[Samba] fail to access eventlog in windows2008 R2 by rpcclient

Volker Lendecke Volker.Lendecke at SerNet.DE
Sat Aug 6 11:09:01 MDT 2011


On Tue, Aug 02, 2011 at 02:43:09PM -0700, Shangwei Duan wrote:
> Hi Guys,
> 
> I fail to access eventlog in windows2008 R2 by rpcclient(version 3.4.7) .
> The command is flows:
> 
> rpcclient -U administrator xxx.xxx.xxx.xxx
> rpcclient $> eventlog_readlog security
> >ndr_pull_error(17): not all bytes consumed ofs[560] size[572]
> result was NT_STATUS_PORT_MESSAGE_TOO_LONG
> 
> I also found the same question at the link "
> http://lists.samba.org/archive/samba/2010-July/157387.html"
> 
> But I can not find any suggestions or answers.
> 
> Does anybody know this or give me some hints?

Just tried with master, worked fine. Can you try with
3.5.11? The RPC infrastructure has been changed
significantly.

Thanks,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen


More information about the samba mailing list