[cifs-protocol] MS-SAMR: QueryDisplayInfo vs. EnumDomainGroups

Sebastian Canevari Sebastian.Canevari at microsoft.com
Sat Dec 4 08:24:24 MST 2010


Hi Matthias,


Thanks for your question.

Someone from our group will contact you to follow up on this later.

Regards,

Sebastian


________________________________________
From: Matthias Dieter Wallnöfer [mdw at samba.org]
Sent: Saturday, December 04, 2010 3:58 AM
To: Interoperability Documentation Help
Cc: cifs-protocol at samba.org
Subject: MS-SAMR: QueryDisplayInfo vs. EnumDomainGroups

Hi dochelp team,

we've a testsuite which compares the output of QueryDisplayInfo (MS
name: "SamrQueryDisplayInformation3") level 3 and 5
("DomainDisplayGroup", "DomainDisplayOemGroup") against EnumDomainGroups
(MS name: "SamrEnumerateGroupsInDomain"). These calls should be fetching
all (domain) global and unversal groups and therefore yield the *same*
result. On s4 our test passes without any trouble, but on Windows Server
2008 it doesn't.

I'm getting this against a Server 2008 German edition:
> WARNING!: QueryDisplayInfo gave name [$FJ5000-BBTG1H1LI2BG] that
> EnumDomainGroups did not
>
> WARNING!: QueryDisplayInfo gave name [DnsUpdateProxy] that
> EnumDomainGroups did not
>
> WARNING!: QueryDisplayInfo gave name [Domänen-Admins] that
> EnumDomainGroups did not
>
> WARNING!: QueryDisplayInfo gave name [Domänen-Benutzer] that
> EnumDomainGroups did not
>
> WARNING!: QueryDisplayInfo gave name [Domänen-Gäste] that
> EnumDomainGroups did not
>
> WARNING!: QueryDisplayInfo gave name [Domänencomputer] that
> EnumDomainGroups did not
>
> WARNING!: QueryDisplayInfo gave name [Domänencontroller] that
> EnumDomainGroups did not
>
> WARNING!: QueryDisplayInfo gave name [Domänencontroller der
> Organisation ohne Schreibzugriff] that EnumDomainGroups did not
>
> WARNING!: QueryDisplayInfo gave name [Domänencontroller ohne
> Schreibzugriff] that EnumDomainGroups did not
>
> WARNING!: QueryDisplayInfo gave name [Organisations-Admins] that
> EnumDomainGroups did not
>
> WARNING!: QueryDisplayInfo gave name [Richtlinien-Ersteller-Besitzer]
> that EnumDomainGroups did not
>
> WARNING!: QueryDisplayInfo gave name [Schema-Admins] that
> EnumDomainGroups did not

These are all global and universal group objects which should be
returned by the call EnumDomainGroups (see MS-SAMR 3.1.5.2.3).
So my question: could there be a misconfiguration that EnumDomainGroups
doesn't return the correct result? Or is there a bug?

Thanks,
Matthias Wallnöfer


More information about the cifs-protocol mailing list