[cifs-protocol] [MS-SAMR] SamrSetInformationUser2 over an authenticated DCERPC connection [119040819792364]

[Obaid Farooqi]

Hi Andreas:
I need to dig deeper into this to find out what is happening.
Can you please send me instructions on how to setup a Linux client to run the test you ran?

My plan is to use Windows Subsystem for Linux (WSL) running Ubuntu to accomplish this but that is not a requirement, just a convenience as I'll not have to install Linux on a new VM.

Regards,
Obaid Farooqi
Escalation Engineer | Microsoft

-----Original Message-----
From: Andreas Schneider <asn at samba.org> 
Sent: Friday, April 12, 2019 1:15 AM
To: Obaid Farooqi <obaidf at microsoft.com>
Cc: cifs-protocol <cifs-protocol at lists.samba.org>; support at mail.support.microsoft.com
Subject: Re: [MS-SAMR] SamrSetInformationUser2 over an authenticated DCERPC connection [119040819792364]

On Thursday, April 11, 2019 11:04:16 PM CEST Obaid Farooqi wrote:
> I guess the more important questions are:
> On named pipes: do both SMB session key and SystemLibraryDTC work or 
> just SystemLibraryDTC?

Just "SystemLibraryDTC" works as the session key on sealed
(DCERPC_AUTH_LEVEL_PRIVACY) named pipes and sealed TCP/IP connections.

> Pardon my questions, I am trying to understand the issue here. :)

No need to apologize, I'm happy to answer questions to help you understanding the issue :-)

> Also, no need for new traces yet. First let me understand the issue. 
> :)

Let me know if I can provide more information.


	Andreas

-- 
Andreas Schneider                      asn at samba.org
Samba Team                             https://nam06.safelinks.protection.outlook.com/?url=www.samba.org&data=02%7C01%7Cobaidf%40microsoft.com%7C4435111b87ca4919dc9308d6bf0e27a3%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636906464867779293&sdata=IlDvhwAtO8A35Wtxt4T05eJ%2BgzlLCBLC3SIe1EuFIj4%3D&reserved=0
GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D