Win9x returning truncated user list when talking to a Samba DC

[Jeremy Allison]

I've tracked down the problem with Win9x showing truncated
user lists when used against a Samba DC to add user level
security control.

It's actually a client bug, and I'm now trying to find exactly
what feature of Samba causes the client to behave differently
when talking to Samba than it does when talking to Win2k.

The problem lies when the SMBtrans call is made to talk to
the \\PIPE\SAMR pipe. The mdcnt value (vwv3) is set to 0x200
(512 bytes) when talking to a Samba server. When talking to
a Win2k server this is set to 3272. This causes the (idential)
user data to be packaged differently when being returned to
the Win9x client, and the client stops asking for the user
list after enumeration returns.

I've tried changing the negprot buffer values in 2.2 CVS and
HEAD to a lower value, but no dice.

Does anyone have any good guesses as to what causes the client
to use a different mdrcnt in a SMBtrans call ?

Jeremy.