« Return to Thread: [Samba4][Patch]: padding dcerpc faults packets

Re: [Samba4][Patch]: padding dcerpc faults packets

by Stefan (metze) Metzmacher :: Rate this Message:

Reply to Author | View in Thread

hi Julien,
> Samba4 (after calculation) sends the dcerpc fault with a fraglen set to
> 28 bytes - which is the correct size - while Exchange appends 4 padding
> bytes set to 0 and set the fraglen to 32 bytes. I can send some captures
> if needed.

NT4 also sends 32 bytes for the not supported
LsarQueryInformationPolicy2

And w2k3 also replies with 32 byte with DCERPC_FAULT_ACCESS_DENIED
when I try DRSUAPI over ncacn_np.

So I think it's better when we always send 32 byte too.

metze



signature.asc (257 bytes) Download Attachment

 « Return to Thread: [Samba4][Patch]: padding dcerpc faults packets

LightInTheBox - Buy quality products at wholesale price