NetUserModalsGet call to samba 2.2.2 fails

[Tyler, Ross E]

i think these netmon capture files will be more helpful than my last ones.

they are the (proper) (_samr_query_dom_info 5 equivalent) responses from
microsoft windows machines.
there is a single packet (response) in each file.
the files are named for the machine:

    BCW03 - windows 2000 professional
    IRD - windows 2000 domain server for domain ird.cv.ful.us.ray.com
    ZFUAA748584 - windows NT4 workstation

if i read the samba code right, there should be a SAM_UNK_INFO_5 that
contains something like:

    uint32 unknown_0;    /* ? */
    uint32 unknown_1;    /* ? */
    uint32 unknown_2;    /* length (excluding terminator) of name + 1 ? */

    uint32 unknown_3;    /* 0 ? */
    uint32 unknown_4;    /* length (excluding terminator) of name ? */
    UNISTR2 uni_server;

there are 20 bytes of unknown_* (to me),
then a unicode string of the (machine's netbios?) name (null terminated?)
then some zeros.

so far, i have tried a zero filled

    uint8 padding[16];

for SAM_UNK_INFO_5.
my windows 2000 professional machine accepts this as an empty string for
the name.

i need your help in defining SAM_UNK_INFO_5 exactly - with a variable
length string.
how do i allocate the value for this string?
where to i get the value for this string?
is it the netbios name?
do you have any idea what unknown_0 and unknown_1 should be?
i think that unknown_2 - 4 may be part of the serialization of UNISTR2
and, so, may not be needed.
is this right?

thanks for your help - i really appreciate it!




"Gerald (Jerry) Carter" wrote:

> On Thu, 15 Nov 2001, Tyler, Ross E wrote:
>
> > yes, i guess i understood that.
>
> I figured :)
>
> > my implied questions were "why not", "when" and "how can i help".
>
> We just haven't needed it yet is the most likely answer.
>
> > this type of call is something that i commonly do in my windows
> > networking code for various reasons. some of which are:
> >
> >     programmatically joining an NT domain
> >
> >     programmatically purging locally cached profiles from NT domain
> > accounts that have been removed.
> >
> > thanks for you quick response and your support!
>
> It should be pretty easy to implement.  Run you win32 client
> against smbd (set "log level = 10" and "debug timestamp = no")
> Then figure out the structure.  Probably best grab a Netmon
> capture of this as well.
>
> Implemented support will probably be cut-n-paste stuff for
> the most part.
>
> If you need help, let me know.
>
>  ---------------------------------------------------------------------
>  www.samba.org              SAMBA  Team             jerry_at_samba.org
>  www.plainjoe.org                                jerry_at_plainjoe.org
>  http://www.hp.com        Hewlett-Packard
>  --"I never saved anything for the swim back." Ethan Hawk in Gattaca--
-------------- next part --------------
GMBU 
 ?   
   ( F
                                                                                                     G|K     ?   ?    `?o? ?+??  E  ??@ ?r
4
??~a
?????Mri?PC?2?     |?SMB%    ??             ? ?
  D     8   D 8     E      D      ,       ?  ?w
  ??           B C W 0 3      ?                                                                                                                                                       
-------------- next part --------------
GMBU 
 ?   
   ?B
                                                                                                     ?tD     ?   ?    `?o? P?m?> E  ??i@ ??Q?~?~a
??2?G??PC??X     x?SMB%    ??            
??
0?
  @     8   @ 8     A      @      (       ??  o]  0?           I R D       ?                                                                                                           
-------------- next part --------------
GMBU 
 ?   
 8 5 * R
                                                                                                     ?)?     ?   ?    `?o? ?Y?? E  ?GD@ ??7?~@?~a ?~ 5
?/YP??c     ??SMB%    ??             ? ?
  P     8   P 8     Q .    P      8       ?W  ??  ??           Z F U A A 7 4 8 5 8 4       ?