[cifs-protocol] [EXTERNAL] Re: Meaning of 'RoleStandalone' in [MS-GPOL] 3.2.5.1.4 Site Search - TrackingID#2401050040009225

[Andreas Schneider]

On Friday, 19 January 2024 20:14:01 CET Obaid Farooqi wrote:
> Hi David:

Hi Obaid,

> The error INVALID_COMPUTERNAME is returned when no domain name can be found
> based on the provided computer name. This suggest to me that your server is
> not a member of a domain. Is that the case?

This can be easily reproduced:

* I've installed a Windows Server with Active Directory (win-dc01)
* I installed a Windows 11 machine (win-cli01) and **joined** it to AD
* I used Samba's rpcclient to do a DsrGetSitename request on the newly joined 
domain member machine account:

bin/rpcclient ncacn_np:win-dc01.earth.milkyway.site \
  -UAdministrator at EARTH.MILKYWAY.SITE -c 'dsr_getsitename win-cli01'

rpccli_netlogon_dsr_gesitename returned NT_STATUS_INVALID_COMPUTER_NAME
result was WERR_INVALID_COMPUTERNAME

[MS-NRPC] 3.5.4.3.6 DsrGetSiteName only documents ERROR_NO_SITENAME


Best regards


	Andreas

> Regards,
> Obaid Farooqi
> Escalation Engineer | Microsoft
> 
> -----Original Message-----
> From: David Mulder <dmulder at samba.org>
> Sent: Thursday, January 18, 2024 2:38 PM
> To: Obaid Farooqi <obaidf at microsoft.com>
> Cc: cifs-protocol at lists.samba.org; Andreas Schneider <asn at redhat.com>;
> Microsoft Support <supportmail at microsoft.com> Subject: [EXTERNAL] Re:
> Meaning of 'RoleStandalone' in [MS-GPOL] 3.2.5.1.4 Site Search -
> TrackingID#2401050040009225
> On 1/11/24 12:42 PM, Obaid Farooqi wrote:
> > Hi David:
> > The definition of 'DsRole_RoleStandaloneWorkstation' and
> > 'DsRole_RoleStandaloneServer' (and others) is in MS-DSSP section 2.2.2.
> > 
> > Please review that and let me know if that information resolves your
> > question. If it does not, please rephrase your question in the light of
> > the information about the roles.
> > 
> > Although MS-DSSP is listed in the normative references in MS-GPOL, I'll
> > file a bug to add a reference to section 2.2.2 of MS-DSSP in MS-GPOL for
> > further clarity.
> Sorry for the slow response. In that case, based on those descriptions, the
> server *is* returning an unexpected response. The spec says it should
> return ERROR_NO_SITENAME, but it is actually returning
> INVALID_COMPUTERNAME.
> 
> --
> David Mulder
> Labs Software Engineer, Samba
> SUSE
> 1221 S Valley Grove Way, Suite 500
> Pleasant Grove, UT 84062
> (P)+1 385.208.2989
> dmulder at suse.com
> http://www.suse.com/


-- 
Andreas Schneider                      asn at samba.org
Samba Team                             www.samba.org
GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D