The drsuapi interface is used between Active Directory domain controllers for replication:
Active Directory replication interface: e3514235-4b06-11d1-ab04-00c04fc2dcd2 v4.0
IDL (Interface Definition Language) for the drsuapi interface is available in Samba 4 [80].
It supports the following operations:
Table 4.18. drsuapi operations
| Interface | Operation number | Operation name | Windows API |
|---|---|---|---|
| e3514235-4b06-11d1-ab04-00c04fc2dcd2 v4.0: drsuapi | |||
| 0x00 | DRSBind | DsBind | |
| 0x01 | DRSUnbind | DsUnBind | |
| 0x02 | DRSReplicaSync | DsReplicaSync | |
| 0x03 | DRSGetNCChanges | ||
| 0x04 | DRSUpdateRefs | ||
| 0x05 | DRSReplicaAdd | DsReplicaAdd | |
| 0x06 | DRSReplicaDel | DsReplicaDel | |
| 0x07 | DRSReplicaModify | DsReplicaModify | |
| 0x08 | DRSVerifyNames | ||
| 0x09 | DRSGetMemberships | ||
| 0x0a | DRSInterDomainMove | ||
| 0x0b | DRSGetNT4ChangeLog | ||
| 0x0c | DRSCrackNames | DsCrackNames | |
| 0x0d | DRSWriteSPN | DsWriteAccountSpn | |
| 0x0e | DRSRemoveDsServer | ||
| 0x0f | DRSRemoveDsDomain | ||
| 0x10 | DRSDomainControllerInfo | ||
| 0x11 | DRSAddEntry | ||
| 0x12 | DRSExecuteKCC | ||
| 0x13 | DRSGetReplInfo | ||
| 0x14 | DRSAddSidHistory | DsAddSidHistory | |
| > Windows Server 2003 and > | 0x15 | DRSGetMemberships2 | |
| - | 0x16 | DRSReplicaVerifyObjects | |
| - | 0x17 | DRSGetObjectExistence | |
| - | 0x18 | DRSQuerySitesByCost | DsQuerySitesByCost |
Ethereal has a dissector for this interface [83]. It is particularly useful when used with the Kerberos decryption feature: in that case, encrypted operations are dissected.