[PATCH 1/2] Set os attribute and version during domain join
Andrew Bartlett
abartlet at samba.org
Mon Mar 26 06:03:57 GMT 2007
On Thu, 2007-03-22 at 10:29 -0700, Matthew Geddes wrote:
> Luke Howard wrote:
> >> Luke, I don't see any places in our IDL for this RPC that
> >> the AD DC would get the information from. Care to
> >> expand a little? Are you saying that NetrLogonGetDomainInfo()
> >> is the trigger that causes the DC to update the attribbutes
> >> but not necessarily is where the AD DC gets the values from?
> >>
> >
> > I haven't studied this closely, but if you look at:
> >
> > http://viewcvs.samba.org/cgi-bin/viewcvs.cgi/branches/SAMBA_4_0/source/librpc/idl/netlogon.idl?rev=21403&view=markup
> >
> > there is a "product" field in netr_DomainQuery1. I'm not sure
> > where the version and service pack comes from though. Time to
> > study some packet traces!
>
> Looking at my NT 4.0 Member -> 2K3 DC traces during the period that sees
> the fields updated in Active Directory, I don't see any
> NetrLogonGetDomainInfo requests at all. The only stuff I see over the
> \netlogon pipe is:
>
> - NetrServerReqChallenge
> - NetrServerAuthenticate2
This is the call that sets the NT4 flag. If you don't set a magic bit
in the negotiated options here, you are listed as NT4.
> - NetrServerPasswordSet
> - NetrLogonSamLogon
>
> The \lsarpc pipe gets:
>
> - LsarOpenPolicy2
> - LsarEnumerateTrustedDomains
> - LsarClose
>
> I've put the captures up here:
>
> http://www.augment-it.com/packets/
>
> The entry in Active Directory changes during the second capture.
>
> thx,
> Matt
>
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Red Hat Inc. http://redhat.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20070326/f43b2887/attachment.bin
More information about the samba-technical
mailing list