Login process fails

[Andrew Tridgell]

> The "NT blue-screen" problem seems to have appeared at the autoconf
> merge.

I doubt it was the autoconf merge that broke it. It didn't touch that
stuff. 

> NT appears to crash upon Samba's reply to its TRANSACT2_QFILEINFO
> (SMB_QUERY_FILE_STREAM_INFO) request, although it is possible that
> this is because of an earlier problem.
> 
> Indeed there is an obvious problem with the TRANSACT2_QFILEINFO code
> (the filename copied into the packet is the full path while the
> datasize is only increased by the length of the filename part).

yikes, that is a silly error. I've just committed a fix.

> However in my experience NT still crashes even when this is fixed
> (please feel free to try this as I may have made a mistake).

exactly what do you have to do to reproduce this crash? nt domain
logons seems to work for me so it isn't that.

> Packet sniffing shows that NT replies quite differently (its reply is
> below); indeed the fields don't seem to correspond to those in the
> Samba code.
> 
> (first part is PacketBoy's header)
> 000 54 52 53 4E 49 46 46 20 64 61 74 61 20 20 20 20 TRSNIFF data    
> 010 1A 01 00 12 00 00 00 03 00 09 00 13 AF FF 24 04 ..............$.
> 020 01 01 04 00 00 00 00 00 00 04 00 AA 00 00 00 82 ................
> 030 90 0F 0E 00 00 9C 00 00 1C 00 00 00 00 00 40 33 .............. at 3
> 040 98 CE 44 48 54 E8 25 BB 84 08 00 45 00 00 8E 0E ..DHT.%....E....
> 050 3A 40 00 80 06 DD 2A 81 5E 86 25 81 5E 86 23 00 :@....*.^.%.^.#.
> 060 8B 04 0F 00 55 B6 12 00 16 84 18 50 18 21 6C 44 ....U......P.!lD
> 070 53 00 00 00 00 00 62 FF 53 4D 42 32 00 00 00 00 S.....b.SMB2....
> 080 98 03 80 67 80 00 00 00 00 00 00 00 00 00 00 00 ...g............
> 090 08 80 ED 00 08 C0 11 0A 02 00 26 00 00 00 02 00 ..........&.....
> 0a0 38 00 00 00 26 00 3C 00 00 00 00 00 2B 00 00 00 8...&.<.....+...
> 0b0 00 00 01 00 00 00 00 0E 00 00 00 00 70 02 00 00 ............p...
> 0c0 00 00 00 00 70 02 00 00 00 00 00 3A 00 3A 00 24 ....p......:.:.$
> 0d0 00 44 00 41 00 54 00 41 00 03 00 00 00 00 00    .D.A.T.A.......

I'd prefer a raw tcpdump packet or a netmon capture ... I'm getting too
old to stare at hexdumps! especially trans2 dumps, as they are
particularly complex (two dumps can look quite different but actually
be the same).