4.10 DUMPALLMAPSW_PROC
The client sends a SUNRPC packet to the User Name Mapping Protocol service requesting an enumeration of all user maps (PrincipalType=0) starting at index zero (MapRecordIndex=0).
-
Frame: + Ethernet: Etype = Internet IP (IPv4) + Ipv4: Next Protocol = UDP, Packet ID = 59252, Total IP Length = 76 + Udp: SrcPort = 965, DstPort = UNM(819), Length = 56 - Rpc: Call, Program = mapsvc, Procedure = DUMPALLMAPSW_PROC TransactionID: 1590511954 (0x5ECD4952) MessageType: Call - ServiceCall: RPCVersionNumber: 2 (0x2) ProgramNumber: mapsvc, 351455(0x00055CDF) ProgramVersion: 2 (0x2) ProcedureNumber: DUMPALLMAPSW_PROC - Credential: No Identity Authentication Flavor: No Identity Authentication AuthDataLength: 0 (0x0) - Verification: Flavor: No Identity Authentication AuthDataLength: 0 (0x0) - Unm: DUMPALLMAPSW_PROC Call - EnumCursor: PrincipalType: Enumerate user account mappings MapRecordIndex: 0
The User Name Mapping Protocol service on the server responds with a listing of advanced and simple user mappings in the database. The response packet includes a sequence number that indicates the version for the current set of account mappings, a record count that indicates the number of mappings returned as a part of the current packet payload, the total number of maps in the database of the requested types, and finally, the individual maps themselves.
-
Frame: + Ethernet: Etype = Internet IP (IPv4) + Ipv4: Next Protocol = UDP, Packet ID = 55477, Total IP Length = 424 + Udp: SrcPort = UNM(819), DstPort = 965, Length = 404 - Rpc: Reply, Status = Message accepted, Detail = Call succeeded TransactionID: 1590511954 (0x5ECD4952) MessageType: Reply - ServiceReply: ReplyStatus: Message accepted - MessageAccepted: - Verification: Flavor: No Identity Authentication AuthDataLength: 0 (0x0) AcceptState: Call succeeded - Unm: DUMPALLMAPSW_PROC Reply - MappingW: - Token: CurrentVersionTokenLowPart: 19924186 CurrentVersionTokenHighPart: 0 MappingRecordCount: 8 TotalMappingRecordCount: 8 - Map: - WindowsAccountName: 0x1 - UNMNameW: nfs-dom-1\administrator Length: 46 Data: nfs-dom-1\administrator Padding: Binary Large Object (2 Bytes) - UnixAccountName: 0x1 - UNMNameW: root Length: 8 Data: root ID: 0 - Map: - WindowsAccountName: 0x1 - UNMNameW: NFS-DOM-1\u1 Length: 24 Data: NFS-DOM-1\u1 - UnixAccountName: 0x1 - UNMNameW: u1 Length: 4 Data: u1 ID: 401 - Map: - WindowsAccountName: 0x1 - UNMNameW: NFS-DOM-1\u2 Length: 24 Data: NFS-DOM-1\u2 - UnixAccountName: 0x1 - UNMNameW: u2 Length: 4 Data: u2 ID: 402 - Map: - WindowsAccountName: 0x1 - UNMNameW: NFS-DOM-1\u3 Length: 24 Data: NFS-DOM-1\u3 - UnixAccountName: 0x1 - UNMNameW: u3 Length: 4 Data: u3 ID: 403 - Map: - WindowsAccountName: 0x1 - UNMNameW: NFS-DOM-1\spec Length: 28 Data: NFS-DOM-1\spec - UnixAccountName: 0x1 - UNMNameW: spec Length: 8 Data: spec ID: 500 - Map: - WindowsAccountName: 0x1 - UNMNameW: NFS-DOM-1\u4 Length: 24 Data: NFS-DOM-1\u4 - UnixAccountName: 0x1 - UNMNameW: u4 Length: 4 Data: u4 ID: 404 - Map: - WindowsAccountName: 0x1 - UNMNameW: NFS-DOM-1\u5 Length: 24 Data: NFS-DOM-1\u5 - UnixAccountName: 0x1 - UNMNameW: u5 Length: 4 Data: u5 ID: 405 - Map: - WindowsAccountName: 0x1 - UNMNameW: NFS-DOM-1\u6 Length: 24 Data: NFS-DOM-1\u6 - UnixAccountName: 0x1 - UNMNameW: u6 Length: 4 Data: u6 ID: 406