4.17 GETUNIXCREDSFROMNTUSERSIDW_PROC
The client sends a SUNRPC packet to the User Name Mapping Protocol service requesting the POSIX credentials for the Windows user SID "S-1-5-21-3994172400-2625080034-4079281819-500" representing Windows user account "nfs-dom-1\administrator".
-
Frame: + Ethernet: Etype = Internet IP (IPv4) + Ipv4: Next Protocol = UDP, Packet ID = 50594, Total IP Length = 100 + Udp: SrcPort = 1013, DstPort = UNM(819), Length = 80 - Rpc: Call, Program = mapsvc, Procedure = GETUNIXCREDSFROMNTUSERSIDW_PROC TransactionID: 1221456821 (0x48CDF3B5) MessageType: Call - ServiceCall: RPCVersionNumber: 2 (0x2) ProgramNumber: mapsvc, 351455(0x00055CDF) ProgramVersion: 2 (0x2) ProcedureNumber: GETUNIXCREDSFROMNTUSERSIDW_PROC - Credential: No Identity Authentication Flavor: No Identity Authentication AuthDataLength: 0 (0x0) - Verification: Flavor: No Identity Authentication AuthDataLength: 0 (0x0) - Unm: GETUNIXCREDSFROMNTGROUPNAMEW_PROC Call - WindowsUserAccountNameW: - WindowsAccountName: 0x1 - UNMNameW: Length: 28 Data: 01 05 00 00 00 00 00 05 15 00 00 00 F0 3B 12 EE E2 8A 77 9C 9B E6 24 F3 F4 01 00 00
The User Name Mapping Protocol service on the server responds with a SUNRPC response packet with the POSIX credentials for the mapped UNIX account corresponding to Windows user "nfs-dom-1\Administrator" as POSIX user "root", illustrated as follows.
-
Frame: + Ethernet: Etype = Internet IP (IPv4) + Ipv4: Next Protocol = UDP, Packet ID = 13116, Total IP Length = 80 + Udp: SrcPort = UNM(819), DstPort = 1013, Length = 60 - Rpc: Reply, Status = Message accepted, Detail = Call succeeded TransactionID: 1221456821 (0x48CDF3B5) MessageType: Reply - ServiceReply: ReplyStatus: Message accepted - MessageAccepted: - Verification: Flavor: No Identity Authentication AuthDataLength: 0 (0x0) AcceptState: Call succeeded - Unm: GETUNIXCREDSFROMNTGROUPNAMEW_PROC Reply - UnixCredsW: - UnixAccountName: 0x1 - UNMNameW: root Length: 8 Data: root ID: 0 GidCount: 2 - GID: GID: 1 GID: 1