« Return to Thread: [Samba4][Patch]: padding dcerpc faults packets

Re: [Samba4][Patch]: padding dcerpc faults packets

by Volker Lendecke :: Rate this Message:

Reply to Author | View in Thread

On Tue, May 13, 2008 at 05:33:34PM +0200, Stefan (metze) Metzmacher wrote:

> hi Julien,
> > Samba4 (after calculation) sends the dcerpc fault with a fraglen set to
> > 28 bytes - which is the correct size - while Exchange appends 4 padding
> > bytes set to 0 and set the fraglen to 32 bytes. I can send some captures
> > if needed.
>
> NT4 also sends 32 bytes for the not supported
> LsarQueryInformationPolicy2
>
> And w2k3 also replies with 32 byte with DCERPC_FAULT_ACCESS_DENIED
> when I try DRSUAPI over ncacn_np.
>
> So I think it's better when we always send 32 byte too.
I wonder where you find this in the protocol docs ;-)

Volker


attachment0 (196 bytes) Download Attachment

 « Return to Thread: [Samba4][Patch]: padding dcerpc faults packets

LightInTheBox - Buy quality products at wholesale price