4.4 DUMPALLMAPS_PROC
The client sends a SUNRPC packet to the User Name Mapping Protocol service that requests an enumeration of all user maps (PrincipalType=0) starting at index zero (MapRecordIndex=0).
-
Frame: + Ethernet: Etype = Internet IP (IPv4) + Ipv4: Next Protocol = UDP, Packet ID = 57181, Total IP Length = 76 + Udp: SrcPort = 965, DstPort = UNM(819), Length = 56 - Rpc: Call, Program = mapsvc, Procedure = DUMPALLMAPS_PROC TransactionID: 1238190418 (0x49CD4952) MessageType: Call - ServiceCall: RPCVersionNumber: 2 (0x2) ProgramNumber: mapsvc, 351455(0x00055CDF) ProgramVersion: 2 (0x2) ProcedureNumber: DUMPALLMAPS_PROC - Credential: No Identity Authentication Flavor: No Identity Authentication AuthDataLength: 0 (0x0) - Verification: Flavor: No Identity Authentication AuthDataLength: 0 (0x0) - Unm: DUMPALLMAPS_PROC Call - EnumCursor: PrincipalType: Enumerate user account mappings (0) MapRecordIndex: 0
The User Name Mapping Protocol service on the server responds with a listing of advanced and simple user mappings in the database. The response packet includes a sequence number that indicates the version for the current set of account mappings, a record count that indicates the number of mappings returned as a part of the current packet payload, the total number of maps in the database of the requested types, and finally, the individual maps themselves.
-
Frame: + Ethernet: Etype = Internet IP (IPv4) + Ipv4: Next Protocol = UDP, Packet ID = 45847, Total IP Length = 308 + Udp: SrcPort = UNM(819), DstPort = 965, Length = 288 - Rpc: Reply, Status = Message accepted, Detail = Call succeeded TransactionID: 1238190418 (0x49CD4952) MessageType: Reply - ServiceReply: ReplyStatus: Message accepted - MessageAccepted: - Verification: Flavor: No Identity Authentication AuthDataLength: 0 (0x0) AcceptState: Call succeeded - Unm: DUMPALLMAPS_PROC Reply - Mapping: - Token: CurrentVersionTokenLowPart: 19924186 CurrentVersionTokenHighPart: 0 MappingRecordCount: 8 TotalMappingRecordCount: 8 - Map: - WindowsAccountName: 0x1 - UNMName: nfs-dom-1\administrator Length: 23 Data: nfs-dom-1\administrator Padding: Binary Large Object (1 Bytes) - UnixAccountName: 0x1 - UNMName: root Length: 4 Data: root ID: 0 - Map: - WindowsAccountName: 0x1 - UNMName: NFS-DOM-1\u1 Length: 12 Data: NFS-DOM-1\u1 - UnixAccountName: 0x1 - UNMName: u1 Length: 2 Data: u1 Padding: Binary Large Object (2 Bytes) ID: 401 - Map: - WindowsAccountName: 0x1 - UNMName: NFS-DOM-1\u2 Length: 12 Data: NFS-DOM-1\u2 - UnixAccountName: 0x1 - UNMName: u2 Length: 2 Data: u2 Padding: Binary Large Object (2 Bytes) ID: 402 - Map: - WindowsAccountName: 0x1 - UNMName: NFS-DOM-1\u3 Length: 12 Data: NFS-DOM-1\u3 - UnixAccountName: 0x1 - UNMName: u3 Length: 2 Data: u3 Padding: Binary Large Object (2 Bytes) ID: 403 - Map: - WindowsAccountName: 0x1 - UNMName: NFS-DOM-1\spec Length: 14 Data: NFS-DOM-1\spec Padding: Binary Large Object (2 Bytes) - UnixAccountName: 0x1 - UNMName: spec Length: 4 Data: spec ID: 500 - Map: - WindowsAccountName: 0x1 - UNMName: NFS-DOM-1\u4 Length: 12 Data: NFS-DOM-1\u4 - UnixAccountName: 0x1 - UNMName: u4 Length: 2 Data: u4 Padding: Binary Large Object (2 Bytes) ID: 404 - Map: - WindowsAccountName: 0x1 - UNMName: NFS-DOM-1\u5 Length: 12 Data: NFS-DOM-1\u5 - UnixAccountName: 0x1 - UNMName: u5 Length: 2 Data: u5 Padding: Binary Large Object (2 Bytes) ID: 405 - Map: - WindowsAccountName: 0x1 - UNMName: NFS-DOM-1\u6 Length: 12 Data: NFS-DOM-1\u6 - UnixAccountName: 0x1 - UNMName: u6 Length: 2 Data: u6 Padding: Binary Large Object (2 Bytes) ID: 406