6.3.1.7 NETLOGON_SAM_LOGON_RESPONSE_NT40

The NETLOGON_SAM_LOGON_RESPONSE_NT40 structure is the server's response to an LDAP ping (section 6.3.3) or a mailslot ping (section 6.3.5).


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

Opcode

UnicodeLogonServer (variable)

...

UnicodeUserName (variable)

...

UnicodeDomainName (variable)

...

NtVersion

LmNtToken

Lm20Token

Opcode (2 bytes): Operation code (see section 6.3.1.3).

UnicodeLogonServer (variable): Null-terminated Unicode value of the NetBIOS name of the server. This field MUST contain at least one character: the null terminator. Each Unicode value is encoded as 2 bytes.

UnicodeUserName (variable): Null-terminated Unicode value of the name of the user copied directly from the client's request. This field MUST contain at least one character: the null terminator. Each Unicode value is encoded as 2 bytes.

UnicodeDomainName (variable): Null-terminated Unicode value of the NetBIOS name of the NC. This field MUST contain at least one character: the null terminator. Each Unicode value is encoded as 2 bytes.

NtVersion (4 bytes): Set to NETLOGON_NT_VERSION_1.

LmNtToken (2 bytes): This MUST be set to 0xFFFF.

Lm20Token (2 bytes): This MUST be set to 0xFFFF.

Note All multibyte quantities are represented in little-endian byte order.