aboutsummaryrefslogtreecommitdiffstats
path: root/packet-dcerpc-netlogon.c
AgeCommit message (Collapse)AuthorFilesLines
2004-07-18Move dissectors to epan/dissectors directory.Gilbert Ramirez1-7666/+0
Also move ncp222.py, x11-fields, process-x11-fields.pl, make-reg-dotc, and make-reg-dotc.py. Adjust #include lines in files that include packet-*.h files. svn path=/trunk/; revision=11410
2004-07-18Set the svn:eol-style property on all text files to "native", so thatGuy Harris1-1/+1
they have LF at the end of the line on UN*X and CR/LF on Windows; hopefully this means that if a CR/LF version is checked in on Windows, the CRs will be stripped so that they show up only when checked out on Windows, not on UN*X. svn path=/trunk/; revision=11400
2004-05-19Remove hf argument to common routines for dissecting domain sids. MostTim Potter1-27/+12
of the callers passed -1 for this parameter anyway. svn path=/trunk/; revision=10919
2004-05-01more deltatypesRonnie Sahlberg1-1/+10
svn path=/trunk/; revision=10748
2004-04-23prettified a few netlogon calls and populate col_info with account namesRonnie Sahlberg1-6/+6
svn path=/trunk/; revision=10679
2004-04-23update to netlogon to dissect the timestamps in VALIDATION_UAS_INFORonnie Sahlberg1-18/+19
update to dcerpc time_t dissector to print the string "No time specified" when the seconds field is 0xffffffff svn path=/trunk/; revision=10678
2004-04-23update to netlogon, now also decode the delete user/group/aliasRonnie Sahlberg1-8/+16
deltas. svn path=/trunk/; revision=10677
2004-04-21 update to netlogon to show DsrGetDcNameEx2() Client account name, domain ↵Ronnie Sahlberg1-8/+8
name and site name svn path=/trunk/; revision=10656
2004-04-08update to netlogon: make it dissect all the bits of the UserAccountControl ↵Ronnie Sahlberg1-11/+285
flags field in the pac structure and elsewhere in netlogon svn path=/trunk/; revision=10565
2004-04-08dissection of netlogon userflags in tha pac structure and elsewhereRonnie Sahlberg1-9/+65
svn path=/trunk/; revision=10564
2004-04-08dissect group attributes for the pac structure and other places in netlogonRonnie Sahlberg1-4/+71
svn path=/trunk/; revision=10563
2004-03-05Kerberos contain a structure that is VERY similar to VALIDATE_SAM_INFO2Ronnie Sahlberg1-1/+151
so declare it here. This substructure in the w2k kerberos PAC structure is called PAC_LOGIN_INFO and might actually exist inside the netlogon interface as well? svn path=/trunk/; revision=10322
2004-01-19char *drep -> guint8 *drepJörg Mayer1-191/+191
svn path=/trunk/; revision=9735
2003-11-02In a secure channel verifier, sometimes the nonce isn't present; not sureTim Potter1-8/+13
why this is so. svn path=/trunk/; revision=8856
2003-10-23Use -1 rather than "tvb_length(tvb)" to specify a length that covers theGuy Harris1-3/+3
entire tvbuff for Secure Channel bind credentials. Use -1 rather than 0 to have the top-level item for Secure Channel ACK credentials cover the entire tvbuff. svn path=/trunk/; revision=8756
2003-09-27From JBM update some function names in NetlogonRonnie Sahlberg1-88/+95
svn path=/trunk/; revision=8556
2003-09-22A bunch of fixups for the NETLOGON sam database synchronisationTim Potter1-8/+12
dissector: - some rids marked as user are actually groups - decorate some strings higher up in the tree - dissect the delta id as such and add value string text item svn path=/trunk/; revision=8510
2003-09-12Update to netlogonRonnie Sahlberg1-4/+39
make it decode DsrGetDCSiteCoverage replies properly svn path=/trunk/; revision=8463
2003-09-12upadtes to NETLOGONRonnie Sahlberg1-154/+155
svn path=/trunk/; revision=8462
2003-09-11From Jean-Baptiste MarchandRonnie Sahlberg1-39/+8
update of the type of pointer used for DsrGetSiteName reply packets svn path=/trunk/; revision=8456
2003-09-10NETLOGON/DsrDeregisterDNSHostRecords :Ronnie Sahlberg1-2/+2
The dns_host field is a REF pointer to a unicode string. NOT a Unique pointer. Update iethereal so that this packet is dissected properly svn path=/trunk/; revision=8446
2003-08-04Guy suggested that the dcerpc opnum value_string code could be simplifiedTim Potter1-9/+1
somewhat. Now the dynamic initialisation of the value_string is contained in the value_string_from_subdissectors() function instead of being distributed amongst the dcerpc dissectors. svn path=/trunk/; revision=8123
2003-07-18I've seen captures with Netlogon Secure Channel security with aGuy Harris1-1/+4
protection level of DCE_C_AUTHN_LEVEL_PKT_INTEGRITY. svn path=/trunk/; revision=8041
2003-07-18Capitalize "C" in "Channel" in "Secure Channel", as is done elsewhere.Guy Harris1-2/+2
svn path=/trunk/; revision=8040
2003-07-16Move all DCERPC authentication/encryption dissection code from packet-dcerpc.cTim Potter1-54/+69
to the dissector that handles the particular authentication flavour. This gets rid of a couple of ugly switch statements and allows other authentication modules to be written easily. svn path=/trunk/; revision=8026
2003-06-26Dynamically create DCERPC opnum value_strings from the subdissectorTim Potter1-48/+10
list rather than duplicating this information in the dissector. Some of the opnum strings were starting to get out of date as developers forgot to update the information in both places. svn path=/trunk/; revision=7936
2003-06-02Dissect a netlogon credential as eight FT_BYTES rather than two guint32Tim Potter1-17/+8
quantities. svn path=/trunk/; revision=7768
2003-05-21Change the interface to dissect_ndr_nt_PSID to take one extra parameter ↵Ronnie Sahlberg1-10/+10
which if !=-1 is a hf field for the sid to use instead of the default smb.sid one. svn path=/trunk/; revision=7706
2003-05-15Move dissection of NETLOGON secure channel auth verifier intoTim Potter1-2/+62
packet-dcerpc-netlogon.c svn path=/trunk/; revision=7670
2003-05-15Dissect authentication data for netlogon secure channel bind and bind acks.Tim Potter1-3/+124
svn path=/trunk/; revision=7667
2003-05-09Dissect a ntlmv2 response if found in a samlogon request.Tim Potter1-10/+42
svn path=/trunk/; revision=7657
2003-04-27Not all strings in MS interfaces are unicode.Ronnie Sahlberg1-3/+3
Rename cb_str_postprocess which handles unicode strings to cb_wstr_postprocess. Add cb_str_postprocess which handles ASCII strings svn path=/trunk/; revision=7572
2003-02-14Display user name in COL_INFO for ServerAuthenticate2 request.Tim Potter1-3/+9
Add note about putting DOMAIN\Username in COL_INFO when dissecting LOGIN_IDENTITY_INFO (part of SamLogon RPC). svn path=/trunk/; revision=7147
2003-02-10Decorate the top-level item for a PRIV_NAME_ARRAY with the privilegeGuy Harris1-2/+2
names. svn path=/trunk/; revision=7118
2003-02-08Have "dissect_ndr_counted_string()" add 2, not 1, to its argument, as itGuy Harris1-6/+6
adds 2 levels to the tree. Fix calls to it not to add 1 for that level. The NT and LM challenges in a NETWORK_INFO structure are opaque arrays of bytes, not Unicode strings; dissect them as such, adding a new routine "dissect_ndr_counted_byte_array()" for that purpose. Get rid of some extra colons in names - the colon is put there if a string is appended, so putting a colon in there explicitly gives double colons. Decorate some higher-level tree nodes with strings. svn path=/trunk/; revision=7107
2003-02-07Rename "dissect_ndr_char_string()" and "dissect_ndr_wchar_string()" toGuy Harris1-3/+3
"dissect_ndr_char_cvstring()" and "dissect_ndr_wchar_cvstring()", to indicate that they're for conformant varying strings. Rename "dissect_ndr_character_array()" to "dissect_ndr_cvstring()", to indicate that it's for conformant varying strings. svn path=/trunk/; revision=7096
2003-02-07Rename "dissect_ndr_char_array" and "disect_ndr_wchar_array" toGuy Harris1-3/+3
"dissect_ndr_char_string" and "dissect_ndr_wchar_string", to make it clearer what it does. svn path=/trunk/; revision=7095
2003-02-03Convert to new DCERPC string handling functions. There are still someTim Potter1-105/+105
cosmetic bugs to work out though. svn path=/trunk/; revision=7069
2003-01-31Decorate a PRIV_NAME_ARRAY with the privilege names in the array.Guy Harris1-2/+2
svn path=/trunk/; revision=7063
2003-01-31Decorate a DELTA_DOMAIN structure's top-level item with the domain name.Guy Harris1-2/+2
svn path=/trunk/; revision=7062
2003-01-30Generalize "cb_str_postprocess()" to allow the string to be appended toGuy Harris1-178/+178
items N levels up from the item being processed, and use that to decorate the tree as it was decorated before. svn path=/trunk/; revision=7043
2003-01-30Display random useful tidbits in COL_INFO.Tim Potter1-3/+7
svn path=/trunk/; revision=7040
2003-01-28Convert dissector to callback based version of dissect_ndr_pointer().Tim Potter1-499/+449
Strings that used to call with levels != -1 should call the callback helper which will append the string to the pointer item. svn path=/trunk/; revision=7017
2003-01-14Add value_string for secure channel type used in ServerAuthenticate2.Tim Potter1-4/+13
svn path=/trunk/; revision=6920
2002-11-30Added some flags and value_Strings for netlogonRonnie Sahlberg1-18/+600
svn path=/trunk/; revision=6706
2002-11-29From Like H, update to NETLOGON. DSROLEGETPRIMARYDOMAININFO is actually ↵Ronnie Sahlberg1-22/+42
ENUMERATETRUSTEDDOMAINS svn path=/trunk/; revision=6705
2002-11-29From Luke H. Update to GetDomainInfoRonnie Sahlberg1-48/+69
svn path=/trunk/; revision=6704
2002-11-04Bugfix.Ronnie Sahlberg1-35/+11
Previous checkin did not make sense. We can not have a union without having the union case value stored as a separate variable or else the receiving side will not know how to decode the packet. Therefore it can not be a union at all. Instead we have a REF pointer to a ulong holding the number of elements, then a unique pointer to a conformant array of structures. Thus, the content of the reply packet for function_24 as well as dsrolegetprimarydomaininfo can not be [ref] PRIMARY_DOMAIN_INFO_EX_UNION *pdi; but instead MUST be long num_entries; [unique][size_is(num_entries)] PRIMARY_DOMAIN_INFO_EX *pdi; svn path=/trunk/; revision=6559
2002-11-04Bugfix for DSROLE_PRIMARY_DOMAIN_INFORonnie Sahlberg1-36/+40
svn path=/trunk/; revision=6558
2002-11-03Fix for Netlogon function 0x22 which used the wrong pointer type.Ronnie Sahlberg1-25/+13
Additional cleanups added when no longer nessecary to pass through two levels of pointers to get to the DOMAIN_CONTROLLER_INFO structure in the code. svn path=/trunk/; revision=6550