4.1 GETWINDOWSCREDSFROMUNIXUSERNAME_PROC
The client sends a SUNRPC packet to the User Name Mapping Protocol service requesting the Windows account mapping for POSIX user "root". The client asks for a match on the POSIX username alone in the SearchOption of the procedure.
-
Frame: + Ethernet: Etype = Internet IP (IPv4) + Ipv4: Next Protocol = UDP, Packet ID = 33455, Total IP Length = 88 + Udp: SrcPort = 965, DstPort = UNM(819), Length = 68 - Rpc: Call, Program = mapsvc, Procedure = GETWINDOWSCREDSFROMUNIXUSERNAME_PROC TransactionID: 1221413202 (0x48CD4952) MessageType: Call - ServiceCall: RPCVersionNumber: 2 (0x2) ProgramNumber: mapsvc, 351455(0x00055CDF) ProgramVersion: 2 (0x2) ProcedureNumber: GETWINDOWSCREDSFROMUNIXUSERNAME_PROC - Credential: No Identity Authentication Flavor: No Identity Authentication AuthDataLength: 0 (0x0) - Verification: Flavor: No Identity Authentication AuthDataLength: 0 (0x0) - Unm: GETWINDOWSCREDSFROMUNIXUSERNAME_PROC Call - UnixUser: SearchOption: UnixAccountName is valid (0x1) Reserved: Send as 0x00000000 ID: 0 - UnixAccountName: 0x1 - UNMName: root Length: 4 Data: root
The User Name Mapping Protocol service on the server responds with a SUNRPC response packet with the advanced map for POSIX user "root" to Windows user "nfs-dom-1\administrator", illustrated as follows.
-
Frame: + Ethernet: Etype = Internet IP (IPv4) + Ipv4: Next Protocol = UDP, Packet ID = 62340, Total IP Length = 88 + Udp: SrcPort = UNM(819), DstPort = 965, Length = 68 - Rpc: Reply, Status = Message accepted, Detail = Call succeeded TransactionID: 1221413202 (0x48CD4952) MessageType: Reply - ServiceReply: ReplyStatus: Message accepted - MessageAccepted: - Verification: Flavor: No Identity Authentication AuthDataLength: 0 (0x0) AcceptState: Call succeeded - Unm: GETWINDOWSCREDSFROMUNIXUSERNAME_PROC Reply - WindowsCreds: Status: 0 Reserved: Send as 0x00000000 - WindowsAccountName: 0x1 - UNMWindowsName: nfs-dom-1\administrator Length: 23 Data: nfs-dom-1\administrator Padding: Binary Large Object (1 Bytes)