[PATCH 1/2] Set os attribute and version during domain join

[Matthew Geddes]

Luke Howard wrote:
>> Luke, I don't see any places in our IDL for this RPC that
>> the AD DC would get the information from.  Care to
>> expand a little?  Are you saying that NetrLogonGetDomainInfo()
>> is the trigger that causes the DC to update the attribbutes
>> but not necessarily is where the AD DC gets the values from?
>>     
>
> I haven't studied this closely, but if you look at:
>
> http://viewcvs.samba.org/cgi-bin/viewcvs.cgi/branches/SAMBA_4_0/source/librpc/idl/netlogon.idl?rev=21403&view=markup
>
> there is a "product" field in netr_DomainQuery1. I'm not sure
> where the version and service pack comes from though. Time to
> study some packet traces!

Looking at my NT 4.0 Member -> 2K3 DC traces during the period that sees 
the fields updated in Active Directory, I don't see any 
NetrLogonGetDomainInfo requests at all. The only stuff I see over the 
\netlogon pipe is:

   - NetrServerReqChallenge
   - NetrServerAuthenticate2
   - NetrServerPasswordSet
   - NetrLogonSamLogon

The \lsarpc pipe gets:

   - LsarOpenPolicy2
   - LsarEnumerateTrustedDomains
   - LsarClose

I've put the captures up here:

     http://www.augment-it.com/packets/

The entry in Active Directory changes during the second capture.

thx,
Matt