[2014/11/04 23:32:49.396576, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4839(lp_load_ex) lp_load_ex: refreshing parameters [2014/11/04 23:32:49.396621, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1488(free_param_opts) Freeing parametrics: [2014/11/04 23:32:49.396649, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:750(init_globals) Initialising global parameters [2014/11/04 23:32:49.396671, 2, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:543(max_open_files) rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) [2014/11/04 23:32:49.396707, 3, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/tmp/qemu-smb.20439-0/smb.conf" [2014/11/04 23:32:49.396727, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3565(do_section) Processing section "[global]" doing parameter log level = 10 [2014/11/04 23:32:49.396753, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 doing parameter private dir = /tmp/qemu-smb.20439-0 doing parameter socket address = 127.0.0.1 [2014/11/04 23:32:49.396926, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3179(lp_do_parameter) WARNING: The "socket address" option is deprecated doing parameter pid directory = /tmp/qemu-smb.20439-0 doing parameter lock directory = /tmp/qemu-smb.20439-0 doing parameter state directory = /tmp/qemu-smb.20439-0 doing parameter ncalrpc dir = /tmp/qemu-smb.20439-0/ncalrpc doing parameter log file = /tmp/qemu-smb.20439-0/log.smbd doing parameter smb passwd file = /tmp/qemu-smb.20439-0/smbpasswd doing parameter security = user doing parameter map to guest = Bad User [2014/11/04 23:32:49.397038, 2, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section) Processing section "[qemu]" [2014/11/04 23:32:49.397075, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service) add_a_service: Creating snum = 0 for qemu [2014/11/04 23:32:49.397095, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1661(hash_a_service) hash_a_service: creating servicehash [2014/11/04 23:32:49.397119, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service) hash_a_service: hashing index 0 for service name qemu doing parameter path = /usr doing parameter read only = no doing parameter guest ok = yes doing parameter force user = root [2014/11/04 23:32:49.397195, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4878(lp_load_ex) pm_process() returned Yes [2014/11/04 23:32:49.397218, 7, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber) lp_servicenumber: couldn't find homes [2014/11/04 23:32:49.397250, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service) add_a_service: Creating snum = 1 for IPC$ [2014/11/04 23:32:49.397268, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service) hash_a_service: hashing index 1 for service name IPC$ [2014/11/04 23:32:49.397290, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1774(lp_add_ipc) adding IPC service [2014/11/04 23:32:49.397321, 6, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed) lp_file_list_changed() file /tmp/qemu-smb.20439-0/smb.conf -> /tmp/qemu-smb.20439-0/smb.conf last mod_time: Tue Nov 4 23:32:45 2014 [2014/11/04 23:32:49.410493, 2, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:341(add_interface) added interface eth0 ip=10.0.2.15 bcast=10.0.2.255 netmask=255.255.255.0 [2014/11/04 23:32:49.410588, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1248(main) loaded services [2014/11/04 23:32:49.410626, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util_names.c:144(init_names) Netbios name list:- my_netbios_names[0]="ARCH" [2014/11/04 23:32:49.410841, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) Attempting to register passdb backend samba_dsdb [2014/11/04 23:32:49.410873, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) Successfully added passdb backend 'samba_dsdb' [2014/11/04 23:32:49.410894, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) Attempting to register passdb backend samba4 [2014/11/04 23:32:49.410916, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) Successfully added passdb backend 'samba4' [2014/11/04 23:32:49.410939, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:153(make_pdb_method_name) Attempting to find a passdb backend to match tdbsam (tdbsam) [2014/11/04 23:32:49.410959, 2, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:159(make_pdb_method_name) No builtin backend found, trying to load plugin [2014/11/04 23:32:49.410984, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/modules.c:166(do_smb_load_module) Probing module 'tdbsam' [2014/11/04 23:32:49.411010, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/modules.c:180(do_smb_load_module) Probing module 'tdbsam': Trying to load from /usr/lib/samba/pdb/tdbsam.so [2014/11/04 23:32:49.411653, 2, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/modules.c:191(do_smb_load_module) Module 'tdbsam' loaded [2014/11/04 23:32:49.411681, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) Attempting to register passdb backend tdbsam [2014/11/04 23:32:49.411703, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) Successfully added passdb backend 'tdbsam' [2014/11/04 23:32:49.411725, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:174(make_pdb_method_name) Found pdb backend tdbsam [2014/11/04 23:32:49.411751, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:185(make_pdb_method_name) pdb backend tdbsam has a valid init [2014/11/04 23:32:49.411845, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/secrets.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.411874, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/secrets.tdb [2014/11/04 23:32:49.411903, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/secrets.tdb 2: 3: [2014/11/04 23:32:49.411928, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 534543524554532F5349 [2014/11/04 23:32:49.411956, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b921f40 [2014/11/04 23:32:49.412003, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 534543524554532F5349 [2014/11/04 23:32:49.412028, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/secrets.tdb [2014/11/04 23:32:49.412051, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.412078, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/secrets.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.412293, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_version_global.tdb [2014/11/04 23:32:49.412318, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_version_global.tdb 2: 3: [2014/11/04 23:32:49.412341, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 736D62587372765F7665 [2014/11/04 23:32:49.412364, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b921fc0 [2014/11/04 23:32:49.412476, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 736D62587372765F7665 [2014/11/04 23:32:49.412501, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_version_global.tdb [2014/11/04 23:32:49.412521, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.412543, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:245(smbXsrv_version_global_init) smbXsrv_version_global_init [2014/11/04 23:32:49.412564, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:246(smbXsrv_version_global_init) [2014/11/04 23:32:49.412580, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &global_blob: struct smbXsrv_version_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_version_globalU(case 0) info0 : * info0: struct smbXsrv_version_global0 db_rec : NULL num_nodes : 0x00000001 (1) nodes: ARRAY(1) nodes: struct smbXsrv_version_node0 server_id: struct server_id pid : 0x0000000000004ff1 (20465) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xc9f4c94e3e9b98e7 (-3894266439873619737) min_version : SMBXSRV_VERSION_0 (0) max_version : SMBXSRV_VERSION_0 (0) current_version : SMBXSRV_VERSION_0 (0) [2014/11/04 23:32:49.413120, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 784 - private_data=0x7f508b922d10 [2014/11/04 23:32:49.413163, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 788 - private_data=0x7f508b9241b0 [2014/11/04 23:32:49.413225, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 789 - private_data=0x7f508b924d70 [2014/11/04 23:32:49.413360, 2, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_open_ex: could not open file /tmp/qemu-smb.20439-0/registry.tdb: No such file or directory [2014/11/04 23:32:49.413389, 3, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:432(db_open_tdb) Could not open tdb: No such file or directory [2014/11/04 23:32:49.413469, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.413500, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.413525, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 494E464F2F7665727369 [2014/11/04 23:32:49.413548, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b925d30 [2014/11/04 23:32:49.413584, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 494E464F2F7665727369 [2014/11/04 23:32:49.413607, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.413628, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.414020, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:496(regdb_store_regdb_version) regdb_store_regdb_version: stored INFO/version = 3 [2014/11/04 23:32:49.414050, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:754(regdb_init) regdb_init: Successfully created registry tdb [2014/11/04 23:32:49.414072, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:759(regdb_init) regdb_init: registry db openend. refcount reset (1) [2014/11/04 23:32:49.414102, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:70(reghook_cache_init) reghook_cache_init: new tree with default ops 0x7f5089ee76c0 for key [] [2014/11/04 23:32:49.414154, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.414187, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM] not found [2014/11/04 23:32:49.414219, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.414242, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.414266, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D00 [2014/11/04 23:32:49.414287, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927a80 [2014/11/04 23:32:49.414314, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D00 [2014/11/04 23:32:49.414337, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.414358, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.414391, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.414431, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.414455, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.414486, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D00 [2014/11/04 23:32:49.414508, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927540 [2014/11/04 23:32:49.414571, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D00 [2014/11/04 23:32:49.414611, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.414633, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.414664, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SOFTWARE] not found [2014/11/04 23:32:49.414690, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.414713, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.414738, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.414761, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.414789, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.414812, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.414834, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.414865, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.414896, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.414920, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.414945, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.414968, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.414997, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.415020, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.415042, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.415069, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Microsoft] not found [2014/11/04 23:32:49.415093, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.415124, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.415149, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.415172, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.415199, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.415222, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.415244, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.415273, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.415304, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.415328, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.415352, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.415375, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.415404, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.415427, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.415449, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.415475, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Microsoft\Windows NT] not found [2014/11/04 23:32:49.415500, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.415522, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.415546, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.415569, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.415596, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.415619, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.415640, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.415671, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.415710, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.415735, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.415759, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.415782, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.415811, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.415834, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.415856, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.415883, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] not found [2014/11/04 23:32:49.415907, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.415930, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.415954, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.415977, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.416004, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.416027, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.416048, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.416079, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.416110, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.416133, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.416158, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.416181, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.416208, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.416231, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.416253, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.416288, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print] not found [2014/11/04 23:32:49.416313, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.416335, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.416359, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.416382, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.416409, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.416432, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.416454, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.416484, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.416950, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.416986, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.417355, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.417392, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927830 [2014/11/04 23:32:49.417422, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.417445, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.417468, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.417497, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] not found [2014/11/04 23:32:49.417523, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.417546, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.417570, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.417594, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.417622, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.417645, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.417677, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.417707, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.417780, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.417816, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.417840, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.417865, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.417888, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927930 [2014/11/04 23:32:49.417916, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.417939, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.417961, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.417989, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] not found [2014/11/04 23:32:49.418014, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.418036, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.418061, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.418084, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a0e0 [2014/11/04 23:32:49.418111, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.418134, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.418156, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.418184, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.418219, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.418251, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.418275, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.418299, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D00 [2014/11/04 23:32:49.418331, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9278f0 [2014/11/04 23:32:49.418360, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D00 [2014/11/04 23:32:49.418383, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.418405, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.418432, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM] not found [2014/11/04 23:32:49.418457, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.418479, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.418504, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.418527, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a070 [2014/11/04 23:32:49.418569, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.418594, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.418616, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.418646, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.418677, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.418701, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.418726, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.418750, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.418779, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.418802, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.418824, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.418851, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet] not found [2014/11/04 23:32:49.418875, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.418898, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.418930, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.418954, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.418982, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.419005, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.419027, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.419057, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.419088, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.419112, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.419137, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.419160, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.419187, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.419210, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.419232, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.419259, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control] not found [2014/11/04 23:32:49.419283, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.419306, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.419330, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.419353, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.419380, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.419403, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.419425, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.419455, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.419485, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.419517, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.419542, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.419566, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.419593, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.419616, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.419638, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.419665, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print] not found [2014/11/04 23:32:49.419689, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.419711, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.419735, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.419758, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.419786, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.419809, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.419830, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.419891, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.419960, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.419993, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.420017, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.420041, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.420065, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927820 [2014/11/04 23:32:49.420093, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.420116, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.420137, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.420176, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Forms] not found [2014/11/04 23:32:49.420203, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.420226, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.420250, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.420273, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.420301, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.420324, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.420345, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.420373, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.420437, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.420471, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.420495, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.420520, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.420543, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b926020 [2014/11/04 23:32:49.420573, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.420596, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.420618, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.420645, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] not found [2014/11/04 23:32:49.420670, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.420692, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.420717, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.420740, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a0e0 [2014/11/04 23:32:49.420767, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.420798, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.420821, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.420849, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.420915, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.420951, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.420975, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.420999, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.421023, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.421050, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.421073, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.421095, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.421122, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments] not found [2014/11/04 23:32:49.421146, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.421169, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.421194, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.421217, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a2f0 [2014/11/04 23:32:49.421244, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.421267, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.421289, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.421320, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.421351, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.421375, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.421400, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.421431, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927800 [2014/11/04 23:32:49.421458, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.421481, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.421503, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.421530, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86] not found [2014/11/04 23:32:49.421555, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.421578, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.421602, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.421625, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a0e0 [2014/11/04 23:32:49.421652, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.421675, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.421697, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.421727, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.421759, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.421783, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.421807, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.421830, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927860 [2014/11/04 23:32:49.421857, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.421879, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.421901, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.421928, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Print Processors] not found [2014/11/04 23:32:49.421953, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.421983, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.422009, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.422032, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a0e0 [2014/11/04 23:32:49.422060, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.422083, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.422105, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.422136, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.422168, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.422191, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.422216, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.422239, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9275f0 [2014/11/04 23:32:49.422266, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.422289, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.422311, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.422338, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Print Processors\winprint] not found [2014/11/04 23:32:49.422363, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.422386, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.422410, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.422433, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a0e0 [2014/11/04 23:32:49.422460, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.422483, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.422505, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.422533, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.422606, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.422641, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.422665, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.422690, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.422713, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927820 [2014/11/04 23:32:49.422743, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.422766, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.422788, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.422814, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services] not found [2014/11/04 23:32:49.422839, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.422862, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.422886, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.422909, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a0e0 [2014/11/04 23:32:49.422936, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.422960, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.422982, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.423012, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.423042, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.423066, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.423090, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.423114, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927520 [2014/11/04 23:32:49.423141, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.423163, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.423209, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.423240, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer] not found [2014/11/04 23:32:49.423265, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.423288, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.423312, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.423335, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a070 [2014/11/04 23:32:49.423362, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.423385, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.423407, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.423437, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.423469, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.423493, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.423517, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.423541, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9276f0 [2014/11/04 23:32:49.423567, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.423590, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.423612, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.423639, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] not found [2014/11/04 23:32:49.423663, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.424064, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.424094, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.424120, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.424149, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.424182, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.424205, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.424235, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.424298, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.424332, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.424357, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.424381, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.424405, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9278a0 [2014/11/04 23:32:49.424435, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.424458, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.424480, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.424507, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] not found [2014/11/04 23:32:49.424531, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.424554, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.424579, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.424602, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a160 [2014/11/04 23:32:49.424629, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.424652, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.424674, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.424701, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.424746, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.424778, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.424803, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.424835, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.424859, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9278c0 [2014/11/04 23:32:49.424887, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.424909, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.424931, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.424958, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Samba] not found [2014/11/04 23:32:49.424982, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.425005, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.425029, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.425053, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a0e0 [2014/11/04 23:32:49.425080, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.425103, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.425125, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.425155, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.425185, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.425209, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.425233, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.425257, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.425284, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.425307, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.425329, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.425355, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Samba\smbconf] not found [2014/11/04 23:32:49.425380, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.425410, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.425435, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.425458, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.425486, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.425509, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.425530, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.425558, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.425626, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.425661, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.425685, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.425710, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.425733, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.425763, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.425786, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.425808, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.425835, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] not found [2014/11/04 23:32:49.425860, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.425883, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.425907, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.425930, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a1d0 [2014/11/04 23:32:49.425957, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.425980, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.426002, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.426038, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.426113, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.426145, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.426169, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.426193, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.426217, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927670 [2014/11/04 23:32:49.426244, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.426267, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.426289, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.426316, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] not found [2014/11/04 23:32:49.426341, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.426363, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.426388, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.426411, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.426438, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.426461, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.426483, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.426511, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.426640, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.426680, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.426697, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.426714, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.426730, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a140 [2014/11/04 23:32:49.426757, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.426774, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.426789, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.426808, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Group Policy] not found [2014/11/04 23:32:49.426825, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.426841, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.426857, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.426873, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a320 [2014/11/04 23:32:49.426892, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.426908, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.426924, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.426943, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.426980, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.427003, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.427019, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.427036, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.427053, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927960 [2014/11/04 23:32:49.427073, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.427089, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.427104, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.427123, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Samba\Group Policy] not found [2014/11/04 23:32:49.427140, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.427156, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.427178, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.427195, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a0e0 [2014/11/04 23:32:49.427214, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.427230, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.427245, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.427264, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.427296, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.427319, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.427336, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.427353, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.427369, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.427390, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.427405, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.427421, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.427439, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\Software\Policies] not found [2014/11/04 23:32:49.427456, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.427472, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.427489, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.427504, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a1d0 [2014/11/04 23:32:49.427523, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.427539, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.427554, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.427574, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.427617, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.427640, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.427657, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.427674, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.427690, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927930 [2014/11/04 23:32:49.427709, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.427725, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.427740, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.427758, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\Software\Microsoft\Windows] not found [2014/11/04 23:32:49.427775, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.427791, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.427808, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.427824, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a0f0 [2014/11/04 23:32:49.427842, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.427858, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.427874, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.427895, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.427916, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.427933, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.427950, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.427966, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9278e0 [2014/11/04 23:32:49.427986, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.428001, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428022, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.428041, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\Software\Microsoft\Windows\CurrentVersion] not found [2014/11/04 23:32:49.428058, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428074, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.428091, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.428107, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a070 [2014/11/04 23:32:49.428125, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.428141, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428156, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.428178, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.428199, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428216, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.428233, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.428249, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927540 [2014/11/04 23:32:49.428267, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.428283, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428298, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.428317, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\Software\Microsoft\Windows\CurrentVersion\Policies] not found [2014/11/04 23:32:49.428334, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428350, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.428367, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.428382, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a070 [2014/11/04 23:32:49.428401, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.428422, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428438, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.428456, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.428475, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKCU] not found [2014/11/04 23:32:49.428491, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428507, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.428524, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B435500 [2014/11/04 23:32:49.428539, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929be0 [2014/11/04 23:32:49.428558, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B435500 [2014/11/04 23:32:49.428574, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428589, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.428608, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.428629, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.428649, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428665, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.428682, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B435500 [2014/11/04 23:32:49.428698, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.428717, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B435500 [2014/11/04 23:32:49.428732, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428748, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.428766, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKCU\Software] not found [2014/11/04 23:32:49.428783, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428798, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.428821, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B43555C534F465457 [2014/11/04 23:32:49.428837, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.428856, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B43555C534F465457 [2014/11/04 23:32:49.428872, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428887, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.428907, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.428928, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.428944, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.428961, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B43555C534F465457 [2014/11/04 23:32:49.428977, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.428996, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B43555C534F465457 [2014/11/04 23:32:49.429012, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429027, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.429045, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKCU\Software\Policies] not found [2014/11/04 23:32:49.429062, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429077, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.429094, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B43555C534F465457 [2014/11/04 23:32:49.429110, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.429129, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B43555C534F465457 [2014/11/04 23:32:49.429145, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429160, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.429179, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.429207, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.429235, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429252, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.429269, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B43555C534F465457 [2014/11/04 23:32:49.429285, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b927560 [2014/11/04 23:32:49.429304, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B43555C534F465457 [2014/11/04 23:32:49.429319, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429335, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.429353, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKCU\Software\Microsoft] not found [2014/11/04 23:32:49.429370, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429385, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.429402, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B43555C534F465457 [2014/11/04 23:32:49.429418, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a0e0 [2014/11/04 23:32:49.429437, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B43555C534F465457 [2014/11/04 23:32:49.429453, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429468, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.429488, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.429509, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429525, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.429542, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B43555C534F465457 [2014/11/04 23:32:49.429558, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929d50 [2014/11/04 23:32:49.429577, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B43555C534F465457 [2014/11/04 23:32:49.429593, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429608, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.429626, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKCU\Software\Microsoft\Windows] not found [2014/11/04 23:32:49.429648, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429665, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.429681, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B43555C534F465457 [2014/11/04 23:32:49.429697, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a070 [2014/11/04 23:32:49.429716, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B43555C534F465457 [2014/11/04 23:32:49.429732, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429747, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.429767, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.429789, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429805, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.429822, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B43555C534F465457 [2014/11/04 23:32:49.429838, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.429872, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B43555C534F465457 [2014/11/04 23:32:49.429889, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429905, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.429924, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKCU\Software\Microsoft\Windows\CurrentVersion] not found [2014/11/04 23:32:49.429941, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.429956, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.429973, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B43555C534F465457 [2014/11/04 23:32:49.429989, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.430008, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B43555C534F465457 [2014/11/04 23:32:49.430023, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.430044, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.430066, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.430088, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.430105, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.430122, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B43555C534F465457 [2014/11/04 23:32:49.430138, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.430156, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B43555C534F465457 [2014/11/04 23:32:49.430172, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.430187, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.430205, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKCU\Software\Microsoft\Windows\CurrentVersion\Policies] not found [2014/11/04 23:32:49.430222, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.430238, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.430254, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B43555C534F465457 [2014/11/04 23:32:49.430270, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.430289, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B43555C534F465457 [2014/11/04 23:32:49.430305, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.430320, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.430339, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.430392, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.430419, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.430436, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.430453, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.430470, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a1c0 [2014/11/04 23:32:49.430494, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.430511, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.430527, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.430555, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] not found [2014/11/04 23:32:49.430573, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.430588, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.430605, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.430621, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a4f0 [2014/11/04 23:32:49.430640, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.430656, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.430672, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.430694, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.430716, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.430732, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.430749, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.430765, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.430784, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.430800, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.430816, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.430835, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions] not found [2014/11/04 23:32:49.430852, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.430868, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.430885, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.430906, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.430926, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C534F465457 [2014/11/04 23:32:49.430942, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.430957, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.430976, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.431025, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.431051, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.431068, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.431085, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.431101, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a0e0 [2014/11/04 23:32:49.431121, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.431137, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.431153, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.431171, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] not found [2014/11/04 23:32:49.431188, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.431204, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.431221, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.431237, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a3f0 [2014/11/04 23:32:49.431255, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.431271, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.431287, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.431306, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.431347, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.431376, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.431393, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.431410, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.431427, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9273b0 [2014/11/04 23:32:49.431447, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.431463, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.431478, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.431497, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] not found [2014/11/04 23:32:49.431514, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.431529, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.431546, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.431563, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a160 [2014/11/04 23:32:49.431581, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.431597, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.431612, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.431632, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.431674, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.431699, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.431716, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.431733, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.431749, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a0a0 [2014/11/04 23:32:49.431768, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.431784, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.431805, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.431824, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server] not found [2014/11/04 23:32:49.431841, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.431857, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.431873, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.431889, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a2f0 [2014/11/04 23:32:49.431908, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.431924, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.431939, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.431961, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.431983, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.431999, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.432016, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432032, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9278c0 [2014/11/04 23:32:49.432052, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432068, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.432083, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.432102, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration] not found [2014/11/04 23:32:49.432119, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.432135, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.432152, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432168, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a060 [2014/11/04 23:32:49.432186, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432207, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.432223, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.432243, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.432286, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.432310, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.432327, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.432344, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432360, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.432379, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432395, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.432410, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.432429, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip] not found [2014/11/04 23:32:49.432446, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.432462, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.432478, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432494, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a1d0 [2014/11/04 23:32:49.432513, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432529, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.432544, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.432565, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.432587, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.432604, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.432621, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432642, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929cd0 [2014/11/04 23:32:49.432662, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432678, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.432693, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.432712, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] not found [2014/11/04 23:32:49.432729, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.432744, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.432761, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432777, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.432796, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432812, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.432827, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.432846, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.432889, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.432914, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.432930, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.432947, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432963, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.432982, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.432998, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433013, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.433032, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon] not found [2014/11/04 23:32:49.433054, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433071, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.433088, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.433104, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92a310 [2014/11/04 23:32:49.433122, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.433138, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433154, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.433175, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.433212, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433229, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.433246, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.433262, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ca0 [2014/11/04 23:32:49.433281, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.433298, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433313, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.433331, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] not found [2014/11/04 23:32:49.433348, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433364, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.433381, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.433397, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ff0 [2014/11/04 23:32:49.433415, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.433431, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433446, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.433465, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.433489, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKU] not found [2014/11/04 23:32:49.433506, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433522, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.433539, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B5500 [2014/11/04 23:32:49.433555, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9260a0 [2014/11/04 23:32:49.433574, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B5500 [2014/11/04 23:32:49.433589, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433605, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.433623, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.433640, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKCR] not found [2014/11/04 23:32:49.433657, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433673, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.433689, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B435200 [2014/11/04 23:32:49.433705, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9275b0 [2014/11/04 23:32:49.433724, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B435200 [2014/11/04 23:32:49.433739, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433754, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.433772, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.433790, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKPD] not found [2014/11/04 23:32:49.433806, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433822, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.433838, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B504400 [2014/11/04 23:32:49.433854, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9260a0 [2014/11/04 23:32:49.433878, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B504400 [2014/11/04 23:32:49.433894, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433909, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.433927, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.433945, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKPT] not found [2014/11/04 23:32:49.433961, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.433977, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.433993, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B505400 [2014/11/04 23:32:49.434009, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9275b0 [2014/11/04 23:32:49.434027, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B505400 [2014/11/04 23:32:49.434043, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.434058, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.434076, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2014/11/04 23:32:49.434123, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2014/11/04 23:32:49.434151, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.434168, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.434183, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.434200, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.434216, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929be0 [2014/11/04 23:32:49.434236, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.434252, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.434267, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.434289, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2014/11/04 23:32:49.434312, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2014/11/04 23:32:49.434333, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.434349, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.434364, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.434381, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.434398, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929ca0 [2014/11/04 23:32:49.434416, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.434432, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.434448, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.434465, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.434486, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.434506, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.434521, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.434545, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.434563, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.434580, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929c60 [2014/11/04 23:32:49.434599, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.434620, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.434636, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.434658, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.434686, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[DisplayName] len[20] [2014/11/04 23:32:49.434710, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.434735, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.434753, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.434771, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.434793, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.434814, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b929be0 [2014/11/04 23:32:49.434837, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.434854, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.434874, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.434914, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f508a40d540 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] [2014/11/04 23:32:49.434936, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.434962, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] to tree [2014/11/04 23:32:49.434983, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.435005, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f5089ee76c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2014/11/04 23:32:49.435026, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.435046, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] to tree [2014/11/04 23:32:49.435065, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.435086, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f5089ee76c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2014/11/04 23:32:49.435106, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.435124, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] to tree [2014/11/04 23:32:49.435147, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.435169, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f508a40d5c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] [2014/11/04 23:32:49.435189, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.435206, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] to tree [2014/11/04 23:32:49.435227, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.435247, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f5088f13600 for key [\HKLM\SOFTWARE\Samba\smbconf] [2014/11/04 23:32:49.435265, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.435283, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree [2014/11/04 23:32:49.435304, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.435324, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f508a40d640 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] [2014/11/04 23:32:49.435342, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.435361, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] to tree [2014/11/04 23:32:49.435381, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.435399, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f508a40d6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] [2014/11/04 23:32:49.435417, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.435438, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] to tree [2014/11/04 23:32:49.435458, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.435474, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f508a40d740 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] [2014/11/04 23:32:49.435494, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.435515, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] to tree [2014/11/04 23:32:49.435535, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.435550, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f508a40d7c0 for key [\HKPT] [2014/11/04 23:32:49.435574, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.435596, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKPT] to tree [2014/11/04 23:32:49.435616, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.435633, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f508a40d840 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] [2014/11/04 23:32:49.435651, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.435672, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] to tree [2014/11/04 23:32:49.435691, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.435707, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f508a40d8c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] [2014/11/04 23:32:49.435727, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.435748, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] to tree [2014/11/04 23:32:49.435766, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.435785, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2014/11/04 23:32:49.435865, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/share_info.tdb [2014/11/04 23:32:49.435893, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/share_info.tdb 2: 3: [2014/11/04 23:32:49.435915, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 494E464F2F7665727369 [2014/11/04 23:32:49.435937, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9292d0 [2014/11/04 23:32:49.435964, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 494E464F2F7665727369 [2014/11/04 23:32:49.435985, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/share_info.tdb [2014/11/04 23:32:49.436001, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.436026, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/share_info.tdb [2014/11/04 23:32:49.436047, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/share_info.tdb 2: 3: [2014/11/04 23:32:49.436069, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 494E464F2F7665727369 [2014/11/04 23:32:49.436085, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9293c0 [2014/11/04 23:32:49.436109, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 494E464F2F7665727369 [2014/11/04 23:32:49.436135, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/share_info.tdb [2014/11/04 23:32:49.436155, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.436591, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.436622, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.436788, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.436830, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user ARCH\nobody [2014/11/04 23:32:49.436850, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is arch\nobody [2014/11/04 23:32:49.436887, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:128(Get_Pwnam_internals) Trying _Get_Pwnam(), username as given is ARCH\nobody [2014/11/04 23:32:49.436919, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:141(Get_Pwnam_internals) Trying _Get_Pwnam(), username as uppercase is ARCH\NOBODY [2014/11/04 23:32:49.436950, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:153(Get_Pwnam_internals) Checking combinations of 0 uppercase letters in arch\nobody [2014/11/04 23:32:49.436971, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals didn't find user [ARCH\nobody]! [2014/11/04 23:32:49.436991, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.437007, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.437029, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.437066, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3) Create local NT token for nobody [2014/11/04 23:32:49.437091, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.437112, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.437133, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.437169, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) sys_getgrouplist: user [nobody] [2014/11/04 23:32:49.437264, 5, pid=20465, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:67(gencache_init) Opening cache file at /tmp/qemu-smb.20439-0/gencache.tdb [2014/11/04 23:32:49.437327, 5, pid=20465, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:110(gencache_init) Opening cache file at /tmp/qemu-smb.20439-0/gencache_notrans.tdb [2014/11/04 23:32:49.437395, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1212(gid_to_sid) gid_to_sid: winbind failed to find a sid for gid 99 [2014/11/04 23:32:49.437423, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.437443, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.437468, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.437486, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.437504, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.437579, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.437606, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1075(legacy_gid_to_sid) LEGACY: gid 99 -> sid S-1-22-2-99 [2014/11/04 23:32:49.437655, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1435(sid_to_gid) winbind failed to find a gid for sid S-1-5-32-544 [2014/11/04 23:32:49.437675, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.437690, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.437706, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.437721, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.437735, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.437778, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1526(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-544 [2014/11/04 23:32:49.437798, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.437814, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-544 [2014/11/04 23:32:49.437831, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.437846, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.437861, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.437876, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.437891, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.437918, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:540(finalize_local_nt_token) Failed to fetch domain sid for WORKGROUP [2014/11/04 23:32:49.437936, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.437960, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1435(sid_to_gid) winbind failed to find a gid for sid S-1-5-32-545 [2014/11/04 23:32:49.437976, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.437992, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.438012, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.438028, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.438043, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.438070, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1526(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-545 [2014/11/04 23:32:49.438089, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.438105, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-545 [2014/11/04 23:32:49.438120, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.438135, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.438150, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.438165, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.438180, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.438208, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:571(finalize_local_nt_token) Failed to fetch domain sid for WORKGROUP [2014/11/04 23:32:49.438226, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.438243, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.438258, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.438273, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.438288, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.438303, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.438355, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.438389, 2, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/account_policy.tdb): tdb_open_ex: could not open file /tmp/qemu-smb.20439-0/account_policy.tdb: No such file or directory [2014/11/04 23:32:49.438407, 3, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:432(db_open_tdb) Could not open tdb: No such file or directory [2014/11/04 23:32:49.438457, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.438480, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.438503, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 494E464F2F7665727369 [2014/11/04 23:32:49.438520, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92d3a0 [2014/11/04 23:32:49.438575, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 494E464F2F7665727369 [2014/11/04 23:32:49.438596, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.438612, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.438631, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:346(account_policy_get) account_policy_get: tdb_fetch_uint32 failed for type 1 (min password length), returning 0 [2014/11/04 23:32:49.438650, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/account_policy.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.438667, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.438682, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.438699, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 6D696E2070617373776F [2014/11/04 23:32:49.438715, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92f510 [2014/11/04 23:32:49.438732, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 6D696E2070617373776F [2014/11/04 23:32:49.438747, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.438762, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.438778, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:385(account_policy_set) account_policy_set: name: min password length, value: 5 [2014/11/04 23:32:49.438794, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:346(account_policy_get) account_policy_get: tdb_fetch_uint32 failed for type 2 (password history), returning 0 [2014/11/04 23:32:49.438810, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/account_policy.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.438825, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.438840, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.438857, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 70617373776F72642068 [2014/11/04 23:32:49.438872, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92f5f0 [2014/11/04 23:32:49.438889, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 70617373776F72642068 [2014/11/04 23:32:49.438909, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.438925, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.438941, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:385(account_policy_set) account_policy_set: name: password history, value: 0 [2014/11/04 23:32:49.438957, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:346(account_policy_get) account_policy_get: tdb_fetch_uint32 failed for type 3 (user must logon to change password), returning 0 [2014/11/04 23:32:49.438973, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/account_policy.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.438989, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.439004, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.439020, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 75736572206D75737420 [2014/11/04 23:32:49.439036, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92f740 [2014/11/04 23:32:49.439053, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 75736572206D75737420 [2014/11/04 23:32:49.439068, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.439083, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.439099, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:385(account_policy_set) account_policy_set: name: user must logon to change password, value: 0 [2014/11/04 23:32:49.439114, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:346(account_policy_get) account_policy_get: tdb_fetch_uint32 failed for type 4 (maximum password age), returning 0 [2014/11/04 23:32:49.439130, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/account_policy.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.439145, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.439161, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.439177, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 6D6178696D756D207061 [2014/11/04 23:32:49.439193, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92f890 [2014/11/04 23:32:49.439210, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 6D6178696D756D207061 [2014/11/04 23:32:49.439225, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.439240, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.439255, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:385(account_policy_set) account_policy_set: name: maximum password age, value: -1 [2014/11/04 23:32:49.439276, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:346(account_policy_get) account_policy_get: tdb_fetch_uint32 failed for type 5 (minimum password age), returning 0 [2014/11/04 23:32:49.439293, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/account_policy.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.439308, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.439323, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.439340, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 6D696E696D756D207061 [2014/11/04 23:32:49.439355, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92f9e0 [2014/11/04 23:32:49.439372, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 6D696E696D756D207061 [2014/11/04 23:32:49.439387, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.439402, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.439418, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:385(account_policy_set) account_policy_set: name: minimum password age, value: 0 [2014/11/04 23:32:49.439433, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:346(account_policy_get) account_policy_get: tdb_fetch_uint32 failed for type 6 (lockout duration), returning 0 [2014/11/04 23:32:49.439449, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/account_policy.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.439464, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.439479, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.439496, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 6C6F636B6F7574206475 [2014/11/04 23:32:49.439511, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92fb30 [2014/11/04 23:32:49.439528, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 6C6F636B6F7574206475 [2014/11/04 23:32:49.439543, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.439558, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.439574, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:385(account_policy_set) account_policy_set: name: lockout duration, value: 30 [2014/11/04 23:32:49.439589, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:346(account_policy_get) account_policy_get: tdb_fetch_uint32 failed for type 7 (reset count minutes), returning 0 [2014/11/04 23:32:49.439605, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/account_policy.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.439625, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.439641, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.439657, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 726573657420636F756E [2014/11/04 23:32:49.439673, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92fc80 [2014/11/04 23:32:49.439690, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 726573657420636F756E [2014/11/04 23:32:49.439705, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.439720, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.439735, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:385(account_policy_set) account_policy_set: name: reset count minutes, value: 30 [2014/11/04 23:32:49.439751, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:346(account_policy_get) account_policy_get: tdb_fetch_uint32 failed for type 8 (bad lockout attempt), returning 0 [2014/11/04 23:32:49.439767, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/account_policy.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.439782, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.439797, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.439813, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 626164206C6F636B6F75 [2014/11/04 23:32:49.439829, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92fdd0 [2014/11/04 23:32:49.439846, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 626164206C6F636B6F75 [2014/11/04 23:32:49.439882, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.439897, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.439913, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:385(account_policy_set) account_policy_set: name: bad lockout attempt, value: 0 [2014/11/04 23:32:49.439929, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:346(account_policy_get) account_policy_get: tdb_fetch_uint32 failed for type 9 (disconnect time), returning 0 [2014/11/04 23:32:49.439945, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/account_policy.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.439960, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.439975, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.439998, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 646973636F6E6E656374 [2014/11/04 23:32:49.440015, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92ff20 [2014/11/04 23:32:49.440037, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 646973636F6E6E656374 [2014/11/04 23:32:49.440052, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.440067, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.440083, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:385(account_policy_set) account_policy_set: name: disconnect time, value: -1 [2014/11/04 23:32:49.440099, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:346(account_policy_get) account_policy_get: tdb_fetch_uint32 failed for type 10 (refuse machine password change), returning 0 [2014/11/04 23:32:49.440115, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/account_policy.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.440130, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.440145, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.440162, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 726566757365206D6163 [2014/11/04 23:32:49.440178, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b930070 [2014/11/04 23:32:49.440195, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 726566757365206D6163 [2014/11/04 23:32:49.440210, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.440225, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.440241, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:385(account_policy_set) account_policy_set: name: refuse machine password change, value: 0 [2014/11/04 23:32:49.440261, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-1-0] [2014/11/04 23:32:49.440278, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:353(grant_privilege_bitmap) grant_privilege: S-1-1-0 original privilege mask: 0x0 new privilege mask: 0x0 [2014/11/04 23:32:49.440307, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.440323, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.440339, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 505249565F532D312D31 [2014/11/04 23:32:49.440355, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b930380 [2014/11/04 23:32:49.440378, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 505249565F532D312D31 [2014/11/04 23:32:49.440393, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.440408, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.440426, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-548] [2014/11/04 23:32:49.440442, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:353(grant_privilege_bitmap) grant_privilege: S-1-5-32-548 original privilege mask: 0x0 new privilege mask: 0x0 [2014/11/04 23:32:49.440469, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.440484, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.440501, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 505249565F532D312D35 [2014/11/04 23:32:49.440516, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9305d0 [2014/11/04 23:32:49.440533, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 505249565F532D312D35 [2014/11/04 23:32:49.440548, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.440563, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.440580, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-549] [2014/11/04 23:32:49.440596, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:353(grant_privilege_bitmap) grant_privilege: S-1-5-32-549 original privilege mask: 0x0 new privilege mask: 0x0 [2014/11/04 23:32:49.440623, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.440639, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.440655, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 505249565F532D312D35 [2014/11/04 23:32:49.440670, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b930820 [2014/11/04 23:32:49.440687, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 505249565F532D312D35 [2014/11/04 23:32:49.440702, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.440717, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.440734, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-550] [2014/11/04 23:32:49.440750, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:353(grant_privilege_bitmap) grant_privilege: S-1-5-32-550 original privilege mask: 0x0 new privilege mask: 0x0 [2014/11/04 23:32:49.440782, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.440798, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.440815, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 505249565F532D312D35 [2014/11/04 23:32:49.440830, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b930a70 [2014/11/04 23:32:49.440847, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 505249565F532D312D35 [2014/11/04 23:32:49.440862, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.440877, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.440894, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-551] [2014/11/04 23:32:49.440910, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:353(grant_privilege_bitmap) grant_privilege: S-1-5-32-551 original privilege mask: 0x0 new privilege mask: 0x0 [2014/11/04 23:32:49.440937, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.440953, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.440969, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 505249565F532D312D35 [2014/11/04 23:32:49.440985, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b930cc0 [2014/11/04 23:32:49.441002, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 505249565F532D312D35 [2014/11/04 23:32:49.441017, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.441032, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.441052, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-544] [2014/11/04 23:32:49.441069, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:353(grant_privilege_bitmap) grant_privilege: S-1-5-32-544 original privilege mask: 0x1ffffff0 new privilege mask: 0x1ffffff0 [2014/11/04 23:32:49.441096, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.441111, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/account_policy.tdb 2: 3: [2014/11/04 23:32:49.441128, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 505249565F532D312D35 [2014/11/04 23:32:49.441144, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b930f10 [2014/11/04 23:32:49.441164, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 505249565F532D312D35 [2014/11/04 23:32:49.441179, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/account_policy.tdb [2014/11/04 23:32:49.441195, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.441310, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-2629826569-4057080478-97288662-501] [2014/11/04 23:32:49.441332, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-2629826569-4057080478-97288662-514] [2014/11/04 23:32:49.441351, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-99] [2014/11/04 23:32:49.441370, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: 0x0 [2014/11/04 23:32:49.441394, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2014/11/04 23:32:49.441412, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2014/11/04 23:32:49.441458, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1280(sids_to_unixids) wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE [2014/11/04 23:32:49.441478, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.441494, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.441510, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.441525, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.441540, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.441565, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1712(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 501. [2014/11/04 23:32:49.441584, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.441600, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2014/11/04 23:32:49.441615, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.441630, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.441645, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.441668, 6, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:413(pdb_getsampwsid) pdb_getsampwsid: Building guest account [2014/11/04 23:32:49.441686, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.441703, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.441719, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.441737, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:570(pdb_set_username) pdb_set_username: setting username nobody, was [2014/11/04 23:32:49.441756, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:639(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2014/11/04 23:32:49.441774, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:593(pdb_set_domain) pdb_set_domain: setting domain ARCH, was [2014/11/04 23:32:49.441793, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:495(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2629826569-4057080478-97288662-501 [2014/11/04 23:32:49.441810, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2629826569-4057080478-97288662-501 from rid 501 [2014/11/04 23:32:49.441833, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.441852, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.441867, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.441883, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.441900, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.441916, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.441931, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.441946, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.441961, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.441975, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.441998, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1712(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 501. [2014/11/04 23:32:49.442014, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.442029, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2014/11/04 23:32:49.442044, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.442059, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.442073, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.442097, 6, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:413(pdb_getsampwsid) pdb_getsampwsid: Building guest account [2014/11/04 23:32:49.442112, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.442127, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.442142, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.442157, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:570(pdb_set_username) pdb_set_username: setting username nobody, was [2014/11/04 23:32:49.442173, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:639(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2014/11/04 23:32:49.442188, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:593(pdb_set_domain) pdb_set_domain: setting domain ARCH, was [2014/11/04 23:32:49.442205, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:495(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2629826569-4057080478-97288662-501 [2014/11/04 23:32:49.442221, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2629826569-4057080478-97288662-501 from rid 501 [2014/11/04 23:32:49.442248, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.442266, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.442281, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.442297, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.442313, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.442329, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.442344, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.442359, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.442374, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.442389, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.442411, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1712(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 514. [2014/11/04 23:32:49.442427, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.442443, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2014/11/04 23:32:49.442457, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.442473, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.442488, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.442592, 1, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:537(tdbsam_open) tdbsam_open: Converting version 0.0 database to version 4.0. [2014/11/04 23:32:49.442616, 1, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_local_open.c:184(dbwrap_local_open) WARNING: database '/tmp/qemu-smb.20439-0/passdb.tdb.tmp' does not end in .[n]tdb: treating it as a TDB file! [2014/11/04 23:32:49.442693, 1, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:304(tdbsam_convert_backup) tdbsam_convert_backup: updated /tmp/qemu-smb.20439-0/passdb.tdb file. [2014/11/04 23:32:49.442727, 2, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util_tdb.c:313(tdb_log) tdb(/tmp/qemu-smb.20439-0/winbindd_idmap.tdb): tdb_open_ex: could not open file /tmp/qemu-smb.20439-0/winbindd_idmap.tdb: No such file or directory [2014/11/04 23:32:49.442750, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/passdb.tdb [2014/11/04 23:32:49.442766, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/passdb.tdb 2: 3: [2014/11/04 23:32:49.442784, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 4E4558545F52494400 [2014/11/04 23:32:49.442800, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92e590 [2014/11/04 23:32:49.442823, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 4E4558545F52494400 [2014/11/04 23:32:49.442839, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/passdb.tdb [2014/11/04 23:32:49.442853, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.442870, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/passdb.tdb [2014/11/04 23:32:49.442886, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/passdb.tdb 2: 3: [2014/11/04 23:32:49.442902, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 494E464F2F7665727369 [2014/11/04 23:32:49.442918, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92e590 [2014/11/04 23:32:49.442935, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 494E464F2F7665727369 [2014/11/04 23:32:49.442950, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/passdb.tdb [2014/11/04 23:32:49.442964, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.442980, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/passdb.tdb [2014/11/04 23:32:49.442995, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/passdb.tdb 2: 3: [2014/11/04 23:32:49.443012, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 494E464F2F6D696E6F72 [2014/11/04 23:32:49.443028, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92f6f0 [2014/11/04 23:32:49.443044, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 494E464F2F6D696E6F72 [2014/11/04 23:32:49.443059, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/passdb.tdb [2014/11/04 23:32:49.443074, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.443203, 3, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:547(tdbsam_open) TDBSAM converted successfully. [2014/11/04 23:32:49.443232, 4, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:552(tdbsam_open) tdbsam_open: successfully opened /tmp/qemu-smb.20439-0/passdb.tdb [2014/11/04 23:32:49.443251, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:646(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202. [2014/11/04 23:32:49.443274, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.443291, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1788(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2014/11/04 23:32:49.443306, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1498(pdb_default_sid_to_id) SID S-1-5-21-2629826569-4057080478-97288662-514 is or domain, but is unmapped [2014/11/04 23:32:49.443324, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.443339, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-2629826569-4057080478-97288662-514 [2014/11/04 23:32:49.443355, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.443370, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.443385, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.443400, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.443414, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.443441, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1712(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 514. [2014/11/04 23:32:49.443459, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.443474, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2014/11/04 23:32:49.443488, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.443503, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.443517, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.443543, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:646(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202. [2014/11/04 23:32:49.443564, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.443580, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1788(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2014/11/04 23:32:49.443595, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1498(pdb_default_sid_to_id) SID S-1-5-21-2629826569-4057080478-97288662-514 is or domain, but is unmapped [2014/11/04 23:32:49.443613, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.443628, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-2629826569-4057080478-97288662-514 [2014/11/04 23:32:49.443644, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.443659, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.443673, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.443688, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.443703, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.443729, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.443745, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-1-0 [2014/11/04 23:32:49.443761, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.443775, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.443790, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.443805, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.443819, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.443842, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.443857, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-1-0 [2014/11/04 23:32:49.443873, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.443888, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.443902, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.443918, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.443933, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.443955, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.443971, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-2 [2014/11/04 23:32:49.443986, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.444001, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.444016, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.444030, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.444045, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.444067, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.444083, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-2 [2014/11/04 23:32:49.444098, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.444112, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.444127, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.444142, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.444156, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.444182, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1526(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-546 [2014/11/04 23:32:49.444200, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.444215, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-546 [2014/11/04 23:32:49.444230, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.444245, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.444260, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.444275, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.444289, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.444320, 10, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1526(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-546 [2014/11/04 23:32:49.444339, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.444354, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-546 [2014/11/04 23:32:49.444370, 10, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token) Could not convert SID S-1-5-21-2629826569-4057080478-97288662-514 to gid, ignoring it [2014/11/04 23:32:49.444388, 10, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token) Could not convert SID S-1-1-0 to gid, ignoring it [2014/11/04 23:32:49.444404, 10, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token) Could not convert SID S-1-5-2 to gid, ignoring it [2014/11/04 23:32:49.444419, 10, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token) Could not convert SID S-1-5-32-546 to gid, ignoring it [2014/11/04 23:32:49.444440, 10, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (7): SID[ 0]: S-1-5-21-2629826569-4057080478-97288662-501 SID[ 1]: S-1-5-21-2629826569-4057080478-97288662-514 SID[ 2]: S-1-22-2-99 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-99 Privileges (0x 0): Rights (0x 0): [2014/11/04 23:32:49.444513, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 99 Primary group is 99 and contains 1 supplementary groups Group[ 0]: 99 [2014/11/04 23:32:49.444680, 3, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/svcctl/srv_svcctl_reg.c:565(svcctl_init_winreg) Initialise the svcctl registry keys if needed. [2014/11/04 23:32:49.444702, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.444718, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.444733, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.444748, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.444762, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.444803, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.444821, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2014/11/04 23:32:49.444895, 4, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2014/11/04 23:32:49.444920, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2014/11/04 23:32:49.444936, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2014/11/04 23:32:49.445044, 4, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2014/11/04 23:32:49.445108, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2014/11/04 23:32:49.445207, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2014/11/04 23:32:49.445225, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2014/11/04 23:32:49.445244, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2014/11/04 23:32:49.445260, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2014/11/04 23:32:49.445276, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.445290, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM] [2014/11/04 23:32:49.445323, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.445360, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f14f0000 result : WERR_OK [2014/11/04 23:32:49.445499, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f14f0000 keyname: struct winreg_String name_len : 0x0044 (68) name_size : 0x0044 (68) name : * name : 'SYSTEM\CurrentControlSet\Services' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2014/11/04 23:32:49.445677, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.445713, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.445729, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2014/11/04 23:32:49.445745, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.445760, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.445775, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.445789, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.445810, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.445827, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.445843, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.445857, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.445873, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.445887, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.445908, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.445925, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.445941, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.445955, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.445971, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.445985, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.446011, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.446030, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.446046, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.446077, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f14f0000 result : WERR_OK [2014/11/04 23:32:49.446152, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f14f0000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2014/11/04 23:32:49.446237, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.446272, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services' (ops 0x7f5089ee76c0) [2014/11/04 23:32:49.446288, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.446308, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.446337, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000004 (4) max_subkeylen : * max_subkeylen : 0x00000018 (24) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000000 (0) max_valnamelen : * max_valnamelen : 0x00000002 (2) max_valbufsize : * max_valbufsize : 0x00000000 (0) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.446562, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f14f0000 enum_index : 0x00000000 (0) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001a (26) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2014/11/04 23:32:49.446710, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.446741, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.446759, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x001a (26) size : 0x001a (26) name : * name : 'LanmanServer' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.446889, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f14f0000 enum_index : 0x00000001 (1) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001a (26) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2014/11/04 23:32:49.447032, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.447063, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.447079, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0012 (18) size : 0x001a (26) name : * name : 'Eventlog' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.447199, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f14f0000 enum_index : 0x00000002 (2) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001a (26) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2014/11/04 23:32:49.447338, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.447369, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.447385, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x000c (12) size : 0x001a (26) name : * name : 'Tcpip' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.447508, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f14f0000 enum_index : 0x00000003 (3) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001a (26) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2014/11/04 23:32:49.447647, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.447678, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.447694, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0012 (18) size : 0x001a (26) name : * name : 'Netlogon' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.447833, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0054 (84) name_size : 0x0054 (84) name : * name : 'SYSTEM\CurrentControlSet\Services\Spooler' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2014/11/04 23:32:49.448051, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.448082, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler' [2014/11/04 23:32:49.448100, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.448117, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.448133, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.448149, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.448165, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.448180, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.448195, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.448210, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.448235, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.448253, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.448268, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.448284, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.448299, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.448314, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.448329, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.448357, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.448375, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.448391, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.448406, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.448422, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.448437, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.448452, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.448467, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.448491, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.448508, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2014/11/04 23:32:49.448523, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.448539, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.448554, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.448569, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.448584, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.448601, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] not found [2014/11/04 23:32:49.448617, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.448643, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.448671, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.448692, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.448714, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.448731, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b931880 [2014/11/04 23:32:49.448759, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.448780, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.448795, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.448813, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] not found [2014/11/04 23:32:49.448831, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.448846, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.448863, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.448879, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9364f0 [2014/11/04 23:32:49.448897, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.448913, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.448927, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.448945, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2014/11/04 23:32:49.448961, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.448977, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.448991, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.449007, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.449022, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.449041, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.449059, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.449089, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f14f0000 action_taken : * action_taken : REG_CREATED_NEW_KEY (1) result : WERR_OK [2014/11/04 23:32:49.449191, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.449331, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.449363, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Start] [2014/11/04 23:32:49.449381, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.449397, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler' (ops 0x7f5089ee76c0) [2014/11/04 23:32:49.449412, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.449433, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.449450, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.449468, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.449484, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.449499, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.449516, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.449538, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b931bc0 [2014/11/04 23:32:49.449558, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.449573, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.449588, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.449605, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.449644, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.449773, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.449805, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Type] [2014/11/04 23:32:49.449821, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.449839, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.449882, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.449904, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.449920, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.449935, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.449952, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.449968, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b931f70 [2014/11/04 23:32:49.449993, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.450009, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.450024, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.450041, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.450080, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.450211, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.450242, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ErrorControl] [2014/11/04 23:32:49.450259, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.450276, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.450292, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.450312, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.450328, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.450343, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.450360, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.450376, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b933810 [2014/11/04 23:32:49.450401, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.450418, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.450433, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.450450, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.450493, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2014/11/04 23:32:49.450777, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.450809, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ObjectName] [2014/11/04 23:32:49.450825, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.450843, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.450860, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.450885, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.450902, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.450917, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.450934, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.450950, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b933f00 [2014/11/04 23:32:49.450970, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.450986, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.451001, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.451018, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.451061, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(28) [0] : 0x50 (80) [1] : 0x00 (0) [2] : 0x72 (114) [3] : 0x00 (0) [4] : 0x69 (105) [5] : 0x00 (0) [6] : 0x6e (110) [7] : 0x00 (0) [8] : 0x74 (116) [9] : 0x00 (0) [10] : 0x20 (32) [11] : 0x00 (0) [12] : 0x53 (83) [13] : 0x00 (0) [14] : 0x70 (112) [15] : 0x00 (0) [16] : 0x6f (111) [17] : 0x00 (0) [18] : 0x6f (111) [19] : 0x00 (0) [20] : 0x6c (108) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x72 (114) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) size : 0x0000001c (28) [2014/11/04 23:32:49.451349, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.451380, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:DisplayName] [2014/11/04 23:32:49.451397, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.451414, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.451431, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.451450, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.451466, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.451481, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.451497, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.451513, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b936770 [2014/11/04 23:32:49.451533, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.451548, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.451563, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.451580, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.451618, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(54) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x2f (47) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x61 (97) [21] : 0x00 (0) [22] : 0x6d (109) [23] : 0x00 (0) [24] : 0x62 (98) [25] : 0x00 (0) [26] : 0x61 (97) [27] : 0x00 (0) [28] : 0x2f (47) [29] : 0x00 (0) [30] : 0x73 (115) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x63 (99) [35] : 0x00 (0) [36] : 0x63 (99) [37] : 0x00 (0) [38] : 0x74 (116) [39] : 0x00 (0) [40] : 0x6c (108) [41] : 0x00 (0) [42] : 0x2f (47) [43] : 0x00 (0) [44] : 0x73 (115) [45] : 0x00 (0) [46] : 0x6d (109) [47] : 0x00 (0) [48] : 0x62 (98) [49] : 0x00 (0) [50] : 0x64 (100) [51] : 0x00 (0) [52] : 0x00 (0) [53] : 0x00 (0) size : 0x00000036 (54) [2014/11/04 23:32:49.452065, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.452097, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ImagePath] [2014/11/04 23:32:49.452113, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.452130, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.452151, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.452172, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.452188, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.452203, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.452219, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.452237, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b937000 [2014/11/04 23:32:49.452261, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.452277, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.452292, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.452308, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.452347, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(106) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x66 (102) [35] : 0x00 (0) [36] : 0x6f (111) [37] : 0x00 (0) [38] : 0x72 (114) [39] : 0x00 (0) [40] : 0x20 (32) [41] : 0x00 (0) [42] : 0x73 (115) [43] : 0x00 (0) [44] : 0x70 (112) [45] : 0x00 (0) [46] : 0x6f (111) [47] : 0x00 (0) [48] : 0x6f (111) [49] : 0x00 (0) [50] : 0x6c (108) [51] : 0x00 (0) [52] : 0x69 (105) [53] : 0x00 (0) [54] : 0x6e (110) [55] : 0x00 (0) [56] : 0x67 (103) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x66 (102) [61] : 0x00 (0) [62] : 0x69 (105) [63] : 0x00 (0) [64] : 0x6c (108) [65] : 0x00 (0) [66] : 0x65 (101) [67] : 0x00 (0) [68] : 0x73 (115) [69] : 0x00 (0) [70] : 0x20 (32) [71] : 0x00 (0) [72] : 0x74 (116) [73] : 0x00 (0) [74] : 0x6f (111) [75] : 0x00 (0) [76] : 0x20 (32) [77] : 0x00 (0) [78] : 0x70 (112) [79] : 0x00 (0) [80] : 0x72 (114) [81] : 0x00 (0) [82] : 0x69 (105) [83] : 0x00 (0) [84] : 0x6e (110) [85] : 0x00 (0) [86] : 0x74 (116) [87] : 0x00 (0) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x64 (100) [91] : 0x00 (0) [92] : 0x65 (101) [93] : 0x00 (0) [94] : 0x76 (118) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x63 (99) [99] : 0x00 (0) [100] : 0x65 (101) [101] : 0x00 (0) [102] : 0x73 (115) [103] : 0x00 (0) [104] : 0x00 (0) [105] : 0x00 (0) size : 0x0000006a (106) [2014/11/04 23:32:49.453113, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.453144, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Description] [2014/11/04 23:32:49.453160, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.453178, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.453208, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.453229, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.453245, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.453260, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.453277, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.453293, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9377e0 [2014/11/04 23:32:49.453313, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.453329, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.453343, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.453360, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.453411, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f14f0000 [2014/11/04 23:32:49.453469, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.453502, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.453532, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.453548, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.453563, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.453627, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0066 (102) name_size : 0x0066 (102) name : * name : 'SYSTEM\CurrentControlSet\Services\Spooler\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_CREATED_NEW_KEY (1) [2014/11/04 23:32:49.453839, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.453870, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler\Security' [2014/11/04 23:32:49.453893, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.453909, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.453925, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.453941, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.453957, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.453972, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.453987, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.454002, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.454024, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.454040, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.454056, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.454072, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.454086, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.454102, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.454116, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.454138, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.454156, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.454171, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.454187, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.454203, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.454217, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.454233, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.454253, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.454280, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.454302, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.454318, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2014/11/04 23:32:49.454333, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.454349, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.454364, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.454379, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.454394, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.454414, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.454430, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2014/11/04 23:32:49.454446, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.454461, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2014/11/04 23:32:49.454476, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2014/11/04 23:32:49.454492, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.454507, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2014/11/04 23:32:49.454524, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] not found [2014/11/04 23:32:49.454548, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.454569, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.454592, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.454613, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.454631, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.454647, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9341e0 [2014/11/04 23:32:49.454666, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.454682, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.454697, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.454715, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] not found [2014/11/04 23:32:49.454732, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.454747, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.454764, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.454779, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b930220 [2014/11/04 23:32:49.454797, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.454813, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.454828, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.454845, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2014/11/04 23:32:49.454861, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.454876, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2014/11/04 23:32:49.454891, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2014/11/04 23:32:49.454907, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.454922, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2014/11/04 23:32:49.454941, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.454958, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.454994, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-5954-1154f14f0000 action_taken : * action_taken : REG_CREATED_NEW_KEY (1) result : WERR_OK [2014/11/04 23:32:49.455096, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2014/11/04 23:32:49.455956, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.455988, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security:Security] [2014/11/04 23:32:49.456005, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.456020, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security' (ops 0x7f5089ee76c0) [2014/11/04 23:32:49.456036, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2014/11/04 23:32:49.456056, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.456072, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2014/11/04 23:32:49.456091, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.456107, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.456122, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.456139, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.456155, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b937690 [2014/11/04 23:32:49.456173, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.456189, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.456204, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.456220, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.456256, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-5954-1154f14f0000 [2014/11/04 23:32:49.456311, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.456343, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.456373, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.456388, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.456403, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.456467, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0056 (86) name_size : 0x0056 (86) name : * name : 'SYSTEM\CurrentControlSet\Services\NETLOGON' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2014/11/04 23:32:49.456694, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.456726, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON' [2014/11/04 23:32:49.456747, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.456764, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.456780, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.456796, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.456812, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.456827, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.456842, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.456857, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.456878, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.456895, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.456911, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.456926, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.456941, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.456956, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.456970, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.456992, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.457010, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.457025, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.457041, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.457056, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.457071, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.457087, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.457107, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.457132, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.457150, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2014/11/04 23:32:49.457165, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.457181, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.457196, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.457211, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.457226, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.457247, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.457264, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.457295, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f14f0000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2014/11/04 23:32:49.457372, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.457501, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.457538, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Start] [2014/11/04 23:32:49.457555, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.457570, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON' (ops 0x7f5089ee76c0) [2014/11/04 23:32:49.457585, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.457605, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.457622, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.457640, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.457656, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.457671, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.457688, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.457703, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92ffc0 [2014/11/04 23:32:49.457722, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.457738, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.457753, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.457769, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.457807, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.457941, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.457972, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Type] [2014/11/04 23:32:49.457989, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.458005, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.458022, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.458041, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.458056, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.458072, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.458088, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.458104, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9337f0 [2014/11/04 23:32:49.458123, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.458138, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.458153, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.458169, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.458206, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.458341, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.458373, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ErrorControl] [2014/11/04 23:32:49.458389, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.458406, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.458422, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.458442, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.458457, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.458473, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.458489, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.458505, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b937160 [2014/11/04 23:32:49.458525, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.458550, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.458565, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.458582, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.458622, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2014/11/04 23:32:49.458882, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.458914, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ObjectName] [2014/11/04 23:32:49.458930, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.458947, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.458964, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.458983, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.458998, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.459014, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.459030, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.459046, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b937d80 [2014/11/04 23:32:49.459066, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.459082, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.459096, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.459113, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.459159, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(20) [0] : 0x4e (78) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x20 (32) [7] : 0x00 (0) [8] : 0x4c (76) [9] : 0x00 (0) [10] : 0x6f (111) [11] : 0x00 (0) [12] : 0x67 (103) [13] : 0x00 (0) [14] : 0x6f (111) [15] : 0x00 (0) [16] : 0x6e (110) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) size : 0x00000014 (20) [2014/11/04 23:32:49.459388, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.459419, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:DisplayName] [2014/11/04 23:32:49.459436, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.459453, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.459469, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.459488, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.459504, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.459519, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.459536, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.459558, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b938d90 [2014/11/04 23:32:49.459577, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.459593, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.459608, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.459624, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.459663, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(54) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x2f (47) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x61 (97) [21] : 0x00 (0) [22] : 0x6d (109) [23] : 0x00 (0) [24] : 0x62 (98) [25] : 0x00 (0) [26] : 0x61 (97) [27] : 0x00 (0) [28] : 0x2f (47) [29] : 0x00 (0) [30] : 0x73 (115) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x63 (99) [35] : 0x00 (0) [36] : 0x63 (99) [37] : 0x00 (0) [38] : 0x74 (116) [39] : 0x00 (0) [40] : 0x6c (108) [41] : 0x00 (0) [42] : 0x2f (47) [43] : 0x00 (0) [44] : 0x73 (115) [45] : 0x00 (0) [46] : 0x6d (109) [47] : 0x00 (0) [48] : 0x62 (98) [49] : 0x00 (0) [50] : 0x64 (100) [51] : 0x00 (0) [52] : 0x00 (0) [53] : 0x00 (0) size : 0x00000036 (54) [2014/11/04 23:32:49.460123, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.460155, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ImagePath] [2014/11/04 23:32:49.460171, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.460188, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.460205, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.460224, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.460240, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.460255, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.460272, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.460288, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b939560 [2014/11/04 23:32:49.460308, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.460323, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.460338, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.460355, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.460393, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(164) [0] : 0x46 (70) [1] : 0x00 (0) [2] : 0x69 (105) [3] : 0x00 (0) [4] : 0x6c (108) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x20 (32) [9] : 0x00 (0) [10] : 0x73 (115) [11] : 0x00 (0) [12] : 0x65 (101) [13] : 0x00 (0) [14] : 0x72 (114) [15] : 0x00 (0) [16] : 0x76 (118) [17] : 0x00 (0) [18] : 0x69 (105) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x20 (32) [25] : 0x00 (0) [26] : 0x70 (112) [27] : 0x00 (0) [28] : 0x72 (114) [29] : 0x00 (0) [30] : 0x6f (111) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x69 (105) [35] : 0x00 (0) [36] : 0x64 (100) [37] : 0x00 (0) [38] : 0x69 (105) [39] : 0x00 (0) [40] : 0x6e (110) [41] : 0x00 (0) [42] : 0x67 (103) [43] : 0x00 (0) [44] : 0x20 (32) [45] : 0x00 (0) [46] : 0x61 (97) [47] : 0x00 (0) [48] : 0x63 (99) [49] : 0x00 (0) [50] : 0x63 (99) [51] : 0x00 (0) [52] : 0x65 (101) [53] : 0x00 (0) [54] : 0x73 (115) [55] : 0x00 (0) [56] : 0x73 (115) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x74 (116) [61] : 0x00 (0) [62] : 0x6f (111) [63] : 0x00 (0) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x70 (112) [67] : 0x00 (0) [68] : 0x6f (111) [69] : 0x00 (0) [70] : 0x6c (108) [71] : 0x00 (0) [72] : 0x69 (105) [73] : 0x00 (0) [74] : 0x63 (99) [75] : 0x00 (0) [76] : 0x79 (121) [77] : 0x00 (0) [78] : 0x20 (32) [79] : 0x00 (0) [80] : 0x61 (97) [81] : 0x00 (0) [82] : 0x6e (110) [83] : 0x00 (0) [84] : 0x64 (100) [85] : 0x00 (0) [86] : 0x20 (32) [87] : 0x00 (0) [88] : 0x70 (112) [89] : 0x00 (0) [90] : 0x72 (114) [91] : 0x00 (0) [92] : 0x6f (111) [93] : 0x00 (0) [94] : 0x66 (102) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x6c (108) [99] : 0x00 (0) [100] : 0x65 (101) [101] : 0x00 (0) [102] : 0x20 (32) [103] : 0x00 (0) [104] : 0x64 (100) [105] : 0x00 (0) [106] : 0x61 (97) [107] : 0x00 (0) [108] : 0x74 (116) [109] : 0x00 (0) [110] : 0x61 (97) [111] : 0x00 (0) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x28 (40) [115] : 0x00 (0) [116] : 0x6e (110) [117] : 0x00 (0) [118] : 0x6f (111) [119] : 0x00 (0) [120] : 0x74 (116) [121] : 0x00 (0) [122] : 0x72 (114) [123] : 0x00 (0) [124] : 0x65 (101) [125] : 0x00 (0) [126] : 0x6d (109) [127] : 0x00 (0) [128] : 0x6f (111) [129] : 0x00 (0) [130] : 0x74 (116) [131] : 0x00 (0) [132] : 0x65 (101) [133] : 0x00 (0) [134] : 0x6c (108) [135] : 0x00 (0) [136] : 0x79 (121) [137] : 0x00 (0) [138] : 0x20 (32) [139] : 0x00 (0) [140] : 0x6d (109) [141] : 0x00 (0) [142] : 0x61 (97) [143] : 0x00 (0) [144] : 0x6e (110) [145] : 0x00 (0) [146] : 0x61 (97) [147] : 0x00 (0) [148] : 0x67 (103) [149] : 0x00 (0) [150] : 0x65 (101) [151] : 0x00 (0) [152] : 0x61 (97) [153] : 0x00 (0) [154] : 0x62 (98) [155] : 0x00 (0) [156] : 0x6c (108) [157] : 0x00 (0) [158] : 0x65 (101) [159] : 0x00 (0) [160] : 0x29 (41) [161] : 0x00 (0) [162] : 0x00 (0) [163] : 0x00 (0) size : 0x000000a4 (164) [2014/11/04 23:32:49.461513, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.461545, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Description] [2014/11/04 23:32:49.461561, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.461578, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.461595, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.461614, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.461630, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.461645, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.461662, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.461678, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b939e90 [2014/11/04 23:32:49.461706, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.461723, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.461737, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.461754, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.461791, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f14f0000 [2014/11/04 23:32:49.461840, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.461872, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.461902, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.461918, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.461933, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.461997, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0068 (104) name_size : 0x0068 (104) name : * name : 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2014/11/04 23:32:49.462215, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.462247, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' [2014/11/04 23:32:49.462264, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.462279, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.462295, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.462311, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.462326, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.462341, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.462357, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.462371, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.462392, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.462409, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.462425, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.462440, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.462455, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.462470, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.462485, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.462507, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.462530, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.462571, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.462588, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.462604, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.462619, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.462635, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.462650, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.462676, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.462694, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.462710, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2014/11/04 23:32:49.462725, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.462741, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.462756, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.462772, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.462787, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.462808, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.462825, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2014/11/04 23:32:49.462840, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.462856, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2014/11/04 23:32:49.462871, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2014/11/04 23:32:49.462892, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.462908, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2014/11/04 23:32:49.462926, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] not found [2014/11/04 23:32:49.462941, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.462963, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.462987, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.463003, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.463020, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.463037, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b937f60 [2014/11/04 23:32:49.463147, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.463168, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.463198, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.463219, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] not found [2014/11/04 23:32:49.463236, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.463252, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.463269, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.463285, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b938190 [2014/11/04 23:32:49.463303, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.463319, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.463334, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.463351, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2014/11/04 23:32:49.463368, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.463383, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2014/11/04 23:32:49.463405, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2014/11/04 23:32:49.463422, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.463436, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2014/11/04 23:32:49.463456, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.463473, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.463505, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-5954-1154f14f0000 action_taken : * action_taken : REG_CREATED_NEW_KEY (1) result : WERR_OK [2014/11/04 23:32:49.463587, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2014/11/04 23:32:49.464444, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.464476, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security:Security] [2014/11/04 23:32:49.464493, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.464508, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security' (ops 0x7f5089ee76c0) [2014/11/04 23:32:49.464524, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2014/11/04 23:32:49.464544, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.464561, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2014/11/04 23:32:49.464579, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.464595, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.464610, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.464627, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.464648, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b938190 [2014/11/04 23:32:49.464667, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.464683, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.464698, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.464714, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.464751, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-5954-1154f14f0000 [2014/11/04 23:32:49.464800, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.464832, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.464862, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.464877, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.464893, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.464957, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0062 (98) name_size : 0x0062 (98) name : * name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2014/11/04 23:32:49.465175, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.465206, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' [2014/11/04 23:32:49.465223, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.465238, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.465254, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.465270, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.465285, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.465300, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.465315, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.465330, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.465351, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.465368, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.465383, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.465399, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.465414, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.465429, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.465443, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.465470, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.465489, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.465504, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.465520, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.465535, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.465550, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.465565, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.465580, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.465605, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.465622, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2014/11/04 23:32:49.465638, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.465653, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.465668, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.465684, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.465698, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.465716, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] not found [2014/11/04 23:32:49.465731, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.465757, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.465785, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.465802, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.465819, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.465841, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b938120 [2014/11/04 23:32:49.465860, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.465876, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.465890, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.465908, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] not found [2014/11/04 23:32:49.465925, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.465941, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.465957, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.465973, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b94e870 [2014/11/04 23:32:49.465992, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.466007, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.466022, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.466039, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2014/11/04 23:32:49.466055, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.466071, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.466086, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.466101, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.466116, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.466136, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.466153, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.466184, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f14f0000 action_taken : * action_taken : REG_CREATED_NEW_KEY (1) result : WERR_OK [2014/11/04 23:32:49.466267, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.466398, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.466430, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Start] [2014/11/04 23:32:49.466446, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.466461, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry' (ops 0x7f5089ee76c0) [2014/11/04 23:32:49.466477, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.466497, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.466514, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.466557, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.466574, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.466589, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.466605, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.466621, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92ffc0 [2014/11/04 23:32:49.466646, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.466662, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.466677, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.466694, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.466733, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.466863, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.466894, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Type] [2014/11/04 23:32:49.466911, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.466927, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.466944, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.466963, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.466979, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.466994, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.467011, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.467027, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b94e7c0 [2014/11/04 23:32:49.467051, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.467067, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.467082, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.467099, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.467136, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.467265, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.467297, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ErrorControl] [2014/11/04 23:32:49.467313, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.467330, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.467347, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.467366, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.467382, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.467397, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.467414, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.467430, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b94c440 [2014/11/04 23:32:49.467450, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.467471, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.467487, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.467503, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.467542, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2014/11/04 23:32:49.467796, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.467828, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ObjectName] [2014/11/04 23:32:49.467844, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.467861, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.467878, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.467903, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.467919, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.467934, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.467951, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.467967, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b94a0a0 [2014/11/04 23:32:49.467987, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.468002, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.468017, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.468034, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.468074, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(48) [0] : 0x52 (82) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x6d (109) [5] : 0x00 (0) [6] : 0x6f (111) [7] : 0x00 (0) [8] : 0x74 (116) [9] : 0x00 (0) [10] : 0x65 (101) [11] : 0x00 (0) [12] : 0x20 (32) [13] : 0x00 (0) [14] : 0x52 (82) [15] : 0x00 (0) [16] : 0x65 (101) [17] : 0x00 (0) [18] : 0x67 (103) [19] : 0x00 (0) [20] : 0x69 (105) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x74 (116) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x79 (121) [29] : 0x00 (0) [30] : 0x20 (32) [31] : 0x00 (0) [32] : 0x53 (83) [33] : 0x00 (0) [34] : 0x65 (101) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x76 (118) [39] : 0x00 (0) [40] : 0x69 (105) [41] : 0x00 (0) [42] : 0x63 (99) [43] : 0x00 (0) [44] : 0x65 (101) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) size : 0x00000030 (48) [2014/11/04 23:32:49.468479, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.468511, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:DisplayName] [2014/11/04 23:32:49.468528, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.468544, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.468561, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.468580, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.468596, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.468611, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.468628, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.468644, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b941260 [2014/11/04 23:32:49.468664, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.468680, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.468694, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.468716, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.468756, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(54) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x2f (47) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x61 (97) [21] : 0x00 (0) [22] : 0x6d (109) [23] : 0x00 (0) [24] : 0x62 (98) [25] : 0x00 (0) [26] : 0x61 (97) [27] : 0x00 (0) [28] : 0x2f (47) [29] : 0x00 (0) [30] : 0x73 (115) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x63 (99) [35] : 0x00 (0) [36] : 0x63 (99) [37] : 0x00 (0) [38] : 0x74 (116) [39] : 0x00 (0) [40] : 0x6c (108) [41] : 0x00 (0) [42] : 0x2f (47) [43] : 0x00 (0) [44] : 0x73 (115) [45] : 0x00 (0) [46] : 0x6d (109) [47] : 0x00 (0) [48] : 0x62 (98) [49] : 0x00 (0) [50] : 0x64 (100) [51] : 0x00 (0) [52] : 0x00 (0) [53] : 0x00 (0) size : 0x00000036 (54) [2014/11/04 23:32:49.469197, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.469228, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ImagePath] [2014/11/04 23:32:49.469245, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.469262, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.469278, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.469298, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.469314, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.469329, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.469345, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.469362, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9435d0 [2014/11/04 23:32:49.469382, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.469397, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.469412, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.469428, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.469467, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(126) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x70 (112) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x6f (111) [39] : 0x00 (0) [40] : 0x76 (118) [41] : 0x00 (0) [42] : 0x69 (105) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x69 (105) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x67 (103) [51] : 0x00 (0) [52] : 0x20 (32) [53] : 0x00 (0) [54] : 0x72 (114) [55] : 0x00 (0) [56] : 0x65 (101) [57] : 0x00 (0) [58] : 0x6d (109) [59] : 0x00 (0) [60] : 0x6f (111) [61] : 0x00 (0) [62] : 0x74 (116) [63] : 0x00 (0) [64] : 0x65 (101) [65] : 0x00 (0) [66] : 0x20 (32) [67] : 0x00 (0) [68] : 0x61 (97) [69] : 0x00 (0) [70] : 0x63 (99) [71] : 0x00 (0) [72] : 0x63 (99) [73] : 0x00 (0) [74] : 0x65 (101) [75] : 0x00 (0) [76] : 0x73 (115) [77] : 0x00 (0) [78] : 0x73 (115) [79] : 0x00 (0) [80] : 0x20 (32) [81] : 0x00 (0) [82] : 0x74 (116) [83] : 0x00 (0) [84] : 0x6f (111) [85] : 0x00 (0) [86] : 0x20 (32) [87] : 0x00 (0) [88] : 0x74 (116) [89] : 0x00 (0) [90] : 0x68 (104) [91] : 0x00 (0) [92] : 0x65 (101) [93] : 0x00 (0) [94] : 0x20 (32) [95] : 0x00 (0) [96] : 0x53 (83) [97] : 0x00 (0) [98] : 0x61 (97) [99] : 0x00 (0) [100] : 0x6d (109) [101] : 0x00 (0) [102] : 0x62 (98) [103] : 0x00 (0) [104] : 0x61 (97) [105] : 0x00 (0) [106] : 0x20 (32) [107] : 0x00 (0) [108] : 0x72 (114) [109] : 0x00 (0) [110] : 0x65 (101) [111] : 0x00 (0) [112] : 0x67 (103) [113] : 0x00 (0) [114] : 0x69 (105) [115] : 0x00 (0) [116] : 0x73 (115) [117] : 0x00 (0) [118] : 0x74 (116) [119] : 0x00 (0) [120] : 0x72 (114) [121] : 0x00 (0) [122] : 0x79 (121) [123] : 0x00 (0) [124] : 0x00 (0) [125] : 0x00 (0) size : 0x0000007e (126) [2014/11/04 23:32:49.470362, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.470395, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Description] [2014/11/04 23:32:49.470411, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.470428, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.470446, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.470466, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.470481, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.470497, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.470513, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.470529, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b950bc0 [2014/11/04 23:32:49.470559, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.470575, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.470590, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.470606, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.470644, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f14f0000 [2014/11/04 23:32:49.470693, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.470725, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.470755, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.470771, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.470786, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.470850, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0074 (116) name_size : 0x0074 (116) name : * name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_CREATED_NEW_KEY (1) [2014/11/04 23:32:49.471063, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.471095, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' [2014/11/04 23:32:49.471112, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.471127, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.471143, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.471159, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.471175, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.471190, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.471205, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.471220, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.471242, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.471259, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.471275, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.471291, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.471306, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.471321, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.471336, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.471358, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.471375, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.471390, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.471406, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.471422, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.471436, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.471452, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.471467, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.471493, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.471511, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.471526, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2014/11/04 23:32:49.471542, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.471557, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.471572, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.471588, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.471603, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.471623, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.471640, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2014/11/04 23:32:49.471655, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.471671, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2014/11/04 23:32:49.471686, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2014/11/04 23:32:49.471701, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.471716, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2014/11/04 23:32:49.471734, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] not found [2014/11/04 23:32:49.471749, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.471769, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.471791, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.471807, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.471824, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.471840, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9300a0 [2014/11/04 23:32:49.471859, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.471874, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.471889, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.471907, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] not found [2014/11/04 23:32:49.471924, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.471940, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.471957, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.471973, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b938190 [2014/11/04 23:32:49.471992, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.472007, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.472022, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.472039, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2014/11/04 23:32:49.472055, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.472070, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2014/11/04 23:32:49.472085, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2014/11/04 23:32:49.472101, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.472115, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2014/11/04 23:32:49.472134, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.472151, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.472182, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-5954-1154f14f0000 action_taken : * action_taken : REG_CREATED_NEW_KEY (1) result : WERR_OK [2014/11/04 23:32:49.472261, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2014/11/04 23:32:49.473100, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.473132, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security:Security] [2014/11/04 23:32:49.473148, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.473163, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' (ops 0x7f5089ee76c0) [2014/11/04 23:32:49.473179, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2014/11/04 23:32:49.473216, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.473233, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2014/11/04 23:32:49.473252, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.473268, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.473283, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.473300, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.473316, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b945940 [2014/11/04 23:32:49.473334, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.473350, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.473365, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.473381, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.473418, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-5954-1154f14f0000 [2014/11/04 23:32:49.473467, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.473498, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.473527, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.473543, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.473558, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.473622, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x004e (78) name_size : 0x004e (78) name : * name : 'SYSTEM\CurrentControlSet\Services\WINS' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2014/11/04 23:32:49.473833, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.473864, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS' [2014/11/04 23:32:49.473881, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.473897, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.473912, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.473928, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.473944, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.473959, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.473974, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.473988, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.474010, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.474028, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.474044, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.474059, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.474074, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.474089, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.474104, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.474126, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.474143, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.474159, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.474174, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.474190, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.474204, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.474219, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.474234, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.474260, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.474277, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2014/11/04 23:32:49.474293, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.474308, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.474323, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.474339, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.474353, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.474371, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] not found [2014/11/04 23:32:49.474387, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.474414, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.474443, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.474460, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.474477, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.474493, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9381b0 [2014/11/04 23:32:49.474511, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.474527, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.474566, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.474587, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] not found [2014/11/04 23:32:49.474604, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.474619, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.474636, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.474652, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b957da0 [2014/11/04 23:32:49.474670, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.474686, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.474701, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.474719, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2014/11/04 23:32:49.474734, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.474750, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.474765, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.474782, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.474796, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.474816, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.474833, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.474864, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f14f0000 action_taken : * action_taken : REG_CREATED_NEW_KEY (1) result : WERR_OK [2014/11/04 23:32:49.474942, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.475072, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.475103, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Start] [2014/11/04 23:32:49.475119, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.475134, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS' (ops 0x7f5089ee76c0) [2014/11/04 23:32:49.475150, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.475169, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.475187, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.475205, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.475221, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.475236, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.475252, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.475268, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b92f990 [2014/11/04 23:32:49.475287, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.475302, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.475317, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.475334, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.475371, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.475501, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.475532, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Type] [2014/11/04 23:32:49.475548, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.475565, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.475582, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.475602, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.475617, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.475633, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.475649, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.475665, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b94c3d0 [2014/11/04 23:32:49.475684, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.475699, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.475714, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.475730, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.475767, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.475896, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.475927, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ErrorControl] [2014/11/04 23:32:49.475943, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.475960, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.475977, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.475997, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.476012, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.476027, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.476044, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.476060, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b93a730 [2014/11/04 23:32:49.476079, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.476095, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.476109, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.476126, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.476164, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2014/11/04 23:32:49.476418, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.476450, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ObjectName] [2014/11/04 23:32:49.476466, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.476483, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.476499, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.476531, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.476550, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.476565, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.476582, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.476598, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b941110 [2014/11/04 23:32:49.476618, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.476633, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.476648, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.476665, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.476706, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(74) [0] : 0x57 (87) [1] : 0x00 (0) [2] : 0x69 (105) [3] : 0x00 (0) [4] : 0x6e (110) [5] : 0x00 (0) [6] : 0x64 (100) [7] : 0x00 (0) [8] : 0x6f (111) [9] : 0x00 (0) [10] : 0x77 (119) [11] : 0x00 (0) [12] : 0x73 (115) [13] : 0x00 (0) [14] : 0x20 (32) [15] : 0x00 (0) [16] : 0x49 (73) [17] : 0x00 (0) [18] : 0x6e (110) [19] : 0x00 (0) [20] : 0x74 (116) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x72 (114) [25] : 0x00 (0) [26] : 0x6e (110) [27] : 0x00 (0) [28] : 0x65 (101) [29] : 0x00 (0) [30] : 0x74 (116) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x4e (78) [35] : 0x00 (0) [36] : 0x61 (97) [37] : 0x00 (0) [38] : 0x6d (109) [39] : 0x00 (0) [40] : 0x65 (101) [41] : 0x00 (0) [42] : 0x20 (32) [43] : 0x00 (0) [44] : 0x53 (83) [45] : 0x00 (0) [46] : 0x65 (101) [47] : 0x00 (0) [48] : 0x72 (114) [49] : 0x00 (0) [50] : 0x76 (118) [51] : 0x00 (0) [52] : 0x69 (105) [53] : 0x00 (0) [54] : 0x63 (99) [55] : 0x00 (0) [56] : 0x65 (101) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x28 (40) [61] : 0x00 (0) [62] : 0x57 (87) [63] : 0x00 (0) [64] : 0x49 (73) [65] : 0x00 (0) [66] : 0x4e (78) [67] : 0x00 (0) [68] : 0x53 (83) [69] : 0x00 (0) [70] : 0x29 (41) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) size : 0x0000004a (74) [2014/11/04 23:32:49.483427, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.483467, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:DisplayName] [2014/11/04 23:32:49.483486, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.483505, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.483522, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.483544, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.483560, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.483576, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.483593, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.483610, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b94a150 [2014/11/04 23:32:49.483631, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.483648, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.483663, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.483680, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.483740, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(54) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x2f (47) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x61 (97) [21] : 0x00 (0) [22] : 0x6d (109) [23] : 0x00 (0) [24] : 0x62 (98) [25] : 0x00 (0) [26] : 0x61 (97) [27] : 0x00 (0) [28] : 0x2f (47) [29] : 0x00 (0) [30] : 0x73 (115) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x63 (99) [35] : 0x00 (0) [36] : 0x63 (99) [37] : 0x00 (0) [38] : 0x74 (116) [39] : 0x00 (0) [40] : 0x6c (108) [41] : 0x00 (0) [42] : 0x2f (47) [43] : 0x00 (0) [44] : 0x6e (110) [45] : 0x00 (0) [46] : 0x6d (109) [47] : 0x00 (0) [48] : 0x62 (98) [49] : 0x00 (0) [50] : 0x64 (100) [51] : 0x00 (0) [52] : 0x00 (0) [53] : 0x00 (0) size : 0x00000036 (54) [2014/11/04 23:32:49.484182, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.484214, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ImagePath] [2014/11/04 23:32:49.484231, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.484248, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.484265, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.484285, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.484302, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.484317, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.484334, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.484350, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b950ca0 [2014/11/04 23:32:49.484371, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.484387, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.484402, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.484418, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.484458, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(178) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x70 (112) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x6f (111) [39] : 0x00 (0) [40] : 0x76 (118) [41] : 0x00 (0) [42] : 0x69 (105) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x69 (105) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x67 (103) [51] : 0x00 (0) [52] : 0x20 (32) [53] : 0x00 (0) [54] : 0x61 (97) [55] : 0x00 (0) [56] : 0x20 (32) [57] : 0x00 (0) [58] : 0x4e (78) [59] : 0x00 (0) [60] : 0x65 (101) [61] : 0x00 (0) [62] : 0x74 (116) [63] : 0x00 (0) [64] : 0x42 (66) [65] : 0x00 (0) [66] : 0x49 (73) [67] : 0x00 (0) [68] : 0x4f (79) [69] : 0x00 (0) [70] : 0x53 (83) [71] : 0x00 (0) [72] : 0x20 (32) [73] : 0x00 (0) [74] : 0x70 (112) [75] : 0x00 (0) [76] : 0x6f (111) [77] : 0x00 (0) [78] : 0x69 (105) [79] : 0x00 (0) [80] : 0x6e (110) [81] : 0x00 (0) [82] : 0x74 (116) [83] : 0x00 (0) [84] : 0x2d (45) [85] : 0x00 (0) [86] : 0x74 (116) [87] : 0x00 (0) [88] : 0x6f (111) [89] : 0x00 (0) [90] : 0x2d (45) [91] : 0x00 (0) [92] : 0x70 (112) [93] : 0x00 (0) [94] : 0x6f (111) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x6e (110) [99] : 0x00 (0) [100] : 0x74 (116) [101] : 0x00 (0) [102] : 0x20 (32) [103] : 0x00 (0) [104] : 0x6e (110) [105] : 0x00 (0) [106] : 0x61 (97) [107] : 0x00 (0) [108] : 0x6d (109) [109] : 0x00 (0) [110] : 0x65 (101) [111] : 0x00 (0) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x73 (115) [115] : 0x00 (0) [116] : 0x65 (101) [117] : 0x00 (0) [118] : 0x72 (114) [119] : 0x00 (0) [120] : 0x76 (118) [121] : 0x00 (0) [122] : 0x65 (101) [123] : 0x00 (0) [124] : 0x72 (114) [125] : 0x00 (0) [126] : 0x28 (40) [127] : 0x00 (0) [128] : 0x6e (110) [129] : 0x00 (0) [130] : 0x6f (111) [131] : 0x00 (0) [132] : 0x74 (116) [133] : 0x00 (0) [134] : 0x20 (32) [135] : 0x00 (0) [136] : 0x72 (114) [137] : 0x00 (0) [138] : 0x65 (101) [139] : 0x00 (0) [140] : 0x6d (109) [141] : 0x00 (0) [142] : 0x6f (111) [143] : 0x00 (0) [144] : 0x74 (116) [145] : 0x00 (0) [146] : 0x65 (101) [147] : 0x00 (0) [148] : 0x6c (108) [149] : 0x00 (0) [150] : 0x79 (121) [151] : 0x00 (0) [152] : 0x20 (32) [153] : 0x00 (0) [154] : 0x6d (109) [155] : 0x00 (0) [156] : 0x61 (97) [157] : 0x00 (0) [158] : 0x6e (110) [159] : 0x00 (0) [160] : 0x61 (97) [161] : 0x00 (0) [162] : 0x67 (103) [163] : 0x00 (0) [164] : 0x65 (101) [165] : 0x00 (0) [166] : 0x61 (97) [167] : 0x00 (0) [168] : 0x62 (98) [169] : 0x00 (0) [170] : 0x6c (108) [171] : 0x00 (0) [172] : 0x65 (101) [173] : 0x00 (0) [174] : 0x29 (41) [175] : 0x00 (0) [176] : 0x00 (0) [177] : 0x00 (0) size : 0x000000b2 (178) [2014/11/04 23:32:49.485667, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.485698, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Description] [2014/11/04 23:32:49.485714, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.485732, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.485748, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.485768, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.485784, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.485799, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.485815, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.485832, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b958cf0 [2014/11/04 23:32:49.485852, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.485868, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.485882, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.485899, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.485936, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f14f0000 [2014/11/04 23:32:49.485986, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.486019, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.486049, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.486064, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.486080, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.486145, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0060 (96) name_size : 0x0060 (96) name : * name : 'SYSTEM\CurrentControlSet\Services\WINS\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_CREATED_NEW_KEY (1) [2014/11/04 23:32:49.486355, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.486386, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS\Security' [2014/11/04 23:32:49.486403, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.486419, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.486436, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.486452, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.486468, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.486483, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.486498, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.486513, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.487561, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.487580, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.487596, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.487613, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.487628, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.487643, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.487658, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.487681, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.487699, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.487715, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.487731, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.487747, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.487762, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.487778, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.487792, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.487822, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.487840, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.487856, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2014/11/04 23:32:49.487871, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.487887, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.487902, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.487918, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.487932, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.487952, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.487968, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2014/11/04 23:32:49.487984, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.488000, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2014/11/04 23:32:49.488014, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2014/11/04 23:32:49.488030, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.488045, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2014/11/04 23:32:49.488062, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] not found [2014/11/04 23:32:49.488078, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.488098, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.488120, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.488136, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.488154, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.488172, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b93a810 [2014/11/04 23:32:49.488191, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.488207, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.488222, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.488241, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1725(regdb_fetch_keys_internal) key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] not found [2014/11/04 23:32:49.488258, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.488274, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.488291, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.488306, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b958ad0 [2014/11/04 23:32:49.488325, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 484B4C4D5C5359535445 [2014/11/04 23:32:49.488341, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.488356, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.488373, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2014/11/04 23:32:49.488389, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.488405, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2014/11/04 23:32:49.488420, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2014/11/04 23:32:49.488436, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.488450, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2014/11/04 23:32:49.488470, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.488487, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.488518, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-5954-1154f14f0000 action_taken : * action_taken : REG_CREATED_NEW_KEY (1) result : WERR_OK [2014/11/04 23:32:49.488603, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-5954-1154f14f0000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2014/11/04 23:32:49.489452, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.489484, 8, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security:Security] [2014/11/04 23:32:49.489500, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.489516, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security' (ops 0x7f5089ee76c0) [2014/11/04 23:32:49.489531, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2014/11/04 23:32:49.489551, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.489568, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1956(regdb_store_values_internal) regdb_store_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2014/11/04 23:32:49.489587, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 3 [2014/11/04 23:32:49.489602, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.489617, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/registry.tdb 2: 3: [2014/11/04 23:32:49.489634, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 53414D42415F52454756 [2014/11/04 23:32:49.489650, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b958d60 [2014/11/04 23:32:49.489669, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 53414D42415F52454756 [2014/11/04 23:32:49.489685, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/registry.tdb [2014/11/04 23:32:49.489699, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.489716, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.489753, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-5954-1154f14f0000 [2014/11/04 23:32:49.489803, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.489835, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.489882, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.489898, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.489914, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.489975, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f14f0000 [2014/11/04 23:32:49.490025, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.490056, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.490086, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.490101, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2014/11/04 23:32:49.490117, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.490243, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2014/11/04 23:32:49.490269, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2014/11/04 23:32:49.490290, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2014/11/04 23:32:49.490335, 3, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/eventlog/srv_eventlog_reg.c:59(eventlog_init_winreg) Initialise the eventlog registry keys if needed. [2014/11/04 23:32:49.490360, 4, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2014/11/04 23:32:49.490378, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2014/11/04 23:32:49.490394, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2014/11/04 23:32:49.490430, 4, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2014/11/04 23:32:49.490452, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2014/11/04 23:32:49.490545, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2014/11/04 23:32:49.490564, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.490579, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.490594, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.490609, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.490624, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.490672, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.490689, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2014/11/04 23:32:49.490706, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2014/11/04 23:32:49.490721, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2014/11/04 23:32:49.490736, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.490750, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM] [2014/11/04 23:32:49.490777, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.490810, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000b-0000-0000-5954-1154f14f0000 result : WERR_OK [2014/11/04 23:32:49.490877, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000b-0000-0000-5954-1154f14f0000 keyname: struct winreg_String name_len : 0x0056 (86) name_size : 0x0056 (86) name : * name : 'SYSTEM\CurrentControlSet\Services\Eventlog' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2014/11/04 23:32:49.491043, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.491075, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.491092, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2014/11/04 23:32:49.491108, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.491123, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.491138, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.491153, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.491176, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.491194, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2014/11/04 23:32:49.491209, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.491224, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.491240, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.491256, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.491280, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.491297, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.491313, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.491328, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.491343, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.491358, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.491388, 7, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Eventlog] [2014/11/04 23:32:49.491405, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.491421, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.491436, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.491452, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.491466, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f5089ee76c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.491488, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.491505, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.491520, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2014/11/04 23:32:49.491536, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.491567, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-5954-1154f14f0000 result : WERR_OK [2014/11/04 23:32:49.491631, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-5954-1154f14f0000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2014/11/04 23:32:49.491713, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.491746, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog' (ops 0x7f5089ee76c0) [2014/11/04 23:32:49.491761, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.491783, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[DisplayName] len[20] [2014/11/04 23:32:49.491800, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[1]: name[ErrorControl] len[4] [2014/11/04 23:32:49.491817, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.491838, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000000 (0) max_subkeylen : * max_subkeylen : 0x00000000 (0) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000002 (2) max_valnamelen : * max_valnamelen : 0x0000001a (26) max_valbufsize : * max_valbufsize : 0x00000014 (20) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.492002, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-5954-1154f14f0000 [2014/11/04 23:32:49.492053, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.492085, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F1 4F 00 00 .O.. [2014/11/04 23:32:49.492115, 6, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.492131, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2014/11/04 23:32:49.492146, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.492205, 10, pid=20465, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2014/11/04 23:32:49.492227, 10, pid=20465, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2014/11/04 23:32:49.492313, 7, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber) lp_servicenumber: couldn't find print$ [2014/11/04 23:32:49.492333, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/printing/nt_printing.c:87(print_driver_directories_init) No print$ share has been configured. [2014/11/04 23:32:49.492356, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 515 - private_data=(nil) [2014/11/04 23:32:49.492381, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(print_queue_housekeeping) 0x7f508b92d550 [2014/11/04 23:32:49.492400, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:140(pcap_cache_reload) reloading printcap cache [2014/11/04 23:32:49.492417, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:449(cups_pcap_load_async) cups_pcap_load_async: asynchronously loading cups printers [2014/11/04 23:32:49.492694, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:466(cups_pcap_load_async) cups_pcap_load_async: child pid = 20466 [2014/11/04 23:32:49.492734, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:586(cups_cache_reload) cups_cache_reload: async read on fd 28 [2014/11/04 23:32:49.492763, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:185(pcap_cache_reload) reload status: ok [2014/11/04 23:32:49.492845, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 0 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 0 SO_SNDBUF = 2626560 SO_RCVBUF = 1061808 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2014/11/04 23:32:49.492971, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 0 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 0 SO_SNDBUF = 2626560 SO_RCVBUF = 1061808 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2014/11/04 23:32:49.493125, 6, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed) lp_file_list_changed() file /tmp/qemu-smb.20439-0/smb.conf -> /tmp/qemu-smb.20439-0/smb.conf last mod_time: Tue Nov 4 23:32:45 2014 [2014/11/04 23:32:49.493212, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 127.0.0.1 (127.0.0.1) [2014/11/04 23:32:49.493232, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3540(smbd_process) Connection allowed from ipv4:127.0.0.1:50817 to ipv4:127.0.0.1:41830 [2014/11/04 23:32:49.493280, 3, pid=20465, effective(0, 0), real(0, 0), class=locking] ../source3/smbd/oplock.c:870(init_oplocks) init_oplocks: initializing messages. [2014/11/04 23:32:49.493298, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 774 - private_data=0x7f508b92cc70 [2014/11/04 23:32:49.493314, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 776 - private_data=0x7f508b92cc70 [2014/11/04 23:32:49.493330, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 778 - private_data=0x7f508b92cc70 [2014/11/04 23:32:49.493345, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 770 - private_data=0x7f508b92cc70 [2014/11/04 23:32:49.493360, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 787 - private_data=0x7f508b92cc70 [2014/11/04 23:32:49.493375, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 779 - private_data=0x7f508b92cc70 [2014/11/04 23:32:49.493396, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2014/11/04 23:32:49.493414, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 16 - private_data=0x7f508b92cc70 [2014/11/04 23:32:49.493431, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 33 - private_data=0x7f508b92cc70 [2014/11/04 23:32:49.493446, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2014/11/04 23:32:49.493461, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2014/11/04 23:32:49.493480, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(keepalive) 0x7f508b91ecc0 [2014/11/04 23:32:49.493497, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(deadtime) 0x7f508b92aac0 [2014/11/04 23:32:49.493513, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x7f508b92ad10 [2014/11/04 23:32:49.493577, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 190 [2014/11/04 23:32:49.493609, 6, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0xbe [2014/11/04 23:32:49.493627, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 0 of length 194 (0 toread) [2014/11/04 23:32:49.493649, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.493663, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=0 smb_pid=65534 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=155 [2014/11/04 23:32:49.494040, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2014/11/04 23:32:49.494174, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBnegprot (pid 20465) conn 0x0 [2014/11/04 23:32:49.494195, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.494211, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.494227, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.494250, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.495511, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2014/11/04 23:32:49.495537, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2014/11/04 23:32:49.495555, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2014/11/04 23:32:49.495572, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [LANMAN1.0] [2014/11/04 23:32:49.495589, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [LM1.2X002] [2014/11/04 23:32:49.495605, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [DOS LANMAN2.1] [2014/11/04 23:32:49.495621, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [LANMAN2.1] [2014/11/04 23:32:49.495637, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [Samba] [2014/11/04 23:32:49.495654, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [NT LANMAN 1.0] [2014/11/04 23:32:49.495670, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [NT LM 0.12] [2014/11/04 23:32:49.495688, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1286(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2014/11/04 23:32:49.495712, 6, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed) lp_file_list_changed() file /tmp/qemu-smb.20439-0/smb.conf -> /tmp/qemu-smb.20439-0/smb.conf last mod_time: Tue Nov 4 23:32:45 2014 [2014/11/04 23:32:49.495760, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 2 for /tmp/qemu-smb.20439-0/serverid.tdb [2014/11/04 23:32:49.495781, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2:/tmp/qemu-smb.20439-0/serverid.tdb 3: [2014/11/04 23:32:49.495799, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key F14F000000000000FFFF [2014/11/04 23:32:49.495817, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b931a50 [2014/11/04 23:32:49.495852, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key F14F000000000000FFFF [2014/11/04 23:32:49.495871, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /tmp/qemu-smb.20439-0/serverid.tdb [2014/11/04 23:32:49.495885, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.495911, 6, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed) lp_file_list_changed() file /tmp/qemu-smb.20439-0/smb.conf -> /tmp/qemu-smb.20439-0/smb.conf last mod_time: Tue Nov 4 23:32:45 2014 [2014/11/04 23:32:49.495977, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 1536 - private_data=0x7f508b931ee0 [2014/11/04 23:32:49.496023, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:464(make_auth_context_subsystem) Making default auth method list for server role = 'standalone server', encrypt passwords = yes [2014/11/04 23:32:49.496046, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam [2014/11/04 23:32:49.496063, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam' [2014/11/04 23:32:49.496077, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2014/11/04 23:32:49.496094, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2014/11/04 23:32:49.496109, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend winbind [2014/11/04 23:32:49.496124, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'winbind' [2014/11/04 23:32:49.496140, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend trustdomain [2014/11/04 23:32:49.496155, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'trustdomain' [2014/11/04 23:32:49.496169, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend ntdomain [2014/11/04 23:32:49.496184, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'ntdomain' [2014/11/04 23:32:49.496199, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend guest [2014/11/04 23:32:49.496214, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'guest' [2014/11/04 23:32:49.496230, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2014/11/04 23:32:49.496247, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module) load_auth_module: auth method guest has a valid init [2014/11/04 23:32:49.496264, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2014/11/04 23:32:49.496279, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module) load_auth_module: auth method sam has a valid init [2014/11/04 23:32:49.496533, 5, pid=20466, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:318(cups_cache_reload_async) reloading cups printcap cache [2014/11/04 23:32:49.496730, 10, pid=20466, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:130(cups_connect) connecting to cups server /run/cups/cups.sock:631 [2014/11/04 23:32:49.496884, 0, pid=20466, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:151(cups_connect) Unable to connect to CUPS server /run/cups/cups.sock:631 - Bad file descriptor [2014/11/04 23:32:49.497291, 10, pid=20466, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:171(send_pcap_blob) successfully sent blob of len 12 [2014/11/04 23:32:49.501319, 3, pid=20465, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'gssapi_spnego' registered [2014/11/04 23:32:49.501355, 3, pid=20465, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'gssapi_krb5' registered [2014/11/04 23:32:49.501376, 3, pid=20465, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'gssapi_krb5_sasl' registered [2014/11/04 23:32:49.502272, 3, pid=20465, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'sasl-DIGEST-MD5' registered [2014/11/04 23:32:49.502295, 3, pid=20465, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'schannel' registered [2014/11/04 23:32:49.502315, 3, pid=20465, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'spnego' registered [2014/11/04 23:32:49.502336, 3, pid=20465, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'ntlmssp' registered [2014/11/04 23:32:49.502353, 3, pid=20465, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'krb5' registered [2014/11/04 23:32:49.502369, 3, pid=20465, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'fake_gssapi_krb5' registered [2014/11/04 23:32:49.502457, 5, pid=20465, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech) Starting GENSEC mechanism spnego [2014/11/04 23:32:49.502505, 5, pid=20465, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2014/11/04 23:32:49.502643, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:385(reply_nt1) using SPNEGO [2014/11/04 23:32:49.502665, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:672(reply_negprot) Selected protocol NT LANMAN 1.0 [2014/11/04 23:32:49.502682, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:679(reply_negprot) negprot index=8 [2014/11/04 23:32:49.502699, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.502709, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=159 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51267 smb_tid=0 smb_pid=65534 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=61696 (0xF100) smb_vwv[ 8]= 79 (0x4F) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=54912 (0xD680) smb_vwv[12]=36397 (0x8E2D) smb_vwv[13]=32579 (0x7F43) smb_vwv[14]=53240 (0xCFF8) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=90 [2014/11/04 23:32:49.502888, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] 61 72 63 68 00 00 00 00 00 00 00 00 00 00 00 00 arch.... ........ [0010] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 2A 0...+... ..7....* [0030] 30 28 A0 26 1B 24 6E 6F 74 5F 64 65 66 69 6E 65 0(.&.$no t_define [0040] 64 5F 69 6E 5F 52 46 43 34 31 37 38 40 70 6C 65 d_in_RFC 4178@ple [0050] 61 73 65 5F 69 67 6E 6F 72 65 ase_igno re [2014/11/04 23:32:49.506572, 2, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:419(remove_child_pid) Could not find child 20466 -- ignoring [2014/11/04 23:32:49.506606, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:512(cups_async_callback) cups_async_callback: callback received for printer data. fd = 28 [2014/11/04 23:32:49.506630, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:196(recv_pcap_blob) successfully recvd blob of len 12 [2014/11/04 23:32:49.506663, 0, pid=20465, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:528(cups_async_callback) failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL [2014/11/04 23:32:49.545829, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 160 [2014/11/04 23:32:49.545890, 6, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0xa0 [2014/11/04 23:32:49.545910, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 1 of length 164 (0 toread) [2014/11/04 23:32:49.545927, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.545937, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=160 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=65535 smb_pid=150 smb_uid=0 smb_mid=1 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 79 (0x4F) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=49236 (0xC054) smb_vwv[11]=32768 (0x8000) smb_bcc=101 [2014/11/04 23:32:49.546077, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] 60 4D 06 06 2B 06 01 05 05 02 A0 43 30 41 A0 0E `M..+... ...C0A.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2F 0...+... ..7..../ [0020] 04 2D 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .-NTLMSS P....... [0030] 08 60 09 00 09 00 20 00 00 00 04 00 04 00 29 00 .`.... . ......). [0040] 00 00 57 4F 52 4B 47 52 4F 55 50 41 52 43 48 55 ..WORKGR OUPARCHU [0050] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [0060] 00 61 00 00 00 .a... [2014/11/04 23:32:49.546182, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBsesssetupX (pid 20465) conn 0x0 [2014/11/04 23:32:49.546202, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.546218, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.546236, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.546262, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.546284, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:604(reply_sesssetup_and_X) wct=12 flg2=0xc843 [2014/11/04 23:32:49.546317, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:138(reply_sesssetup_and_X_spnego) Doing spnego session setup [2014/11/04 23:32:49.546347, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:179(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2014/11/04 23:32:49.546373, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb [2014/11/04 23:32:49.546389, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb 2: 3: [2014/11/04 23:32:49.546407, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 9ECBF487 [2014/11/04 23:32:49.546430, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b967f20 [2014/11/04 23:32:49.546601, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:853(smbXsrv_session_global_store) [2014/11/04 23:32:49.546621, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:855(smbXsrv_session_global_store) smbXsrv_session_global_store: key '9ECBF487' stored [2014/11/04 23:32:49.546640, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x9ecbf487 (2664166535) session_wire_id : 0x000000000000dbad (56237) creation_time : Tue Nov 4 11:32:50 PM 2014 CET expiration_time : Thu Jan 1 01:00:00 AM 1970 CET auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000004ff1 (20465) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xc9f4c94e3e9b98e7 (-3894266439873619737) local_address : 'ipv4:127.0.0.1:41830' remote_address : 'ipv4:127.0.0.1:50817' remote_name : '127.0.0.1' auth_session_info_seqnum : 0x00000000 (0) [2014/11/04 23:32:49.546858, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 9ECBF487 [2014/11/04 23:32:49.546876, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb [2014/11/04 23:32:49.546892, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.546908, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1215(smbXsrv_session_create) [2014/11/04 23:32:49.546918, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1223(smbXsrv_session_create) smbXsrv_session_create: global_id (0x9ecbf487) stored [2014/11/04 23:32:49.546932, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL connection : * local_id : 0x0000dbad (56237) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x9ecbf487 (2664166535) session_wire_id : 0x000000000000dbad (56237) creation_time : Tue Nov 4 11:32:50 PM 2014 CET expiration_time : Thu Jan 1 01:00:00 AM 1970 CET auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000004ff1 (20465) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xc9f4c94e3e9b98e7 (-3894266439873619737) local_address : 'ipv4:127.0.0.1:41830' remote_address : 'ipv4:127.0.0.1:50817' remote_name : '127.0.0.1' auth_session_info_seqnum : 0x00000000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Tue Nov 4 11:32:50 PM 2014 CET nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) gensec : NULL compat : NULL tcon_table : NULL [2014/11/04 23:32:49.547227, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:464(make_auth_context_subsystem) Making default auth method list for server role = 'standalone server', encrypt passwords = yes [2014/11/04 23:32:49.547245, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2014/11/04 23:32:49.547262, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module) load_auth_module: auth method guest has a valid init [2014/11/04 23:32:49.547277, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2014/11/04 23:32:49.547293, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module) load_auth_module: auth method sam has a valid init [2014/11/04 23:32:49.547335, 5, pid=20465, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech) Starting GENSEC mechanism spnego [2014/11/04 23:32:49.547356, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.547373, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.547388, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.547403, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.547417, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.547494, 5, pid=20465, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2014/11/04 23:32:49.547538, 3, pid=20465, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2014/11/04 23:32:49.547633, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0009 (9) DomainNameMaxLen : 0x0009 (9) DomainName : * DomainName : 'WORKGROUP' WorkstationLen : 0x0004 (4) WorkstationMaxLen : 0x0004 (4) Workstation : * Workstation : 'ARCH' [2014/11/04 23:32:49.547916, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x0008 (8) TargetNameMaxLen : 0x0008 (8) TargetName : * TargetName : 'ARCH' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : ddcc01e41b623cd3 Reserved : 0000000000000000 TargetInfoLen : 0x0064 (100) TargetNameInfoMaxLen : 0x0064 (100) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'ARCH' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'ARCH' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0016 (22) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'localdomain' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x002a (42) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'localhost.localdomain' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2014/11/04 23:32:49.548360, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.548393, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.548404, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=286 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=65535 smb_pid=150 smb_uid=56237 smb_mid=1 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 187 (0xBB) smb_bcc=243 [2014/11/04 23:32:49.548499, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] A1 81 B8 30 81 B5 A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 9F 04 81 9C 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 08 00 08 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 DD CC 01 E4 1B 62 3C D3 00 ......`. ....b<.. [0040] 00 00 00 00 00 00 00 64 00 64 00 38 00 00 00 41 .......d .d.8...A [0050] 00 52 00 43 00 48 00 02 00 08 00 41 00 52 00 43 .R.C.H.. ...A.R.C [0060] 00 48 00 01 00 08 00 41 00 52 00 43 00 48 00 04 .H.....A .R.C.H.. [0070] 00 16 00 6C 00 6F 00 63 00 61 00 6C 00 64 00 6F ...l.o.c .a.l.d.o [0080] 00 6D 00 61 00 69 00 6E 00 03 00 2A 00 6C 00 6F .m.a.i.n ...*.l.o [0090] 00 63 00 61 00 6C 00 68 00 6F 00 73 00 74 00 2E .c.a.l.h .o.s.t.. [00A0] 00 6C 00 6F 00 63 00 61 00 6C 00 64 00 6F 00 6D .l.o.c.a .l.d.o.m [00B0] 00 61 00 69 00 6E 00 00 00 00 00 55 00 6E 00 69 .a.i.n.. ...U.n.i [00C0] 00 78 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 .x...S.a .m.b.a. [00D0] 00 34 00 2E 00 31 00 2E 00 31 00 32 00 00 00 57 .4...1.. .1.2...W [00E0] 00 4F 00 52 00 4B 00 47 00 52 00 4F 00 55 00 50 .O.R.K.G .R.O.U.P [00F0] 00 00 00 ... [2014/11/04 23:32:49.555950, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 382 [2014/11/04 23:32:49.555986, 6, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0x17e [2014/11/04 23:32:49.556003, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 2 of length 386 (0 toread) [2014/11/04 23:32:49.556019, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.556029, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=382 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=65535 smb_pid=150 smb_uid=56237 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 300 (0x12C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=49236 (0xC054) smb_vwv[11]=32768 (0x8000) smb_bcc=323 [2014/11/04 23:32:49.556166, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] A1 82 01 28 30 82 01 24 A2 82 01 20 04 82 01 1C ...(0..$ ... .... [0010] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........ [0020] 40 00 00 00 90 00 90 00 58 00 00 00 12 00 12 00 @....... X....... [0030] E8 00 00 00 0A 00 0A 00 FA 00 00 00 08 00 08 00 ........ ........ [0040] 04 01 00 00 10 00 10 00 0C 01 00 00 15 82 08 60 ........ .......` [0050] 92 F0 54 C7 4B 27 9C E9 78 F3 AA 8F 72 B3 01 E6 ..T.K'.. x...r... [0060] CC 1C 1C 1C F8 D9 0F 9F AA 6B E9 35 DD 90 CB AE ........ .k.5.... [0070] F8 43 3D 29 F2 B3 1B 83 01 01 00 00 00 00 00 00 .C=).... ........ [0080] 00 E8 A9 42 7F F8 CF 01 1C A9 C0 1E C4 3C EE CB ...B.... .....<.. [0090] 00 00 00 00 02 00 08 00 41 00 52 00 43 00 48 00 ........ A.R.C.H. [00A0] 01 00 08 00 41 00 52 00 43 00 48 00 04 00 16 00 ....A.R. C.H..... [00B0] 6C 00 6F 00 63 00 61 00 6C 00 64 00 6F 00 6D 00 l.o.c.a. l.d.o.m. [00C0] 61 00 69 00 6E 00 03 00 2A 00 6C 00 6F 00 63 00 a.i.n... *.l.o.c. [00D0] 61 00 6C 00 68 00 6F 00 73 00 74 00 2E 00 6C 00 a.l.h.o. s.t...l. [00E0] 6F 00 63 00 61 00 6C 00 64 00 6F 00 6D 00 61 00 o.c.a.l. d.o.m.a. [00F0] 69 00 6E 00 00 00 00 00 57 00 4F 00 52 00 4B 00 i.n..... W.O.R.K. [0100] 47 00 52 00 4F 00 55 00 50 00 47 00 55 00 45 00 G.R.O.U. P.G.U.E. [0110] 53 00 54 00 41 00 52 00 43 00 48 00 F7 83 8A 1D S.T.A.R. C.H..... [0120] FE 05 28 85 1F CF DD C5 66 BA E7 B3 00 55 00 6E ..(..... f....U.n [0130] 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 00 61 .i.x...S .a.m.b.a [0140] 00 00 00 ... [2014/11/04 23:32:49.556416, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBsesssetupX (pid 20465) conn 0x0 [2014/11/04 23:32:49.556434, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.556449, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.556464, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.556487, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.556503, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:604(reply_sesssetup_and_X) wct=12 flg2=0xc843 [2014/11/04 23:32:49.556536, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:138(reply_sesssetup_and_X_spnego) Doing spnego session setup [2014/11/04 23:32:49.556554, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:179(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2014/11/04 23:32:49.556571, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.556586, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.556601, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.556616, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.556631, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.556695, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 92f054c74b279ce978f3aa8f72b301e6cc1c1c1cf8d90f9f NtChallengeResponseLen : 0x0090 (144) NtChallengeResponseMaxLen: 0x0090 (144) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 144) v2: struct NTLMv2_RESPONSE Response : aa6be935dd90cbaef8433d29f2b31b83 Challenge: struct NTLMv2_CLIENT_CHALLENGE RespType : 0x01 (1) HiRespType : 0x01 (1) Reserved1 : 0x0000 (0) Reserved2 : 0x00000000 (0) TimeStamp : Tue Nov 4 11:32:48 PM 2014 CET ChallengeFromClient : 1ca9c01ec43ceecb Reserved3 : 0x00000000 (0) AvPairs: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'ARCH' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'ARCH' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0016 (22) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'localdomain' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x002a (42) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'localhost.localdomain' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) DomainNameLen : 0x0012 (18) DomainNameMaxLen : 0x0012 (18) DomainName : * DomainName : 'WORKGROUP' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'GUEST' WorkstationLen : 0x0008 (8) WorkstationMaxLen : 0x0008 (8) Workstation : * Workstation : 'ARCH' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [0000] F7 83 8A 1D FE 05 28 85 1F CF DD C5 66 BA E7 B3 ......(. ....f... NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2014/11/04 23:32:49.557314, 3, pid=20465, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth) Got user=[GUEST] domain=[WORKGROUP] workstation=[ARCH] len1=24 len2=144 [2014/11/04 23:32:49.557341, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4839(lp_load_ex) lp_load_ex: refreshing parameters [2014/11/04 23:32:49.557358, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1488(free_param_opts) Freeing parametrics: [2014/11/04 23:32:49.557386, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:750(init_globals) Initialising global parameters [2014/11/04 23:32:49.557428, 3, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/tmp/qemu-smb.20439-0/smb.conf" [2014/11/04 23:32:49.557446, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3565(do_section) Processing section "[global]" doing parameter log level = 10 [2014/11/04 23:32:49.557470, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 doing parameter private dir = /tmp/qemu-smb.20439-0 doing parameter socket address = 127.0.0.1 [2014/11/04 23:32:49.557621, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3179(lp_do_parameter) WARNING: The "socket address" option is deprecated doing parameter pid directory = /tmp/qemu-smb.20439-0 doing parameter lock directory = /tmp/qemu-smb.20439-0 doing parameter state directory = /tmp/qemu-smb.20439-0 doing parameter ncalrpc dir = /tmp/qemu-smb.20439-0/ncalrpc doing parameter log file = /tmp/qemu-smb.20439-0/log.smbd doing parameter smb passwd file = /tmp/qemu-smb.20439-0/smbpasswd doing parameter security = user doing parameter map to guest = Bad User [2014/11/04 23:32:49.557713, 2, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section) Processing section "[qemu]" doing parameter path = /usr doing parameter read only = no doing parameter guest ok = yes doing parameter force user = root [2014/11/04 23:32:49.557761, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4878(lp_load_ex) pm_process() returned Yes [2014/11/04 23:32:49.557780, 7, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber) lp_servicenumber: couldn't find homes [2014/11/04 23:32:49.557797, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1774(lp_add_ipc) adding IPC service [2014/11/04 23:32:49.557823, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:115(make_user_info_map) Mapping user [WORKGROUP]\[GUEST] from workstation [ARCH] [2014/11/04 23:32:49.557846, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:137(make_user_info_map) Mapped domain from [WORKGROUP] to [ARCH] for user [GUEST] from workstation [ARCH] [2014/11/04 23:32:49.557862, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:61(make_user_info) attempting to make a user_info for GUEST (GUEST) [2014/11/04 23:32:49.557885, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:72(make_user_info) making strings for GUEST's user_info struct [2014/11/04 23:32:49.557903, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:92(make_user_info) making blobs for GUEST's user_info struct [2014/11/04 23:32:49.557919, 10, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:128(make_user_info) made a user_info for GUEST (GUEST) [2014/11/04 23:32:49.557935, 3, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:177(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user [WORKGROUP]\[GUEST]@[ARCH] with the new password interface [2014/11/04 23:32:49.557952, 3, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:180(auth_check_ntlm_password) check_ntlm_password: mapped user is: [ARCH]\[GUEST]@[ARCH] [2014/11/04 23:32:49.557967, 10, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:189(auth_check_ntlm_password) check_ntlm_password: auth_context challenge created by random [2014/11/04 23:32:49.557982, 10, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:191(auth_check_ntlm_password) challenge is: [2014/11/04 23:32:49.557997, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] DD CC 01 E4 1B 62 3C D3 .....b<. [2014/11/04 23:32:49.558019, 10, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:44(check_guest_security) Check auth for: [GUEST] [2014/11/04 23:32:49.558034, 10, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:217(auth_check_ntlm_password) check_ntlm_password: guest had nothing to say [2014/11/04 23:32:49.558049, 10, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth) Check auth for: [GUEST] [2014/11/04 23:32:49.558065, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1200(is_myname) is_myname("ARCH") returns 1 [2014/11/04 23:32:49.558087, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.558104, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2014/11/04 23:32:49.558119, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.558134, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.558149, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.558179, 5, pid=20465, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:594(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_guest [2014/11/04 23:32:49.558202, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.558218, 3, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/check_samsec.c:399(check_sam_security) check_sam_security: Couldn't find user 'GUEST' in passdb. [2014/11/04 23:32:49.558233, 5, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:229(auth_check_ntlm_password) check_ntlm_password: sam authentication for user [GUEST] FAILED with error NT_STATUS_NO_SUCH_USER [2014/11/04 23:32:49.558250, 2, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:288(auth_check_ntlm_password) check_ntlm_password: Authentication for user [GUEST] -> [GUEST] FAILED with error NT_STATUS_NO_SUCH_USER [2014/11/04 23:32:49.558266, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:144(auth3_check_password) Checking NTLMSSP password for WORKGROUP\GUEST failed: NT_STATUS_NO_SUCH_USER [2014/11/04 23:32:49.558283, 3, pid=20465, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:1593(do_map_to_guest_server_info) No such user GUEST [WORKGROUP] - using guest account [2014/11/04 23:32:49.558305, 10, pid=20465, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:554(ntlmssp_server_postauth) ntlmssp_server_auth: Failed to create unmodified session key. [2014/11/04 23:32:49.558322, 5, pid=20465, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:571(ntlmssp_server_postauth) server session key is invalid (len == 0), cannot do KEY_EXCH! [2014/11/04 23:32:49.558342, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.558390, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb [2014/11/04 23:32:49.558409, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb 2: 3: [2014/11/04 23:32:49.558426, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 9ECBF487 [2014/11/04 23:32:49.558445, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b957ef0 [2014/11/04 23:32:49.558479, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:853(smbXsrv_session_global_store) [2014/11/04 23:32:49.558491, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:855(smbXsrv_session_global_store) smbXsrv_session_global_store: key '9ECBF487' stored [2014/11/04 23:32:49.558506, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x9ecbf487 (2664166535) session_wire_id : 0x000000000000dbad (56237) creation_time : Tue Nov 4 11:32:50 PM 2014 CET expiration_time : Thu Jan 1 01:00:00 AM 1970 CET auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000007 (7) sids: ARRAY(7) sids : S-1-5-21-2629826569-4057080478-97288662-501 sids : S-1-5-21-2629826569-4057080478-97288662-514 sids : S-1-22-2-99 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-32-546 sids : S-1-22-1-99 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x0000000000000063 (99) gid : 0x0000000000000063 (99) ngroups : 0x00000001 (1) groups: ARRAY(1) groups : 0x0000000000000063 (99) info : * info: struct auth_user_info account_name : * account_name : 'nobody' domain_name : * domain_name : 'ARCH' full_name : NULL logon_script : NULL profile_path : NULL home_directory : NULL home_drive : NULL logon_server : NULL last_logon : NTTIME(0) last_logoff : NTTIME(0) acct_expiry : NTTIME(0) last_password_change : NTTIME(0) allow_password_change : NTTIME(0) force_password_change : NTTIME(0) logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000000 (0) authenticated : 0x00 (0) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'nobody' sanitized_username : * sanitized_username : 'GUEST' torture : NULL credentials : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000004ff1 (20465) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xc9f4c94e3e9b98e7 (-3894266439873619737) local_address : 'ipv4:127.0.0.1:41830' remote_address : 'ipv4:127.0.0.1:50817' remote_name : '127.0.0.1' auth_session_info_seqnum : 0x00000001 (1) [2014/11/04 23:32:49.559405, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 9ECBF487 [2014/11/04 23:32:49.559424, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb [2014/11/04 23:32:49.559449, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.559467, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1269(smbXsrv_session_update) [2014/11/04 23:32:49.559477, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1277(smbXsrv_session_update) smbXsrv_session_update: global_id (0x9ecbf487) stored [2014/11/04 23:32:49.559491, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL connection : * local_id : 0x0000dbad (56237) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x9ecbf487 (2664166535) session_wire_id : 0x000000000000dbad (56237) creation_time : Tue Nov 4 11:32:50 PM 2014 CET expiration_time : Thu Jan 1 01:00:00 AM 1970 CET auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000007 (7) sids: ARRAY(7) sids : S-1-5-21-2629826569-4057080478-97288662-501 sids : S-1-5-21-2629826569-4057080478-97288662-514 sids : S-1-22-2-99 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-32-546 sids : S-1-22-1-99 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x0000000000000063 (99) gid : 0x0000000000000063 (99) ngroups : 0x00000001 (1) groups: ARRAY(1) groups : 0x0000000000000063 (99) info : * info: struct auth_user_info account_name : * account_name : 'nobody' domain_name : * domain_name : 'ARCH' full_name : NULL logon_script : NULL profile_path : NULL home_directory : NULL home_drive : NULL logon_server : NULL last_logon : NTTIME(0) last_logoff : NTTIME(0) acct_expiry : NTTIME(0) last_password_change : NTTIME(0) allow_password_change : NTTIME(0) force_password_change : NTTIME(0) logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000000 (0) authenticated : 0x00 (0) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'nobody' sanitized_username : * sanitized_username : 'GUEST' torture : NULL credentials : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000004ff1 (20465) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xc9f4c94e3e9b98e7 (-3894266439873619737) local_address : 'ipv4:127.0.0.1:41830' remote_address : 'ipv4:127.0.0.1:50817' remote_name : '127.0.0.1' auth_session_info_seqnum : 0x00000001 (1) status : NT_STATUS_OK idle_time : Tue Nov 4 11:32:50 PM 2014 CET nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) gensec : * compat : * tcon_table : NULL [2014/11/04 23:32:49.560919, 6, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed) lp_file_list_changed() file /tmp/qemu-smb.20439-0/smb.conf -> /tmp/qemu-smb.20439-0/smb.conf last mod_time: Tue Nov 4 23:32:45 2014 [2014/11/04 23:32:49.560958, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.560967, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=108 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=65535 smb_pid=150 smb_uid=56237 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 9 (0x9) smb_bcc=65 [2014/11/04 23:32:49.561060, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [0010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 34 ...S.a.m .b.a. .4 [0020] 00 2E 00 31 00 2E 00 31 00 32 00 00 00 57 00 4F ...1...1 .2...W.O [0030] 00 52 00 4B 00 47 00 52 00 4F 00 55 00 50 00 00 .R.K.G.R .O.U.P.. [0040] 00 . [2014/11/04 23:32:49.564136, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 82 [2014/11/04 23:32:49.564174, 6, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0x52 [2014/11/04 23:32:49.564192, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 3 of length 86 (0 toread) [2014/11/04 23:32:49.564207, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.564217, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=82 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=65535 smb_pid=150 smb_uid=56237 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 12 (0xC) smb_vwv[ 3]= 1 (0x1) smb_bcc=39 [2014/11/04 23:32:49.564313, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] 00 5C 00 5C 00 31 00 30 00 2E 00 30 00 2E 00 32 .\.\.1.0 ...0...2 [0010] 00 2E 00 34 00 5C 00 49 00 50 00 43 00 24 00 00 ...4.\.I .P.C.$.. [0020] 00 3F 3F 3F 3F 3F 00 .?????. [2014/11/04 23:32:49.564360, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBtconX (pid 20465) conn 0x0 [2014/11/04 23:32:49.564378, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.564393, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.564408, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.564432, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.564466, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:857(reply_tcon_and_X) Client requested device type [?????] for share [IPC$] [2014/11/04 23:32:49.564514, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:1106(make_connection) making a connection to 'normal' service ipc$ [2014/11/04 23:32:49.564542, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb [2014/11/04 23:32:49.564558, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb 2: 3: [2014/11/04 23:32:49.564576, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0EB97D52 [2014/11/04 23:32:49.564596, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b96ba40 [2014/11/04 23:32:49.564650, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:672(smbXsrv_tcon_global_store) [2014/11/04 23:32:49.564662, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:674(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '0EB97D52' stored [2014/11/04 23:32:49.564678, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x0eb97d52 (247037266) tcon_wire_id : 0x00002b8c (11148) server_id: struct server_id pid : 0x0000000000004ff1 (20465) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xc9f4c94e3e9b98e7 (-3894266439873619737) creation_time : Tue Nov 4 11:32:50 PM 2014 CET share_name : NULL encryption_required : 0x00 (0) session_global_id : 0x00000000 (0) [2014/11/04 23:32:49.564808, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0EB97D52 [2014/11/04 23:32:49.564825, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb [2014/11/04 23:32:49.564840, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.564856, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:796(smbXsrv_tcon_create) [2014/11/04 23:32:49.564865, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:804(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x0eb97d52) stored [2014/11/04 23:32:49.564880, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x00002b8c (11148) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x0eb97d52 (247037266) tcon_wire_id : 0x00002b8c (11148) server_id: struct server_id pid : 0x0000000000004ff1 (20465) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xc9f4c94e3e9b98e7 (-3894266439873619737) creation_time : Tue Nov 4 11:32:50 PM 2014 CET share_name : NULL encryption_required : 0x00 (0) session_global_id : 0x00000000 (0) status : NT_STATUS_INTERNAL_ERROR idle_time : Tue Nov 4 11:32:50 PM 2014 CET compat : NULL [2014/11/04 23:32:49.565083, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 127.0.0.1 (127.0.0.1) [2014/11/04 23:32:49.565138, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2014/11/04 23:32:49.565158, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:612(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2014/11/04 23:32:49.565181, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:237(user_ok_token) user_ok_token: share IPC$ is ok for unix user nobody [2014/11/04 23:32:49.565202, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:284(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2014/11/04 23:32:49.565237, 10, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff [2014/11/04 23:32:49.565262, 3, pid=20465, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:113(vfs_init_default) Initialising default vfs hooks [2014/11/04 23:32:49.565289, 10, pid=20465, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for posixacl [2014/11/04 23:32:49.565307, 5, pid=20465, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) Successfully added vfs backend 'posixacl' [2014/11/04 23:32:49.565326, 10, pid=20465, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ [2014/11/04 23:32:49.565343, 5, pid=20465, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) Successfully added vfs backend '/[Default VFS]/' [2014/11/04 23:32:49.565359, 10, pid=20465, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for dfs_samba4 [2014/11/04 23:32:49.565374, 5, pid=20465, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) Successfully added vfs backend 'dfs_samba4' [2014/11/04 23:32:49.565392, 10, pid=20465, effective(0, 0), real(0, 0), class=dfs_samba4] ../source3/modules/vfs_dfs_samba4.c:155(vfs_dfs_samba4_init) vfs_dfs_samba4: Debug class number of 'fileid': 23 [2014/11/04 23:32:49.565408, 3, pid=20465, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:139(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2014/11/04 23:32:49.565424, 10, pid=20465, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2014/11/04 23:32:49.565461, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2014/11/04 23:32:49.565483, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:237(user_ok_token) user_ok_token: share IPC$ is ok for unix user nobody [2014/11/04 23:32:49.565499, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:284(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2014/11/04 23:32:49.565520, 10, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff [2014/11/04 23:32:49.565550, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.565570, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (7): SID[ 0]: S-1-5-21-2629826569-4057080478-97288662-501 SID[ 1]: S-1-5-21-2629826569-4057080478-97288662-514 SID[ 2]: S-1-22-2-99 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-99 Privileges (0x 0): Rights (0x 0): [2014/11/04 23:32:49.565638, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 99 Primary group is 99 and contains 1 supplementary groups Group[ 0]: 99 [2014/11/04 23:32:49.565670, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(99,99), gid=(0,99) [2014/11/04 23:32:49.565697, 4, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.565713, 5, pid=20465, effective(99, 99), real(99, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.565728, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.565751, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.565772, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2014/11/04 23:32:49.565806, 10, pid=20465, effective(0, 0), real(0, 0), class=vfs] ../source3/modules/vfs_default.c:164(vfswrap_fs_capabilities) vfswrap_fs_capabilities: timestamp resolution of sec available on share IPC$, directory /tmp [2014/11/04 23:32:49.565828, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:856(make_connection_snum) arch (ipv4:127.0.0.1:50817) connect to service IPC$ initially as user nobody (uid=99, gid=99) (pid 20465) [2014/11/04 23:32:49.565860, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb [2014/11/04 23:32:49.565877, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb 2: 3: [2014/11/04 23:32:49.565893, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0EB97D52 [2014/11/04 23:32:49.565911, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b95a1e0 [2014/11/04 23:32:49.565931, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:672(smbXsrv_tcon_global_store) [2014/11/04 23:32:49.565941, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:674(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '0EB97D52' stored [2014/11/04 23:32:49.565956, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x0eb97d52 (247037266) tcon_wire_id : 0x00002b8c (11148) server_id: struct server_id pid : 0x0000000000004ff1 (20465) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xc9f4c94e3e9b98e7 (-3894266439873619737) creation_time : Tue Nov 4 11:32:50 PM 2014 CET share_name : 'IPC$' encryption_required : 0x00 (0) session_global_id : 0x9ecbf487 (2664166535) [2014/11/04 23:32:49.566085, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0EB97D52 [2014/11/04 23:32:49.566101, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb [2014/11/04 23:32:49.566116, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.566131, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:849(smbXsrv_tcon_update) [2014/11/04 23:32:49.566141, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:857(smbXsrv_tcon_update) smbXsrv_tcon_update: global_id (0x0eb97d52) stored [2014/11/04 23:32:49.566155, 1, pid=20465, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x00002b8c (11148) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x0eb97d52 (247037266) tcon_wire_id : 0x00002b8c (11148) server_id: struct server_id pid : 0x0000000000004ff1 (20465) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xc9f4c94e3e9b98e7 (-3894266439873619737) creation_time : Tue Nov 4 11:32:50 PM 2014 CET share_name : 'IPC$' encryption_required : 0x00 (0) session_global_id : 0x9ecbf487 (2664166535) status : NT_STATUS_OK idle_time : Tue Nov 4 11:32:50 PM 2014 CET compat : * [2014/11/04 23:32:49.566341, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:1024(reply_tcon_and_X) tconX service=IPC$ [2014/11/04 23:32:49.566358, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.566367, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=56 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=11148 smb_pid=150 smb_uid=56237 smb_mid=3 smt_wct=7 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 511 (0x1FF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 511 (0x1FF) smb_vwv[ 6]= 0 (0x0) smb_bcc=7 [2014/11/04 23:32:49.566477, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] 49 50 43 00 00 00 00 IPC.... [2014/11/04 23:32:49.573674, 10, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 102 [2014/11/04 23:32:49.573711, 6, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0x66 [2014/11/04 23:32:49.573729, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 4 of length 106 (0 toread) [2014/11/04 23:32:49.573745, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.573754, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=11148 smb_pid=150 smb_uid=56237 smb_mid=4 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=19 [2014/11/04 23:32:49.573955, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [0010] 00 00 00 ... [2014/11/04 23:32:49.573988, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBntcreateX (pid 20465) conn 0x7f508b958e90 [2014/11/04 23:32:49.574007, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.574023, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (7): SID[ 0]: S-1-5-21-2629826569-4057080478-97288662-501 SID[ 1]: S-1-5-21-2629826569-4057080478-97288662-514 SID[ 2]: S-1-22-2-99 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-99 Privileges (0x 0): Rights (0x 0): [2014/11/04 23:32:49.574093, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 99 Primary group is 99 and contains 1 supplementary groups Group[ 0]: 99 [2014/11/04 23:32:49.574124, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(99,99), gid=(0,99) [2014/11/04 23:32:49.574146, 4, pid=20465, effective(99, 99), real(99, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /tmp [2014/11/04 23:32:49.574179, 4, pid=20465, effective(99, 99), real(99, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /tmp [2014/11/04 23:32:49.574201, 10, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/nttrans.c:503(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x0, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = srvsvc [2014/11/04 23:32:49.574229, 4, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/nttrans.c:288(nt_open_pipe) nt_open_pipe: Opening pipe \srvsvc. [2014/11/04 23:32:49.574262, 5, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_open_global.tdb [2014/11/04 23:32:49.574280, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_open_global.tdb 2: 3: [2014/11/04 23:32:49.574297, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 7B4EEA6D [2014/11/04 23:32:49.574317, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b957fe0 [2014/11/04 23:32:49.574376, 10, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/smbXsrv_open.c:695(smbXsrv_open_global_store) [2014/11/04 23:32:49.574389, 10, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/smbXsrv_open.c:697(smbXsrv_open_global_store) smbXsrv_open_global_store: key '7B4EEA6D' stored [2014/11/04 23:32:49.574405, 1, pid=20465, effective(99, 99), real(99, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &global_blob: struct smbXsrv_open_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_open_globalU(case 0) info0 : * info0: struct smbXsrv_open_global0 db_rec : * server_id: struct server_id pid : 0x0000000000004ff1 (20465) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xc9f4c94e3e9b98e7 (-3894266439873619737) open_global_id : 0x7b4eea6d (2068769389) open_persistent_id : 0x000000007b4eea6d (2068769389) open_volatile_id : 0x000000000000e1fb (57851) open_owner : S-1-5-21-2629826569-4057080478-97288662-501 open_time : Tue Nov 4 11:32:50 PM 2014 CET create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 [2014/11/04 23:32:49.574595, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 7B4EEA6D [2014/11/04 23:32:49.574612, 5, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_open_global.tdb [2014/11/04 23:32:49.574628, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.574644, 10, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/smbXsrv_open.c:862(smbXsrv_open_create) [2014/11/04 23:32:49.574653, 10, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/smbXsrv_open.c:870(smbXsrv_open_create) smbXsrv_open_create: global_id (0x7b4eea6d) stored [2014/11/04 23:32:49.574668, 1, pid=20465, effective(99, 99), real(99, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &open_blob: struct smbXsrv_openB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_openU(case 0) info0 : * info0: struct smbXsrv_open table : * db_rec : NULL local_id : 0x0000e1fb (57851) global : * global: struct smbXsrv_open_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000004ff1 (20465) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xc9f4c94e3e9b98e7 (-3894266439873619737) open_global_id : 0x7b4eea6d (2068769389) open_persistent_id : 0x000000007b4eea6d (2068769389) open_volatile_id : 0x000000000000e1fb (57851) open_owner : S-1-5-21-2629826569-4057080478-97288662-501 open_time : Tue Nov 4 11:32:50 PM 2014 CET create_guid : 00000000-0000-0000-0000-000000000000 client_guid : 00000000-0000-0000-0000-000000000000 app_instance_id : 00000000-0000-0000-0000-000000000000 disconnect_time : NTTIME(0) durable_timeout_msec : 0x00000000 (0) durable : 0x00 (0) backend_cookie : DATA_BLOB length=0 status : NT_STATUS_OK idle_time : Tue Nov 4 11:32:50 PM 2014 CET compat : NULL [2014/11/04 23:32:49.574899, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/files.c:128(file_new) allocated file structure fnum 57851 (1 used) [2014/11/04 23:32:49.574930, 10, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/files.c:716(file_name_hash) file_name_hash: /tmp/srvsvc hash 0x8e98a76a [2014/11/04 23:32:49.574964, 4, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \srvsvc [2014/11/04 23:32:49.574985, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \srvsvc [2014/11/04 23:32:49.575002, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \srvsvc [2014/11/04 23:32:49.575033, 4, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \srvsvc [2014/11/04 23:32:49.575051, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/nttrans.c:382(do_ntcreate_pipe_open) do_ntcreate_pipe_open: open pipe = \srvsvc [2014/11/04 23:32:49.575066, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.575076, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:178(show_msg) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=11148 smb_pid=150 smb_uid=56237 smb_mid=4 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=64256 (0xFB00) smb_vwv[ 3]= 481 (0x1E1) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2014/11/04 23:32:49.575325, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/util/util.c:556(dump_data) [2014/11/04 23:32:49.581972, 10, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 156 [2014/11/04 23:32:49.582009, 6, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0x9c [2014/11/04 23:32:49.582027, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 5 of length 160 (0 toread) [2014/11/04 23:32:49.582042, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.582052, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:178(show_msg) size=156 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=11148 smb_pid=150 smb_uid=56237 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=57851 (0xE1FB) smb_bcc=89 [2014/11/04 23:32:49.582211, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/util/util.c:556(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... [0020] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ [0030] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 ..O2Kp.. ..xZG.n. [0040] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ [0050] 00 2B 10 48 60 02 00 00 00 .+.H`... . [2014/11/04 23:32:49.582291, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBtrans (pid 20465) conn 0x7f508b958e90 [2014/11/04 23:32:49.582309, 4, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2014/11/04 23:32:49.582342, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:591(handle_trans) trans <\PIPE\> data=72 params=0 setup=2 [2014/11/04 23:32:49.582371, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:624(handle_trans) calling named_pipe [2014/11/04 23:32:49.582386, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:542(named_pipe) named pipe command on <> name [2014/11/04 23:32:49.582405, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:464(api_fd_reply) api_fd_reply [2014/11/04 23:32:49.582424, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) Got API command 0x26 on pipe "srvsvc" (pnum e1fb) [2014/11/04 23:32:49.582441, 10, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:508(api_fd_reply) api_fd_reply: p:0x7f508b95a3a0 max_trans_reply: 4280 [2014/11/04 23:32:49.582458, 6, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 72 [2014/11/04 23:32:49.582478, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 72 [2014/11/04 23:32:49.582496, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 72 [2014/11/04 23:32:49.582511, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2014/11/04 23:32:49.582527, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2014/11/04 23:32:49.582574, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 56 [2014/11/04 23:32:49.582592, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 56 [2014/11/04 23:32:49.582612, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2014/11/04 23:32:49.582629, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 56 [2014/11/04 23:32:49.582644, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 56, incoming data = 56 [2014/11/04 23:32:49.582667, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1606(process_complete_pdu) PDU is in Little Endian format! [2014/11/04 23:32:49.582733, 1, pid=20465, effective(99, 99), real(99, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_BIND (11) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0048 (72) auth_length : 0x0000 (0) call_id : 0x00000001 (1) u : union dcerpc_payload(case 11) bind: struct dcerpc_bind max_xmit_frag : 0x10b8 (4280) max_recv_frag : 0x10b8 (4280) assoc_group_id : 0x00000000 (0) num_contexts : 0x01 (1) ctx_list: ARRAY(1) ctx_list: struct dcerpc_ctx_list context_id : 0x0000 (0) num_transfer_syntaxes : 0x01 (1) abstract_syntax: struct ndr_syntax_id uuid : 4b324fc8-1670-01d3-1278-5a47bf6ee188 if_version : 0x00000003 (3) transfer_syntaxes: ARRAY(1) transfer_syntaxes: struct ndr_syntax_id uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 if_version : 0x00000002 (2) auth_info : DATA_BLOB length=0 [2014/11/04 23:32:49.582972, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1619(process_complete_pdu) Processing packet type 11 [2014/11/04 23:32:49.582992, 3, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:693(api_pipe_bind_req) api_pipe_bind_req: srvsvc -> srvsvc rpc service [2014/11/04 23:32:49.583014, 5, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:724(api_pipe_bind_req) api_pipe_bind_req: make response. 724 [2014/11/04 23:32:49.583029, 3, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:342(check_bind_req) check_bind_req for \srvsvc [2014/11/04 23:32:49.583046, 3, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:349(check_bind_req) check_bind_req: srvsvc -> srvsvc rpc service [2014/11/04 23:32:49.583061, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 2 for pipe \srvsvc [2014/11/04 23:32:49.583110, 1, pid=20465, effective(99, 99), real(99, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_BIND_ACK (12) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x0044 (68) auth_length : 0x0000 (0) call_id : 0x00000001 (1) u : union dcerpc_payload(case 12) bind_ack: struct dcerpc_bind_ack max_xmit_frag : 0x10b8 (4280) max_recv_frag : 0x10b8 (4280) assoc_group_id : 0x000053f0 (21488) secondary_address_size : 0x000d (13) secondary_address : '\PIPE\srvsvc' _pad1 : DATA_BLOB length=0 num_results : 0x01 (1) ctx_list: ARRAY(1) ctx_list: struct dcerpc_ack_ctx result : 0x0000 (0) reason : 0x0000 (0) syntax: struct ndr_syntax_id uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 if_version : 0x00000002 (2) auth_info : DATA_BLOB length=0 [2014/11/04 23:32:49.583330, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 56 [2014/11/04 23:32:49.583362, 6, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \srvsvc len: 4280 [2014/11/04 23:32:49.583382, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:326(read_from_internal_pipe) read_from_pipe: \srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2014/11/04 23:32:49.583398, 3, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 28 [2014/11/04 23:32:49.583418, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 68 bytes. There is no more data outstanding [2014/11/04 23:32:49.583435, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..68] (align 0) [2014/11/04 23:32:49.583451, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.583461, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:178(show_msg) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=11148 smb_pid=150 smb_uid=56237 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2014/11/04 23:32:49.583586, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/util/util.c:556(dump_data) [0000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [0010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [0020] 5C 73 72 76 73 76 63 00 00 01 00 00 00 00 00 00 \srvsvc. ........ [0030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [0040] 60 02 00 00 00 `.... [2014/11/04 23:32:49.592450, 10, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 176 [2014/11/04 23:32:49.592490, 6, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0xb0 [2014/11/04 23:32:49.592508, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 6 of length 180 (0 toread) [2014/11/04 23:32:49.592524, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.592534, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:178(show_msg) size=176 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=11148 smb_pid=150 smb_uid=56237 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 92 (0x5C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 92 (0x5C) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=57851 (0xE1FB) smb_bcc=109 [2014/11/04 23:32:49.592697, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/util/util.c:556(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [0010] 00 05 00 00 03 10 00 00 00 5C 00 00 00 02 00 00 ........ .\...... [0020] 00 44 00 00 00 00 00 0F 00 00 00 02 00 09 00 00 .D...... ........ [0030] 00 00 00 00 00 09 00 00 00 31 00 30 00 2E 00 30 ........ .1.0...0 [0040] 00 2E 00 32 00 2E 00 34 00 00 00 00 00 01 00 00 ...2...4 ........ [0050] 00 01 00 00 00 04 00 02 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 FF FF FF FF 08 00 02 00 00 00 00 00 ........ ..... [2014/11/04 23:32:49.592790, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBtrans (pid 20465) conn 0x7f508b958e90 [2014/11/04 23:32:49.592808, 4, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2014/11/04 23:32:49.592827, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:591(handle_trans) trans <\PIPE\> data=92 params=0 setup=2 [2014/11/04 23:32:49.592845, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:624(handle_trans) calling named_pipe [2014/11/04 23:32:49.592860, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:542(named_pipe) named pipe command on <> name [2014/11/04 23:32:49.592876, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:464(api_fd_reply) api_fd_reply [2014/11/04 23:32:49.592892, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:506(api_fd_reply) Got API command 0x26 on pipe "srvsvc" (pnum e1fb) [2014/11/04 23:32:49.592908, 10, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:508(api_fd_reply) api_fd_reply: p:0x7f508b95a3a0 max_trans_reply: 4280 [2014/11/04 23:32:49.592924, 6, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:520(np_write_send) np_write_send: len: 92 [2014/11/04 23:32:49.592940, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 92 [2014/11/04 23:32:49.592956, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 0, pdu_needed_len = 0, incoming data = 92 [2014/11/04 23:32:49.592971, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:51(fill_rpc_header) fill_rpc_header: data_to_copy = 92, len_needed_to_complete_hdr = 16, receive_len = 0 [2014/11/04 23:32:49.592986, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 16 [2014/11/04 23:32:49.593003, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 76 [2014/11/04 23:32:49.593018, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 0, incoming data = 76 [2014/11/04 23:32:49.593033, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 0 [2014/11/04 23:32:49.593048, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:243(write_to_internal_pipe) write_to_pipe: data_left = 76 [2014/11/04 23:32:49.593063, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:139(process_incoming_data) process_incoming_data: Start: pdu.length = 16, pdu_needed_len = 76, incoming data = 76 [2014/11/04 23:32:49.593079, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1606(process_complete_pdu) PDU is in Little Endian format! [2014/11/04 23:32:49.593098, 1, pid=20465, effective(99, 99), real(99, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_REQUEST (0) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x005c (92) auth_length : 0x0000 (0) call_id : 0x00000002 (2) u : union dcerpc_payload(case 0) request: struct dcerpc_request alloc_hint : 0x00000044 (68) context_id : 0x0000 (0) opnum : 0x000f (15) object : union dcerpc_object(case 0) empty: struct dcerpc_empty _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=68 [0000] 00 00 02 00 09 00 00 00 00 00 00 00 09 00 00 00 ........ ........ [0010] 31 00 30 00 2E 00 30 00 2E 00 32 00 2E 00 34 00 1.0...0. ..2...4. [0020] 00 00 00 00 01 00 00 00 01 00 00 00 04 00 02 00 ........ ........ [0030] 00 00 00 00 00 00 00 00 FF FF FF FF 08 00 02 00 ........ ........ [0040] 00 00 00 00 .... [2014/11/04 23:32:49.593340, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1619(process_complete_pdu) Processing packet type 0 [2014/11/04 23:32:49.593357, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1472(dcesrv_auth_request) Checking request auth. [2014/11/04 23:32:49.593383, 4, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.593404, 4, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.593421, 5, pid=20465, effective(99, 99), real(99, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (7): SID[ 0]: S-1-5-21-2629826569-4057080478-97288662-501 SID[ 1]: S-1-5-21-2629826569-4057080478-97288662-514 SID[ 2]: S-1-22-2-99 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-99 Privileges (0x 0): Rights (0x 0): [2014/11/04 23:32:49.593492, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 99 Primary group is 99 and contains 1 supplementary groups Group[ 0]: 99 [2014/11/04 23:32:49.593525, 5, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1324(api_pipe_request) Requested \srvsvc rpc service [2014/11/04 23:32:49.593543, 4, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1356(api_rpcTNP) api_rpcTNP: \srvsvc op 0xf - api_rpcTNP: rpc command: SRVSVC_NETSHAREENUMALL [2014/11/04 23:32:49.593559, 6, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1390(api_rpcTNP) api_rpc_cmds[15].fn == 0x7f508a081730 [2014/11/04 23:32:49.593604, 1, pid=20465, effective(99, 99), real(99, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) srvsvc_NetShareEnumAll: struct srvsvc_NetShareEnumAll in: struct srvsvc_NetShareEnumAll server_unc : * server_unc : '10.0.2.4' info_ctr : * info_ctr: struct srvsvc_NetShareInfoCtr level : 0x00000001 (1) ctr : union srvsvc_NetShareCtr(case 1) ctr1 : * ctr1: struct srvsvc_NetShareCtr1 count : 0x00000000 (0) array : NULL max_buffer : 0xffffffff (4294967295) resume_handle : * resume_handle : 0x00000000 (0) [2014/11/04 23:32:49.593782, 5, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:1293(_srvsvc_NetShareEnumAll) _srvsvc_NetShareEnumAll: 1293 [2014/11/04 23:32:49.593812, 5, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:483(init_srv_share_info_ctr) init_srv_share_info_ctr [2014/11/04 23:32:49.593829, 4, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.593846, 4, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(56237) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.593861, 4, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.593876, 5, pid=20465, effective(99, 99), real(99, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.593891, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.593926, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/printing/printer_list.c:226(printer_list_get_last_refresh) Failed to fetch record! [2014/11/04 23:32:49.593945, 1, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/server_reload.c:69(delete_and_reload_printers) pcap cache not loaded [2014/11/04 23:32:49.593963, 8, pid=20465, effective(0, 0), real(0, 0)] ../source3/param/service.c:55(load_registry_shares) load_registry_shares() [2014/11/04 23:32:49.593981, 4, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.594001, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:502(init_srv_share_info_ctr) counting service qemu [2014/11/04 23:32:49.594019, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:502(init_srv_share_info_ctr) counting service IPC$ [2014/11/04 23:32:49.594050, 5, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srvsvc/srv_srvsvc_nt.c:1307(_srvsvc_NetShareEnumAll) _srvsvc_NetShareEnumAll: 1307 [2014/11/04 23:32:49.594068, 1, pid=20465, effective(99, 99), real(99, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) srvsvc_NetShareEnumAll: struct srvsvc_NetShareEnumAll out: struct srvsvc_NetShareEnumAll info_ctr : * info_ctr: struct srvsvc_NetShareInfoCtr level : 0x00000001 (1) ctr : union srvsvc_NetShareCtr(case 1) ctr1 : * ctr1: struct srvsvc_NetShareCtr1 count : 0x00000002 (2) array : * array: ARRAY(2) array: struct srvsvc_NetShareInfo1 name : * name : 'qemu' type : STYPE_DISKTREE (0x0) comment : * comment : '' array: struct srvsvc_NetShareInfo1 name : * name : 'IPC$' type : STYPE_IPC_HIDDEN (0x80000003) comment : * comment : 'IPC Service (Samba 4.1.12)' totalentries : * totalentries : 0x00000002 (2) resume_handle : * resume_handle : 0x00000000 (0) result : WERR_OK [2014/11/04 23:32:49.594287, 5, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1417(api_rpcTNP) api_rpcTNP: called \srvsvc successfully [2014/11/04 23:32:49.594311, 4, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.594328, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:248(write_to_internal_pipe) write_to_pipe: data_used = 76 [2014/11/04 23:32:49.594350, 6, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:285(read_from_internal_pipe) name: \srvsvc len: 4280 [2014/11/04 23:32:49.594367, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:347(read_from_internal_pipe) read_from_pipe: \srvsvc: fault_state = 0 : data_sent_length = 0, p->out_data.rdata.length = 196. [2014/11/04 23:32:49.594390, 1, pid=20465, effective(99, 99), real(99, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &r: struct ncacn_packet rpc_vers : 0x05 (5) rpc_vers_minor : 0x00 (0) ptype : DCERPC_PKT_RESPONSE (2) pfc_flags : 0x03 (3) drep: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) frag_length : 0x00dc (220) auth_length : 0x0000 (0) call_id : 0x00000002 (2) u : union dcerpc_payload(case 2) response: struct dcerpc_response alloc_hint : 0x000000c4 (196) context_id : 0x0000 (0) cancel_count : 0x00 (0) _pad : DATA_BLOB length=0 stub_and_verifier : DATA_BLOB length=196 [0000] 01 00 00 00 01 00 00 00 0C 00 02 00 02 00 00 00 ........ ........ [0010] 10 00 02 00 02 00 00 00 14 00 02 00 00 00 00 00 ........ ........ [0020] 18 00 02 00 1C 00 02 00 03 00 00 80 20 00 02 00 ........ .... ... [0030] 05 00 00 00 00 00 00 00 05 00 00 00 71 00 65 00 ........ ....q.e. [0040] 6D 00 75 00 00 00 00 00 01 00 00 00 00 00 00 00 m.u..... ........ [0050] 01 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 ........ ........ [0060] 05 00 00 00 49 00 50 00 43 00 24 00 00 00 00 00 ....I.P. C.$..... [0070] 1B 00 00 00 00 00 00 00 1B 00 00 00 49 00 50 00 ........ ....I.P. [0080] 43 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 C. .S.e. r.v.i.c. [0090] 65 00 20 00 28 00 53 00 61 00 6D 00 62 00 61 00 e. .(.S. a.m.b.a. [00A0] 20 00 34 00 2E 00 31 00 2E 00 31 00 32 00 29 00 .4...1. ..1.2.). [00B0] 00 00 00 00 02 00 00 00 24 00 02 00 00 00 00 00 ........ $....... [00C0] 00 00 00 00 .... [2014/11/04 23:32:49.594738, 3, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:122(free_pipe_context) free_pipe_context: destroying talloc pool of size 150 [2014/11/04 23:32:49.594759, 10, pid=20465, effective(99, 99), real(99, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:788(np_read_recv) Received 220 bytes. There is no more data outstanding [2014/11/04 23:32:49.594790, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..220] (align 0) [2014/11/04 23:32:49.594806, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.594816, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:178(show_msg) size=276 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=11148 smb_pid=150 smb_uid=56237 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 220 (0xDC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 220 (0xDC) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=221 [2014/11/04 23:32:49.594942, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/util/util.c:556(dump_data) [0000] 00 05 00 02 03 10 00 00 00 DC 00 00 00 02 00 00 ........ ........ [0010] 00 C4 00 00 00 00 00 00 00 01 00 00 00 01 00 00 ........ ........ [0020] 00 0C 00 02 00 02 00 00 00 10 00 02 00 02 00 00 ........ ........ [0030] 00 14 00 02 00 00 00 00 00 18 00 02 00 1C 00 02 ........ ........ [0040] 00 03 00 00 80 20 00 02 00 05 00 00 00 00 00 00 ..... .. ........ [0050] 00 05 00 00 00 71 00 65 00 6D 00 75 00 00 00 00 .....q.e .m.u.... [0060] 00 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [0070] 00 05 00 00 00 00 00 00 00 05 00 00 00 49 00 50 ........ .....I.P [0080] 00 43 00 24 00 00 00 00 00 1B 00 00 00 00 00 00 .C.$.... ........ [0090] 00 1B 00 00 00 49 00 50 00 43 00 20 00 53 00 65 .....I.P .C. .S.e [00A0] 00 72 00 76 00 69 00 63 00 65 00 20 00 28 00 53 .r.v.i.c .e. .(.S [00B0] 00 61 00 6D 00 62 00 61 00 20 00 34 00 2E 00 31 .a.m.b.a . .4...1 [00C0] 00 2E 00 31 00 32 00 29 00 00 00 00 00 02 00 00 ...1.2.) ........ [00D0] 00 24 00 02 00 00 00 00 00 00 00 00 00 .$...... ..... [2014/11/04 23:32:49.600164, 10, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 41 [2014/11/04 23:32:49.600202, 6, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0x29 [2014/11/04 23:32:49.600220, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 7 of length 45 (0 toread) [2014/11/04 23:32:49.600238, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.600248, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:178(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=11148 smb_pid=150 smb_uid=56237 smb_mid=7 smt_wct=3 smb_vwv[ 0]=57851 (0xE1FB) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2014/11/04 23:32:49.600338, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/util/util.c:556(dump_data) [2014/11/04 23:32:49.600351, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBclose (pid 20465) conn 0x7f508b958e90 [2014/11/04 23:32:49.600368, 4, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2014/11/04 23:32:49.600387, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/reply.c:5049(reply_close) Close file fd=-1 fnum 57851 (numopen=1) [2014/11/04 23:32:49.600420, 6, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/close.c:510(set_close_write_time) close_write_time: Sun Feb 7 07:28:15 2106 [2014/11/04 23:32:49.600470, 5, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_open_global.tdb [2014/11/04 23:32:49.600488, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_open_global.tdb 2: 3: [2014/11/04 23:32:49.600506, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 7B4EEA6D [2014/11/04 23:32:49.600526, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b959940 [2014/11/04 23:32:49.600555, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 7B4EEA6D [2014/11/04 23:32:49.600574, 5, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_open_global.tdb [2014/11/04 23:32:49.600589, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.600612, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/files.c:528(file_free) freed files structure 57851 (0 used) [2014/11/04 23:32:49.600629, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.600639, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=11148 smb_pid=150 smb_uid=56237 smb_mid=7 smt_wct=0 smb_bcc=0 [2014/11/04 23:32:49.600711, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/util/util.c:556(dump_data) [2014/11/04 23:32:49.601812, 10, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 35 [2014/11/04 23:32:49.601841, 6, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0x23 [2014/11/04 23:32:49.601858, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 8 of length 39 (0 toread) [2014/11/04 23:32:49.601874, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.601883, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=11148 smb_pid=150 smb_uid=56237 smb_mid=8 smt_wct=0 smb_bcc=0 [2014/11/04 23:32:49.601959, 10, pid=20465, effective(99, 99), real(99, 0)] ../lib/util/util.c:556(dump_data) [2014/11/04 23:32:49.601971, 3, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBtdis (pid 20465) conn 0x7f508b958e90 [2014/11/04 23:32:49.601987, 4, pid=20465, effective(99, 99), real(99, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.602003, 5, pid=20465, effective(99, 99), real(99, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.602018, 5, pid=20465, effective(99, 99), real(99, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.602044, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.602063, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb [2014/11/04 23:32:49.602079, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb 2: 3: [2014/11/04 23:32:49.602096, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 0EB97D52 [2014/11/04 23:32:49.602114, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b95a1e0 [2014/11/04 23:32:49.602134, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 0EB97D52 [2014/11/04 23:32:49.602150, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb [2014/11/04 23:32:49.602166, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.602186, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.602202, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.602216, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.602238, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.602254, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:1130(close_cnum) arch (ipv4:127.0.0.1:50817) closed connection to service IPC$ [2014/11/04 23:32:49.602277, 4, pid=20465, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to / [2014/11/04 23:32:49.602302, 4, pid=20465, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got / [2014/11/04 23:32:49.602320, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.602336, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.602351, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.602372, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.602398, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.602409, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=11148 smb_pid=150 smb_uid=56237 smb_mid=8 smt_wct=0 smb_bcc=0 [2014/11/04 23:32:49.602482, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [2014/11/04 23:32:49.603301, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:137(read_fd_with_timeout) read_fd_with_timeout: blocking read. EOF from client. [2014/11/04 23:32:49.603326, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:487(receive_smb_talloc) receive_smb_raw_talloc failed for client ipv4:127.0.0.1:50817 read error = NT_STATUS_END_OF_FILE. [2014/11/04 23:32:49.603349, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.603365, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.603380, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.603403, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.603427, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb [2014/11/04 23:32:49.603444, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb 2: 3: [2014/11/04 23:32:49.603461, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 9ECBF487 [2014/11/04 23:32:49.603479, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b9594b0 [2014/11/04 23:32:49.603502, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 9ECBF487 [2014/11/04 23:32:49.603519, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb [2014/11/04 23:32:49.603534, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.603565, 4, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.603583, 5, pid=20465, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.603598, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.603620, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.603639, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 2 for /tmp/qemu-smb.20439-0/serverid.tdb [2014/11/04 23:32:49.603655, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2:/tmp/qemu-smb.20439-0/serverid.tdb 3: [2014/11/04 23:32:49.603672, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key F14F000000000000FFFF [2014/11/04 23:32:49.603691, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f508b966130 [2014/11/04 23:32:49.603713, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key F14F000000000000FFFF [2014/11/04 23:32:49.603731, 5, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /tmp/qemu-smb.20439-0/serverid.tdb [2014/11/04 23:32:49.603745, 10, pid=20465, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.603785, 5, pid=20465, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) Deregistering messaging pointer for type 1536 - private_data=0x7f508b931ee0 [2014/11/04 23:32:49.603843, 3, pid=20465, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:221(exit_server_common) Server exit (failed to receive smb request) [2014/11/04 23:32:49.603870, 0, pid=20465, effective(0, 0), real(0, 0)] ../lib/util/pidfile.c:153(pidfile_unlink) Failed to delete pidfile /tmp/qemu-smb.20439-0/smbd.pid. Error was No such file or directory [2014/11/04 23:32:49.625329, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4839(lp_load_ex) lp_load_ex: refreshing parameters [2014/11/04 23:32:49.625350, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1488(free_param_opts) Freeing parametrics: [2014/11/04 23:32:49.625375, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:750(init_globals) Initialising global parameters [2014/11/04 23:32:49.625396, 2, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:543(max_open_files) rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) [2014/11/04 23:32:49.625431, 3, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/tmp/qemu-smb.20439-0/smb.conf" [2014/11/04 23:32:49.625454, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3565(do_section) Processing section "[global]" doing parameter log level = 10 [2014/11/04 23:32:49.625481, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 doing parameter private dir = /tmp/qemu-smb.20439-0 doing parameter socket address = 127.0.0.1 [2014/11/04 23:32:49.625650, 1, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3179(lp_do_parameter) WARNING: The "socket address" option is deprecated doing parameter pid directory = /tmp/qemu-smb.20439-0 doing parameter lock directory = /tmp/qemu-smb.20439-0 doing parameter state directory = /tmp/qemu-smb.20439-0 doing parameter ncalrpc dir = /tmp/qemu-smb.20439-0/ncalrpc doing parameter log file = /tmp/qemu-smb.20439-0/log.smbd doing parameter smb passwd file = /tmp/qemu-smb.20439-0/smbpasswd doing parameter security = user doing parameter map to guest = Bad User [2014/11/04 23:32:49.625749, 2, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section) Processing section "[qemu]" [2014/11/04 23:32:49.625780, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service) add_a_service: Creating snum = 0 for qemu [2014/11/04 23:32:49.625797, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1661(hash_a_service) hash_a_service: creating servicehash [2014/11/04 23:32:49.625817, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service) hash_a_service: hashing index 0 for service name qemu doing parameter path = /usr doing parameter read only = no doing parameter guest ok = yes doing parameter force user = root [2014/11/04 23:32:49.625893, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4878(lp_load_ex) pm_process() returned Yes [2014/11/04 23:32:49.625916, 7, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber) lp_servicenumber: couldn't find homes [2014/11/04 23:32:49.625948, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1620(add_a_service) add_a_service: Creating snum = 1 for IPC$ [2014/11/04 23:32:49.625966, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1670(hash_a_service) hash_a_service: hashing index 1 for service name IPC$ [2014/11/04 23:32:49.625987, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1774(lp_add_ipc) adding IPC service [2014/11/04 23:32:49.626013, 6, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed) lp_file_list_changed() file /tmp/qemu-smb.20439-0/smb.conf -> /tmp/qemu-smb.20439-0/smb.conf last mod_time: Tue Nov 4 23:32:45 2014 [2014/11/04 23:32:49.643341, 2, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:341(add_interface) added interface eth0 ip=10.0.2.15 bcast=10.0.2.255 netmask=255.255.255.0 [2014/11/04 23:32:49.643402, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1248(main) loaded services [2014/11/04 23:32:49.643427, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util_names.c:144(init_names) Netbios name list:- my_netbios_names[0]="ARCH" [2014/11/04 23:32:49.643563, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) Attempting to register passdb backend samba_dsdb [2014/11/04 23:32:49.643586, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) Successfully added passdb backend 'samba_dsdb' [2014/11/04 23:32:49.643602, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) Attempting to register passdb backend samba4 [2014/11/04 23:32:49.643618, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) Successfully added passdb backend 'samba4' [2014/11/04 23:32:49.643635, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:153(make_pdb_method_name) Attempting to find a passdb backend to match tdbsam (tdbsam) [2014/11/04 23:32:49.643650, 2, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:159(make_pdb_method_name) No builtin backend found, trying to load plugin [2014/11/04 23:32:49.643669, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/modules.c:166(do_smb_load_module) Probing module 'tdbsam' [2014/11/04 23:32:49.643688, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/modules.c:180(do_smb_load_module) Probing module 'tdbsam': Trying to load from /usr/lib/samba/pdb/tdbsam.so [2014/11/04 23:32:49.644188, 2, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/modules.c:191(do_smb_load_module) Module 'tdbsam' loaded [2014/11/04 23:32:49.644214, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:77(smb_register_passdb) Attempting to register passdb backend tdbsam [2014/11/04 23:32:49.644230, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:90(smb_register_passdb) Successfully added passdb backend 'tdbsam' [2014/11/04 23:32:49.644247, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:174(make_pdb_method_name) Found pdb backend tdbsam [2014/11/04 23:32:49.644267, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:185(make_pdb_method_name) pdb backend tdbsam has a valid init [2014/11/04 23:32:49.644367, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_version_global.tdb [2014/11/04 23:32:49.644388, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_version_global.tdb 2: 3: [2014/11/04 23:32:49.644407, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 736D62587372765F7665 [2014/11/04 23:32:49.644429, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f6658ceeca0 [2014/11/04 23:32:49.644536, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 736D62587372765F7665 [2014/11/04 23:32:49.644562, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_version_global.tdb [2014/11/04 23:32:49.644579, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.644596, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:245(smbXsrv_version_global_init) smbXsrv_version_global_init [2014/11/04 23:32:49.644611, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:246(smbXsrv_version_global_init) [2014/11/04 23:32:49.644623, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &global_blob: struct smbXsrv_version_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_version_globalU(case 0) info0 : * info0: struct smbXsrv_version_global0 db_rec : NULL num_nodes : 0x00000001 (1) nodes: ARRAY(1) nodes: struct smbXsrv_version_node0 server_id: struct server_id pid : 0x0000000000004ff3 (20467) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x9d86a5c7c562cac2 (-7095801885446976830) min_version : SMBXSRV_VERSION_0 (0) max_version : SMBXSRV_VERSION_0 (0) current_version : SMBXSRV_VERSION_0 (0) [2014/11/04 23:32:49.644962, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 784 - private_data=0x7f6658ceeed0 [2014/11/04 23:32:49.644996, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 788 - private_data=0x7f6658cf0fe0 [2014/11/04 23:32:49.645024, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 789 - private_data=0x7f6658cf1ba0 [2014/11/04 23:32:49.645084, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:759(regdb_init) regdb_init: registry db openend. refcount reset (1) [2014/11/04 23:32:49.645110, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:70(reghook_cache_init) reghook_cache_init: new tree with default ops 0x7f66565ae6c0 for key [] [2014/11/04 23:32:49.645182, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2014/11/04 23:32:49.645217, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[Samba Printer Port] len[2] [2014/11/04 23:32:49.645237, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2014/11/04 23:32:49.645260, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[DefaultSpoolDirectory] len[70] [2014/11/04 23:32:49.645278, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.645299, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[DisplayName] len[20] [2014/11/04 23:32:49.645318, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[1]: name[ErrorControl] len[4] [2014/11/04 23:32:49.645335, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.645356, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[DisplayName] len[20] [2014/11/04 23:32:49.645374, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[1]: name[ErrorControl] len[4] [2014/11/04 23:32:49.645395, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f6656ad4540 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] [2014/11/04 23:32:49.645413, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.645433, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] to tree [2014/11/04 23:32:49.645450, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.645467, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f66565ae6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2014/11/04 23:32:49.645483, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.645500, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] to tree [2014/11/04 23:32:49.645516, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.645532, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f66565ae6c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2014/11/04 23:32:49.645547, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.645564, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] to tree [2014/11/04 23:32:49.645586, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.645602, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f6656ad45c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] [2014/11/04 23:32:49.645618, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.645634, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] to tree [2014/11/04 23:32:49.645650, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.645665, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f66555da600 for key [\HKLM\SOFTWARE\Samba\smbconf] [2014/11/04 23:32:49.645680, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.645696, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree [2014/11/04 23:32:49.645711, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.645727, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f6656ad4640 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] [2014/11/04 23:32:49.645742, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.645758, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] to tree [2014/11/04 23:32:49.645773, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.645789, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f6656ad46c0 for key [\HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] [2014/11/04 23:32:49.645804, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.645820, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] to tree [2014/11/04 23:32:49.645836, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.645851, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f6656ad4740 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] [2014/11/04 23:32:49.645866, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.645882, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] to tree [2014/11/04 23:32:49.645898, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.645920, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f6656ad47c0 for key [\HKPT] [2014/11/04 23:32:49.645936, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.645952, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKPT] to tree [2014/11/04 23:32:49.645967, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.645982, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f6656ad4840 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] [2014/11/04 23:32:49.645998, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.646013, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] to tree [2014/11/04 23:32:49.646028, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.646044, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7f6656ad48c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] [2014/11/04 23:32:49.646059, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2014/11/04 23:32:49.646075, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] to tree [2014/11/04 23:32:49.646090, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2014/11/04 23:32:49.646106, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2014/11/04 23:32:49.646194, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.646213, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.646353, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.646388, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user ARCH\nobody [2014/11/04 23:32:49.646405, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is arch\nobody [2014/11/04 23:32:49.646433, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:128(Get_Pwnam_internals) Trying _Get_Pwnam(), username as given is ARCH\nobody [2014/11/04 23:32:49.646460, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:141(Get_Pwnam_internals) Trying _Get_Pwnam(), username as uppercase is ARCH\NOBODY [2014/11/04 23:32:49.646486, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:153(Get_Pwnam_internals) Checking combinations of 0 uppercase letters in arch\nobody [2014/11/04 23:32:49.646503, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals didn't find user [ARCH\nobody]! [2014/11/04 23:32:49.646565, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.646584, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.646608, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.646637, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3) Create local NT token for nobody [2014/11/04 23:32:49.646658, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.646675, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.646691, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.646717, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) sys_getgrouplist: user [nobody] [2014/11/04 23:32:49.646790, 5, pid=20467, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:67(gencache_init) Opening cache file at /tmp/qemu-smb.20439-0/gencache.tdb [2014/11/04 23:32:49.646844, 5, pid=20467, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:110(gencache_init) Opening cache file at /tmp/qemu-smb.20439-0/gencache_notrans.tdb [2014/11/04 23:32:49.646908, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1212(gid_to_sid) gid_to_sid: winbind failed to find a sid for gid 99 [2014/11/04 23:32:49.646937, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.646957, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.646974, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.646992, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.647010, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.647074, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.647096, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1075(legacy_gid_to_sid) LEGACY: gid 99 -> sid S-1-22-2-99 [2014/11/04 23:32:49.647142, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1435(sid_to_gid) winbind failed to find a gid for sid S-1-5-32-544 [2014/11/04 23:32:49.647161, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.647177, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.647193, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.647208, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.647223, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.647268, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1526(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-544 [2014/11/04 23:32:49.647290, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.647306, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-544 [2014/11/04 23:32:49.647324, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.647340, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.647355, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.647370, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.647385, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.647413, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:540(finalize_local_nt_token) Failed to fetch domain sid for WORKGROUP [2014/11/04 23:32:49.647431, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.647455, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1435(sid_to_gid) winbind failed to find a gid for sid S-1-5-32-545 [2014/11/04 23:32:49.647472, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.647488, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.647503, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.647519, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.647533, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.647560, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1526(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-545 [2014/11/04 23:32:49.647579, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.647595, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-545 [2014/11/04 23:32:49.647611, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.647626, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.647642, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.647657, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.647672, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.647696, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:571(finalize_local_nt_token) Failed to fetch domain sid for WORKGROUP [2014/11/04 23:32:49.647714, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.647732, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.647747, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.647763, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.647778, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.647793, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.647841, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.647888, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-2629826569-4057080478-97288662-501] [2014/11/04 23:32:49.647910, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-2629826569-4057080478-97288662-514] [2014/11/04 23:32:49.647930, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-99] [2014/11/04 23:32:49.647949, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: 0x0 [2014/11/04 23:32:49.647972, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2014/11/04 23:32:49.647991, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2014/11/04 23:32:49.648038, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1280(sids_to_unixids) wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE [2014/11/04 23:32:49.648058, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.648074, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.648090, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.648105, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.648120, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.648145, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1712(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 501. [2014/11/04 23:32:49.648164, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.648181, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2014/11/04 23:32:49.648196, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.648211, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.648228, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.648251, 6, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:413(pdb_getsampwsid) pdb_getsampwsid: Building guest account [2014/11/04 23:32:49.648269, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.648285, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.648301, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.648318, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:570(pdb_set_username) pdb_set_username: setting username nobody, was [2014/11/04 23:32:49.648338, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:639(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2014/11/04 23:32:49.648356, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:593(pdb_set_domain) pdb_set_domain: setting domain ARCH, was [2014/11/04 23:32:49.648375, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:495(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2629826569-4057080478-97288662-501 [2014/11/04 23:32:49.648392, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2629826569-4057080478-97288662-501 from rid 501 [2014/11/04 23:32:49.648417, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.648436, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.648452, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.648468, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.648485, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.648501, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.648516, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.648531, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.648547, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.648562, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.648584, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1712(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 501. [2014/11/04 23:32:49.648601, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.648616, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2014/11/04 23:32:49.648633, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.648648, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.648663, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.648686, 6, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:413(pdb_getsampwsid) pdb_getsampwsid: Building guest account [2014/11/04 23:32:49.648701, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.648716, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.648732, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.648747, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:570(pdb_set_username) pdb_set_username: setting username nobody, was [2014/11/04 23:32:49.648763, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:639(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2014/11/04 23:32:49.648778, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:593(pdb_set_domain) pdb_set_domain: setting domain ARCH, was [2014/11/04 23:32:49.648795, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:495(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2629826569-4057080478-97288662-501 [2014/11/04 23:32:49.648812, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2629826569-4057080478-97288662-501 from rid 501 [2014/11/04 23:32:49.648835, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.648852, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2014/11/04 23:32:49.648867, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2014/11/04 23:32:49.648883, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2014/11/04 23:32:49.648900, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.648916, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.648931, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.648947, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.648962, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.648976, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.648999, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1712(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 514. [2014/11/04 23:32:49.649016, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.649032, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649047, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.649062, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.649077, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.649122, 4, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:552(tdbsam_open) tdbsam_open: successfully opened /tmp/qemu-smb.20439-0/passdb.tdb [2014/11/04 23:32:49.649142, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:646(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202. [2014/11/04 23:32:49.649165, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649182, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1788(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2014/11/04 23:32:49.649198, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1498(pdb_default_sid_to_id) SID S-1-5-21-2629826569-4057080478-97288662-514 is or domain, but is unmapped [2014/11/04 23:32:49.649215, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.649231, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-2629826569-4057080478-97288662-514 [2014/11/04 23:32:49.649248, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649263, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.649279, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649294, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.649309, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.649332, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1712(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 514. [2014/11/04 23:32:49.649349, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.649364, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649379, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.649395, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.649409, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.649435, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:646(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202. [2014/11/04 23:32:49.649457, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649474, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1788(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2014/11/04 23:32:49.649489, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1498(pdb_default_sid_to_id) SID S-1-5-21-2629826569-4057080478-97288662-514 is or domain, but is unmapped [2014/11/04 23:32:49.649507, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.649522, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-2629826569-4057080478-97288662-514 [2014/11/04 23:32:49.649539, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649554, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.649569, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649584, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.649599, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.649626, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.649642, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-1-0 [2014/11/04 23:32:49.649659, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649674, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.649689, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649704, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.649719, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.649743, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.649759, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-1-0 [2014/11/04 23:32:49.649775, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649791, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.649806, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649822, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.649837, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.649883, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.649900, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-2 [2014/11/04 23:32:49.649917, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649932, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.649948, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.649963, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.649978, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.650001, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.650017, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-2 [2014/11/04 23:32:49.650034, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.650049, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.650065, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.650080, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.650095, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.650122, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1526(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-546 [2014/11/04 23:32:49.650141, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.650157, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-546 [2014/11/04 23:32:49.650173, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.650188, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.650204, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.650219, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.650234, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.650262, 10, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1526(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-546 [2014/11/04 23:32:49.650281, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.650297, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1094(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-546 [2014/11/04 23:32:49.650313, 10, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token) Could not convert SID S-1-5-21-2629826569-4057080478-97288662-514 to gid, ignoring it [2014/11/04 23:32:49.650332, 10, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token) Could not convert SID S-1-1-0 to gid, ignoring it [2014/11/04 23:32:49.650349, 10, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token) Could not convert SID S-1-5-2 to gid, ignoring it [2014/11/04 23:32:49.650364, 10, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:585(create_local_token) Could not convert SID S-1-5-32-546 to gid, ignoring it [2014/11/04 23:32:49.650385, 10, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (7): SID[ 0]: S-1-5-21-2629826569-4057080478-97288662-501 SID[ 1]: S-1-5-21-2629826569-4057080478-97288662-514 SID[ 2]: S-1-22-2-99 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-99 Privileges (0x 0): Rights (0x 0): [2014/11/04 23:32:49.650462, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 99 Primary group is 99 and contains 1 supplementary groups Group[ 0]: 99 [2014/11/04 23:32:49.650625, 3, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/svcctl/srv_svcctl_reg.c:565(svcctl_init_winreg) Initialise the svcctl registry keys if needed. [2014/11/04 23:32:49.650647, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.650664, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.650679, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.650695, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.650710, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.650753, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.650771, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2014/11/04 23:32:49.650833, 4, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2014/11/04 23:32:49.650857, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2014/11/04 23:32:49.650875, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2014/11/04 23:32:49.650989, 4, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2014/11/04 23:32:49.651042, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2014/11/04 23:32:49.651143, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2014/11/04 23:32:49.651161, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2014/11/04 23:32:49.651180, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2014/11/04 23:32:49.651197, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2014/11/04 23:32:49.651213, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.651229, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM] [2014/11/04 23:32:49.651271, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.651309, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f34f0000 result : WERR_OK [2014/11/04 23:32:49.651443, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f34f0000 keyname: struct winreg_String name_len : 0x0044 (68) name_size : 0x0044 (68) name : * name : 'SYSTEM\CurrentControlSet\Services' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2014/11/04 23:32:49.651630, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.651667, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.651684, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2014/11/04 23:32:49.651702, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.651717, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.651733, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.651748, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.651771, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.651788, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.651804, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.651819, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.651835, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.651851, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.651874, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.651891, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.651908, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.651923, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.651939, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.651954, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.651985, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.652003, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.652020, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.652052, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f34f0000 result : WERR_OK [2014/11/04 23:32:49.652124, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f34f0000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2014/11/04 23:32:49.652212, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.652247, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services' (ops 0x7f66565ae6c0) [2014/11/04 23:32:49.652264, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.652284, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.652314, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000007 (7) max_subkeylen : * max_subkeylen : 0x0000001c (28) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000000 (0) max_valnamelen : * max_valnamelen : 0x00000002 (2) max_valbufsize : * max_valbufsize : 0x00000000 (0) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.652507, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f34f0000 enum_index : 0x00000000 (0) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2014/11/04 23:32:49.652657, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.652690, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.652708, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x001a (26) size : 0x001e (30) name : * name : 'LanmanServer' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.652839, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f34f0000 enum_index : 0x00000001 (1) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2014/11/04 23:32:49.652987, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.653019, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.653035, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0012 (18) size : 0x001e (30) name : * name : 'Eventlog' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.653163, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f34f0000 enum_index : 0x00000002 (2) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2014/11/04 23:32:49.653348, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.653381, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.653397, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x000c (12) size : 0x001e (30) name : * name : 'Tcpip' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.653529, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f34f0000 enum_index : 0x00000003 (3) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2014/11/04 23:32:49.653676, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.653708, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.653724, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0012 (18) size : 0x001e (30) name : * name : 'Netlogon' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.653851, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f34f0000 enum_index : 0x00000004 (4) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2014/11/04 23:32:49.653998, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.654030, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.654047, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0010 (16) size : 0x001e (30) name : * name : 'Spooler' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.654173, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f34f0000 enum_index : 0x00000005 (5) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2014/11/04 23:32:49.654318, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.654350, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.654367, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x001e (30) size : 0x001e (30) name : * name : 'RemoteRegistry' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.654494, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f34f0000 enum_index : 0x00000006 (6) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2014/11/04 23:32:49.654667, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.654700, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.654716, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x000a (10) size : 0x001e (30) name : * name : 'WINS' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.654860, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0054 (84) name_size : 0x0054 (84) name : * name : 'SYSTEM\CurrentControlSet\Services\Spooler' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2014/11/04 23:32:49.655089, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.655122, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler' [2014/11/04 23:32:49.655144, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.655164, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.655181, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.655198, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.655215, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.655230, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.655246, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.655261, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.655287, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.655305, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.655321, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.655338, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.655354, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.655370, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.655386, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.655409, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.655427, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.655444, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.655460, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.655476, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.655491, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.655508, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.655522, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.655550, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.655568, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2014/11/04 23:32:49.655584, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.655601, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.655616, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.655632, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.655647, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.655669, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.655687, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.655718, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f34f0000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2014/11/04 23:32:49.655812, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.655958, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.655991, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Start] [2014/11/04 23:32:49.656009, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.656025, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler' (ops 0x7f66565ae6c0) [2014/11/04 23:32:49.656042, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.656062, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[Start] len[4] [2014/11/04 23:32:49.656079, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[1]: name[Type] len[4] [2014/11/04 23:32:49.656096, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[2]: name[ErrorControl] len[4] [2014/11/04 23:32:49.656113, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[3]: name[ObjectName] len[24] [2014/11/04 23:32:49.656130, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[4]: name[DisplayName] len[28] [2014/11/04 23:32:49.656147, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[5]: name[ImagePath] len[54] [2014/11/04 23:32:49.656163, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[6]: name[Description] len[106] [2014/11/04 23:32:49.656182, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.656222, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.656358, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.656390, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Type] [2014/11/04 23:32:49.656407, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.656424, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.656462, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.656622, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.656655, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ErrorControl] [2014/11/04 23:32:49.656673, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.656690, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.656741, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2014/11/04 23:32:49.657008, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.657040, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ObjectName] [2014/11/04 23:32:49.657057, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.657074, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.657115, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(28) [0] : 0x50 (80) [1] : 0x00 (0) [2] : 0x72 (114) [3] : 0x00 (0) [4] : 0x69 (105) [5] : 0x00 (0) [6] : 0x6e (110) [7] : 0x00 (0) [8] : 0x74 (116) [9] : 0x00 (0) [10] : 0x20 (32) [11] : 0x00 (0) [12] : 0x53 (83) [13] : 0x00 (0) [14] : 0x70 (112) [15] : 0x00 (0) [16] : 0x6f (111) [17] : 0x00 (0) [18] : 0x6f (111) [19] : 0x00 (0) [20] : 0x6c (108) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x72 (114) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) size : 0x0000001c (28) [2014/11/04 23:32:49.657405, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.657437, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:DisplayName] [2014/11/04 23:32:49.657454, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.657471, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.657509, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(54) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x2f (47) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x61 (97) [21] : 0x00 (0) [22] : 0x6d (109) [23] : 0x00 (0) [24] : 0x62 (98) [25] : 0x00 (0) [26] : 0x61 (97) [27] : 0x00 (0) [28] : 0x2f (47) [29] : 0x00 (0) [30] : 0x73 (115) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x63 (99) [35] : 0x00 (0) [36] : 0x63 (99) [37] : 0x00 (0) [38] : 0x74 (116) [39] : 0x00 (0) [40] : 0x6c (108) [41] : 0x00 (0) [42] : 0x2f (47) [43] : 0x00 (0) [44] : 0x73 (115) [45] : 0x00 (0) [46] : 0x6d (109) [47] : 0x00 (0) [48] : 0x62 (98) [49] : 0x00 (0) [50] : 0x64 (100) [51] : 0x00 (0) [52] : 0x00 (0) [53] : 0x00 (0) size : 0x00000036 (54) [2014/11/04 23:32:49.657970, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.658002, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ImagePath] [2014/11/04 23:32:49.658019, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.658036, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.658076, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(106) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x66 (102) [35] : 0x00 (0) [36] : 0x6f (111) [37] : 0x00 (0) [38] : 0x72 (114) [39] : 0x00 (0) [40] : 0x20 (32) [41] : 0x00 (0) [42] : 0x73 (115) [43] : 0x00 (0) [44] : 0x70 (112) [45] : 0x00 (0) [46] : 0x6f (111) [47] : 0x00 (0) [48] : 0x6f (111) [49] : 0x00 (0) [50] : 0x6c (108) [51] : 0x00 (0) [52] : 0x69 (105) [53] : 0x00 (0) [54] : 0x6e (110) [55] : 0x00 (0) [56] : 0x67 (103) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x66 (102) [61] : 0x00 (0) [62] : 0x69 (105) [63] : 0x00 (0) [64] : 0x6c (108) [65] : 0x00 (0) [66] : 0x65 (101) [67] : 0x00 (0) [68] : 0x73 (115) [69] : 0x00 (0) [70] : 0x20 (32) [71] : 0x00 (0) [72] : 0x74 (116) [73] : 0x00 (0) [74] : 0x6f (111) [75] : 0x00 (0) [76] : 0x20 (32) [77] : 0x00 (0) [78] : 0x70 (112) [79] : 0x00 (0) [80] : 0x72 (114) [81] : 0x00 (0) [82] : 0x69 (105) [83] : 0x00 (0) [84] : 0x6e (110) [85] : 0x00 (0) [86] : 0x74 (116) [87] : 0x00 (0) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x64 (100) [91] : 0x00 (0) [92] : 0x65 (101) [93] : 0x00 (0) [94] : 0x76 (118) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x63 (99) [99] : 0x00 (0) [100] : 0x65 (101) [101] : 0x00 (0) [102] : 0x73 (115) [103] : 0x00 (0) [104] : 0x00 (0) [105] : 0x00 (0) size : 0x0000006a (106) [2014/11/04 23:32:49.658891, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.658924, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Description] [2014/11/04 23:32:49.658941, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.658959, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.659011, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-5954-1154f34f0000 [2014/11/04 23:32:49.659065, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.659098, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.659129, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.659146, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.659162, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.659228, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0066 (102) name_size : 0x0066 (102) name : * name : 'SYSTEM\CurrentControlSet\Services\Spooler\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2014/11/04 23:32:49.659451, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.659489, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler\Security' [2014/11/04 23:32:49.659507, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.659523, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.659539, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.659555, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.659571, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.659587, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.659603, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.659618, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.659640, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.659658, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.659674, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.659690, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.659705, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.659721, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.659736, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.659758, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.659776, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.659792, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.659808, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.659830, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.659845, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.659876, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.659892, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.659923, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.659946, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.659962, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2014/11/04 23:32:49.659978, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.659995, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.660010, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.660026, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.660041, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2014/11/04 23:32:49.660063, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.660080, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2014/11/04 23:32:49.660096, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.660113, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2014/11/04 23:32:49.660128, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2014/11/04 23:32:49.660144, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.660159, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2014/11/04 23:32:49.660178, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.660196, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.660233, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-5954-1154f34f0000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2014/11/04 23:32:49.660337, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2014/11/04 23:32:49.661252, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.661285, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security:Security] [2014/11/04 23:32:49.661302, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.661318, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security' (ops 0x7f66565ae6c0) [2014/11/04 23:32:49.661334, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2014/11/04 23:32:49.661355, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[Security] len[120] [2014/11/04 23:32:49.661373, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.661410, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-5954-1154f34f0000 [2014/11/04 23:32:49.661463, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.661494, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.661525, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.661541, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.661557, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.661638, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0056 (86) name_size : 0x0056 (86) name : * name : 'SYSTEM\CurrentControlSet\Services\NETLOGON' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2014/11/04 23:32:49.661859, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.661891, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON' [2014/11/04 23:32:49.661908, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.661924, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.661940, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.661956, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.661972, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.661988, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.662003, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.662018, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.662046, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.662064, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.662080, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.662097, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.662112, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.662127, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.662142, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.662165, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.662183, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.662199, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.662214, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.662230, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.662245, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.662261, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.662276, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.662304, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.662321, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2014/11/04 23:32:49.662337, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.662353, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.662369, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.662385, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.662400, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.662431, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.662449, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.662481, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f34f0000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2014/11/04 23:32:49.662571, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.662707, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.662739, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Start] [2014/11/04 23:32:49.662755, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.662771, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON' (ops 0x7f66565ae6c0) [2014/11/04 23:32:49.662787, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.662807, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[Start] len[4] [2014/11/04 23:32:49.662825, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[1]: name[Type] len[4] [2014/11/04 23:32:49.662848, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[2]: name[ErrorControl] len[4] [2014/11/04 23:32:49.662865, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[3]: name[ObjectName] len[24] [2014/11/04 23:32:49.662882, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[4]: name[DisplayName] len[20] [2014/11/04 23:32:49.662899, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[5]: name[ImagePath] len[54] [2014/11/04 23:32:49.662915, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[6]: name[Description] len[164] [2014/11/04 23:32:49.662932, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.662971, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.663106, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.663138, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Type] [2014/11/04 23:32:49.663155, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.663171, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.663225, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.663365, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.663398, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ErrorControl] [2014/11/04 23:32:49.663414, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.663431, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.663470, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2014/11/04 23:32:49.663733, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.663770, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ObjectName] [2014/11/04 23:32:49.663787, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.663804, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.663844, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(20) [0] : 0x4e (78) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x20 (32) [7] : 0x00 (0) [8] : 0x4c (76) [9] : 0x00 (0) [10] : 0x6f (111) [11] : 0x00 (0) [12] : 0x67 (103) [13] : 0x00 (0) [14] : 0x6f (111) [15] : 0x00 (0) [16] : 0x6e (110) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) size : 0x00000014 (20) [2014/11/04 23:32:49.664082, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.664113, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:DisplayName] [2014/11/04 23:32:49.664130, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.664147, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.664186, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(54) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x2f (47) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x61 (97) [21] : 0x00 (0) [22] : 0x6d (109) [23] : 0x00 (0) [24] : 0x62 (98) [25] : 0x00 (0) [26] : 0x61 (97) [27] : 0x00 (0) [28] : 0x2f (47) [29] : 0x00 (0) [30] : 0x73 (115) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x63 (99) [35] : 0x00 (0) [36] : 0x63 (99) [37] : 0x00 (0) [38] : 0x74 (116) [39] : 0x00 (0) [40] : 0x6c (108) [41] : 0x00 (0) [42] : 0x2f (47) [43] : 0x00 (0) [44] : 0x73 (115) [45] : 0x00 (0) [46] : 0x6d (109) [47] : 0x00 (0) [48] : 0x62 (98) [49] : 0x00 (0) [50] : 0x64 (100) [51] : 0x00 (0) [52] : 0x00 (0) [53] : 0x00 (0) size : 0x00000036 (54) [2014/11/04 23:32:49.664650, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.664687, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ImagePath] [2014/11/04 23:32:49.664704, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.664721, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.664760, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(164) [0] : 0x46 (70) [1] : 0x00 (0) [2] : 0x69 (105) [3] : 0x00 (0) [4] : 0x6c (108) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x20 (32) [9] : 0x00 (0) [10] : 0x73 (115) [11] : 0x00 (0) [12] : 0x65 (101) [13] : 0x00 (0) [14] : 0x72 (114) [15] : 0x00 (0) [16] : 0x76 (118) [17] : 0x00 (0) [18] : 0x69 (105) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x20 (32) [25] : 0x00 (0) [26] : 0x70 (112) [27] : 0x00 (0) [28] : 0x72 (114) [29] : 0x00 (0) [30] : 0x6f (111) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x69 (105) [35] : 0x00 (0) [36] : 0x64 (100) [37] : 0x00 (0) [38] : 0x69 (105) [39] : 0x00 (0) [40] : 0x6e (110) [41] : 0x00 (0) [42] : 0x67 (103) [43] : 0x00 (0) [44] : 0x20 (32) [45] : 0x00 (0) [46] : 0x61 (97) [47] : 0x00 (0) [48] : 0x63 (99) [49] : 0x00 (0) [50] : 0x63 (99) [51] : 0x00 (0) [52] : 0x65 (101) [53] : 0x00 (0) [54] : 0x73 (115) [55] : 0x00 (0) [56] : 0x73 (115) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x74 (116) [61] : 0x00 (0) [62] : 0x6f (111) [63] : 0x00 (0) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x70 (112) [67] : 0x00 (0) [68] : 0x6f (111) [69] : 0x00 (0) [70] : 0x6c (108) [71] : 0x00 (0) [72] : 0x69 (105) [73] : 0x00 (0) [74] : 0x63 (99) [75] : 0x00 (0) [76] : 0x79 (121) [77] : 0x00 (0) [78] : 0x20 (32) [79] : 0x00 (0) [80] : 0x61 (97) [81] : 0x00 (0) [82] : 0x6e (110) [83] : 0x00 (0) [84] : 0x64 (100) [85] : 0x00 (0) [86] : 0x20 (32) [87] : 0x00 (0) [88] : 0x70 (112) [89] : 0x00 (0) [90] : 0x72 (114) [91] : 0x00 (0) [92] : 0x6f (111) [93] : 0x00 (0) [94] : 0x66 (102) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x6c (108) [99] : 0x00 (0) [100] : 0x65 (101) [101] : 0x00 (0) [102] : 0x20 (32) [103] : 0x00 (0) [104] : 0x64 (100) [105] : 0x00 (0) [106] : 0x61 (97) [107] : 0x00 (0) [108] : 0x74 (116) [109] : 0x00 (0) [110] : 0x61 (97) [111] : 0x00 (0) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x28 (40) [115] : 0x00 (0) [116] : 0x6e (110) [117] : 0x00 (0) [118] : 0x6f (111) [119] : 0x00 (0) [120] : 0x74 (116) [121] : 0x00 (0) [122] : 0x72 (114) [123] : 0x00 (0) [124] : 0x65 (101) [125] : 0x00 (0) [126] : 0x6d (109) [127] : 0x00 (0) [128] : 0x6f (111) [129] : 0x00 (0) [130] : 0x74 (116) [131] : 0x00 (0) [132] : 0x65 (101) [133] : 0x00 (0) [134] : 0x6c (108) [135] : 0x00 (0) [136] : 0x79 (121) [137] : 0x00 (0) [138] : 0x20 (32) [139] : 0x00 (0) [140] : 0x6d (109) [141] : 0x00 (0) [142] : 0x61 (97) [143] : 0x00 (0) [144] : 0x6e (110) [145] : 0x00 (0) [146] : 0x61 (97) [147] : 0x00 (0) [148] : 0x67 (103) [149] : 0x00 (0) [150] : 0x65 (101) [151] : 0x00 (0) [152] : 0x61 (97) [153] : 0x00 (0) [154] : 0x62 (98) [155] : 0x00 (0) [156] : 0x6c (108) [157] : 0x00 (0) [158] : 0x65 (101) [159] : 0x00 (0) [160] : 0x29 (41) [161] : 0x00 (0) [162] : 0x00 (0) [163] : 0x00 (0) size : 0x000000a4 (164) [2014/11/04 23:32:49.665933, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.665965, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Description] [2014/11/04 23:32:49.665982, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.665999, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.666041, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-5954-1154f34f0000 [2014/11/04 23:32:49.666093, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.666125, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.666155, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.666172, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.666188, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.666253, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0068 (104) name_size : 0x0068 (104) name : * name : 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2014/11/04 23:32:49.666475, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.666513, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' [2014/11/04 23:32:49.666568, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.666586, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.666602, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.666618, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.666635, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.666650, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.666666, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.666681, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.666704, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.666722, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.666738, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.666754, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.666769, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.666785, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.666800, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.666823, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.666841, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.666857, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.666873, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.666889, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.666910, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.666927, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.666942, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.666973, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.666995, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.667011, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2014/11/04 23:32:49.667027, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.667043, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.667058, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.667074, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.667089, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2014/11/04 23:32:49.667112, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.667130, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2014/11/04 23:32:49.667146, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.667162, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2014/11/04 23:32:49.667177, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2014/11/04 23:32:49.667194, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.667209, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2014/11/04 23:32:49.667228, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.667246, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.667283, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-5954-1154f34f0000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2014/11/04 23:32:49.667367, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2014/11/04 23:32:49.668261, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.668293, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security:Security] [2014/11/04 23:32:49.668310, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.668326, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security' (ops 0x7f66565ae6c0) [2014/11/04 23:32:49.668342, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2014/11/04 23:32:49.668363, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[Security] len[120] [2014/11/04 23:32:49.668381, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.668418, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-5954-1154f34f0000 [2014/11/04 23:32:49.668470, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.668502, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.668533, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.668548, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.668564, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.668636, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0062 (98) name_size : 0x0062 (98) name : * name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2014/11/04 23:32:49.668861, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.668893, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' [2014/11/04 23:32:49.668910, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.668926, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.668942, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.668958, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.668974, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.668989, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.669005, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.669020, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.669043, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.669066, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.669083, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.669099, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.669115, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.669130, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.669145, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.669168, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.669186, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.669202, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.669218, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.669234, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.669249, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.669265, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.669280, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.669307, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.669325, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2014/11/04 23:32:49.669341, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.669357, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.669373, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.669389, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.669404, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.669432, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.669450, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.669482, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f34f0000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2014/11/04 23:32:49.669561, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.669697, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.669729, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Start] [2014/11/04 23:32:49.669746, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.669762, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry' (ops 0x7f66565ae6c0) [2014/11/04 23:32:49.669778, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.669798, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[Start] len[4] [2014/11/04 23:32:49.669815, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[1]: name[Type] len[4] [2014/11/04 23:32:49.669838, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[2]: name[ErrorControl] len[4] [2014/11/04 23:32:49.669871, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[3]: name[ObjectName] len[24] [2014/11/04 23:32:49.669888, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[4]: name[DisplayName] len[48] [2014/11/04 23:32:49.669905, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[5]: name[ImagePath] len[54] [2014/11/04 23:32:49.669922, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[6]: name[Description] len[126] [2014/11/04 23:32:49.669939, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.669980, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.670120, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.670152, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Type] [2014/11/04 23:32:49.670169, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.670185, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.670224, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.670364, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.670396, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ErrorControl] [2014/11/04 23:32:49.670413, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.670430, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.670469, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2014/11/04 23:32:49.670745, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.670784, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ObjectName] [2014/11/04 23:32:49.670801, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.670818, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.670860, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(48) [0] : 0x52 (82) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x6d (109) [5] : 0x00 (0) [6] : 0x6f (111) [7] : 0x00 (0) [8] : 0x74 (116) [9] : 0x00 (0) [10] : 0x65 (101) [11] : 0x00 (0) [12] : 0x20 (32) [13] : 0x00 (0) [14] : 0x52 (82) [15] : 0x00 (0) [16] : 0x65 (101) [17] : 0x00 (0) [18] : 0x67 (103) [19] : 0x00 (0) [20] : 0x69 (105) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x74 (116) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x79 (121) [29] : 0x00 (0) [30] : 0x20 (32) [31] : 0x00 (0) [32] : 0x53 (83) [33] : 0x00 (0) [34] : 0x65 (101) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x76 (118) [39] : 0x00 (0) [40] : 0x69 (105) [41] : 0x00 (0) [42] : 0x63 (99) [43] : 0x00 (0) [44] : 0x65 (101) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) size : 0x00000030 (48) [2014/11/04 23:32:49.671286, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.671318, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:DisplayName] [2014/11/04 23:32:49.671335, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.671351, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.671391, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(54) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x2f (47) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x61 (97) [21] : 0x00 (0) [22] : 0x6d (109) [23] : 0x00 (0) [24] : 0x62 (98) [25] : 0x00 (0) [26] : 0x61 (97) [27] : 0x00 (0) [28] : 0x2f (47) [29] : 0x00 (0) [30] : 0x73 (115) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x63 (99) [35] : 0x00 (0) [36] : 0x63 (99) [37] : 0x00 (0) [38] : 0x74 (116) [39] : 0x00 (0) [40] : 0x6c (108) [41] : 0x00 (0) [42] : 0x2f (47) [43] : 0x00 (0) [44] : 0x73 (115) [45] : 0x00 (0) [46] : 0x6d (109) [47] : 0x00 (0) [48] : 0x62 (98) [49] : 0x00 (0) [50] : 0x64 (100) [51] : 0x00 (0) [52] : 0x00 (0) [53] : 0x00 (0) size : 0x00000036 (54) [2014/11/04 23:32:49.671854, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.671886, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ImagePath] [2014/11/04 23:32:49.671903, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.671920, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.671958, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(126) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x70 (112) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x6f (111) [39] : 0x00 (0) [40] : 0x76 (118) [41] : 0x00 (0) [42] : 0x69 (105) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x69 (105) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x67 (103) [51] : 0x00 (0) [52] : 0x20 (32) [53] : 0x00 (0) [54] : 0x72 (114) [55] : 0x00 (0) [56] : 0x65 (101) [57] : 0x00 (0) [58] : 0x6d (109) [59] : 0x00 (0) [60] : 0x6f (111) [61] : 0x00 (0) [62] : 0x74 (116) [63] : 0x00 (0) [64] : 0x65 (101) [65] : 0x00 (0) [66] : 0x20 (32) [67] : 0x00 (0) [68] : 0x61 (97) [69] : 0x00 (0) [70] : 0x63 (99) [71] : 0x00 (0) [72] : 0x63 (99) [73] : 0x00 (0) [74] : 0x65 (101) [75] : 0x00 (0) [76] : 0x73 (115) [77] : 0x00 (0) [78] : 0x73 (115) [79] : 0x00 (0) [80] : 0x20 (32) [81] : 0x00 (0) [82] : 0x74 (116) [83] : 0x00 (0) [84] : 0x6f (111) [85] : 0x00 (0) [86] : 0x20 (32) [87] : 0x00 (0) [88] : 0x74 (116) [89] : 0x00 (0) [90] : 0x68 (104) [91] : 0x00 (0) [92] : 0x65 (101) [93] : 0x00 (0) [94] : 0x20 (32) [95] : 0x00 (0) [96] : 0x53 (83) [97] : 0x00 (0) [98] : 0x61 (97) [99] : 0x00 (0) [100] : 0x6d (109) [101] : 0x00 (0) [102] : 0x62 (98) [103] : 0x00 (0) [104] : 0x61 (97) [105] : 0x00 (0) [106] : 0x20 (32) [107] : 0x00 (0) [108] : 0x72 (114) [109] : 0x00 (0) [110] : 0x65 (101) [111] : 0x00 (0) [112] : 0x67 (103) [113] : 0x00 (0) [114] : 0x69 (105) [115] : 0x00 (0) [116] : 0x73 (115) [117] : 0x00 (0) [118] : 0x74 (116) [119] : 0x00 (0) [120] : 0x72 (114) [121] : 0x00 (0) [122] : 0x79 (121) [123] : 0x00 (0) [124] : 0x00 (0) [125] : 0x00 (0) size : 0x0000007e (126) [2014/11/04 23:32:49.672892, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.672924, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Description] [2014/11/04 23:32:49.672941, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.672958, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.672997, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-5954-1154f34f0000 [2014/11/04 23:32:49.673053, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.673090, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.673121, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.673137, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.673153, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.673233, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0074 (116) name_size : 0x0074 (116) name : * name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2014/11/04 23:32:49.673458, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.673490, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' [2014/11/04 23:32:49.673507, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.673537, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.673555, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.673572, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.673588, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.673604, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.673620, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.673634, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.673658, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.673675, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.673691, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.673707, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.673723, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.673738, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.673753, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.673776, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.673794, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.673809, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.673825, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.673842, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.673857, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.673873, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.673887, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.673921, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.673939, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.673955, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2014/11/04 23:32:49.673971, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.673987, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.674002, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.674018, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.674033, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2014/11/04 23:32:49.674055, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.674073, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2014/11/04 23:32:49.674088, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.674105, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2014/11/04 23:32:49.674120, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2014/11/04 23:32:49.674136, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.674151, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2014/11/04 23:32:49.674171, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.674188, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.674219, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-5954-1154f34f0000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2014/11/04 23:32:49.674308, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2014/11/04 23:32:49.675209, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.675247, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security:Security] [2014/11/04 23:32:49.675264, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.675280, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' (ops 0x7f66565ae6c0) [2014/11/04 23:32:49.675296, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2014/11/04 23:32:49.675317, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[Security] len[120] [2014/11/04 23:32:49.675335, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.675372, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-5954-1154f34f0000 [2014/11/04 23:32:49.675424, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.675455, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.675486, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.675502, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.675518, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.675583, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x004e (78) name_size : 0x004e (78) name : * name : 'SYSTEM\CurrentControlSet\Services\WINS' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2014/11/04 23:32:49.675810, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.675843, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS' [2014/11/04 23:32:49.675860, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.675876, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.675892, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.675908, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.675925, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.675940, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.675956, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.675971, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.675994, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.676011, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.676027, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.676043, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.676064, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.676080, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.676095, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.676118, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.676136, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.676152, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.676168, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.676184, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.676199, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.676215, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.676230, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.676258, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.676275, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2014/11/04 23:32:49.676291, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.676308, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.676323, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.676339, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.676354, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.676375, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.676393, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.676429, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f34f0000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2014/11/04 23:32:49.676510, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.676663, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.676696, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Start] [2014/11/04 23:32:49.676713, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.676729, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS' (ops 0x7f66565ae6c0) [2014/11/04 23:32:49.676745, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.676765, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[Start] len[4] [2014/11/04 23:32:49.676783, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[1]: name[Type] len[4] [2014/11/04 23:32:49.676800, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[2]: name[ErrorControl] len[4] [2014/11/04 23:32:49.676816, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[3]: name[ObjectName] len[24] [2014/11/04 23:32:49.676833, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[4]: name[DisplayName] len[74] [2014/11/04 23:32:49.676855, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[5]: name[ImagePath] len[54] [2014/11/04 23:32:49.676872, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[6]: name[Description] len[178] [2014/11/04 23:32:49.676889, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.676929, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.677065, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.677097, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Type] [2014/11/04 23:32:49.677114, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.677131, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.677169, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2014/11/04 23:32:49.677303, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.677341, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ErrorControl] [2014/11/04 23:32:49.677358, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.677375, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.677414, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2014/11/04 23:32:49.677681, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.677713, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ObjectName] [2014/11/04 23:32:49.677730, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.677747, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.677793, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(74) [0] : 0x57 (87) [1] : 0x00 (0) [2] : 0x69 (105) [3] : 0x00 (0) [4] : 0x6e (110) [5] : 0x00 (0) [6] : 0x64 (100) [7] : 0x00 (0) [8] : 0x6f (111) [9] : 0x00 (0) [10] : 0x77 (119) [11] : 0x00 (0) [12] : 0x73 (115) [13] : 0x00 (0) [14] : 0x20 (32) [15] : 0x00 (0) [16] : 0x49 (73) [17] : 0x00 (0) [18] : 0x6e (110) [19] : 0x00 (0) [20] : 0x74 (116) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x72 (114) [25] : 0x00 (0) [26] : 0x6e (110) [27] : 0x00 (0) [28] : 0x65 (101) [29] : 0x00 (0) [30] : 0x74 (116) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x4e (78) [35] : 0x00 (0) [36] : 0x61 (97) [37] : 0x00 (0) [38] : 0x6d (109) [39] : 0x00 (0) [40] : 0x65 (101) [41] : 0x00 (0) [42] : 0x20 (32) [43] : 0x00 (0) [44] : 0x53 (83) [45] : 0x00 (0) [46] : 0x65 (101) [47] : 0x00 (0) [48] : 0x72 (114) [49] : 0x00 (0) [50] : 0x76 (118) [51] : 0x00 (0) [52] : 0x69 (105) [53] : 0x00 (0) [54] : 0x63 (99) [55] : 0x00 (0) [56] : 0x65 (101) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x28 (40) [61] : 0x00 (0) [62] : 0x57 (87) [63] : 0x00 (0) [64] : 0x49 (73) [65] : 0x00 (0) [66] : 0x4e (78) [67] : 0x00 (0) [68] : 0x53 (83) [69] : 0x00 (0) [70] : 0x29 (41) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) size : 0x0000004a (74) [2014/11/04 23:32:49.678389, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.678422, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:DisplayName] [2014/11/04 23:32:49.678438, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.678455, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.678494, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(54) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x69 (105) [13] : 0x00 (0) [14] : 0x62 (98) [15] : 0x00 (0) [16] : 0x2f (47) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x61 (97) [21] : 0x00 (0) [22] : 0x6d (109) [23] : 0x00 (0) [24] : 0x62 (98) [25] : 0x00 (0) [26] : 0x61 (97) [27] : 0x00 (0) [28] : 0x2f (47) [29] : 0x00 (0) [30] : 0x73 (115) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x63 (99) [35] : 0x00 (0) [36] : 0x63 (99) [37] : 0x00 (0) [38] : 0x74 (116) [39] : 0x00 (0) [40] : 0x6c (108) [41] : 0x00 (0) [42] : 0x2f (47) [43] : 0x00 (0) [44] : 0x6e (110) [45] : 0x00 (0) [46] : 0x6d (109) [47] : 0x00 (0) [48] : 0x62 (98) [49] : 0x00 (0) [50] : 0x64 (100) [51] : 0x00 (0) [52] : 0x00 (0) [53] : 0x00 (0) size : 0x00000036 (54) [2014/11/04 23:32:49.678982, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.679015, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ImagePath] [2014/11/04 23:32:49.679032, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.679049, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.679089, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(178) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x70 (112) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x6f (111) [39] : 0x00 (0) [40] : 0x76 (118) [41] : 0x00 (0) [42] : 0x69 (105) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x69 (105) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x67 (103) [51] : 0x00 (0) [52] : 0x20 (32) [53] : 0x00 (0) [54] : 0x61 (97) [55] : 0x00 (0) [56] : 0x20 (32) [57] : 0x00 (0) [58] : 0x4e (78) [59] : 0x00 (0) [60] : 0x65 (101) [61] : 0x00 (0) [62] : 0x74 (116) [63] : 0x00 (0) [64] : 0x42 (66) [65] : 0x00 (0) [66] : 0x49 (73) [67] : 0x00 (0) [68] : 0x4f (79) [69] : 0x00 (0) [70] : 0x53 (83) [71] : 0x00 (0) [72] : 0x20 (32) [73] : 0x00 (0) [74] : 0x70 (112) [75] : 0x00 (0) [76] : 0x6f (111) [77] : 0x00 (0) [78] : 0x69 (105) [79] : 0x00 (0) [80] : 0x6e (110) [81] : 0x00 (0) [82] : 0x74 (116) [83] : 0x00 (0) [84] : 0x2d (45) [85] : 0x00 (0) [86] : 0x74 (116) [87] : 0x00 (0) [88] : 0x6f (111) [89] : 0x00 (0) [90] : 0x2d (45) [91] : 0x00 (0) [92] : 0x70 (112) [93] : 0x00 (0) [94] : 0x6f (111) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x6e (110) [99] : 0x00 (0) [100] : 0x74 (116) [101] : 0x00 (0) [102] : 0x20 (32) [103] : 0x00 (0) [104] : 0x6e (110) [105] : 0x00 (0) [106] : 0x61 (97) [107] : 0x00 (0) [108] : 0x6d (109) [109] : 0x00 (0) [110] : 0x65 (101) [111] : 0x00 (0) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x73 (115) [115] : 0x00 (0) [116] : 0x65 (101) [117] : 0x00 (0) [118] : 0x72 (114) [119] : 0x00 (0) [120] : 0x76 (118) [121] : 0x00 (0) [122] : 0x65 (101) [123] : 0x00 (0) [124] : 0x72 (114) [125] : 0x00 (0) [126] : 0x28 (40) [127] : 0x00 (0) [128] : 0x6e (110) [129] : 0x00 (0) [130] : 0x6f (111) [131] : 0x00 (0) [132] : 0x74 (116) [133] : 0x00 (0) [134] : 0x20 (32) [135] : 0x00 (0) [136] : 0x72 (114) [137] : 0x00 (0) [138] : 0x65 (101) [139] : 0x00 (0) [140] : 0x6d (109) [141] : 0x00 (0) [142] : 0x6f (111) [143] : 0x00 (0) [144] : 0x74 (116) [145] : 0x00 (0) [146] : 0x65 (101) [147] : 0x00 (0) [148] : 0x6c (108) [149] : 0x00 (0) [150] : 0x79 (121) [151] : 0x00 (0) [152] : 0x20 (32) [153] : 0x00 (0) [154] : 0x6d (109) [155] : 0x00 (0) [156] : 0x61 (97) [157] : 0x00 (0) [158] : 0x6e (110) [159] : 0x00 (0) [160] : 0x61 (97) [161] : 0x00 (0) [162] : 0x67 (103) [163] : 0x00 (0) [164] : 0x65 (101) [165] : 0x00 (0) [166] : 0x61 (97) [167] : 0x00 (0) [168] : 0x62 (98) [169] : 0x00 (0) [170] : 0x6c (108) [171] : 0x00 (0) [172] : 0x65 (101) [173] : 0x00 (0) [174] : 0x29 (41) [175] : 0x00 (0) [176] : 0x00 (0) [177] : 0x00 (0) size : 0x000000b2 (178) [2014/11/04 23:32:49.680374, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.680407, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Description] [2014/11/04 23:32:49.680424, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.680441, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.680481, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-5954-1154f34f0000 [2014/11/04 23:32:49.680533, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.680566, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.680597, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.680614, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.680631, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.680696, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0060 (96) name_size : 0x0060 (96) name : * name : 'SYSTEM\CurrentControlSet\Services\WINS\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2014/11/04 23:32:49.680920, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.680953, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS\Security' [2014/11/04 23:32:49.680970, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.680986, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.681003, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.681020, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.681037, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.681052, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.681068, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.681084, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.681106, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.681124, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.681140, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.681156, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.681171, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.681187, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.681202, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.681224, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.681242, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.681258, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.681274, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.681290, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.681306, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.681322, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.681337, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.681365, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.681384, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 2 [2014/11/04 23:32:49.681400, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2014/11/04 23:32:49.681416, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.681432, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.681448, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.681464, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.681479, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2014/11/04 23:32:49.681501, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.681518, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2014/11/04 23:32:49.681534, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.681550, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2014/11/04 23:32:49.681566, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2014/11/04 23:32:49.681582, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.681597, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2014/11/04 23:32:49.681617, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.681634, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.681666, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-5954-1154f34f0000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2014/11/04 23:32:49.681750, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-5954-1154f34f0000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2014/11/04 23:32:49.682652, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.682684, 8, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security:Security] [2014/11/04 23:32:49.682702, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:65(tdb_wrap_log) tdb(/tmp/qemu-smb.20439-0/registry.tdb): tdb_transaction_start: nesting 1 [2014/11/04 23:32:49.682719, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security' (ops 0x7f66565ae6c0) [2014/11/04 23:32:49.682735, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2014/11/04 23:32:49.682756, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[Security] len[120] [2014/11/04 23:32:49.682773, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2014/11/04 23:32:49.682810, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-5954-1154f34f0000 [2014/11/04 23:32:49.682863, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.682895, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.682926, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.682942, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.682958, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.683020, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-5954-1154f34f0000 [2014/11/04 23:32:49.683072, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.683103, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.683135, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.683152, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2014/11/04 23:32:49.683168, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.683247, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2014/11/04 23:32:49.683271, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2014/11/04 23:32:49.683294, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2014/11/04 23:32:49.683323, 3, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/eventlog/srv_eventlog_reg.c:59(eventlog_init_winreg) Initialise the eventlog registry keys if needed. [2014/11/04 23:32:49.683343, 4, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:60(make_internal_rpc_pipe_p) Create pipe requested \winreg [2014/11/04 23:32:49.683361, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:221(init_pipe_handles) init_pipe_handle_list: created handle list for pipe \winreg [2014/11/04 23:32:49.683377, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:238(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe \winreg [2014/11/04 23:32:49.683407, 4, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:100(make_internal_rpc_pipe_p) Created internal pipe \winreg [2014/11/04 23:32:49.683429, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2014/11/04 23:32:49.683518, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2014/11/04 23:32:49.683535, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.683551, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.683567, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.683584, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.683599, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.683643, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.683662, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:866(regdb_open) regdb_open: registry db opened. refcount reset (1) [2014/11/04 23:32:49.683679, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2014/11/04 23:32:49.683694, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2014/11/04 23:32:49.683710, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.683725, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM] [2014/11/04 23:32:49.683752, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.683785, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000b-0000-0000-5954-1154f34f0000 result : WERR_OK [2014/11/04 23:32:49.683853, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000b-0000-0000-5954-1154f34f0000 keyname: struct winreg_String name_len : 0x0056 (86) name_size : 0x0056 (86) name : * name : 'SYSTEM\CurrentControlSet\Services\Eventlog' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2014/11/04 23:32:49.684027, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.684061, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2014/11/04 23:32:49.684079, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (1->2) [2014/11/04 23:32:49.684096, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2014/11/04 23:32:49.684111, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2014/11/04 23:32:49.684127, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.684142, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM] [2014/11/04 23:32:49.684166, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2014/11/04 23:32:49.684184, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (2->3) [2014/11/04 23:32:49.684200, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.684216, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.684232, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.684247, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet] [2014/11/04 23:32:49.684271, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2014/11/04 23:32:49.684289, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (3->4) [2014/11/04 23:32:49.684306, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.684321, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.684337, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.684352, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2014/11/04 23:32:49.684382, 7, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Eventlog] [2014/11/04 23:32:49.684400, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:846(regdb_open) regdb_open: incrementing refcount (4->5) [2014/11/04 23:32:49.684416, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.684432, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.684449, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2014/11/04 23:32:49.684465, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7f66565ae6c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.684487, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (5->4) [2014/11/04 23:32:49.684504, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (4->3) [2014/11/04 23:32:49.684520, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (3->2) [2014/11/04 23:32:49.684537, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:302(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.684568, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-5954-1154f34f0000 result : WERR_OK [2014/11/04 23:32:49.684634, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-5954-1154f34f0000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2014/11/04 23:32:49.684720, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.684754, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog' (ops 0x7f66565ae6c0) [2014/11/04 23:32:49.684770, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1891(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.684792, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[0]: name[DisplayName] len[20] [2014/11/04 23:32:49.684810, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1836(regdb_unpack_values) regdb_unpack_values: value[1]: name[ErrorControl] len[4] [2014/11/04 23:32:49.684828, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2074(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2014/11/04 23:32:49.684851, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000000 (0) max_subkeylen : * max_subkeylen : 0x00000000 (0) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000002 (2) max_valnamelen : * max_valnamelen : 0x0000001a (26) max_valbufsize : * max_valbufsize : 0x00000014 (20) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2014/11/04 23:32:49.685025, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-5954-1154f34f0000 [2014/11/04 23:32:49.685078, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.685110, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:337(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 59 54 11 54 ........ ....YT.T [0010] F3 4F 00 00 .O.. [2014/11/04 23:32:49.685141, 6, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:386(close_policy_hnd) Closed policy [2014/11/04 23:32:49.685157, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (2->1) [2014/11/04 23:32:49.685173, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:333(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2014/11/04 23:32:49.685234, 10, pid=20467, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:883(regdb_close) regdb_close: decrementing refcount (1->0) [2014/11/04 23:32:49.685257, 10, pid=20467, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:416(close_policy_by_pipe) Deleted handle list for RPC connection \winreg [2014/11/04 23:32:49.685328, 7, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber) lp_servicenumber: couldn't find print$ [2014/11/04 23:32:49.685347, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/printing/nt_printing.c:87(print_driver_directories_init) No print$ share has been configured. [2014/11/04 23:32:49.685370, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 515 - private_data=(nil) [2014/11/04 23:32:49.685393, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(print_queue_housekeeping) 0x7f6658cf6400 [2014/11/04 23:32:49.685413, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:140(pcap_cache_reload) reloading printcap cache [2014/11/04 23:32:49.685430, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:449(cups_pcap_load_async) cups_pcap_load_async: asynchronously loading cups printers [2014/11/04 23:32:49.685678, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:466(cups_pcap_load_async) cups_pcap_load_async: child pid = 20468 [2014/11/04 23:32:49.685721, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:586(cups_cache_reload) cups_cache_reload: async read on fd 28 [2014/11/04 23:32:49.685749, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:185(pcap_cache_reload) reload status: ok [2014/11/04 23:32:49.685820, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 0 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 0 SO_SNDBUF = 2626560 SO_RCVBUF = 1061808 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2014/11/04 23:32:49.685948, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:848(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 0 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 0 SO_SNDBUF = 2626560 SO_RCVBUF = 1061808 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2014/11/04 23:32:49.686102, 6, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed) lp_file_list_changed() file /tmp/qemu-smb.20439-0/smb.conf -> /tmp/qemu-smb.20439-0/smb.conf last mod_time: Tue Nov 4 23:32:45 2014 [2014/11/04 23:32:49.686178, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 127.0.0.1 (127.0.0.1) [2014/11/04 23:32:49.686200, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3540(smbd_process) Connection allowed from ipv4:127.0.0.1:43898 to ipv4:127.0.0.1:33489 [2014/11/04 23:32:49.686239, 3, pid=20467, effective(0, 0), real(0, 0), class=locking] ../source3/smbd/oplock.c:870(init_oplocks) init_oplocks: initializing messages. [2014/11/04 23:32:49.686261, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 774 - private_data=0x7f6658cf66b0 [2014/11/04 23:32:49.686277, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 776 - private_data=0x7f6658cf66b0 [2014/11/04 23:32:49.686293, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 778 - private_data=0x7f6658cf66b0 [2014/11/04 23:32:49.686309, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 770 - private_data=0x7f6658cf66b0 [2014/11/04 23:32:49.686324, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 787 - private_data=0x7f6658cf66b0 [2014/11/04 23:32:49.686340, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 779 - private_data=0x7f6658cf66b0 [2014/11/04 23:32:49.686361, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2014/11/04 23:32:49.686380, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 16 - private_data=0x7f6658cf66b0 [2014/11/04 23:32:49.686396, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 33 - private_data=0x7f6658cf66b0 [2014/11/04 23:32:49.686412, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2014/11/04 23:32:49.686427, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2014/11/04 23:32:49.686448, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(keepalive) 0x7f6658cfa000 [2014/11/04 23:32:49.686469, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(deadtime) 0x7f6658cfa1e0 [2014/11/04 23:32:49.686486, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x7f6658cfa430 [2014/11/04 23:32:49.686571, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 68 [2014/11/04 23:32:49.686609, 6, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x81 of len 0x44 [2014/11/04 23:32:49.686627, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 0 of length 72 (0 toread) [2014/11/04 23:32:49.686672, 2, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:592(reply_special) netbios connect: name1=10.0.2.4 0x20 name2=ARCH 0x0 [2014/11/04 23:32:49.686712, 2, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:633(reply_special) netbios connect: local=10.0.2.4 remote=arch, name type = 0 [2014/11/04 23:32:49.686737, 6, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed) lp_file_list_changed() file /tmp/qemu-smb.20439-0/smb.conf -> /tmp/qemu-smb.20439-0/smb.conf last mod_time: Tue Nov 4 23:32:45 2014 [2014/11/04 23:32:49.686773, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:667(reply_special) init msg_type=0x81 msg_flags=0x0 [2014/11/04 23:32:49.688491, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 190 [2014/11/04 23:32:49.688530, 6, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0xbe [2014/11/04 23:32:49.688549, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 0 of length 194 (0 toread) [2014/11/04 23:32:49.688567, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.688577, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=0 smb_pid=65534 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=155 [2014/11/04 23:32:49.688656, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2014/11/04 23:32:49.688796, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBnegprot (pid 20467) conn 0x0 [2014/11/04 23:32:49.688817, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.688833, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.688849, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.688872, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.690214, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2014/11/04 23:32:49.690243, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2014/11/04 23:32:49.690262, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2014/11/04 23:32:49.690279, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [LANMAN1.0] [2014/11/04 23:32:49.690295, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [LM1.2X002] [2014/11/04 23:32:49.690311, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [DOS LANMAN2.1] [2014/11/04 23:32:49.690327, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [LANMAN2.1] [2014/11/04 23:32:49.690343, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [Samba] [2014/11/04 23:32:49.690359, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [NT LANMAN 1.0] [2014/11/04 23:32:49.690375, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:564(reply_negprot) Requested protocol [NT LM 0.12] [2014/11/04 23:32:49.690394, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1286(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2014/11/04 23:32:49.690417, 6, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed) lp_file_list_changed() file /tmp/qemu-smb.20439-0/smb.conf -> /tmp/qemu-smb.20439-0/smb.conf last mod_time: Tue Nov 4 23:32:45 2014 [2014/11/04 23:32:49.690464, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 2 for /tmp/qemu-smb.20439-0/serverid.tdb [2014/11/04 23:32:49.690485, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2:/tmp/qemu-smb.20439-0/serverid.tdb 3: [2014/11/04 23:32:49.690508, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key F34F000000000000FFFF [2014/11/04 23:32:49.690530, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f6658d00f50 [2014/11/04 23:32:49.690599, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key F34F000000000000FFFF [2014/11/04 23:32:49.690627, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /tmp/qemu-smb.20439-0/serverid.tdb [2014/11/04 23:32:49.690643, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.690670, 6, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed) lp_file_list_changed() file /tmp/qemu-smb.20439-0/smb.conf -> /tmp/qemu-smb.20439-0/smb.conf last mod_time: Tue Nov 4 23:32:45 2014 [2014/11/04 23:32:49.690736, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:293(messaging_register) Registering messaging pointer for type 1536 - private_data=0x7f6658d013e0 [2014/11/04 23:32:49.690793, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:464(make_auth_context_subsystem) Making default auth method list for server role = 'standalone server', encrypt passwords = yes [2014/11/04 23:32:49.690820, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam [2014/11/04 23:32:49.690838, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam' [2014/11/04 23:32:49.690853, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2014/11/04 23:32:49.690869, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2014/11/04 23:32:49.690884, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend winbind [2014/11/04 23:32:49.690899, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'winbind' [2014/11/04 23:32:49.690914, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend trustdomain [2014/11/04 23:32:49.690929, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'trustdomain' [2014/11/04 23:32:49.690943, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend ntdomain [2014/11/04 23:32:49.690958, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'ntdomain' [2014/11/04 23:32:49.690973, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend guest [2014/11/04 23:32:49.690988, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'guest' [2014/11/04 23:32:49.691002, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2014/11/04 23:32:49.691019, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module) load_auth_module: auth method guest has a valid init [2014/11/04 23:32:49.691035, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2014/11/04 23:32:49.691051, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module) load_auth_module: auth method sam has a valid init [2014/11/04 23:32:49.691296, 5, pid=20468, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:318(cups_cache_reload_async) reloading cups printcap cache [2014/11/04 23:32:49.691496, 10, pid=20468, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:130(cups_connect) connecting to cups server /run/cups/cups.sock:631 [2014/11/04 23:32:49.691683, 0, pid=20468, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:151(cups_connect) Unable to connect to CUPS server /run/cups/cups.sock:631 - Bad file descriptor [2014/11/04 23:32:49.692067, 10, pid=20468, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:171(send_pcap_blob) successfully sent blob of len 12 [2014/11/04 23:32:49.704279, 3, pid=20467, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'gssapi_spnego' registered [2014/11/04 23:32:49.704308, 3, pid=20467, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'gssapi_krb5' registered [2014/11/04 23:32:49.704326, 3, pid=20467, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'gssapi_krb5_sasl' registered [2014/11/04 23:32:49.705222, 3, pid=20467, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'sasl-DIGEST-MD5' registered [2014/11/04 23:32:49.705244, 3, pid=20467, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'schannel' registered [2014/11/04 23:32:49.705260, 3, pid=20467, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'spnego' registered [2014/11/04 23:32:49.705275, 3, pid=20467, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'ntlmssp' registered [2014/11/04 23:32:49.705291, 3, pid=20467, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'krb5' registered [2014/11/04 23:32:49.705306, 3, pid=20467, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:870(gensec_register) GENSEC backend 'fake_gssapi_krb5' registered [2014/11/04 23:32:49.705382, 5, pid=20467, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech) Starting GENSEC mechanism spnego [2014/11/04 23:32:49.705420, 5, pid=20467, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2014/11/04 23:32:49.705495, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:385(reply_nt1) using SPNEGO [2014/11/04 23:32:49.705513, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:672(reply_negprot) Selected protocol NT LANMAN 1.0 [2014/11/04 23:32:49.705527, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:679(reply_negprot) negprot index=8 [2014/11/04 23:32:49.705542, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.705552, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=159 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51267 smb_tid=0 smb_pid=65534 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=62208 (0xF300) smb_vwv[ 8]= 79 (0x4F) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=61568 (0xF080) smb_vwv[12]=44005 (0xABE5) smb_vwv[13]=32579 (0x7F43) smb_vwv[14]=53240 (0xCFF8) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=90 [2014/11/04 23:32:49.705712, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] 61 72 63 68 00 00 00 00 00 00 00 00 00 00 00 00 arch.... ........ [0010] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 2A 0...+... ..7....* [0030] 30 28 A0 26 1B 24 6E 6F 74 5F 64 65 66 69 6E 65 0(.&.$no t_define [0040] 64 5F 69 6E 5F 52 46 43 34 31 37 38 40 70 6C 65 d_in_RFC 4178@ple [0050] 61 73 65 5F 69 67 6E 6F 72 65 ase_igno re [2014/11/04 23:32:49.708148, 2, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:419(remove_child_pid) Could not find child 20468 -- ignoring [2014/11/04 23:32:49.708206, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:512(cups_async_callback) cups_async_callback: callback received for printer data. fd = 28 [2014/11/04 23:32:49.708241, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:196(recv_pcap_blob) successfully recvd blob of len 12 [2014/11/04 23:32:49.708289, 0, pid=20467, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:528(cups_async_callback) failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL [2014/11/04 23:32:49.708888, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 160 [2014/11/04 23:32:49.708924, 6, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0xa0 [2014/11/04 23:32:49.708950, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 1 of length 164 (0 toread) [2014/11/04 23:32:49.708974, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.708989, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=160 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=65535 smb_pid=150 smb_uid=0 smb_mid=1 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 79 (0x4F) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=49236 (0xC054) smb_vwv[11]=32768 (0x8000) smb_bcc=101 [2014/11/04 23:32:49.709209, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] 60 4D 06 06 2B 06 01 05 05 02 A0 43 30 41 A0 0E `M..+... ...C0A.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2F 0...+... ..7..../ [0020] 04 2D 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .-NTLMSS P....... [0030] 08 60 09 00 09 00 20 00 00 00 04 00 04 00 29 00 .`.... . ......). [0040] 00 00 57 4F 52 4B 47 52 4F 55 50 41 52 43 48 55 ..WORKGR OUPARCHU [0050] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [0060] 00 61 00 00 00 .a... [2014/11/04 23:32:49.709358, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBsesssetupX (pid 20467) conn 0x0 [2014/11/04 23:32:49.709387, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.709412, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.709436, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.709474, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.709505, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:604(reply_sesssetup_and_X) wct=12 flg2=0xc843 [2014/11/04 23:32:49.709536, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:138(reply_sesssetup_and_X_spnego) Doing spnego session setup [2014/11/04 23:32:49.709572, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:179(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2014/11/04 23:32:49.709608, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb [2014/11/04 23:32:49.709637, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb 2: 3: [2014/11/04 23:32:49.709664, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key A35903B9 [2014/11/04 23:32:49.709694, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f6658d33c10 [2014/11/04 23:32:49.709890, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:853(smbXsrv_session_global_store) [2014/11/04 23:32:49.709915, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:855(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'A35903B9' stored [2014/11/04 23:32:49.709944, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xa35903b9 (2740519865) session_wire_id : 0x0000000000006765 (26469) creation_time : Tue Nov 4 11:32:50 PM 2014 CET expiration_time : Thu Jan 1 01:00:00 AM 1970 CET auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000004ff3 (20467) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x9d86a5c7c562cac2 (-7095801885446976830) local_address : 'ipv4:127.0.0.1:33489' remote_address : 'ipv4:127.0.0.1:43898' remote_name : 'arch' auth_session_info_seqnum : 0x00000000 (0) [2014/11/04 23:32:49.710577, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key A35903B9 [2014/11/04 23:32:49.710609, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb [2014/11/04 23:32:49.710634, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.710660, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1215(smbXsrv_session_create) [2014/11/04 23:32:49.710675, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1223(smbXsrv_session_create) smbXsrv_session_create: global_id (0xa35903b9) stored [2014/11/04 23:32:49.710699, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL connection : * local_id : 0x00006765 (26469) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xa35903b9 (2740519865) session_wire_id : 0x0000000000006765 (26469) creation_time : Tue Nov 4 11:32:50 PM 2014 CET expiration_time : Thu Jan 1 01:00:00 AM 1970 CET auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000004ff3 (20467) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x9d86a5c7c562cac2 (-7095801885446976830) local_address : 'ipv4:127.0.0.1:33489' remote_address : 'ipv4:127.0.0.1:43898' remote_name : 'arch' auth_session_info_seqnum : 0x00000000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Tue Nov 4 11:32:50 PM 2014 CET nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) gensec : NULL compat : NULL tcon_table : NULL [2014/11/04 23:32:49.711166, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:464(make_auth_context_subsystem) Making default auth method list for server role = 'standalone server', encrypt passwords = yes [2014/11/04 23:32:49.711195, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2014/11/04 23:32:49.711221, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module) load_auth_module: auth method guest has a valid init [2014/11/04 23:32:49.711245, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:351(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2014/11/04 23:32:49.711269, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:376(load_auth_module) load_auth_module: auth method sam has a valid init [2014/11/04 23:32:49.711324, 5, pid=20467, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech) Starting GENSEC mechanism spnego [2014/11/04 23:32:49.711358, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.711384, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.711409, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.711435, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.711459, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.711558, 5, pid=20467, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:649(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2014/11/04 23:32:49.711605, 3, pid=20467, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2014/11/04 23:32:49.711743, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0009 (9) DomainNameMaxLen : 0x0009 (9) DomainName : * DomainName : 'WORKGROUP' WorkstationLen : 0x0004 (4) WorkstationMaxLen : 0x0004 (4) Workstation : * Workstation : 'ARCH' [2014/11/04 23:32:49.712170, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x0008 (8) TargetNameMaxLen : 0x0008 (8) TargetName : * TargetName : 'ARCH' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : 123ec510690bd608 Reserved : 0000000000000000 TargetInfoLen : 0x0064 (100) TargetNameInfoMaxLen : 0x0064 (100) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'ARCH' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'ARCH' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0016 (22) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'localdomain' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x002a (42) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'localhost.localdomain' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2014/11/04 23:32:49.712871, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.712920, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.712938, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=286 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=65535 smb_pid=150 smb_uid=26469 smb_mid=1 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 187 (0xBB) smb_bcc=243 [2014/11/04 23:32:49.713089, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] A1 81 B8 30 81 B5 A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 9F 04 81 9C 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 08 00 08 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 12 3E C5 10 69 0B D6 08 00 ......`. >..i.... [0040] 00 00 00 00 00 00 00 64 00 64 00 38 00 00 00 41 .......d .d.8...A [0050] 00 52 00 43 00 48 00 02 00 08 00 41 00 52 00 43 .R.C.H.. ...A.R.C [0060] 00 48 00 01 00 08 00 41 00 52 00 43 00 48 00 04 .H.....A .R.C.H.. [0070] 00 16 00 6C 00 6F 00 63 00 61 00 6C 00 64 00 6F ...l.o.c .a.l.d.o [0080] 00 6D 00 61 00 69 00 6E 00 03 00 2A 00 6C 00 6F .m.a.i.n ...*.l.o [0090] 00 63 00 61 00 6C 00 68 00 6F 00 73 00 74 00 2E .c.a.l.h .o.s.t.. [00A0] 00 6C 00 6F 00 63 00 61 00 6C 00 64 00 6F 00 6D .l.o.c.a .l.d.o.m [00B0] 00 61 00 69 00 6E 00 00 00 00 00 55 00 6E 00 69 .a.i.n.. ...U.n.i [00C0] 00 78 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 .x...S.a .m.b.a. [00D0] 00 34 00 2E 00 31 00 2E 00 31 00 32 00 00 00 57 .4...1.. .1.2...W [00E0] 00 4F 00 52 00 4B 00 47 00 52 00 4F 00 55 00 50 .O.R.K.G .R.O.U.P [00F0] 00 00 00 ... [2014/11/04 23:32:49.715219, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 382 [2014/11/04 23:32:49.715248, 6, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0x17e [2014/11/04 23:32:49.715265, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 2 of length 386 (0 toread) [2014/11/04 23:32:49.715281, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.715290, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=382 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=65535 smb_pid=150 smb_uid=26469 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 300 (0x12C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=49236 (0xC054) smb_vwv[11]=32768 (0x8000) smb_bcc=323 [2014/11/04 23:32:49.715427, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] A1 82 01 28 30 82 01 24 A2 82 01 20 04 82 01 1C ...(0..$ ... .... [0010] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........ [0020] 40 00 00 00 90 00 90 00 58 00 00 00 12 00 12 00 @....... X....... [0030] E8 00 00 00 0A 00 0A 00 FA 00 00 00 08 00 08 00 ........ ........ [0040] 04 01 00 00 10 00 10 00 0C 01 00 00 15 82 08 60 ........ .......` [0050] 84 D7 41 34 D2 7A 46 1B 4A 08 78 33 D6 9E 58 2E ..A4.zF. J.x3..X. [0060] CF BC 57 DE 85 88 7F ED A0 7C 6C AE 6D 23 48 0A ..W..... .|l.m#H. [0070] 68 95 53 E9 12 93 65 C5 01 01 00 00 00 00 00 00 h.S...e. ........ [0080] 80 7E 42 43 7F F8 CF 01 6C 86 AA DC F9 3D 19 65 .~BC.... l....=.e [0090] 00 00 00 00 02 00 08 00 41 00 52 00 43 00 48 00 ........ A.R.C.H. [00A0] 01 00 08 00 41 00 52 00 43 00 48 00 04 00 16 00 ....A.R. C.H..... [00B0] 6C 00 6F 00 63 00 61 00 6C 00 64 00 6F 00 6D 00 l.o.c.a. l.d.o.m. [00C0] 61 00 69 00 6E 00 03 00 2A 00 6C 00 6F 00 63 00 a.i.n... *.l.o.c. [00D0] 61 00 6C 00 68 00 6F 00 73 00 74 00 2E 00 6C 00 a.l.h.o. s.t...l. [00E0] 6F 00 63 00 61 00 6C 00 64 00 6F 00 6D 00 61 00 o.c.a.l. d.o.m.a. [00F0] 69 00 6E 00 00 00 00 00 57 00 4F 00 52 00 4B 00 i.n..... W.O.R.K. [0100] 47 00 52 00 4F 00 55 00 50 00 47 00 55 00 45 00 G.R.O.U. P.G.U.E. [0110] 53 00 54 00 41 00 52 00 43 00 48 00 9B E2 EA 6B S.T.A.R. C.H....k [0120] 30 99 36 C0 15 03 6F FF 47 BA 10 BF 00 55 00 6E 0.6...o. G....U.n [0130] 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 00 61 .i.x...S .a.m.b.a [0140] 00 00 00 ... [2014/11/04 23:32:49.715671, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBsesssetupX (pid 20467) conn 0x0 [2014/11/04 23:32:49.715688, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.715704, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.715718, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.715742, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.715758, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:604(reply_sesssetup_and_X) wct=12 flg2=0xc843 [2014/11/04 23:32:49.715774, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:138(reply_sesssetup_and_X_spnego) Doing spnego session setup [2014/11/04 23:32:49.715790, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:179(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2014/11/04 23:32:49.715806, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.715821, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2014/11/04 23:32:49.715836, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.715850, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.715865, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.715908, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 84d74134d27a461b4a087833d69e582ecfbc57de85887fed NtChallengeResponseLen : 0x0090 (144) NtChallengeResponseMaxLen: 0x0090 (144) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 144) v2: struct NTLMv2_RESPONSE Response : a07c6cae6d23480a689553e9129365c5 Challenge: struct NTLMv2_CLIENT_CHALLENGE RespType : 0x01 (1) HiRespType : 0x01 (1) Reserved1 : 0x0000 (0) Reserved2 : 0x00000000 (0) TimeStamp : Tue Nov 4 11:32:49 PM 2014 CET ChallengeFromClient : 6c86aadcf93d1965 Reserved3 : 0x00000000 (0) AvPairs: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'ARCH' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'ARCH' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0016 (22) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'localdomain' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x002a (42) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'localhost.localdomain' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) DomainNameLen : 0x0012 (18) DomainNameMaxLen : 0x0012 (18) DomainName : * DomainName : 'WORKGROUP' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'GUEST' WorkstationLen : 0x0008 (8) WorkstationMaxLen : 0x0008 (8) Workstation : * Workstation : 'ARCH' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [0000] 9B E2 EA 6B 30 99 36 C0 15 03 6F FF 47 BA 10 BF ...k0.6. ..o.G... NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2014/11/04 23:32:49.716541, 3, pid=20467, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:358(ntlmssp_server_preauth) Got user=[GUEST] domain=[WORKGROUP] workstation=[ARCH] len1=24 len2=144 [2014/11/04 23:32:49.716569, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4839(lp_load_ex) lp_load_ex: refreshing parameters [2014/11/04 23:32:49.716586, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1488(free_param_opts) Freeing parametrics: [2014/11/04 23:32:49.716615, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:750(init_globals) Initialising global parameters [2014/11/04 23:32:49.716654, 3, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/tmp/qemu-smb.20439-0/smb.conf" [2014/11/04 23:32:49.716672, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3565(do_section) Processing section "[global]" doing parameter log level = 10 [2014/11/04 23:32:49.716698, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 doing parameter private dir = /tmp/qemu-smb.20439-0 doing parameter socket address = 127.0.0.1 [2014/11/04 23:32:49.716846, 1, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3179(lp_do_parameter) WARNING: The "socket address" option is deprecated doing parameter pid directory = /tmp/qemu-smb.20439-0 doing parameter lock directory = /tmp/qemu-smb.20439-0 doing parameter state directory = /tmp/qemu-smb.20439-0 doing parameter ncalrpc dir = /tmp/qemu-smb.20439-0/ncalrpc doing parameter log file = /tmp/qemu-smb.20439-0/log.smbd doing parameter smb passwd file = /tmp/qemu-smb.20439-0/smbpasswd doing parameter security = user doing parameter map to guest = Bad User [2014/11/04 23:32:49.716939, 2, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3582(do_section) Processing section "[qemu]" doing parameter path = /usr doing parameter read only = no doing parameter guest ok = yes doing parameter force user = root [2014/11/04 23:32:49.716988, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4878(lp_load_ex) pm_process() returned Yes [2014/11/04 23:32:49.717006, 7, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:5168(lp_servicenumber) lp_servicenumber: couldn't find homes [2014/11/04 23:32:49.717024, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1774(lp_add_ipc) adding IPC service [2014/11/04 23:32:49.717048, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:115(make_user_info_map) Mapping user [WORKGROUP]\[GUEST] from workstation [ARCH] [2014/11/04 23:32:49.717071, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:137(make_user_info_map) Mapped domain from [WORKGROUP] to [ARCH] for user [GUEST] from workstation [ARCH] [2014/11/04 23:32:49.717088, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:61(make_user_info) attempting to make a user_info for GUEST (GUEST) [2014/11/04 23:32:49.717103, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:72(make_user_info) making strings for GUEST's user_info struct [2014/11/04 23:32:49.717120, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:92(make_user_info) making blobs for GUEST's user_info struct [2014/11/04 23:32:49.717136, 10, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:128(make_user_info) made a user_info for GUEST (GUEST) [2014/11/04 23:32:49.717152, 3, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:177(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user [WORKGROUP]\[GUEST]@[ARCH] with the new password interface [2014/11/04 23:32:49.717167, 3, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:180(auth_check_ntlm_password) check_ntlm_password: mapped user is: [ARCH]\[GUEST]@[ARCH] [2014/11/04 23:32:49.717182, 10, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:189(auth_check_ntlm_password) check_ntlm_password: auth_context challenge created by random [2014/11/04 23:32:49.717196, 10, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:191(auth_check_ntlm_password) challenge is: [2014/11/04 23:32:49.717574, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] 12 3E C5 10 69 0B D6 08 .>..i... [2014/11/04 23:32:49.717601, 10, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:44(check_guest_security) Check auth for: [GUEST] [2014/11/04 23:32:49.717617, 10, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:217(auth_check_ntlm_password) check_ntlm_password: guest had nothing to say [2014/11/04 23:32:49.717633, 10, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth) Check auth for: [GUEST] [2014/11/04 23:32:49.717649, 8, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1200(is_myname) is_myname("ARCH") returns 1 [2014/11/04 23:32:49.717668, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.717684, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:485(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2014/11/04 23:32:49.717699, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2014/11/04 23:32:49.717714, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.717728, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.717758, 5, pid=20467, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:594(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_guest [2014/11/04 23:32:49.717782, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2014/11/04 23:32:49.717797, 3, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/check_samsec.c:399(check_sam_security) check_sam_security: Couldn't find user 'GUEST' in passdb. [2014/11/04 23:32:49.717813, 5, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:229(auth_check_ntlm_password) check_ntlm_password: sam authentication for user [GUEST] FAILED with error NT_STATUS_NO_SUCH_USER [2014/11/04 23:32:49.717830, 2, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:288(auth_check_ntlm_password) check_ntlm_password: Authentication for user [GUEST] -> [GUEST] FAILED with error NT_STATUS_NO_SUCH_USER [2014/11/04 23:32:49.717846, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:144(auth3_check_password) Checking NTLMSSP password for WORKGROUP\GUEST failed: NT_STATUS_NO_SUCH_USER [2014/11/04 23:32:49.717864, 3, pid=20467, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:1593(do_map_to_guest_server_info) No such user GUEST [WORKGROUP] - using guest account [2014/11/04 23:32:49.717886, 10, pid=20467, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:554(ntlmssp_server_postauth) ntlmssp_server_auth: Failed to create unmodified session key. [2014/11/04 23:32:49.717902, 5, pid=20467, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:571(ntlmssp_server_postauth) server session key is invalid (len == 0), cannot do KEY_EXCH! [2014/11/04 23:32:49.717921, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:424(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.717965, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb [2014/11/04 23:32:49.717983, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb 2: 3: [2014/11/04 23:32:49.718000, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key A35903B9 [2014/11/04 23:32:49.718017, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f6658d23be0 [2014/11/04 23:32:49.718053, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:853(smbXsrv_session_global_store) [2014/11/04 23:32:49.718065, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:855(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'A35903B9' stored [2014/11/04 23:32:49.718081, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xa35903b9 (2740519865) session_wire_id : 0x0000000000006765 (26469) creation_time : Tue Nov 4 11:32:50 PM 2014 CET expiration_time : Thu Jan 1 01:00:00 AM 1970 CET auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000007 (7) sids: ARRAY(7) sids : S-1-5-21-2629826569-4057080478-97288662-501 sids : S-1-5-21-2629826569-4057080478-97288662-514 sids : S-1-22-2-99 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-32-546 sids : S-1-22-1-99 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x0000000000000063 (99) gid : 0x0000000000000063 (99) ngroups : 0x00000001 (1) groups: ARRAY(1) groups : 0x0000000000000063 (99) info : * info: struct auth_user_info account_name : * account_name : 'nobody' domain_name : * domain_name : 'ARCH' full_name : NULL logon_script : NULL profile_path : NULL home_directory : NULL home_drive : NULL logon_server : NULL last_logon : NTTIME(0) last_logoff : NTTIME(0) acct_expiry : NTTIME(0) last_password_change : NTTIME(0) allow_password_change : NTTIME(0) force_password_change : NTTIME(0) logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000000 (0) authenticated : 0x00 (0) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'nobody' sanitized_username : * sanitized_username : 'GUEST' torture : NULL credentials : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000004ff3 (20467) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x9d86a5c7c562cac2 (-7095801885446976830) local_address : 'ipv4:127.0.0.1:33489' remote_address : 'ipv4:127.0.0.1:43898' remote_name : 'arch' auth_session_info_seqnum : 0x00000001 (1) [2014/11/04 23:32:49.718878, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key A35903B9 [2014/11/04 23:32:49.718896, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb [2014/11/04 23:32:49.718911, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.718927, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1269(smbXsrv_session_update) [2014/11/04 23:32:49.718936, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1277(smbXsrv_session_update) smbXsrv_session_update: global_id (0xa35903b9) stored [2014/11/04 23:32:49.718951, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL connection : * local_id : 0x00006765 (26469) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xa35903b9 (2740519865) session_wire_id : 0x0000000000006765 (26469) creation_time : Tue Nov 4 11:32:50 PM 2014 CET expiration_time : Thu Jan 1 01:00:00 AM 1970 CET auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000007 (7) sids: ARRAY(7) sids : S-1-5-21-2629826569-4057080478-97288662-501 sids : S-1-5-21-2629826569-4057080478-97288662-514 sids : S-1-22-2-99 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-32-546 sids : S-1-22-1-99 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x0000000000000063 (99) gid : 0x0000000000000063 (99) ngroups : 0x00000001 (1) groups: ARRAY(1) groups : 0x0000000000000063 (99) info : * info: struct auth_user_info account_name : * account_name : 'nobody' domain_name : * domain_name : 'ARCH' full_name : NULL logon_script : NULL profile_path : NULL home_directory : NULL home_drive : NULL logon_server : NULL last_logon : NTTIME(0) last_logoff : NTTIME(0) acct_expiry : NTTIME(0) last_password_change : NTTIME(0) allow_password_change : NTTIME(0) force_password_change : NTTIME(0) logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000000 (0) authenticated : 0x00 (0) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'nobody' sanitized_username : * sanitized_username : 'GUEST' torture : NULL credentials : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000004ff3 (20467) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x9d86a5c7c562cac2 (-7095801885446976830) local_address : 'ipv4:127.0.0.1:33489' remote_address : 'ipv4:127.0.0.1:43898' remote_name : 'arch' auth_session_info_seqnum : 0x00000001 (1) status : NT_STATUS_OK idle_time : Tue Nov 4 11:32:50 PM 2014 CET nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) gensec : * compat : * tcon_table : NULL [2014/11/04 23:32:49.719812, 6, pid=20467, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2658(lp_file_list_changed) lp_file_list_changed() file /tmp/qemu-smb.20439-0/smb.conf -> /tmp/qemu-smb.20439-0/smb.conf last mod_time: Tue Nov 4 23:32:45 2014 [2014/11/04 23:32:49.719865, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.719878, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=108 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=65535 smb_pid=150 smb_uid=26469 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 9 (0x9) smb_bcc=65 [2014/11/04 23:32:49.719972, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [0010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 34 ...S.a.m .b.a. .4 [0020] 00 2E 00 31 00 2E 00 31 00 32 00 00 00 57 00 4F ...1...1 .2...W.O [0030] 00 52 00 4B 00 47 00 52 00 4F 00 55 00 50 00 00 .R.K.G.R .O.U.P.. [0040] 00 . [2014/11/04 23:32:49.721653, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 82 [2014/11/04 23:32:49.721685, 6, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0x52 [2014/11/04 23:32:49.721703, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 3 of length 86 (0 toread) [2014/11/04 23:32:49.721719, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.721728, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=82 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=65535 smb_pid=150 smb_uid=26469 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 12 (0xC) smb_vwv[ 3]= 1 (0x1) smb_bcc=39 [2014/11/04 23:32:49.721824, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] 00 5C 00 5C 00 31 00 30 00 2E 00 30 00 2E 00 32 .\.\.1.0 ...0...2 [0010] 00 2E 00 34 00 5C 00 49 00 50 00 43 00 24 00 00 ...4.\.I .P.C.$.. [0020] 00 3F 3F 3F 3F 3F 00 .?????. [2014/11/04 23:32:49.721870, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBtconX (pid 20467) conn 0x0 [2014/11/04 23:32:49.721887, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.721902, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.721917, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.721940, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.721972, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:857(reply_tcon_and_X) Client requested device type [?????] for share [IPC$] [2014/11/04 23:32:49.722003, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:1106(make_connection) making a connection to 'normal' service ipc$ [2014/11/04 23:32:49.722025, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb [2014/11/04 23:32:49.722041, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb 2: 3: [2014/11/04 23:32:49.722057, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 33EED3AB [2014/11/04 23:32:49.722076, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f6658d37670 [2014/11/04 23:32:49.722121, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:672(smbXsrv_tcon_global_store) [2014/11/04 23:32:49.722133, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:674(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '33EED3AB' stored [2014/11/04 23:32:49.722149, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x33eed3ab (871289771) tcon_wire_id : 0x00001eaa (7850) server_id: struct server_id pid : 0x0000000000004ff3 (20467) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x9d86a5c7c562cac2 (-7095801885446976830) creation_time : Tue Nov 4 11:32:50 PM 2014 CET share_name : NULL encryption_required : 0x00 (0) session_global_id : 0x00000000 (0) [2014/11/04 23:32:49.722280, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 33EED3AB [2014/11/04 23:32:49.722296, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb [2014/11/04 23:32:49.722311, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.722327, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:796(smbXsrv_tcon_create) [2014/11/04 23:32:49.722336, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:804(smbXsrv_tcon_create) smbXsrv_tcon_create: global_id (0x33eed3ab) stored [2014/11/04 23:32:49.722350, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x00001eaa (7850) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x33eed3ab (871289771) tcon_wire_id : 0x00001eaa (7850) server_id: struct server_id pid : 0x0000000000004ff3 (20467) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x9d86a5c7c562cac2 (-7095801885446976830) creation_time : Tue Nov 4 11:32:50 PM 2014 CET share_name : NULL encryption_required : 0x00 (0) session_global_id : 0x00000000 (0) status : NT_STATUS_INTERNAL_ERROR idle_time : Tue Nov 4 11:32:50 PM 2014 CET compat : NULL [2014/11/04 23:32:49.722548, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from arch (127.0.0.1) [2014/11/04 23:32:49.722605, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2014/11/04 23:32:49.722625, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:612(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2014/11/04 23:32:49.722644, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:237(user_ok_token) user_ok_token: share IPC$ is ok for unix user nobody [2014/11/04 23:32:49.722663, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:284(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2014/11/04 23:32:49.722698, 10, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff [2014/11/04 23:32:49.722720, 3, pid=20467, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:113(vfs_init_default) Initialising default vfs hooks [2014/11/04 23:32:49.722738, 10, pid=20467, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for posixacl [2014/11/04 23:32:49.722755, 5, pid=20467, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) Successfully added vfs backend 'posixacl' [2014/11/04 23:32:49.722771, 10, pid=20467, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ [2014/11/04 23:32:49.722786, 5, pid=20467, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) Successfully added vfs backend '/[Default VFS]/' [2014/11/04 23:32:49.722802, 10, pid=20467, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for dfs_samba4 [2014/11/04 23:32:49.722817, 5, pid=20467, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) Successfully added vfs backend 'dfs_samba4' [2014/11/04 23:32:49.722835, 10, pid=20467, effective(0, 0), real(0, 0), class=dfs_samba4] ../source3/modules/vfs_dfs_samba4.c:155(vfs_dfs_samba4_init) vfs_dfs_samba4: Debug class number of 'fileid': 23 [2014/11/04 23:32:49.722850, 3, pid=20467, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:139(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2014/11/04 23:32:49.722867, 10, pid=20467, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2014/11/04 23:32:49.722898, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2014/11/04 23:32:49.722918, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:237(user_ok_token) user_ok_token: share IPC$ is ok for unix user nobody [2014/11/04 23:32:49.722934, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:284(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2014/11/04 23:32:49.722955, 10, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff [2014/11/04 23:32:49.722984, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.723003, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (7): SID[ 0]: S-1-5-21-2629826569-4057080478-97288662-501 SID[ 1]: S-1-5-21-2629826569-4057080478-97288662-514 SID[ 2]: S-1-22-2-99 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-99 Privileges (0x 0): Rights (0x 0): [2014/11/04 23:32:49.723071, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 99 Primary group is 99 and contains 1 supplementary groups Group[ 0]: 99 [2014/11/04 23:32:49.723102, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(99,99), gid=(0,99) [2014/11/04 23:32:49.723123, 4, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.723139, 5, pid=20467, effective(99, 99), real(99, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.723154, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.723177, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.723223, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2014/11/04 23:32:49.723255, 10, pid=20467, effective(0, 0), real(0, 0), class=vfs] ../source3/modules/vfs_default.c:164(vfswrap_fs_capabilities) vfswrap_fs_capabilities: timestamp resolution of sec available on share IPC$, directory /tmp [2014/11/04 23:32:49.723272, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:856(make_connection_snum) arch (ipv4:127.0.0.1:43898) connect to service IPC$ initially as user nobody (uid=99, gid=99) (pid 20467) [2014/11/04 23:32:49.723299, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb [2014/11/04 23:32:49.723315, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb 2: 3: [2014/11/04 23:32:49.723331, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 33EED3AB [2014/11/04 23:32:49.723348, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f6658d25a00 [2014/11/04 23:32:49.723368, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:672(smbXsrv_tcon_global_store) [2014/11/04 23:32:49.723379, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:674(smbXsrv_tcon_global_store) smbXsrv_tcon_global_store: key '33EED3AB' stored [2014/11/04 23:32:49.723394, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &global_blob: struct smbXsrv_tcon_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_tcon_globalU(case 0) info0 : * info0: struct smbXsrv_tcon_global0 db_rec : * tcon_global_id : 0x33eed3ab (871289771) tcon_wire_id : 0x00001eaa (7850) server_id: struct server_id pid : 0x0000000000004ff3 (20467) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x9d86a5c7c562cac2 (-7095801885446976830) creation_time : Tue Nov 4 11:32:50 PM 2014 CET share_name : 'IPC$' encryption_required : 0x00 (0) session_global_id : 0xa35903b9 (2740519865) [2014/11/04 23:32:49.723520, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 33EED3AB [2014/11/04 23:32:49.723537, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb [2014/11/04 23:32:49.723551, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.723568, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:849(smbXsrv_tcon_update) [2014/11/04 23:32:49.723578, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:857(smbXsrv_tcon_update) smbXsrv_tcon_update: global_id (0x33eed3ab) stored [2014/11/04 23:32:49.723592, 1, pid=20467, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) &tcon_blob: struct smbXsrv_tconB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_tconU(case 0) info0 : * info0: struct smbXsrv_tcon table : * db_rec : NULL local_id : 0x00001eaa (7850) global : * global: struct smbXsrv_tcon_global0 db_rec : NULL tcon_global_id : 0x33eed3ab (871289771) tcon_wire_id : 0x00001eaa (7850) server_id: struct server_id pid : 0x0000000000004ff3 (20467) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x9d86a5c7c562cac2 (-7095801885446976830) creation_time : Tue Nov 4 11:32:50 PM 2014 CET share_name : 'IPC$' encryption_required : 0x00 (0) session_global_id : 0xa35903b9 (2740519865) status : NT_STATUS_OK idle_time : Tue Nov 4 11:32:50 PM 2014 CET compat : * [2014/11/04 23:32:49.723918, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/reply.c:1024(reply_tcon_and_X) tconX service=IPC$ [2014/11/04 23:32:49.723935, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.723944, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=56 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=7850 smb_pid=150 smb_uid=26469 smb_mid=3 smt_wct=7 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 511 (0x1FF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 511 (0x1FF) smb_vwv[ 6]= 0 (0x0) smb_bcc=7 [2014/11/04 23:32:49.724053, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] 49 50 43 00 00 00 00 IPC.... [2014/11/04 23:32:49.725616, 10, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 128 [2014/11/04 23:32:49.725645, 6, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0x80 [2014/11/04 23:32:49.725662, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 4 of length 132 (0 toread) [2014/11/04 23:32:49.725677, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.725686, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=7850 smb_pid=150 smb_uid=26469 smb_mid=4 smt_wct=14 smb_vwv[ 0]= 36 (0x24) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]=65535 (0xFFFF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 36 (0x24) smb_vwv[10]= 92 (0x5C) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 128 (0x80) smb_vwv[13]= 0 (0x0) smb_bcc=65 [2014/11/04 23:32:49.725835, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 4C 00 41 .\.P.I.P .E.\.L.A [0010] 00 4E 00 4D 00 41 00 4E 00 00 00 00 00 68 00 57 .N.M.A.N .....h.W [0020] 72 4C 65 68 44 7A 00 42 31 36 42 42 44 7A 00 01 rLehDz.B 16BBDz.. [0030] 00 FF FF FF FF FF FF 57 4F 52 4B 47 52 4F 55 50 .......W ORKGROUP [0040] 00 . [2014/11/04 23:32:49.725901, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBtrans (pid 20467) conn 0x7f6658d24b10 [2014/11/04 23:32:49.725919, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.725936, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (7): SID[ 0]: S-1-5-21-2629826569-4057080478-97288662-501 SID[ 1]: S-1-5-21-2629826569-4057080478-97288662-514 SID[ 2]: S-1-22-2-99 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-99 Privileges (0x 0): Rights (0x 0): [2014/11/04 23:32:49.726004, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 99 Primary group is 99 and contains 1 supplementary groups Group[ 0]: 99 [2014/11/04 23:32:49.726033, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) Impersonated user: uid=(99,99), gid=(0,99) [2014/11/04 23:32:49.726054, 4, pid=20467, effective(99, 99), real(99, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to /tmp [2014/11/04 23:32:49.726085, 4, pid=20467, effective(99, 99), real(99, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got /tmp [2014/11/04 23:32:49.726109, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:591(handle_trans) trans <\PIPE\LANMAN> data=0 params=36 setup=0 [2014/11/04 23:32:49.726128, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:624(handle_trans) calling named_pipe [2014/11/04 23:32:49.726143, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:542(named_pipe) named pipe command on name [2014/11/04 23:32:49.726160, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/lanman.c:5608(api_reply) Got API command 104 of form (tdscnt=0,tpscnt=36,mdrcnt=65535,mprcnt=8) [2014/11/04 23:32:49.726185, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/lanman.c:5612(api_reply) Doing NetServerEnum2 [2014/11/04 23:32:49.726207, 4, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/lanman.c:1495(api_RNetServerEnum2) server request level: B16BBDz 3fffffff domains_req:No local_only:No [2014/11/04 23:32:49.726227, 4, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/lanman.c:1508(api_RNetServerEnum2) domain [WORKGROUP] [2014/11/04 23:32:49.726257, 4, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/lanman.c:1232(get_session_info) Can't open /tmp/qemu-smb.20439-0/browse.dat - Permission denied [2014/11/04 23:32:49.726329, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/lanman.c:1585(api_RNetServerEnum2) NetServerEnum2 domain = WORKGROUP uLevel=1 counted=0 total=0 [2014/11/04 23:32:49.726349, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..8] data[0..0] (align 0) [2014/11/04 23:32:49.726365, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.726374, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/lib/util.c:178(show_msg) size=64 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=7850 smb_pid=150 smb_uid=26469 smb_mid=4 smt_wct=10 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 64 (0x40) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=9 [2014/11/04 23:32:49.726498, 10, pid=20467, effective(99, 99), real(99, 0)] ../lib/util/util.c:556(dump_data) [0000] 00 00 00 00 00 00 00 00 00 ........ . [2014/11/04 23:32:49.727963, 10, pid=20467, effective(99, 99), real(99, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 128 [2014/11/04 23:32:49.727991, 6, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0x80 [2014/11/04 23:32:49.728008, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 5 of length 132 (0 toread) [2014/11/04 23:32:49.728023, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.728033, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/lib/util.c:178(show_msg) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=7850 smb_pid=150 smb_uid=26469 smb_mid=5 smt_wct=14 smb_vwv[ 0]= 36 (0x24) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]=65535 (0xFFFF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 36 (0x24) smb_vwv[10]= 92 (0x5C) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 128 (0x80) smb_vwv[13]= 0 (0x0) smb_bcc=65 [2014/11/04 23:32:49.728180, 10, pid=20467, effective(99, 99), real(99, 0)] ../lib/util/util.c:556(dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 4C 00 41 .\.P.I.P .E.\.L.A [0010] 00 4E 00 4D 00 41 00 4E 00 00 00 00 00 68 00 57 .N.M.A.N .....h.W [0020] 72 4C 65 68 44 7A 00 42 31 36 42 42 44 7A 00 01 rLehDz.B 16BBDz.. [0030] 00 FF FF 00 00 00 80 57 4F 52 4B 47 52 4F 55 50 .......W ORKGROUP [0040] 00 . [2014/11/04 23:32:49.728245, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBtrans (pid 20467) conn 0x7f6658d24b10 [2014/11/04 23:32:49.728262, 4, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/uid.c:384(change_to_user) Skipping user change - already user [2014/11/04 23:32:49.728279, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:591(handle_trans) trans <\PIPE\LANMAN> data=0 params=36 setup=0 [2014/11/04 23:32:49.728296, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:624(handle_trans) calling named_pipe [2014/11/04 23:32:49.728311, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:542(named_pipe) named pipe command on name [2014/11/04 23:32:49.728326, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/lanman.c:5608(api_reply) Got API command 104 of form (tdscnt=0,tpscnt=36,mdrcnt=65535,mprcnt=8) [2014/11/04 23:32:49.728341, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/lanman.c:5612(api_reply) Doing NetServerEnum2 [2014/11/04 23:32:49.728357, 4, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/lanman.c:1495(api_RNetServerEnum2) server request level: B16BBDz 80000000 domains_req:Yes local_only:No [2014/11/04 23:32:49.728374, 4, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/lanman.c:1508(api_RNetServerEnum2) domain [WORKGROUP] [2014/11/04 23:32:49.728392, 4, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/lanman.c:1232(get_session_info) Can't open /tmp/qemu-smb.20439-0/browse.dat - Permission denied [2014/11/04 23:32:49.728413, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/lanman.c:1585(api_RNetServerEnum2) NetServerEnum2 domain = WORKGROUP uLevel=1 counted=0 total=0 [2014/11/04 23:32:49.728432, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/ipc.c:62(copy_trans_params_and_data) copy_trans_params_and_data: params[0..8] data[0..0] (align 0) [2014/11/04 23:32:49.728447, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.728457, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/lib/util.c:178(show_msg) size=64 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=7850 smb_pid=150 smb_uid=26469 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 64 (0x40) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=9 [2014/11/04 23:32:49.728580, 10, pid=20467, effective(99, 99), real(99, 0)] ../lib/util/util.c:556(dump_data) [0000] 00 00 00 00 00 00 00 00 00 ........ . [2014/11/04 23:32:49.729401, 10, pid=20467, effective(99, 99), real(99, 0)] ../source3/lib/util_sock.c:337(read_smb_length_return_keepalive) got smb length of 35 [2014/11/04 23:32:49.729427, 6, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1800(process_smb) got message type 0x0 of len 0x23 [2014/11/04 23:32:49.729444, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1802(process_smb) Transaction 6 of length 39 (0 toread) [2014/11/04 23:32:49.729459, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.729468, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51267 smb_tid=7850 smb_pid=150 smb_uid=26469 smb_mid=6 smt_wct=0 smb_bcc=0 [2014/11/04 23:32:49.729541, 10, pid=20467, effective(99, 99), real(99, 0)] ../lib/util/util.c:556(dump_data) [2014/11/04 23:32:49.729552, 3, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/process.c:1405(switch_message) switch message SMBtdis (pid 20467) conn 0x7f6658d24b10 [2014/11/04 23:32:49.729569, 4, pid=20467, effective(99, 99), real(99, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.729584, 5, pid=20467, effective(99, 99), real(99, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.729599, 5, pid=20467, effective(99, 99), real(99, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.729623, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.729643, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb [2014/11/04 23:32:49.729658, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb 2: 3: [2014/11/04 23:32:49.729675, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 33EED3AB [2014/11/04 23:32:49.729694, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f6658d24940 [2014/11/04 23:32:49.729721, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 33EED3AB [2014/11/04 23:32:49.729739, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_tcon_global.tdb [2014/11/04 23:32:49.729754, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.729777, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.729793, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.729807, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.729828, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.729843, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:1130(close_cnum) arch (ipv4:127.0.0.1:43898) closed connection to service IPC$ [2014/11/04 23:32:49.729887, 4, pid=20467, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:838(vfs_ChDir) vfs_ChDir to / [2014/11/04 23:32:49.729910, 4, pid=20467, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:849(vfs_ChDir) vfs_ChDir got / [2014/11/04 23:32:49.729928, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.729943, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.729957, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.729978, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.730002, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2014/11/04 23:32:49.730013, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=7850 smb_pid=150 smb_uid=26469 smb_mid=6 smt_wct=0 smb_bcc=0 [2014/11/04 23:32:49.730083, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/util.c:556(dump_data) [2014/11/04 23:32:49.733220, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:137(read_fd_with_timeout) read_fd_with_timeout: blocking read. EOF from client. [2014/11/04 23:32:49.733249, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:487(receive_smb_talloc) receive_smb_raw_talloc failed for client ipv4:127.0.0.1:43898 read error = NT_STATUS_END_OF_FILE. [2014/11/04 23:32:49.733273, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.733289, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.733304, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.733327, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.733350, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb [2014/11/04 23:32:49.733367, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb 2: 3: [2014/11/04 23:32:49.733384, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key A35903B9 [2014/11/04 23:32:49.733404, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f6658d25130 [2014/11/04 23:32:49.733427, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key A35903B9 [2014/11/04 23:32:49.733443, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /tmp/qemu-smb.20439-0/smbXsrv_session_global.tdb [2014/11/04 23:32:49.733458, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.733483, 4, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2014/11/04 23:32:49.733499, 5, pid=20467, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2014/11/04 23:32:49.733513, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:629(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2014/11/04 23:32:49.733534, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2014/11/04 23:32:49.733553, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:187(dbwrap_check_lock_order) check lock order 2 for /tmp/qemu-smb.20439-0/serverid.tdb [2014/11/04 23:32:49.733568, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2:/tmp/qemu-smb.20439-0/serverid.tdb 3: [2014/11/04 23:32:49.733585, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key F34F000000000000FFFF [2014/11/04 23:32:49.733602, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7f6658d31e20 [2014/11/04 23:32:49.733624, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key F34F000000000000FFFF [2014/11/04 23:32:49.733641, 5, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /tmp/qemu-smb.20439-0/serverid.tdb [2014/11/04 23:32:49.733656, 10, pid=20467, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2014/11/04 23:32:49.733704, 5, pid=20467, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:340(messaging_deregister) Deregistering messaging pointer for type 1536 - private_data=0x7f6658d013e0 [2014/11/04 23:32:49.733764, 3, pid=20467, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:221(exit_server_common) Server exit (failed to receive smb request) [2014/11/04 23:32:49.733791, 0, pid=20467, effective(0, 0), real(0, 0)] ../lib/util/pidfile.c:153(pidfile_unlink) Failed to delete pidfile /tmp/qemu-smb.20439-0/smbd.pid. Error was No such file or directory