[cifs-protocol] explaination of format desired = 0x0 in drs_crackname operation

Matthieu Patou mat at samba.org
Sat Jul 30 05:31:39 MDT 2011


Dear dochelp team,

While investigating around my samba + windows 2003r2 domain, I noticed 
that my w2k3r2 domain controller sends this to the samba server:
pull returned NT_STATUS_OK
     drsuapi_DsCrackNames: struct drsuapi_DsCrackNames
         in: struct drsuapi_DsCrackNames
             bind_handle              : *
                 bind_handle: struct policy_handle
                     handle_type              : 0x00000000 (0)
                     uuid                     : 
8e8ac098-f92e-4e63-aa40-2343a92cdd81
             level                    : 0x00000001 (1)
             req                      : *
                 req                      : union 
drsuapi_DsNameRequest(case 1)
                 req1: struct drsuapi_DsNameRequest1
                     codepage                 : 0x000004e4 (1252)
                     language                 : 0x00000409 (1033)
                     format_flags             : 
DRSUAPI_DS_NAME_FLAG_NO_FLAGS (0)
                     format_offered           : 
DRSUAPI_DS_NAME_FORMAT_UNKNOWN (0)
                     format_desired           : 
DRSUAPI_DS_NAME_FORMAT_FQDN_1779 (1)
                     count                    : 0x00000001 (1)
                     names                    : *
                         names: ARRAY(1)
                             names: struct drsuapi_DsNameString
                                 str                      : *
                                     str                      : 
'{E13B5B02-7B5D-44F0-813E-31C598FC166E}'
dump OK

In which occasion the Windows domain controller can send format desired 
= 0 ?

I checked the ms-drsr.pdf  and found no explanation for it.

Thanks for your future explanations.

note: I attached the blob related to the dsCrackNames request so that 
you can see it in a raw form.


Matthieu.


-- 
Matthieu Patou
Samba Team        http://samba.org
Private repo      http://git.samba.org/?p=mat/samba.git;a=summary


-------------- next part --------------
A non-text attachment was scrubbed...
Name: crackname_req
Type: application/octet-stream
Size: 154 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20110730/3b7370cd/attachment.obj>


More information about the cifs-protocol mailing list