Unknown Spooler RPC

Jean Francois Micouleau Jean-Francois.Micouleau at dalalu.fr
Wed Mar 20 11:14:21 GMT 2002


On Wed, 20 Mar 2002, Steven French wrote:

> Does anyone know what spoolss RPC opnum 87 is?   Current Ethereal doesn't
> decode it and Samba faults on it.

added in W2K to remotely manage more printing and driver stuff. In fact
several new spoolss rpc functions have been added to W2K. I did start some
decoding work 3 or 4 months ago but didn't continue by lack of time and
interest. Some of them are *really* interesting to implement.

	J.F.


>
> Transmission Control Protocol, Src Port: 1140 (1140), Dst Port: netbios-ssn (139), Seq: 2865198546, Ack: 2056805189
> NetBIOS Session Service
> SMB (Server Message Block Protocol)
> SMB Pipe Protocol
> DCE RPC
>     Version: 5
>     Version (minor): 0
>     Packet type: Request (0x00)
>     Packet Flags: 0x03
>         .... ...1 = First Frag: Set
>         .... ..1. = Last Frag: Set
>         .... .0.. = Cancel Pending: Not set
>         .... 0... = Reserved: Not set
>         ...0 .... = Multiplex: Not set
>         ..0. .... = Did Not Execute: Not set
>         .0.. .... = Maybe: Not set
>         0... .... = Object: Not set
>     Data Representation: 10000000
>         Byte order: Little-endian (1)
>         Character: ASCII (0)
>         Floating-point: IEEE (0)
>     Frag Length: 1076
>     Auth Length: 0
>     Call ID: 13
>     Alloc hint: 1052
>     Context ID: 0
>     Opnum: 87
>
> 01 ac a2 00 d0  b7 1d e1 a1 08 00 45 00   .P,.¬¢.Ð ·.á¡..E.
> 0010  04 ac 70 8a 40 00 80 06  01 a5 c0 a8 01 64 c0 a8   .¬p. at ... .¥À¨.dÀ¨
> 0020  01 68 04 74 00 8b aa c7  7e da 7a 98 5c 05 50 18   .h.t..ªÇ ~Úz.\.P.
> 0030  fd 05 bb 95 00 00 00 00  04 80 ff 53 4d 42 25 00   ý.»..... ..ÿSMB%.
> 0040  00 00 00 18 07 48 00 00  00 00 00 00 00 00 00 00   .....H.. ........
> 0050  00 00 01 00 04 05 64 00  00 25 10 00 00 34 04 00   ......d. .%...4..
> 0060  00 30 16 00 00 00 00 00  00 00 00 00 00 00 00 4c   .0...... .......L
> 0070  00 34 04 4c 00 02 00 26  00 57 73 3d 04 5c 50 49   .4.L...& .Ws=.\PI
> 0080  50 45 5c 00 00 00 05 00  00 03 10 00 00 00 34 04   PE\..... ......4.
> 0090  00 00 0f 00 00 00 1c 04  00 00 00 00 57 00 90 e0   ........ ....W..à
> 00a0  0a 00 0b 00 00 00 00 00  00 00 0b 00 00 00 5c 00   ........ ......\.
> 00b0  5c 00 73 00 6d 00 66 00  68 00 6f 00 6d 00 65 00   \.s.m.f. h.o.m.e.
> 00c0  31 00 00 00 00 00 b0 e0  0a 00 e8 03 00 00 00 00   1.....°à ..è.....
> 00d0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ........ ........
> 00e0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ........ ........
> 00f0  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00   ........ ........
>
> I got this error when experimenting with/testing adding printers vs. 2.2.3a
> vs the Windows 2000 command line printer administration tool.  Before
> adding the printer driver remotely to Samba, I tried the command:
>       rundll32 printui.dll,PrintUIEntry /o /c\\smfhome1 /ge
>
> Which according to the help should list the per machine printer connections
> to a remote server (Samba 2.2.3a or Head in this case).  The tool is an
> interesting one.  See help below:
>
> Usage: rundll32 printui.dll,PrintUIEntry [options] [@commandfile]
>    /c[name] unc machine name if the action is on a remote machine
>    /ge enum per machine printer connections
>    /o display printer queue view"
> (lots more options) etc.   and
>
> Other interesting examples that are listed in this tool are:
>    Enumerate per machine printer connections:
> rundll32 printui.dll,PrintUIEntry /ge /c\\machine
>    Add printer driver using inf:
> rundll32 printui.dll,PrintUIEntry /ia /c\\machine /m "AGFA-AccuSet v52.3"
> /h "Intel" /v "Windows 2000 or XP" /f %windir%\inf\ntprint.inf
>    Add printer driver using inf:
> rundll32 printui.dll,PrintUIEntry /ia /K /c\\machine /m "AGFA-AccuSet
> v52.3" /h "Windows NT x86" /v 3
>    Remove printer driver:
> rundll32 printui.dll,PrintUIEntry /dd /c\\machine /m "AGFA-AccuSet v52.3"
> /h "Intel" /v "Windows 2000 or XP"
>    Remove printer driver:
> rundll32 printui.dll,PrintUIEntry /dd /K /c\\machine /m "AGFA-AccuSet
> v52.3" /h "Windows NT x86" /v 3
>    Set printer as default:
> rundll32 printui.dll,PrintUIEntry /y /n "printer"
> etc.
>
>
> Steve French
> Senior Software Engineer
> Linux Technology Center - IBM Austin
> phone: 512-838-2294
> email: sfrench at us.ibm.com
>
>
>





More information about the samba-technical mailing list