samr_open_group no supported

[Andrew Bartlett]

On Sat, 2003-02-01 at 09:25, Xyster ! wrote:
> Hi All,
> 
> I need some information from one of you expert Samba developers out there. I 
> wrote a little tool for listing users, groups, and group membership on 
> Windows servers using MSRPC calls. It works against Windows NT and 2000 
> machines, but not against a Samba server. Here's why:
> 
> To list global groups, I perform a samrQueryDisplayInfo call, with level 3 
> (for groups). To get the members of each group I perform a samrOpenGroup 
> followed by a samrQueryGroupMembers call.
> 
> To list local and built-in groups, I first perform an OpenDomain call with 
> either the special built-in domain sid or the server's domain sid. I follow 
> this up with a samrEnumDomainAliases call to get the groups/aliases. Then 
> for each group I do a samrOpenAlias followed by a samrGetAliasMembers query.
> 
> The tool works fine against Windows NT and Windows 2000 machines. However, 
> when I try it against my Samba server I get a STATUS_NOT_IMPLEMENTED error 
> as a response to my samrOpenGroup request. Examining the Samba source code 
> revealed that this SAMR request is indeed not implemented. Any reason why 
> not? Is there a better, or more recommended way, of obtaining the global 
> groups?

Samba's group support only really started to anywhere in Samba 3.0, with
the 'group mapping' code being added.  

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20030201/21ebd58c/attachment.bin