samr operation 0x31.

[William Jojo]

Does anyone know what Citrix might be trying to do with this samr op 0x31?


[2007/01/15 09:29:15, 5] rpc_parse/parse_prs.c:prs_uint8(615)
      0017 reserved  : 00
[2007/01/15 09:29:15, 5] rpc_parse/parse_prs.c:prs_debug(84)
  000018 smb_io_rpc_hdr_fault fault
[2007/01/15 09:29:15, 5] rpc_parse/parse_prs.c:prs_dcerpc_status(793)
      0018 status  : DCERPC_FAULT_OP_RNG_ERROR
[2007/01/15 09:29:15, 5] rpc_parse/parse_prs.c:prs_uint32(704)
      001c reserved: 00000000
[2007/01/15 09:29:15, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
[2007/01/15 09:29:15, 5] rpc_parse/parse_prs.c:prs_uint16(675)
      0004 context_id: 0000
[2007/01/15 09:29:15, 5] rpc_parse/parse_prs.c:prs_uint16(675)
      0006 opnum     : 0031
[2007/01/15 09:29:15, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(529)
  free_pipe_context: destroying talloc pool of size 0
[2007/01/15 09:29:15, 5] rpc_server/srv_pipe.c:api_pipe_request(2223)
  Requested \PIPE\samr
[2007/01/15 09:29:15, 4] rpc_server/srv_pipe.c:api_rpcTNP(2258)
  api_rpcTNP: samr op 0x31 - unknown
[2007/01/15 09:29:15, 5] rpc_parse/parse_prs.c:prs_debug(84)
  000000 smb_io_rpc_hdr


We are getting a 0x80000001 (not implemented) when we enumerate groups and
users in Citrix joined to a Samba 3.0.23d domain. Windows enumerates fine.
Citrix enumerates the groups then trips over itself on the users  with this
operation.

Any thoughts?


Cheers,

Bill