hi Julien,
> Samba4 (after calculation) sends the dcerpc fault with a fraglen set to
> 28 bytes - which is the correct size - while Exchange appends 4 padding
> bytes set to 0 and set the fraglen to 32 bytes. I can send some captures
> if needed.
NT4 also sends 32 bytes for the not supported
LsarQueryInformationPolicy2
And w2k3 also replies with 32 byte with DCERPC_FAULT_ACCESS_DENIED
when I try DRSUAPI over ncacn_np.
So I think it's better when we always send 32 byte too.
metze