[cifs-protocol] [REG:116111014921735 ] [MS-RPCE] epm_Map object uuid ignored?

[Obaid Farooqi]

Hi Andreas:
We have finished our investigation on your question. 
Windows maintains a list of ifuuid's with corresponding objuuid's in endpoint map. If the objuuid in map is null ( 00000000-0000-0000-0000-000000000000), the obj uuid sent by the client is disregarded. If ifuuid's match and the ifversion in map is greater than or equal to ifverion requested by the client, emp_map rpc succeeds. 

On the other hand, if the objuuid is not null in the map, both ifuuid and objuuid sent by the client must match for emp_map rpc to be successful. 

This is consistent with the flow chart in section 2.3.3.3, item "Endpoint Selection" in CAE Specification: DCE 1.1: Remote Procedure Call.

Please let me know if this does not answer your question. 
Also please let me know if you have any other question.

-----Original Message-----
From: Obaid Farooqi 
Sent: Monday, November 14, 2016 2:05 PM
To: Andreas Schneider <asn at samba.org>
Cc: cifs-protocol at lists.samba.org; MSSolve Case Email <casemail at microsoft.com>
Subject: RE: [REG:116111014921735 ] [MS-RPCE] epm_Map object uuid ignored?

Hi Andreas:
I am looking into it and will be in touch as soon as I have an answer.

Regards,
Obaid Farooqi
Escalation Engineer | Microsoft

Exceeding your expectations is my highest priority.  If you would like to provide feedback on your case you may contact my manager at ramagane at Microsoft dot com

-----Original Message-----
From: Andreas Schneider [mailto:asn at samba.org] 
Sent: Monday, November 14, 2016 9:14 AM
To: Obaid Farooqi <obaidf at microsoft.com>
Cc: cifs-protocol at lists.samba.org; MSSolve Case Email <casemail at microsoft.com>
Subject: Re: [REG:116111014921735 ] [MS-RPCE] epm_Map object uuid ignored?

On Friday, 11 November 2016 21:11:05 CET Obaid Farooqi wrote:
> Hi Andreas:
> Can you please upload a network capture of the problem to the workspace?

I've uploaded a capture of:

bin/rpcclient ncacn_ip_tcp:winsrv-dc02.earth.milkyway.site -UAdministrator %Secret007!
rpcclient $> epmmap iremotewinspool ncacn_ip_tcp
11111111-2222-3333-4444-555555555555
num_tower[1]
tower[0] ncacn_ip_tcp:192.168.100.10[49159,abstract_syntax=76f03f96-cdfd-44fc-
a22c-64950a001209/0x00000001]
rpcclient $>


to the file space.


	Andreas


-- 
Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             asn at samba.org
www.samba.org