Commit Graph

106 Commits

Author SHA1 Message Date
Tim Potter 1703faf299 Remove hf argument to common routines for dissecting domain sids. Most
of the callers passed -1 for this parameter anyway.

svn path=/trunk/; revision=10919
2004-05-19 04:52:31 +00:00
Ronnie Sahlberg 37234f5ffd more deltatypes
svn path=/trunk/; revision=10748
2004-05-01 00:34:28 +00:00
Ronnie Sahlberg 392239fd86 prettified a few netlogon calls and populate col_info with account names
svn path=/trunk/; revision=10679
2004-04-23 23:56:58 +00:00
Ronnie Sahlberg 7836c1f62e update to netlogon to dissect the timestamps in VALIDATION_UAS_INFO
update to dcerpc time_t dissector to print the string "No time specified" when the seconds field is 0xffffffff

svn path=/trunk/; revision=10678
2004-04-23 23:31:52 +00:00
Ronnie Sahlberg 51299a56a3 update to netlogon, now also decode the delete user/group/alias
deltas.

svn path=/trunk/; revision=10677
2004-04-23 22:34:15 +00:00
Ronnie Sahlberg 1b4fc1c4ce update to netlogon to show DsrGetDcNameEx2() Client account name, domain name and site name
svn path=/trunk/; revision=10656
2004-04-21 12:08:41 +00:00
Ronnie Sahlberg cff307f012 update to netlogon: make it dissect all the bits of the UserAccountControl flags field in the pac structure and elsewhere in netlogon
svn path=/trunk/; revision=10565
2004-04-08 10:21:10 +00:00
Ronnie Sahlberg c8848d4caa dissection of netlogon userflags in tha pac structure and elsewhere
svn path=/trunk/; revision=10564
2004-04-08 09:34:47 +00:00
Ronnie Sahlberg faaafa05f2 dissect group attributes for the pac structure and other places in netlogon
svn path=/trunk/; revision=10563
2004-04-08 09:17:16 +00:00
Ronnie Sahlberg bc21be8c2b Kerberos contain a structure that is VERY similar to VALIDATE_SAM_INFO2
so declare it here.
This substructure in the w2k kerberos PAC structure is called PAC_LOGIN_INFO
and might actually exist inside the netlogon interface as well?

svn path=/trunk/; revision=10322
2004-03-05 23:12:10 +00:00
Jörg Mayer 3e2633a0f4 char *drep -> guint8 *drep
svn path=/trunk/; revision=9735
2004-01-19 20:10:37 +00:00
Tim Potter d084a16f92 In a secure channel verifier, sometimes the nonce isn't present; not sure
why this is so.

svn path=/trunk/; revision=8856
2003-11-02 03:55:32 +00:00
Guy Harris 1052d5a2b5 Use -1 rather than "tvb_length(tvb)" to specify a length that covers the
entire tvbuff for Secure Channel bind credentials.

Use -1 rather than 0 to have the top-level item for Secure Channel ACK
credentials cover the entire tvbuff.

svn path=/trunk/; revision=8756
2003-10-23 04:57:46 +00:00
Ronnie Sahlberg a4df7ea327 From JBM update some function names in Netlogon
svn path=/trunk/; revision=8556
2003-09-27 23:48:04 +00:00
Tim Potter 44b4308791 A bunch of fixups for the NETLOGON sam database synchronisation
dissector:

  - some rids marked as user are actually groups

  - decorate some strings higher up in the tree

  - dissect the delta id as such and add value string text item

svn path=/trunk/; revision=8510
2003-09-22 00:59:47 +00:00
Ronnie Sahlberg bec5704f64 Update to netlogon
make it decode DsrGetDCSiteCoverage replies properly

svn path=/trunk/; revision=8463
2003-09-12 11:13:17 +00:00
Ronnie Sahlberg 3afd5dfa7c upadtes to NETLOGON
svn path=/trunk/; revision=8462
2003-09-12 10:32:21 +00:00
Ronnie Sahlberg a776f2d3d9 From Jean-Baptiste Marchand
update of the type of pointer used for DsrGetSiteName reply packets

svn path=/trunk/; revision=8456
2003-09-11 13:24:19 +00:00
Ronnie Sahlberg 700251d16d NETLOGON/DsrDeregisterDNSHostRecords :
The dns_host field is a REF pointer to a unicode string.
NOT a Unique pointer.

Update iethereal so that this packet is dissected properly

svn path=/trunk/; revision=8446
2003-09-10 09:49:31 +00:00
Tim Potter 4ccbfa3edc Guy suggested that the dcerpc opnum value_string code could be simplified
somewhat.  Now the dynamic initialisation of the value_string is contained
in the value_string_from_subdissectors() function instead of being
distributed amongst the dcerpc dissectors.

svn path=/trunk/; revision=8123
2003-08-04 02:49:04 +00:00
Guy Harris 44799be397 I've seen captures with Netlogon Secure Channel security with a
protection level of DCE_C_AUTHN_LEVEL_PKT_INTEGRITY.

svn path=/trunk/; revision=8041
2003-07-18 05:48:39 +00:00
Guy Harris 8e9693aa50 Capitalize "C" in "Channel" in "Secure Channel", as is done elsewhere.
svn path=/trunk/; revision=8040
2003-07-18 05:19:42 +00:00
Tim Potter 8b89bd76ee Move all DCERPC authentication/encryption dissection code from packet-dcerpc.c
to the dissector that handles the particular authentication flavour.  This
gets rid of a couple of ugly switch statements and allows other authentication
modules to be written easily.

svn path=/trunk/; revision=8026
2003-07-16 04:20:33 +00:00
Tim Potter 623f5b865d Dynamically create DCERPC opnum value_strings from the subdissector
list rather than duplicating this information in the dissector.  Some
of the opnum strings were starting to get out of date as developers
forgot to update the information in both places.

svn path=/trunk/; revision=7936
2003-06-26 04:30:31 +00:00
Tim Potter 4eaff6dc18 Dissect a netlogon credential as eight FT_BYTES rather than two guint32
quantities.

svn path=/trunk/; revision=7768
2003-06-02 03:53:32 +00:00
Ronnie Sahlberg 1cedc6aab9 Change the interface to dissect_ndr_nt_PSID to take one extra parameter which if !=-1 is a hf field for the sid to use instead of the default smb.sid one.
svn path=/trunk/; revision=7706
2003-05-21 09:34:54 +00:00
Tim Potter 2ef11527a3 Move dissection of NETLOGON secure channel auth verifier into
packet-dcerpc-netlogon.c

svn path=/trunk/; revision=7670
2003-05-15 04:58:53 +00:00
Tim Potter f6e347bbc5 Dissect authentication data for netlogon secure channel bind and bind acks.
svn path=/trunk/; revision=7667
2003-05-15 02:01:39 +00:00
Tim Potter 27607d89db Dissect a ntlmv2 response if found in a samlogon request.
svn path=/trunk/; revision=7657
2003-05-09 01:46:13 +00:00
Ronnie Sahlberg bca3332efd Not all strings in MS interfaces are unicode.
Rename cb_str_postprocess which handles unicode strings to cb_wstr_postprocess.

Add cb_str_postprocess which handles ASCII strings

svn path=/trunk/; revision=7572
2003-04-27 00:49:14 +00:00
Tim Potter b99ad855f0 Display user name in COL_INFO for ServerAuthenticate2 request.
Add note about putting DOMAIN\Username in COL_INFO when dissecting
LOGIN_IDENTITY_INFO (part of SamLogon RPC).

svn path=/trunk/; revision=7147
2003-02-14 06:17:20 +00:00
Guy Harris d06e3c57bd Decorate the top-level item for a PRIV_NAME_ARRAY with the privilege
names.

svn path=/trunk/; revision=7118
2003-02-10 23:45:56 +00:00
Guy Harris 64991e3fa1 Have "dissect_ndr_counted_string()" add 2, not 1, to its argument, as it
adds 2 levels to the tree.  Fix calls to it not to add 1 for that level.

The NT and LM challenges in a NETWORK_INFO structure are opaque arrays
of bytes, not Unicode strings; dissect them as such, adding a new
routine "dissect_ndr_counted_byte_array()" for that purpose.

Get rid of some extra colons in names - the colon is put there if a
string is appended, so putting a colon in there explicitly gives double
colons.

Decorate some higher-level tree nodes with strings.

svn path=/trunk/; revision=7107
2003-02-08 09:41:44 +00:00
Guy Harris e9f0f4b74f Rename "dissect_ndr_char_string()" and "dissect_ndr_wchar_string()" to
"dissect_ndr_char_cvstring()" and "dissect_ndr_wchar_cvstring()", to
indicate that they're for conformant varying strings.

Rename "dissect_ndr_character_array()" to "dissect_ndr_cvstring()", to
indicate that it's for conformant varying strings.

svn path=/trunk/; revision=7096
2003-02-07 22:44:54 +00:00
Guy Harris 9a348d5736 Rename "dissect_ndr_char_array" and "disect_ndr_wchar_array" to
"dissect_ndr_char_string" and "dissect_ndr_wchar_string", to make it
clearer what it does.

svn path=/trunk/; revision=7095
2003-02-07 22:31:32 +00:00
Tim Potter 6b8a47a691 Convert to new DCERPC string handling functions. There are still some
cosmetic bugs to work out though.

svn path=/trunk/; revision=7069
2003-02-03 02:14:01 +00:00
Guy Harris 000f03fdca Decorate a PRIV_NAME_ARRAY with the privilege names in the array.
svn path=/trunk/; revision=7063
2003-01-31 07:37:12 +00:00
Guy Harris 2c598fa0ec Decorate a DELTA_DOMAIN structure's top-level item with the domain name.
svn path=/trunk/; revision=7062
2003-01-31 07:32:41 +00:00
Guy Harris 5dc66497b7 Generalize "cb_str_postprocess()" to allow the string to be appended to
items N levels up from the item being processed, and use that to
decorate the tree as it was decorated before.

svn path=/trunk/; revision=7043
2003-01-30 08:19:39 +00:00
Tim Potter 497042348b Display random useful tidbits in COL_INFO.
svn path=/trunk/; revision=7040
2003-01-30 05:38:56 +00:00
Tim Potter 1d6acba45c Convert dissector to callback based version of dissect_ndr_pointer().
Strings that used to call with levels != -1 should call the
callback helper which will append the string to the pointer item.

svn path=/trunk/; revision=7017
2003-01-28 06:39:41 +00:00
Tim Potter a476a8b4c3 Add value_string for secure channel type used in ServerAuthenticate2.
svn path=/trunk/; revision=6920
2003-01-14 05:09:16 +00:00
Ronnie Sahlberg eb6384af0d Added some flags and value_Strings for netlogon
svn path=/trunk/; revision=6706
2002-11-30 08:34:28 +00:00
Ronnie Sahlberg f896a13596 From Like H, update to NETLOGON. DSROLEGETPRIMARYDOMAININFO is actually ENUMERATETRUSTEDDOMAINS
svn path=/trunk/; revision=6705
2002-11-29 23:20:41 +00:00
Ronnie Sahlberg b0e0a37e9e From Luke H. Update to GetDomainInfo
svn path=/trunk/; revision=6704
2002-11-29 22:35:54 +00:00
Ronnie Sahlberg cee6c74482 Bugfix.
Previous checkin did not make sense. We can not have a union without having the
union case value stored as a separate variable or else the receiving side will
not know how to decode the packet.
Therefore it can not be a union at all. Instead we have a REF pointer to a ulong
holding the number of elements, then a unique pointer to a conformant array
of structures.

Thus, the content of the reply packet for function_24 as well as
dsrolegetprimarydomaininfo can not be

 [ref] PRIMARY_DOMAIN_INFO_EX_UNION *pdi;

but instead MUST be
 long num_entries;
 [unique][size_is(num_entries)] PRIMARY_DOMAIN_INFO_EX *pdi;

svn path=/trunk/; revision=6559
2002-11-04 11:52:36 +00:00
Ronnie Sahlberg 299f6f8322 Bugfix for DSROLE_PRIMARY_DOMAIN_INFO
svn path=/trunk/; revision=6558
2002-11-04 09:06:15 +00:00
Ronnie Sahlberg e91ed1701a Fix for Netlogon function 0x22 which used the wrong pointer type.
Additional cleanups added when no longer nessecary to pass through two levels of pointers to get to the DOMAIN_CONTROLLER_INFO structure in the code.

svn path=/trunk/; revision=6550
2002-11-03 04:39:22 +00:00
Guy Harris 86576ce6ac When registering a protocol, make sure there are no other protocols with
the same long name, short name, or filter name, and abort if there are.

Fix the duplicate names that found (and another name error found while
fixing one of those errors).

svn path=/trunk/; revision=6425
2002-10-15 05:21:07 +00:00
Ronnie Sahlberg 1a07ef5b5c Some changes to netlogon. function 0x1d is still not right but maybe we are
getting closer.   from Luke H.

svn path=/trunk/; revision=6353
2002-09-29 10:28:27 +00:00