[Samba] rpcclient adddriver problems 2.2.8a and 3rc4

daniel.jarboe at custserv.com daniel.jarboe at custserv.com
Mon Sep 22 15:15:56 GMT 2003


The command:

rpcclient -U jarboed -c 'adddriver "Windows NT x86" "RICOH Aficio 700
PS:RINH7PS5.DLL:RICNH703.PPD:RINH7PSU.DLL:RINH7PSU.HLP:NULL:RAW:RNH7kmUI
.DLL,RNH7PS.DLL,RNH7km.INI,RINH7PS5.NTF,RNH7Help.HLP,TrackID.DLL,TIFmtA.
DLL,TIBase64.DLL,TISHMEM.DLL,TICMD.EXE"' LINPS1

fails on 2.2.8a and 3rc4 (substituting server name appropriately in the
above command).

User jarboed is listed as a printer admin in smb.conf, the specified
files exist in the W32X86 directory of the path specified in the print$
share, and the driver/data/config/help/dependent files were determined
with rpcclient getdriver against the W2k print server.

On the 2.2.8a server, with debug level 3 I see:
Connecting to 10.176.137.7 at port 139
lsa_io_sec_qos: length c does not match size 8
cmd = adddriver "Windows NT x86" "RICOH Aficio 700
PS:RINH7PS5.DLL:RICNH703.PPD:RINH7PSU.DLL:RINH7PSU.HLP:NULL:RAW:RNH7kmUI
.DLL,RNH7PS.DLL,RNH7km.INI,RINH7PS5.NTF,RNH7Help.HLP,TrackID.DLL,TIFmtA.
DLL,TIBase64.DLL,TISHMEM.DLL,TICMD.EXE"
result was NT_STATUS_UNSUCCESSFUL

On the 3rc4, with debug level 3 I see:
Connecting to host=LINBETA
Connecting to 10.176.137.11 at port 445
Doing spnego session setup (blob length=58)
got OID=1 3 6 1 4 1 311 2 2 10
got principal=NONE
Got challenge flags:
Got NTLMSSP neg_flags=0x20810205
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x20000205
lsa_io_sec_qos: length c does not match size 8
result was DOS code 0x00000013

I don't know the importance of the "lsa_io_sec_qos: length c does not
match size 8" message in parse_lsa.c.

With debug level 5, I see another error: (3rc4) DOS code 0x00000013 and
(2.2.8a) WERR_BADFILE

bind_rpc_pipe: server pipe_name found: \PIPE\lsass
bind_rpc_pipe: accepted!
make_spoolss_q_addprinterdriver
000000 spoolss_io_q_addprinterdriver
    0000 server_name_ptr: 00000001
        0004 uni_max_len: 0000000a
        0008 undoc      : 00000000
        000c uni_str_len: 0000000a
        0010 buffer     : \.\.L.I.N.B.E.T.A...
    0024 info_level: 00000003
        0028 level: 00000003
        002c ptr: 00000001
            0030 cversion: 00000002
            0034 name: 00000001
            0038 environment: 00000001
            003c driverpath: 00000001
            0040 datafile: 00000001
            0044 configfile: 00000001
            0048 helpfile: 00000001
            004c monitorname: 00000000
            0050 defaultdatatype: 00000001
            0054 dependentfilessize: 00000002
            0058 dependentfiles: 00000001
                005c uni_max_len: 00000014
                0060 undoc      : 00000000
                0064 uni_str_len: 00000014
                0068 buffer     : R.I.C.O.H. .A.f.i.c.i.o. .7.0.0.
.P.S...
                0090 uni_max_len: 0000000f
                0094 undoc      : 00000000
                0098 uni_str_len: 0000000f
                009c buffer     : W.i.n.d.o.w.s. .N.T. .x.8.6...
                00bc uni_max_len: 0000000d
                00c0 undoc      : 00000000
                00c4 uni_str_len: 0000000d
                00c8 buffer     : R.I.N.H.7.P.S.5...D.L.L...
                00e4 uni_max_len: 0000000d
                00e8 undoc      : 00000000
                00ec uni_str_len: 0000000d
                00f0 buffer     : R.I.C.N.H.7.0.3...P.P.D...
                010c uni_max_len: 0000000d
                0110 undoc      : 00000000
                0114 uni_str_len: 0000000d
                0118 buffer     : R.I.N.H.7.P.S.U...D.L.L...
                0134 uni_max_len: 0000000d
                0138 undoc      : 00000000
                013c uni_str_len: 0000000d
                0140 buffer     : R.I.N.H.7.P.S.U...H.L.P...
                015c uni_max_len: 00000004
                0160 undoc      : 00000000
                0164 uni_str_len: 00000004
                0168 buffer     : R.A.W...
                0170 buf_len: 00000002
                0174 buffer: ....
create_rpc_request: opnum: 0x9 data_len: 0x190
000000 smb_io_rpc_hdr hdr
    0000 major     : 05
    0001 minor     : 00
    0002 pkt_type  : 00
    0003 flags     : 03
    0004 pack_type0: 10
    0005 pack_type1: 00
    0006 pack_type2: 00
    0007 pack_type3: 00
    0008 frag_len  : 0190
    000a auth_len  : 0000
    000c call_id   : 00000006
000010 smb_io_rpc_hdr_req hdr_req
    0010 alloc_hint: 00000180
    0014 context_id: 0000
    0016 opnum     : 0009
rpc_api_pipe: fnum:7215
size=482
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=51201
smb_tid=1
smb_pid=1852
smb_uid=100
smb_mid=13
smt_wct=16
smb_vwv[ 0]=    0 (0x0)
smb_vwv[ 1]=  400 (0x190)
smb_vwv[ 2]=    0 (0x0)
smb_vwv[ 3]= 4280 (0x10B8)
smb_vwv[ 4]=    0 (0x0)
smb_vwv[ 5]=    0 (0x0)
smb_vwv[ 6]=    0 (0x0)
smb_vwv[ 7]=    0 (0x0)
smb_vwv[ 8]=    0 (0x0)
smb_vwv[ 9]=    0 (0x0)
smb_vwv[10]=   82 (0x52)
smb_vwv[11]=  400 (0x190)
smb_vwv[12]=   82 (0x52)
smb_vwv[13]=    2 (0x2)
smb_vwv[14]=   38 (0x26)
smb_vwv[15]=29205 (0x7215)
smb_bcc=415
size=84
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=1852
smb_uid=100
smb_mid=13
smt_wct=10
smb_vwv[ 0]=    0 (0x0)
smb_vwv[ 1]=   28 (0x1C)
smb_vwv[ 2]=    0 (0x0)
smb_vwv[ 3]=    0 (0x0)
smb_vwv[ 4]=   56 (0x38)
smb_vwv[ 5]=    0 (0x0)
smb_vwv[ 6]=   28 (0x1C)
smb_vwv[ 7]=   56 (0x38)
smb_vwv[ 8]=    0 (0x0)
smb_vwv[ 9]=    0 (0x0)
smb_bcc=29
size=84
smb_com=0x25
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=1852
smb_uid=100
smb_mid=13
smt_wct=10
smb_vwv[ 0]=    0 (0x0)
smb_vwv[ 1]=   28 (0x1C)
smb_vwv[ 2]=    0 (0x0)
smb_vwv[ 3]=    0 (0x0)
smb_vwv[ 4]=   56 (0x38)
smb_vwv[ 5]=    0 (0x0)
smb_vwv[ 6]=   28 (0x1C)
smb_vwv[ 7]=   56 (0x38)
smb_vwv[ 8]=    0 (0x0)
smb_vwv[ 9]=    0 (0x0)
smb_bcc=29
rpc_check_hdr: rdata->data_size = 28
000000 smb_io_rpc_hdr rpc_hdr
    0000 major     : 05
    0001 minor     : 00
    0002 pkt_type  : 02
    0003 flags     : 03
    0004 pack_type0: 10
    0005 pack_type1: 00
    0006 pack_type2: 00
    0007 pack_type3: 00
    0008 frag_len  : 001c
    000a auth_len  : 0000
    000c call_id   : 00000006
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
    0010 alloc_hint: 00000004
    0014 context_id: 0000
    0016 cancel_ct : 00
    0017 reserved  : 00
rpc_api_pipe: len left: 0 smbtrans read: 28
000018 spoolss_io_r_addprinterdriver
    0018 status: DOS code 0x00000013
result was DOS code 0x00000013
size=35
smb_com=0x4
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=1852
smb_uid=100
smb_mid=14
smt_wct=0
smb_bcc=0

The 2.2.8a also seems to fail at the spoolss_io_r_addprinterdriver part:
rpc_api_pipe: len left: 0 smbtrans read: 28
000018 spoolss_io_r_addprinterdriver
    0018 status: WERR_BADFILE

Would smb.conf or anything else be helpful?  2.2.8a is running on RH 7.2
platform with the samba rpm rebuilt from the samba provided SRPM.  The
3rc4 is running with default RH samba rpms for RH EL3 AS as built by
RedHat (samba, samba-client, samba-common, etc).  Any ideas?

Thanks,
~ Daniel

-----------------------------------------------------------------------

This message is the property of Time Inc. or its affiliates. It may be
legally privileged and/or confidential and is intended only for the use
of the addressee(s). No addressee should forward, print, copy, or
otherwise reproduce this message in any manner that would allow it to be
viewed by any individual not originally listed as a recipient. If the
reader of this message is not the intended recipient, you are hereby
notified that any unauthorized disclosure, dissemination, distribution,
copying or the taking of any action in reliance on the information
herein is strictly prohibited. If you have received this communication
in error, please immediately notify the sender and delete this message.
Thank you.




More information about the samba mailing list