[cifs-protocol] MS-PAR and MS-RPRN Issue with SPLCLIENT_INFO Bulid number rejection

[Justin Stephenson]

Hello,

I would like to ask for clarification on the rejection criteria used for
the client information fields provided in the RpcAsyncOpenPrinter method,
and specifically the dwBuildNum value.

Testing against Windows Server 2016 this RpcAsyncOpenPrinter method returns
Access Denied when SPL_CLIENT_INFO buildnum value, as part of pClientInfo,
is a value less than 6000(Windows Vista and Windows Server 2008). Higher
advertised OS values greater than 6000 successfully open a printer handle.
I have attached working and non-working packet captures taken for evidence
of this with the build number used in the filename.

The following statement on MS-RPRN page 396/415 seems incorrect, or
requires further clarification.


*Windows does not use the following members: pUserName,dwBuildNum,
dwMajorVersion, dwMinorVersion, and wProcessorArchitecture.*

Thank you.

Kind regards,
Justin Stephenson
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20180823/d0744e38/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: captures.tar.gz
Type: application/gzip
Size: 217740 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20180823/d0744e38/captures.tar-0001.gz>