[cifs-protocol] [EXTERNAL] Re: Meaning of 'RoleStandalone' in [MS-GPOL] 3.2.5.1.4 Site Search - TrackingID#2401050040009225

[Andreas Schneider]

On Friday, 19 January 2024 20:30:17 CET Obaid Farooqi wrote:
> Hi Andreas:
> I'll need some traces from you. Let me see what processes runs these methods
> and then I'll send you bits and instructions to collect traces.

I can send you traces on Monday. I have a TTracer here.
 
> Regards,
> Obaid Farooqi
> Escalation Engineer | Microsoft
> 
> -----Original Message-----
> From: Andreas Schneider <asn at samba.org>
> Sent: Friday, January 19, 2024 5:42 AM
> To: Obaid Farooqi <obaidf at microsoft.com>; cifs-protocol at lists.samba.org
> Cc: cifs-protocol at lists.samba.org; Microsoft Support
> <supportmail at microsoft.com>; David Mulder <dmulder at samba.org> Subject:
> [EXTERNAL] Re: [cifs-protocol] Meaning of 'RoleStandalone' in [MS-GPOL]
> 3.2.5.1.4 Site Search - TrackingID#2401050040009225
> 
> On Thursday, 18 January 2024 21:37:59 CET David Mulder via cifs-protocol
> 
> wrote:
> > On 1/11/24 12:42 PM, Obaid Farooqi wrote:
> > > Hi David:
> > > The definition of 'DsRole_RoleStandaloneWorkstation' and
> > > 'DsRole_RoleStandaloneServer' (and others) is in MS-DSSP section 2.2.2.
> > > 
> > > Please review that and let me know if that information resolves your
> > > question. If it does not, please rephrase your question in the light
> > > of the information about the roles.
> > > 
> > > Although MS-DSSP is listed in the normative references in MS-GPOL,
> > > I'll file a bug to add a reference to section 2.2.2 of MS-DSSP in
> > > MS-GPOL for further clarity.
> > 
> > Sorry for the slow response. In that case, based on those
> > descriptions, the server *is* returning an unexpected response. The
> > spec says it should return ERROR_NO_SITENAME, but it is actually
> > returning INVALID_COMPUTERNAME.
> 
> Hi,
> 
> here is how to reproduce it:
> 
> * I've installed a Windows Server with Active Directory (win-dc01)
> * I installed a Windows 11 machine (win-cli01) and joined it to AD
> * I used Samba's rpcclient to do a DsrGetSitename request:
> 
> bin/rpcclient ncacn_np:win-dc01.earth.milkyway.site \
>   -UAdministrator at EARTH.MILKYWAY.SITE -c 'dsr_getsitename win-cli01'
> 
> rpccli_netlogon_dsr_gesitename returned NT_STATUS_INVALID_COMPUTER_NAME
> result was WERR_INVALID_COMPUTERNAME
> 
> [MS-NRPC] 3.5.4.3.6 DsrGetSiteName only documents ERROR_NO_SITENAME
> 
> --
> Andreas Schneider                      asn at samba.org
> Samba Team                             http://www.samba.org/
> GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D


-- 
Andreas Schneider                      asn at samba.org
Samba Team                             www.samba.org
GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D