6.3.1.6 NETLOGON_SAM_LOGON_REQUEST
The format of a mailslot ping as documented in section 6.3.5.
|
|
|
|
|
|
|
|
|
|
1 |
|
|
|
|
|
|
|
|
|
2 |
|
|
|
|
|
|
|
|
|
3 |
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Opcode |
RequestCount |
||||||||||||||||||||||||||||||
|
UnicodeComputerName (variable) |
|||||||||||||||||||||||||||||||
|
... |
|||||||||||||||||||||||||||||||
|
UnicodeUserName (variable) |
|||||||||||||||||||||||||||||||
|
... |
|||||||||||||||||||||||||||||||
|
MailslotName (variable) |
|||||||||||||||||||||||||||||||
|
... |
|||||||||||||||||||||||||||||||
|
AllowableAccountControlBits |
|||||||||||||||||||||||||||||||
|
DomainSidSize |
|||||||||||||||||||||||||||||||
|
DomainSid (variable) |
|||||||||||||||||||||||||||||||
|
... |
|||||||||||||||||||||||||||||||
|
NtVersion |
|||||||||||||||||||||||||||||||
|
LmNtToken |
Lm20Token |
||||||||||||||||||||||||||||||
Opcode (2 bytes): Operation code (see section 6.3.1.3). Set to LOGON_SAM_LOGON_REQUEST.
RequestCount (2 bytes): A USHORT that contains the number of times the user has repeated this request.
UnicodeComputerName (variable): Null-terminated Unicode value of the NETBIOS name of the client. This field MUST contain at least one character: the null terminator. Each Unicode value is encoded as 2 bytes.
UnicodeUserName (variable): Null-terminated Unicode value of the account name of the user being queried. This field MUST contain at least one character: the null terminator. Each Unicode value is encoded as 2 bytes.
MailslotName (variable): Null-terminated ASCII value of the name of the mailslot the client listens on.
AllowableAccountControlBits (4 bytes): Represents the userAccountControl attribute of an account.
DomainSidSize (4 bytes): A DWORD that contains the size of the DomainSid field.
DomainSid (variable): The SID of the domain, specified as a SID structure, which is defined in [MS-DTYP] section 2.4.2. Its length is defined in the DomainSidSize field. This field is padded as necessary so that it is aligned on a DWORD boundary.
NtVersion (4 bytes): NETLOGON_NT_VERSION Options (see 6.3.1.1).
LmNtToken (2 bytes): This MUST be set to 0xFFFF.
Lm20Token (2 bytes): This MUST be set to 0xFFFF.
Note Except as noted earlier in this section, there is no padding for alignment. Therefore, except as otherwise specified, all fields after MailslotName can occur on odd byte boundaries.
All multibyte quantities are represented in little-endian byte order.