mirror of
https://github.com/samba-team/samba.git
synced 2024-12-25 23:21:54 +03:00
96e6adedcd
Fold the two 32 bit values logon_id_high and logon_id_low into a single 64 bit logon_id in netr_identity_info. This will be used to tie together winbind and SamLogon requests in audit logging. Summary of the of the Query and Response from Microsoft on it's usage. [REG:119013019612095] [MS-NRPC]: NETLOGON_LOGON_IDENTITY_INFO: Does the Reserved field have LogonId meaning? Questions: In NetrLogonSamLogonEx does the Reserved field (of NETLOGON_LOGON_IDENTITY_INFO) have LogonId meaning? What is a valid LogonID, and does have any audit usage? Samba is sending a constant "deadbeef" in hex and would like to understand any usage of this field. Response: The NRPC spec is accurate in defining the field as Reserved, and without protocol significance. In the header file in our source code, it is defined as LogonId and commented as such, but it’s effectively not used. This is probably why the API structure has that field name. It may have been intended as such but it’s not used. Samba will send a random value in this field. Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> |
||
|---|---|---|
| .. | ||
| atsvc.c | ||
| backupkey.c | ||
| cabinet.c | ||
| charset.c | ||
| clusapi.c | ||
| dfs.c | ||
| dfsblob.c | ||
| drsblobs.c | ||
| drsuapi.c | ||
| epmap.c | ||
| krb5pac.c | ||
| lsa.c | ||
| nbt.c | ||
| ndr.c | ||
| ndr.h | ||
| negoex.c | ||
| netlogon.c | ||
| ntlmssp.c | ||
| ntprinting.c | ||
| README | ||
| samr.c | ||
| spoolss.c | ||
| string.c | ||
| winreg.c | ||
| winspool.c | ||
| witness.c | ||
use
hexdump -v -e '12/1 "0x%02x, " "\n"' infile|outfile
to import ndr dumps
Or use gdb:
(gdb) b dump_printer
Breakpoint 1 at 0x49c92f: file ../source3/utils/net_printing.c, line 158.
(gdb) cond 1 strcmp(key_name, "s0bc") == 0
(gdb) run
Breakpoint 1, dump_printer (mem_ctx=0x700a20, key_name=0x11fb8f9 "s0bc", data=0x18f93d0 "H\032", length=1284, do_string_conversion=true) at ../source3/utils/net_printing.c:158
158 printf("found printer: %s\n", key_name);
-> Now use x/<length in byte>bx
(gdb) x/1284bx data
This prints data as hex values. 1284 is the length in byte (see the length
argument of the function). The b indicates byte.