Regarding retrieving user group membership using wbinfo.

[Hemanth Thummala]

I haven't found the corresponding log messages in either log.wb-* or smbd
logs.

In dcerpc_binding_handle_call_send() , I found this..

if (h->ops->do_ndr_print) {
h->ops->do_ndr_print(h, NDR_IN | NDR_SET_VALUES,
     state->r_ptr, state->call);
}

I think this is where we try to log the request contents. Same stuff is
there in recv call as well. But the contents not getting printed any where.
Also I found that dcerpc_bh_do_ndr_print() is defined in source4 path. I am
not sure if this can be used in samba 3.6.12+ stack. If not then there
could definitely be some problem in printing these request and responses.

Also I would like to know if there is a way to disable the encryption in
DCE-RPC communication, so that we can check the content from packet capture
it self.

Thanks,
Hemanth.



On Fri, Jun 6, 2014 at 1:13 AM, Volker Lendecke <Volker.Lendecke at sernet.de>
wrote:

> On Thu, Jun 05, 2014 at 09:58:56PM +0530, Hemanth Thummala wrote:
> > Yes. I have checked log.wb-* files. All I found is
> > "dcerpc_lsa_lookup_sids_generic" messages.
>
> Hmm. That's weird. A wbinfo -a should give you the info3
> struct in the log.wb-DOMAIN file with debuglevel 10.
>
> However, given that you are using Kerberos, similar info
> should be available from a smbd debug level 10 logfile.
>
> Volker
>
> --
> SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
> phone: +49-551-370000-0, fax: +49-551-370000-9
> AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
> http://www.sernet.de, mailto:kontakt at sernet.de
>