[cifs-protocol] [EXTERNAL] Re: Meaning of 'RoleStandalone' in [MS-GPOL] 3.2.5.1.4 Site Search - TrackingID#2401050040009225

[Obaid Farooqi]

Hi Andreas:
I'll need some traces from you. Let me see what processes runs these methods and then I'll send you bits and instructions to collect traces.

Regards,
Obaid Farooqi
Escalation Engineer | Microsoft

-----Original Message-----
From: Andreas Schneider <asn at samba.org>
Sent: Friday, January 19, 2024 5:42 AM
To: Obaid Farooqi <obaidf at microsoft.com>; cifs-protocol at lists.samba.org
Cc: cifs-protocol at lists.samba.org; Microsoft Support <supportmail at microsoft.com>; David Mulder <dmulder at samba.org>
Subject: [EXTERNAL] Re: [cifs-protocol] Meaning of 'RoleStandalone' in [MS-GPOL] 3.2.5.1.4 Site Search - TrackingID#2401050040009225

On Thursday, 18 January 2024 21:37:59 CET David Mulder via cifs-protocol
wrote:
> On 1/11/24 12:42 PM, Obaid Farooqi wrote:
> > Hi David:
> > The definition of 'DsRole_RoleStandaloneWorkstation' and
> > 'DsRole_RoleStandaloneServer' (and others) is in MS-DSSP section 2.2.2.
> >
> > Please review that and let me know if that information resolves your
> > question. If it does not, please rephrase your question in the light
> > of the information about the roles.
> >
> > Although MS-DSSP is listed in the normative references in MS-GPOL,
> > I'll file a bug to add a reference to section 2.2.2 of MS-DSSP in
> > MS-GPOL for further clarity.
> Sorry for the slow response. In that case, based on those
> descriptions, the server *is* returning an unexpected response. The
> spec says it should return ERROR_NO_SITENAME, but it is actually
> returning INVALID_COMPUTERNAME.

Hi,

here is how to reproduce it:

* I've installed a Windows Server with Active Directory (win-dc01)
* I installed a Windows 11 machine (win-cli01) and joined it to AD
* I used Samba's rpcclient to do a DsrGetSitename request:

bin/rpcclient ncacn_np:win-dc01.earth.milkyway.site \
  -UAdministrator at EARTH.MILKYWAY.SITE -c 'dsr_getsitename win-cli01'

rpccli_netlogon_dsr_gesitename returned NT_STATUS_INVALID_COMPUTER_NAME result was WERR_INVALID_COMPUTERNAME

[MS-NRPC] 3.5.4.3.6 DsrGetSiteName only documents ERROR_NO_SITENAME

--
Andreas Schneider                      asn at samba.org
Samba Team                             http://www.samba.org/
GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D