ruby_smb 3.1.3 → 3.1.6

data/lib/ruby_smb/gss.rb

@@ -14,6 +14,7 @@ module RubySMB
     # @param asn The ASN object to apply the traversal path on.
     # @param [Array] path The path to traverse, each element is passed to the
     #   ASN object's #value's #[] operator.
+    # @return [OpenSSL::ASN1::Sequence, nil]
     def self.asn1dig(asn, *path)
       path.each do |part|
         return nil unless asn&.value

data/lib/ruby_smb/smb1/packet/session_setup_request.rb

@@ -40,6 +40,17 @@ module RubySMB
         parameter_block   :parameter_block
         data_block        :data_block
 
+        # Takes the specified security buffer string and sets it in the {RubySMB::SMB1::Packet::SessionSetupRequest::DataBlock#security_blob}
+        # field. It also automatically sets the length in
+        # {RubySMB::SMB1::Packet::SessionSetupRequest::ParameterBlock#security_blob_length}
+        #
+        # @param buffer [String] the security buffer
+        # @return [void]
+        def set_security_buffer(buffer)
+          parameter_block.security_blob_length = buffer.length
+          data_block.security_blob = buffer
+        end
+
         # Takes an NTLM Type 1 Message and creates the GSS Security Blob
         # for it and sets it in the {RubySMB::SMB1::Packet::SessionSetupRequest::DataBlock#security_blob}
         # field. It also automatically sets the length in

data/lib/ruby_smb/smb1/pipe.rb

@@ -28,6 +28,8 @@ module RubySMB
           extend RubySMB::Dcerpc::Samr
         when 'wkssvc', '\\wkssvc'
           extend RubySMB::Dcerpc::Wkssvc
+        when 'netdfs', '\\netdfs'
+          extend RubySMB::Dcerpc::Dfsnm
         end
         super(tree: tree, response: response, name: name)
       end
@@ -142,7 +144,10 @@ module RubySMB
 
       def dcerpc_response_from_raw_response(raw_data)
         dcerpc_response = RubySMB::Dcerpc::Response.read(raw_data)
-        unless dcerpc_response.pdu_header.ptype == RubySMB::Dcerpc::PTypes::RESPONSE
+        if dcerpc_response.pdu_header.ptype == RubySMB::Dcerpc::PTypes::FAULT
+          status = dcerpc_response.stub.unpack('V').first
+          raise RubySMB::Dcerpc::Error::FaultError.new('A fault occurred', status: status)
+        elsif dcerpc_response.pdu_header.ptype != RubySMB::Dcerpc::PTypes::RESPONSE
           raise RubySMB::Dcerpc::Error::InvalidPacket, "Not a Response packet"
         end
         dcerpc_response

data/lib/ruby_smb/smb2/pipe.rb

@@ -25,6 +25,8 @@ module RubySMB
           extend RubySMB::Dcerpc::Samr
         when 'wkssvc', '\\wkssvc'
           extend RubySMB::Dcerpc::Wkssvc
+        when 'netdfs', '\\netdfs'
+          extend RubySMB::Dcerpc::Dfsnm
         end
         super(tree: tree, response: response, name: name)
       end
@@ -135,12 +137,14 @@ module RubySMB
         end
       end
 
-
       private
 
       def dcerpc_response_from_raw_response(raw_data)
         dcerpc_response = RubySMB::Dcerpc::Response.read(raw_data)
-        unless dcerpc_response.pdu_header.ptype == RubySMB::Dcerpc::PTypes::RESPONSE
+        if dcerpc_response.pdu_header.ptype == RubySMB::Dcerpc::PTypes::FAULT
+          status = dcerpc_response.stub.unpack('V').first
+          raise RubySMB::Dcerpc::Error::FaultError.new('A fault occurred', status: status)
+        elsif dcerpc_response.pdu_header.ptype != RubySMB::Dcerpc::PTypes::RESPONSE
           raise RubySMB::Dcerpc::Error::InvalidPacket, "Not a Response packet"
         end
         dcerpc_response

data/lib/ruby_smb/version.rb

@@ -1,3 +1,3 @@
 module RubySMB
-  VERSION = '3.1.3'.freeze
+  VERSION = '3.1.6'.freeze
 end

data/spec/lib/ruby_smb/client_spec.rb

@@ -1881,6 +1881,7 @@ RSpec.describe RubySMB::Client do
           before :example do
             smb2_client.smb3 = true
             smb2_client.session_encrypt_data = false
+            smb2_client.preauth_integrity_hash_value = ''
           end
 
           it 'sets the session_encrypt_data parameter to true if the server requires encryption' do

data/spec/lib/ruby_smb/dcerpc/dfsnm/netr_dfs_add_std_root_request_spec.rb

@@ -0,0 +1,57 @@
+RSpec.describe RubySMB::Dcerpc::Dfsnm::NetrDfsAddStdRootRequest do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :server_name }
+  it { is_expected.to respond_to :root_share }
+  it { is_expected.to respond_to :comment }
+  it { is_expected.to respond_to :api_flags }
+  it { is_expected.to respond_to :opnum }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+  it 'is a BinData::Record' do
+    expect(packet).to be_a(BinData::Record)
+  end
+  describe '#server_name' do
+    it 'is a NdrConfVarWideStringz structure' do
+      expect(packet.server_name).to be_a RubySMB::Dcerpc::Ndr::NdrConfVarWideStringz
+    end
+  end
+  describe '#root_share' do
+    it 'is a NdrConfVarWideStringz structure' do
+      expect(packet.root_share).to be_a RubySMB::Dcerpc::Ndr::NdrConfVarWideStringz
+    end
+  end
+  describe '#comment' do
+    it 'is a NdrConfVarWideStringz structure' do
+      expect(packet.comment).to be_a RubySMB::Dcerpc::Ndr::NdrConfVarWideStringz
+    end
+  end
+  describe '#api_flags' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.api_flags).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+  describe '#initialize_instance' do
+    it 'sets #opnum to NETR_DFS_ADD_STD_ROOT constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Dfsnm::NETR_DFS_ADD_STD_ROOT)
+    end
+  end
+  it 'reads itself' do
+    new_packet = described_class.new({
+      server_name: 'serverName',
+      root_share: 'rootShare',
+      comment: 'comment'
+    })
+    expected_output = {
+      server_name: 'serverName'.encode('utf-16le'),
+      root_share: 'rootShare'.encode('utf-16le'),
+      comment: 'comment'.encode('utf-16le'),
+      api_flags: 0
+    }
+    expect(packet.read(new_packet.to_binary_s)).to eq(expected_output)
+  end
+end
+
+

data/spec/lib/ruby_smb/dcerpc/dfsnm/netr_dfs_add_std_root_response_spec.rb

@@ -0,0 +1,34 @@
+RSpec.describe RubySMB::Dcerpc::Dfsnm::NetrDfsAddStdRootResponse do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :error_status }
+  it { is_expected.to respond_to :opnum }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+  it 'is a BinData::Record' do
+    expect(packet).to be_a(BinData::Record)
+  end
+  describe '#error_status' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.error_status).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+  describe '#initialize_instance' do
+    it 'sets #opnum to NETR_DFS_ADD_STD_ROOT constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Dfsnm::NETR_DFS_ADD_STD_ROOT)
+    end
+  end
+  it 'reads itself' do
+    new_packet = described_class.new({
+      error_status: 0
+    })
+    expected_output = {
+      error_status: 0
+    }
+    expect(packet.read(new_packet.to_binary_s)).to eq(expected_output)
+  end
+end
+
+

data/spec/lib/ruby_smb/dcerpc/dfsnm/netr_dfs_remove_std_root_request_spec.rb

@@ -0,0 +1,49 @@
+RSpec.describe RubySMB::Dcerpc::Dfsnm::NetrDfsRemoveStdRootRequest do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :server_name }
+  it { is_expected.to respond_to :root_share }
+  it { is_expected.to respond_to :api_flags }
+  it { is_expected.to respond_to :opnum }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+  it 'is a BinData::Record' do
+    expect(packet).to be_a(BinData::Record)
+  end
+  describe '#server_name' do
+    it 'is a NdrConfVarWideStringz structure' do
+      expect(packet.server_name).to be_a RubySMB::Dcerpc::Ndr::NdrConfVarWideStringz
+    end
+  end
+  describe '#root_share' do
+    it 'is a NdrConfVarWideStringz structure' do
+      expect(packet.root_share).to be_a RubySMB::Dcerpc::Ndr::NdrConfVarWideStringz
+    end
+  end
+  describe '#api_flags' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.api_flags).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+  describe '#initialize_instance' do
+    it 'sets #opnum to NETR_DFS_REMOVE_STD_ROOT constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Dfsnm::NETR_DFS_REMOVE_STD_ROOT)
+    end
+  end
+  it 'reads itself' do
+    new_packet = described_class.new({
+      server_name: 'serverName',
+      root_share: 'rootShare',
+    })
+    expected_output = {
+      server_name: 'serverName'.encode('utf-16le'),
+      root_share: 'rootShare'.encode('utf-16le'),
+      api_flags: 0
+    }
+    expect(packet.read(new_packet.to_binary_s)).to eq(expected_output)
+  end
+end
+
+

data/spec/lib/ruby_smb/dcerpc/dfsnm/netr_dfs_remove_std_root_response_spec.rb

@@ -0,0 +1,34 @@
+RSpec.describe RubySMB::Dcerpc::Dfsnm::NetrDfsRemoveStdRootResponse do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :error_status }
+  it { is_expected.to respond_to :opnum }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+  it 'is a BinData::Record' do
+    expect(packet).to be_a(BinData::Record)
+  end
+  describe '#error_status' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.error_status).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+  describe '#initialize_instance' do
+    it 'sets #opnum to NETR_DFS_REMOVE_STD_ROOT constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Dfsnm::NETR_DFS_REMOVE_STD_ROOT)
+    end
+  end
+  it 'reads itself' do
+    new_packet = described_class.new({
+      error_status: 0
+    })
+    expected_output = {
+      error_status: 0
+    }
+    expect(packet.read(new_packet.to_binary_s)).to eq(expected_output)
+  end
+end
+
+

data/spec/lib/ruby_smb/dcerpc/samr/samr_create_user2_in_domain_request_spec.rb

@@ -0,0 +1,69 @@
+RSpec.describe RubySMB::Dcerpc::Samr::SamrCreateUser2InDomainRequest do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :domain_handle }
+  it { is_expected.to respond_to :name }
+  it { is_expected.to respond_to :account_type }
+  it { is_expected.to respond_to :desired_access }
+  it { is_expected.to respond_to :opnum }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  it 'is a BinData::Record' do
+    expect(packet).to be_a(BinData::Record)
+  end
+
+  describe '#domain_handle' do
+    it 'is a SamprHandle structure' do
+      expect(packet.domain_handle).to be_a RubySMB::Dcerpc::Samr::SamprHandle
+    end
+  end
+
+  describe '#name' do
+    it 'is a RpcUnicodeString' do
+      expect(packet.name).to be_a RubySMB::Dcerpc::RpcUnicodeString
+    end
+  end
+
+  describe '#account_type' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.account_type).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#desired_access' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.desired_access).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to SAMR_CREATE_USER2_IN_DOMAIN constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Samr::SAMR_CREATE_USER2_IN_DOMAIN)
+    end
+  end
+
+  it 'reads itself' do
+    new_packet = described_class.new({
+      domain_handle: {
+        context_handle_attributes: 0,
+        context_handle_uuid: "fc873b90-d9a9-46a4-b9ea-f44bb1c272a7"
+      },
+      name: 'test',
+      account_type: 1,
+      desired_access: 2
+    })
+    expected_output = {
+      domain_handle: {
+        context_handle_attributes: 0,
+        context_handle_uuid: "fc873b90-d9a9-46a4-b9ea-f44bb1c272a7"
+      },
+      name: {:buffer=>"test".encode('utf-16le'), :buffer_length=>8, :maximum_length=>8},
+      account_type: 1,
+      desired_access: 2
+    }
+    expect(packet.read(new_packet.to_binary_s)).to eq(expected_output)
+  end
+end

data/spec/lib/ruby_smb/dcerpc/samr/samr_create_user2_in_domain_response_spec.rb

@@ -0,0 +1,69 @@
+RSpec.describe RubySMB::Dcerpc::Samr::SamrCreateUser2InDomainResponse do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :user_handle }
+  it { is_expected.to respond_to :granted_access }
+  it { is_expected.to respond_to :relative_id }
+  it { is_expected.to respond_to :error_status }
+  it { is_expected.to respond_to :opnum }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  it 'is a BinData::Record' do
+    expect(packet).to be_a(BinData::Record)
+  end
+
+  describe '#user_handle' do
+    it 'is a SamprHandle structure' do
+      expect(packet.user_handle).to be_a RubySMB::Dcerpc::Samr::SamprHandle
+    end
+  end
+
+  describe '#granted_access' do
+    it 'is a NdrUint32' do
+      expect(packet.granted_access).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#relative_id' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.relative_id).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#error_status' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.error_status).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to SAMR_CREATE_USER2_IN_DOMAIN constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Samr::SAMR_CREATE_USER2_IN_DOMAIN)
+    end
+  end
+
+  it 'reads itself' do
+    new_packet = described_class.new({
+      user_handle: {
+        context_handle_attributes: 0,
+        context_handle_uuid: "fc873b90-d9a9-46a4-b9ea-f44bb1c272a7"
+      },
+      granted_access: 1,
+      relative_id: 2,
+      error_status: 0x11223344
+    })
+    expected_output = {
+      user_handle: {
+        context_handle_attributes: 0,
+        context_handle_uuid: "fc873b90-d9a9-46a4-b9ea-f44bb1c272a7"
+      },
+      granted_access: 1,
+      relative_id: 2,
+      error_status: 0x11223344
+    }
+    expect(packet.read(new_packet.to_binary_s)).to eq(expected_output)
+  end
+end

data/spec/lib/ruby_smb/dcerpc/samr/samr_delete_user_request_spec.rb

@@ -0,0 +1,42 @@
+RSpec.describe RubySMB::Dcerpc::Samr::SamrDeleteUserRequest do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :user_handle }
+  it { is_expected.to respond_to :opnum }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  it 'is a BinData::Record' do
+    expect(packet).to be_a(BinData::Record)
+  end
+
+  describe '#user_handle' do
+    it 'is a SamprHandle structure' do
+      expect(packet.user_handle).to be_a RubySMB::Dcerpc::Samr::SamprHandle
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to SAMR_DELETE_USER constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Samr::SAMR_DELETE_USER)
+    end
+  end
+
+  it 'reads itself' do
+    new_packet = described_class.new({
+      user_handle: {
+        context_handle_attributes: 0,
+        context_handle_uuid: "fc873b90-d9a9-46a4-b9ea-f44bb1c272a7"
+      }
+    })
+    expected_output = {
+      user_handle: {
+        context_handle_attributes: 0,
+        context_handle_uuid: "fc873b90-d9a9-46a4-b9ea-f44bb1c272a7"
+      }
+    }
+    expect(packet.read(new_packet.to_binary_s)).to eq(expected_output)
+  end
+end

data/spec/lib/ruby_smb/dcerpc/samr/samr_delete_user_response_spec.rb

@@ -0,0 +1,51 @@
+RSpec.describe RubySMB::Dcerpc::Samr::SamrDeleteUserResponse do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :user_handle }
+  it { is_expected.to respond_to :error_status }
+  it { is_expected.to respond_to :opnum }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  it 'is a BinData::Record' do
+    expect(packet).to be_a(BinData::Record)
+  end
+
+  describe '#user_handle' do
+    it 'is a SamprHandle structure' do
+      expect(packet.user_handle).to be_a RubySMB::Dcerpc::Samr::SamprHandle
+    end
+  end
+
+  describe '#error_status' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.error_status).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to SAMR_DELETE_USER constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Samr::SAMR_DELETE_USER)
+    end
+  end
+
+  it 'reads itself' do
+    new_packet = described_class.new({
+      user_handle: {
+        context_handle_attributes: 0,
+        context_handle_uuid: "fc873b90-d9a9-46a4-b9ea-f44bb1c272a7"
+      },
+      error_status: 0x11223344
+    })
+    expected_output = {
+      user_handle: {
+        context_handle_attributes: 0,
+        context_handle_uuid: "fc873b90-d9a9-46a4-b9ea-f44bb1c272a7"
+      },
+      error_status: 0x11223344
+    }
+    expect(packet.read(new_packet.to_binary_s)).to eq(expected_output)
+  end
+end

data/spec/lib/ruby_smb/dcerpc/samr/samr_enumerate_domains_in_sam_server_request_spec.rb

@@ -0,0 +1,60 @@
+RSpec.describe RubySMB::Dcerpc::Samr::SamrEnumerateDomainsInSamServerRequest do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :server_handle }
+  it { is_expected.to respond_to :enumeration_context }
+  it { is_expected.to respond_to :prefered_maximum_length }
+  it { is_expected.to respond_to :opnum }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  it 'is a BinData::Record' do
+    expect(packet).to be_a(BinData::Record)
+  end
+
+  describe '#server_handle' do
+    it 'is a SamprHandle structure' do
+      expect(packet.server_handle).to be_a RubySMB::Dcerpc::Samr::SamprHandle
+    end
+  end
+
+  describe '#enumeration_context' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.enumeration_context).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#prefered_maximum_length' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.prefered_maximum_length).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to SAMR_ENUMERATE_DOMAINS_IN_SAM_SERVER constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Samr::SAMR_ENUMERATE_DOMAINS_IN_SAM_SERVER)
+    end
+  end
+
+  it 'reads itself' do
+    new_packet = described_class.new({
+      server_handle: {
+        context_handle_attributes: 0,
+        context_handle_uuid: "fc873b90-d9a9-46a4-b9ea-f44bb1c272a7"
+      },
+      enumeration_context: 1,
+      prefered_maximum_length: 2
+    })
+    expected_output = {
+      server_handle: {
+        context_handle_attributes: 0,
+        context_handle_uuid: "fc873b90-d9a9-46a4-b9ea-f44bb1c272a7"
+      },
+      enumeration_context: 1,
+      prefered_maximum_length: 2
+    }
+    expect(packet.read(new_packet.to_binary_s)).to eq(expected_output)
+  end
+end

data/spec/lib/ruby_smb/dcerpc/samr/samr_enumerate_domains_in_sam_server_response_spec.rb

@@ -0,0 +1,75 @@
+RSpec.describe RubySMB::Dcerpc::Samr::SamrEnumerateDomainsInSamServerResponse do
+  subject(:packet) { described_class.new }
+
+  it { is_expected.to respond_to :enumeration_context }
+  it { is_expected.to respond_to :buffer }
+  it { is_expected.to respond_to :count_returned }
+  it { is_expected.to respond_to :error_status }
+  it { is_expected.to respond_to :opnum }
+
+  it 'is little endian' do
+    expect(described_class.fields.instance_variable_get(:@hints)[:endian]).to eq :little
+  end
+
+  it 'is a BinData::Record' do
+    expect(packet).to be_a(BinData::Record)
+  end
+
+  describe '#enumeration_context' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.enumeration_context).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#buffer' do
+    it 'is a PsamprEnumerationBuffer structure' do
+      expect(packet.buffer).to be_a RubySMB::Dcerpc::Samr::PsamprEnumerationBuffer
+    end
+  end
+
+  describe '#count_returned' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.count_returned).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#error_status' do
+    it 'is a NdrUint32 structure' do
+      expect(packet.error_status).to be_a RubySMB::Dcerpc::Ndr::NdrUint32
+    end
+  end
+
+  describe '#initialize_instance' do
+    it 'sets #opnum to SAMR_ENUMERATE_DOMAINS_IN_SAM_SERVER constant' do
+      expect(packet.opnum).to eq(RubySMB::Dcerpc::Samr::SAMR_ENUMERATE_DOMAINS_IN_SAM_SERVER)
+    end
+  end
+
+  it 'reads itself' do
+    new_packet = described_class.new({
+      enumeration_context: 1,
+      buffer: {
+        entries_read: 2,
+        buffer: [
+          {relative_id: 500, name: { buffer_length: 26, maximum_length: 26, buffer: "Builtin".encode('utf-16le') }},
+          {relative_id: 501, name: { buffer_length: 10, maximum_length: 10, buffer: "RUBYSMB".encode('utf-16le') }},
+        ]
+      },
+      count_returned: 2,
+      error_status: 0x11223344
+    })
+    expected_output = {
+      enumeration_context: 1,
+      buffer: {
+        entries_read: 2,
+        buffer: [
+          {relative_id: 500, name: { buffer_length: 26, maximum_length: 26, buffer: "Builtin".encode('utf-16le') }},
+          {relative_id: 501, name: { buffer_length: 10, maximum_length: 10, buffer: "RUBYSMB".encode('utf-16le') }},
+        ]
+      },
+      count_returned: 2,
+      error_status: 0x11223344
+    }
+    expect(packet.read(new_packet.to_binary_s)).to eq(expected_output)
+  end
+end