Re: [cifs-protocol] [REG:111051779565831] RE: dfs referral for sysvol and windows XP

2011-06-08 Thread Matthieu Patou
On 08/06/2011 02:01, Hongwei Sun wrote: Matthieu, I confirmed that there is a problem with the Netmon parser when displaying ReferralEntryFlag. The ReferralEntryFlags should be in little endian. In the packet, it should be parsed as 0x0004 that has TargetSetBoundary bit set for the

Re: [cifs-protocol] [REG:111051779565831] RE: dfs referral for sysvol and windows XP

2011-06-07 Thread Hongwei Sun
...@tridgell.net; cifs-proto...@samba.org; MSSolve Case Email Subject: Re: [REG:111051779565831] RE: [cifs-protocol] dfs referral for sysvol and windows XP On 27/05/2011 03:35, Hongwei Sun wrote: Matthieu, I used your complete trace (dfs2.pcap) to see the entire scenario.The reason it falls

Re: [cifs-protocol] [REG:111051779565831] RE: dfs referral for sysvol and windows XP

2011-05-22 Thread Matthieu Patou
Hello Hongwei, So the attached pcap show dfs referral traffic between a S4 and XP hosts. Where we can see that XP is requesting a level 4 referral and that S4 answers to it with an answer following the specification. After this XP is blocked or fallback to NTLM auth (not shown in this