samba - Aug 2011 - fail to access eventlog in windows2008 R2 by rpcclient

Hi Guys,

I fail to access eventlog in windows2008 R2 by rpcclient(version 3.4.7) .
The command is flows:

rpcclient -U administrator xxx.xxx.xxx.xxx
rpcclient $> eventlog_readlog security
>ndr_pull_error(17): not all bytes consumed ofs[560] size[572]
result was NT_STATUS_PORT_MESSAGE_TOO_LONG

I also found the same question at the link "
http://lists.samba.org/archive/samba/2010-July/157387.html"

But I can not find any suggestions or answers.

Does anybody know this or give me some hints?

Thanks in advance!

On Tue, Aug 02, 2011 at 02:43:09PM -0700, Shangwei Duan
wrote:
> Hi Guys,
> 
> I fail to access eventlog in windows2008 R2 by rpcclient(version 3.4.7) .
> The command is flows:
> 
> rpcclient -U administrator xxx.xxx.xxx.xxx
> rpcclient $> eventlog_readlog security
> >ndr_pull_error(17): not all bytes consumed ofs[560] size[572]
> result was NT_STATUS_PORT_MESSAGE_TOO_LONG
> 
> I also found the same question at the link "
> http://lists.samba.org/archive/samba/2010-July/157387.html"
> 
> But I can not find any suggestions or answers.
> 
> Does anybody know this or give me some hints?
Just tried with master, worked fine. Can you try with
3.5.11? The RPC infrastructure has been changed
significantly.

Thanks,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 G?ttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG G?ttingen, HRB 2816, GF: Dr. Johannes Loxen