bug in net command error reporting

Steve French smfrench at gmail.com
Thu Oct 18 15:17:06 GMT 2007


In exploring some password expired and account expired errors, I tried
to list users on a server with the net command and noticed that when
the account authenticated in SessionSetup as guest, net was not
returning an error (just an empty list) when doing "net rpc user" and
"net rap user" to list users in the domain (similarly when getting
information on a particular user).

Looking at the wireshark trace:

net was not reporting the STATUS_ACCESS_DENIED on SamrGetGroupsForUser
(for "./net rpc user") or SamrQueryDisplayInformation (for "./net rpc
user info username")
-- 
Thanks,

Steve


More information about the samba-technical mailing list