Saving RPC FAULTs

From SambaWiki
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

In the AD DC, to save packets that give an NDR fault, because they do not have correct IDL:

  • Build with --enable-developer
  • set this in the smb.conf
dcesrv:stubs directory = /var/log/samba

Any packet that fails to parse will be written into that directory, with the failure reason.

These can then be given to ndrdump when fixing the IDL.

Retrieved from "https://wiki.samba.org/index.php?title=Saving_RPC_FAULTs&oldid=10040"