Once completed please upload the output files to this Github issue. [Click here for more info on logging](https://github.com/microsoft/WSL/blob/master/CONTRIBUTING.md#8-collect-wsl-logs-recommended-method) If you choose to email these logs instead of attaching to the bug, please send them to wsl-gh-logs@microsoft.com with the number of the github issue in the subject, and in the message a link to your comment in the github issue and reply with '/emailed-logs'.

View similar issues

Please view the issues below to see if they solve your problem, and if the issue describes your problem please consider closing this one and thumbs upping the other issue to help us prioritize it!

Closed similar issues:

Note: You can give me feedback by thumbs upping or thumbs downing this comment.

kitu-sbruce commented 2 months ago

/emailed-logs

github-actions[bot] commented 2 months ago
Diagnostic information ``` Found '/emailed-logs', adding tag 'emailed-logs' ```
OneBlue commented 2 months ago

@kitu-sbruce: How exactly are you accessing that path ? Do you see the same error in explorer and cmd.exe ? Also could you capture logs for both ?

/logs

kitu-sbruce commented 2 months ago

Good question.

I primarily run into this issue when running something like:

alias explorer=/mnt/c/Windows/explorer.exe
explorer .

This opens up the current path in explorer which WSL resolves to \\wsl.localhost\...

I later found I could just go to Start->Run and browse to \\wsl.localhost\... and get the same behavior while \\wsl$\... does not.

No UI error is displayed and everything actually works for either case but the former(\\wsl.localhost\...) results in logon failures being reported in the Windows security log which ultimately turns into a user lockout.

Will submit logs in a few.

kitu-sbruce commented 2 months ago

/emailed-logs

kitu-sbruce commented 2 months ago
WslLogs-2024-09-12_16-05-00.zip - opening `explorer .` from WSL
WslLogs-2024-09-12_16-07-36.zip - Start->Run-> \\wsl.localhost\...
WslLogs-2024-09-12_16-08-35.zip - Start->Run-> \\wsl$\...
github-actions[bot] commented 2 months ago
Diagnostic information ``` Found '/emailed-logs', adding tag 'emailed-logs' ```
OneBlue commented 1 month ago

Thank you @kitu-sbruce. Do you have any AV / Firewall installed ? I wonder if they intercept one path and not the other.

kitu-sbruce commented 1 month ago

Thank you @kitu-sbruce. Do you have any AV / Firewall installed ? I wonder if they intercept one path and not the other.

Just Defender.

I mentioned this earlier but think the key to replicating is using RDP to connect to the machine with WSL. I'll also mention that my machine is not on a domain and is using local accounts.