[PATCH 1/2] Set os attribute and version during domain join

Andrew Bartlett abartlet at samba.org
Mon Mar 26 06:03:57 GMT 2007


On Thu, 2007-03-22 at 10:29 -0700, Matthew Geddes wrote:
> Luke Howard wrote:
> >> Luke, I don't see any places in our IDL for this RPC that
> >> the AD DC would get the information from.  Care to
> >> expand a little?  Are you saying that NetrLogonGetDomainInfo()
> >> is the trigger that causes the DC to update the attribbutes
> >> but not necessarily is where the AD DC gets the values from?
> >>     
> >
> > I haven't studied this closely, but if you look at:
> >
> > http://viewcvs.samba.org/cgi-bin/viewcvs.cgi/branches/SAMBA_4_0/source/librpc/idl/netlogon.idl?rev=21403&view=markup
> >
> > there is a "product" field in netr_DomainQuery1. I'm not sure
> > where the version and service pack comes from though. Time to
> > study some packet traces!
> 
> Looking at my NT 4.0 Member -> 2K3 DC traces during the period that sees 
> the fields updated in Active Directory, I don't see any 
> NetrLogonGetDomainInfo requests at all. The only stuff I see over the 
> \netlogon pipe is:
> 
>    - NetrServerReqChallenge
>    - NetrServerAuthenticate2

This is the call that sets the NT4 flag.  If you don't set a magic bit
in the negotiated options here, you are listed as NT4. 

>    - NetrServerPasswordSet
>    - NetrLogonSamLogon
> 
> The \lsarpc pipe gets:
> 
>    - LsarOpenPolicy2
>    - LsarEnumerateTrustedDomains
>    - LsarClose
> 
> I've put the captures up here:
> 
>      http://www.augment-it.com/packets/
> 
> The entry in Active Directory changes during the second capture.
> 
> thx,
> Matt
> 
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20070326/f43b2887/attachment.bin


More information about the samba-technical mailing list