[2015/06/24 03:46:16.675008, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2152(lp_file_list_changed) lp_file_list_changed() file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Mon Jun 15 16:18:27 2015 file /etc/samba//smb.conf -> /etc/samba//smb.conf last mod_time: Tue Jun 23 16:03:34 2015 [2015/06/24 03:46:16.675136, 3, pid=32134, effective(0, 0), real(0, 0), class=locking] ../source3/smbd/oplock.c:1306(init_oplocks) init_oplocks: initializing messages. [2015/06/24 03:46:16.675157, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:384(messaging_register) Registering messaging pointer for type 774 - private_data=0x7fe240bb6000 [2015/06/24 03:46:16.675176, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:384(messaging_register) Registering messaging pointer for type 778 - private_data=0x7fe240bb6000 [2015/06/24 03:46:16.675193, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:384(messaging_register) Registering messaging pointer for type 770 - private_data=0x7fe240bb6000 [2015/06/24 03:46:16.675208, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:384(messaging_register) Registering messaging pointer for type 787 - private_data=0x7fe240bb6000 [2015/06/24 03:46:16.675224, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:384(messaging_register) Registering messaging pointer for type 779 - private_data=0x7fe240bb6000 [2015/06/24 03:46:16.675242, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:384(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2015/06/24 03:46:16.675258, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:399(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2015/06/24 03:46:16.675291, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:431(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2015/06/24 03:46:16.675309, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:384(messaging_register) Registering messaging pointer for type 16 - private_data=0x7fe240bb6000 [2015/06/24 03:46:16.675325, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:431(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x7fe240ba34d0 [2015/06/24 03:46:16.675341, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:384(messaging_register) Registering messaging pointer for type 33 - private_data=0x7fe240bb6000 [2015/06/24 03:46:16.675357, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:431(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2015/06/24 03:46:16.675373, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:384(messaging_register) Registering messaging pointer for type 790 - private_data=0x7fe240bb6000 [2015/06/24 03:46:16.675389, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:431(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2015/06/24 03:46:16.675405, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:431(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2015/06/24 03:46:16.675420, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:384(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2015/06/24 03:46:16.675455, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(keepalive) 0x7fe240baaf80 [2015/06/24 03:46:16.675475, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(deadtime) 0x7fe240bc0160 [2015/06/24 03:46:16.675494, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x7fe240bbf8a0 [2015/06/24 03:46:16.675579, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:369(read_smb_length_return_keepalive) got smb length of 133 [2015/06/24 03:46:16.675630, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1877(process_smb) got message type 0x0 of len 0x85 [2015/06/24 03:46:16.675651, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1879(process_smb) Transaction 0 of length 137 (0 toread) [2015/06/24 03:46:16.675675, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:16.675688, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2015/06/24 03:46:16.675744, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [0020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [0030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [0040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [0050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [0060] 32 00 2. [2015/06/24 03:46:16.675916, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1489(switch_message) switch message SMBnegprot (pid 32134) conn 0x0 [2015/06/24 03:46:16.675947, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:16.675969, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:16.675991, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:16.676027, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2015/06/24 03:46:16.676583, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:575(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2015/06/24 03:46:16.676618, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:575(reply_negprot) Requested protocol [LANMAN1.0] [2015/06/24 03:46:16.676637, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:575(reply_negprot) Requested protocol [Windows for Workgroups 3.1a] [2015/06/24 03:46:16.676655, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:575(reply_negprot) Requested protocol [LM1.2X002] [2015/06/24 03:46:16.676671, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:575(reply_negprot) Requested protocol [LANMAN2.1] [2015/06/24 03:46:16.676688, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:575(reply_negprot) Requested protocol [NT LM 0.12] [2015/06/24 03:46:16.676712, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1291(set_remote_arch) set_remote_arch: Client arch is 'Win2K' [2015/06/24 03:46:16.676750, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2152(lp_file_list_changed) lp_file_list_changed() file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Mon Jun 15 16:18:27 2015 file /etc/samba//smb.conf -> /etc/samba//smb.conf last mod_time: Tue Jun 23 16:03:34 2015 [2015/06/24 03:46:16.676804, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 2 for /usr/var/samba/lock/serverid.tdb [2015/06/24 03:46:16.676820, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2:/usr/var/samba/lock/serverid.tdb 3: [2015/06/24 03:46:16.676851, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key 867D000000000000FFFF [2015/06/24 03:46:16.676875, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240bc3bc0 [2015/06/24 03:46:16.676909, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key 867D000000000000FFFF [2015/06/24 03:46:16.676931, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/var/samba/lock/serverid.tdb [2015/06/24 03:46:16.676947, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:16.676991, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2152(lp_file_list_changed) lp_file_list_changed() file /etc/samba/shares.conf -> /etc/samba/shares.conf last mod_time: Mon Jun 15 16:18:27 2015 file /etc/samba//smb.conf -> /etc/samba//smb.conf last mod_time: Tue Jun 23 16:03:34 2015 [2015/06/24 03:46:16.677166, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2015/06/24 03:46:16.677211, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam [2015/06/24 03:46:16.677234, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam' [2015/06/24 03:46:16.677250, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2015/06/24 03:46:16.677280, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2015/06/24 03:46:16.677300, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend unix [2015/06/24 03:46:16.677318, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'unix' [2015/06/24 03:46:16.677334, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend winbind [2015/06/24 03:46:16.677350, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'winbind' [2015/06/24 03:46:16.677365, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend wbc [2015/06/24 03:46:16.677382, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'wbc' [2015/06/24 03:46:16.677398, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend trustdomain [2015/06/24 03:46:16.677418, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'trustdomain' [2015/06/24 03:46:16.677433, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend ntdomain [2015/06/24 03:46:16.677448, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'ntdomain' [2015/06/24 03:46:16.677466, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend guest [2015/06/24 03:46:16.677490, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'guest' [2015/06/24 03:46:16.677509, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend samba4 [2015/06/24 03:46:16.677524, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'samba4' [2015/06/24 03:46:16.677539, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2015/06/24 03:46:16.677560, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2015/06/24 03:46:16.677579, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2015/06/24 03:46:16.677596, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2015/06/24 03:46:16.677612, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2015/06/24 03:46:16.677628, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2015/06/24 03:46:16.677646, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2015/06/24 03:46:16.677662, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2015/06/24 03:46:16.679449, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:885(gensec_register) GENSEC backend 'gssapi_spnego' registered [2015/06/24 03:46:16.679489, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:885(gensec_register) GENSEC backend 'gssapi_krb5' registered [2015/06/24 03:46:16.679510, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:885(gensec_register) GENSEC backend 'gssapi_krb5_sasl' registered [2015/06/24 03:46:16.687980, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:885(gensec_register) GENSEC backend 'sasl-DIGEST-MD5' registered [2015/06/24 03:46:16.688015, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:885(gensec_register) GENSEC backend 'spnego' registered [2015/06/24 03:46:16.688037, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:885(gensec_register) GENSEC backend 'schannel' registered [2015/06/24 03:46:16.688056, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:885(gensec_register) GENSEC backend 'naclrpc_as_system' registered [2015/06/24 03:46:16.688075, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:885(gensec_register) GENSEC backend 'sasl-EXTERNAL' registered [2015/06/24 03:46:16.688094, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:885(gensec_register) GENSEC backend 'ntlmssp' registered [2015/06/24 03:46:16.688113, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:885(gensec_register) GENSEC backend 'http_basic' registered [2015/06/24 03:46:16.688132, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:885(gensec_register) GENSEC backend 'http_ntlm' registered [2015/06/24 03:46:16.688153, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:885(gensec_register) GENSEC backend 'krb5' registered [2015/06/24 03:46:16.688178, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:885(gensec_register) GENSEC backend 'fake_gssapi_krb5' registered [2015/06/24 03:46:16.688359, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC mechanism spnego [2015/06/24 03:46:16.688451, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC submechanism gse_krb5 [2015/06/24 03:46:16.797734, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/librpc/crypto/gse_krb5.c:279(fill_mem_keytab_from_secrets) ../source3/librpc/crypto/gse_krb5.c:279: no prev machine password [2015/06/24 03:46:16.797971, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:395(reply_nt1) using SPNEGO [2015/06/24 03:46:16.797986, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:683(reply_negprot) Selected protocol NT LM 0.12 [2015/06/24 03:46:16.797995, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:690(reply_negprot) negprot index=5 [2015/06/24 03:46:16.798006, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:16.798012, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=181 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=34304 (0x8600) smb_vwv[ 8]= 125 (0x7D) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=19072 (0x4A80) smb_vwv[12]=26038 (0x65B6) smb_vwv[13]= 8079 (0x1F8F) smb_vwv[14]=53422 (0xD0AE) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=112 [2015/06/24 03:46:16.798081, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 73 74 6F 72 61 67 65 2D 30 33 00 00 00 00 00 00 storage- 03...... [0010] 60 5E 06 06 2B 06 01 05 05 02 A0 54 30 52 A0 24 `^..+... ...T0R.$ [0020] 30 22 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0"..*.H. .......* [0030] 86 48 86 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H...... ..+..... [0040] 37 02 02 0A A3 2A 30 28 A0 26 1B 24 6E 6F 74 5F 7....*0( .&.$not_ [0050] 64 65 66 69 6E 65 64 5F 69 6E 5F 52 46 43 34 31 defined_ in_RFC41 [0060] 37 38 40 70 6C 65 61 73 65 5F 69 67 6E 6F 72 65 78@pleas e_ignore [2015/06/24 03:46:16.934650, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:369(read_smb_length_return_keepalive) got smb length of 1548 [2015/06/24 03:46:16.934700, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1877(process_smb) got message type 0x0 of len 0x60c [2015/06/24 03:46:16.934719, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1879(process_smb) Transaction 1 of length 1552 (0 toread) [2015/06/24 03:46:16.934736, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:16.934746, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1548 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=16256 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1548 (0x60C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1387 (0x56B) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=1489 [2015/06/24 03:46:16.934847, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 60 82 05 67 06 06 2B 06 01 05 05 02 A0 82 05 5B `..g..+. .......[ [0010] 30 82 05 57 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..W.$0" ..*.H... [0020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [0030] 2B 06 01 04 01 82 37 02 02 0A A2 82 05 2D 04 82 +.....7. .....-.. [0040] 05 29 60 82 05 25 06 09 2A 86 48 86 F7 12 01 02 .)`..%.. *.H..... [0050] 02 01 00 6E 82 05 14 30 82 05 10 A0 03 02 01 05 ...n...0 ........ [0060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [0070] 04 25 61 82 04 21 30 82 04 1D A0 03 02 01 05 A1 .%a..!0. ........ [0080] 1D 1B 1B 4D 55 43 2E 4D 45 44 49 5A 49 4E 49 53 ...MUC.M EDIZINIS [0090] 43 48 45 2D 47 45 4E 45 54 49 4B 2E 44 45 A2 28 CHE-GENE TIK.DE.( [00A0] 30 26 A0 03 02 01 02 A1 1F 30 1D 1B 04 63 69 66 0&...... .0...cif [00B0] 73 1B 15 73 74 6F 72 61 67 65 2D 30 33 2E 6D 72 s..stora ge-03.mr [00C0] 2E 6C 66 6D 67 2E 64 65 A3 82 03 CB 30 82 03 C7 .lfmg.de ....0... [00D0] A0 03 02 01 17 A1 03 02 01 01 A2 82 03 B9 04 82 ........ ........ [00E0] 03 B5 DA 46 79 64 08 91 D9 BE B2 2A 17 6F 8A 68 ...Fyd.. ...*.o.h [00F0] DA AF C2 59 54 AF 5F B7 F3 71 98 B2 F3 33 3B 9A ...YT._. .q...3;. [0100] FF AA 4C 57 78 8A 52 31 F9 BE 37 82 CA 47 B2 8A ..LWx.R1 ..7..G.. [0110] 8C 3E 8C 7D FC 38 97 9C AB EC 57 B2 A7 B8 AB 1A .>.}.8.. ..W..... [0120] 2A 1F FF 37 3A 3D 47 C6 7C A2 46 C8 35 F8 07 AD *..7:=G. |.F.5... [0130] E5 A5 17 AD 4E A1 48 CE C8 06 8E 31 E9 B4 43 60 ....N.H. ...1..C` [0140] E6 14 41 77 07 A1 D4 F3 4E 7B DD 29 63 9F EF 5C ..Aw.... N{.)c..\ [0150] 14 D8 B6 A0 05 DB 33 AA DB 77 48 5C 3E CB 9B 64 ......3. .wH\>..d [0160] C1 44 05 55 F0 84 95 B6 48 A2 CC ED D3 EB 39 E9 .D.U.... H.....9. [0170] 1E 3D DD AE 41 E2 29 D4 41 B6 50 FB 04 21 AA 5C .=..A.). A.P..!.\ [0180] A6 BD 9C BB FA C7 2C 2F FE 44 F7 89 16 2E 31 C4 ......,/ .D....1. [0190] 0B C7 49 85 E0 91 3C 2D 29 7B CF B2 FD 0C AC 05 ..I...<- ){...... [01A0] 27 48 06 3C AA B0 C7 B5 6F 44 E2 2E 73 1E 45 01 'H.<.... oD..s.E. [01B0] 14 EE F6 22 E0 D7 2B 06 B0 68 2C 07 C7 AA E7 0D ..."..+. .h,..... [01C0] D0 F9 6B 03 C5 98 CA F0 13 E3 EA 91 4E 6C 93 CF ..k..... ....Nl.. [01D0] 4D 69 67 99 2E 59 40 21 05 B4 0B 30 AF 8C E0 8D Mig..Y@! ...0.... [01E0] 59 7A 17 16 A3 0F 79 86 16 9D 85 5D 09 56 2B 04 Yz....y. ...].V+. [01F0] A9 EF 71 FB 82 AF CD EF 00 E9 10 F1 49 DF 54 E0 ..q..... ....I.T. [2015/06/24 03:46:16.935538, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1489(switch_message) switch message SMBsesssetupX (pid 32134) conn 0x0 [2015/06/24 03:46:16.935559, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:16.935575, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:16.935590, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:16.935619, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2015/06/24 03:46:16.935642, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:609(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2015/06/24 03:46:16.935671, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:551(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2015/06/24 03:46:16.935693, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego) Doing spnego session setup [2015/06/24 03:46:16.935725, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego) NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2015/06/24 03:46:16.935751, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1291(set_remote_arch) set_remote_arch: Client arch is 'WinXP' [2015/06/24 03:46:16.935788, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:16.935807, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:16.935828, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key 8C6328CB [2015/06/24 03:46:16.935854, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240bcfdd0 [2015/06/24 03:46:16.936098, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:882(smbXsrv_session_global_store) [2015/06/24 03:46:16.936120, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:884(smbXsrv_session_global_store) smbXsrv_session_global_store: key '8C6328CB' stored [2015/06/24 03:46:16.936142, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x8c6328cb (2355308747) session_wire_id : 0x00000000000026e6 (9958) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * [2015/06/24 03:46:16.936441, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key 8C6328CB [2015/06/24 03:46:16.936463, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:16.936480, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:16.936497, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1276(smbXsrv_session_create) [2015/06/24 03:46:16.936508, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1284(smbXsrv_session_create) smbXsrv_session_create: global_id (0x8c6328cb) stored [2015/06/24 03:46:16.936524, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x000026e6 (9958) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x8c6328cb (2355308747) session_wire_id : 0x00000000000026e6 (9958) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Jun 24 03:46:17 2015 CEST nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) gensec : NULL compat : NULL tcon_table : NULL [2015/06/24 03:46:16.936870, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2015/06/24 03:46:16.936895, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2015/06/24 03:46:16.936913, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2015/06/24 03:46:16.936929, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2015/06/24 03:46:16.936949, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2015/06/24 03:46:16.936965, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2015/06/24 03:46:16.936982, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2015/06/24 03:46:16.937005, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2015/06/24 03:46:16.937021, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2015/06/24 03:46:16.937088, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC mechanism spnego [2015/06/24 03:46:16.937114, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:16.937135, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:16.937151, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:16.937166, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:16.937181, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:16.937329, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC submechanism gse_krb5 [2015/06/24 03:46:17.050750, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/librpc/crypto/gse_krb5.c:279(fill_mem_keytab_from_secrets) ../source3/librpc/crypto/gse_krb5.c:279: no prev machine password [2015/06/24 03:46:17.051077, 1, pid=32134, effective(0, 0), real(0, 0)] ../source3/librpc/crypto/gse.c:466(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/storage-03.mr.lfmg.de@MUC.MEDIZINISCHE-GENETIK.DE(kvno 1) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] [2015/06/24 03:46:17.051101, 1, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/spnego.c:576(gensec_spnego_parse_negTokenInit) SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE [2015/06/24 03:46:17.051121, 2, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/spnego.c:746(gensec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_LOGON_FAILURE [2015/06/24 03:46:17.051149, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.051163, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.051173, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:17.051185, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key 8C6328CB [2015/06/24 03:46:17.051199, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240bd2ec0 [2015/06/24 03:46:17.051221, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key 8C6328CB [2015/06/24 03:46:17.051233, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.051242, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:17.051270, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/error.c:82(error_packet_set) NT error packet at ../source3/smbd/sesssetup.c(267) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2015/06/24 03:46:17.051293, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.051300, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=16256 smt_wct=0 smb_bcc=0 [2015/06/24 03:46:17.051332, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [2015/06/24 03:46:17.051960, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:369(read_smb_length_return_keepalive) got smb length of 236 [2015/06/24 03:46:17.051988, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1877(process_smb) got message type 0x0 of len 0xec [2015/06/24 03:46:17.052000, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1879(process_smb) Transaction 2 of length 240 (0 toread) [2015/06/24 03:46:17.052010, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.052017, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=16320 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2015/06/24 03:46:17.052077, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* [0020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 07 82 .(NTLMSS P....... [0030] 08 A2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [0050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [0060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [0070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 33 .e. .P.a .c.k. .3 [0080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [0090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [00A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [00B0] 00 . [2015/06/24 03:46:17.052228, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1489(switch_message) switch message SMBsesssetupX (pid 32134) conn 0x0 [2015/06/24 03:46:17.052239, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.052249, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.052257, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.052280, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2015/06/24 03:46:17.052291, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:609(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2015/06/24 03:46:17.052300, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:551(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2015/06/24 03:46:17.052315, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego) Doing spnego session setup [2015/06/24 03:46:17.052328, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego) NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2015/06/24 03:46:17.052342, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.052353, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:17.052366, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key AF7BE7EC [2015/06/24 03:46:17.052379, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240bcff60 [2015/06/24 03:46:17.052416, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:882(smbXsrv_session_global_store) [2015/06/24 03:46:17.052425, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:884(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'AF7BE7EC' stored [2015/06/24 03:46:17.052437, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xaf7be7ec (2944133100) session_wire_id : 0x000000000000ab74 (43892) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * [2015/06/24 03:46:17.052567, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key AF7BE7EC [2015/06/24 03:46:17.052579, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.052589, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:17.052599, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1276(smbXsrv_session_create) [2015/06/24 03:46:17.052610, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1284(smbXsrv_session_create) smbXsrv_session_create: global_id (0xaf7be7ec) stored [2015/06/24 03:46:17.052620, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x0000ab74 (43892) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xaf7be7ec (2944133100) session_wire_id : 0x000000000000ab74 (43892) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Jun 24 03:46:17 2015 CEST nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) gensec : NULL compat : NULL tcon_table : NULL [2015/06/24 03:46:17.052801, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2015/06/24 03:46:17.052815, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2015/06/24 03:46:17.052826, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2015/06/24 03:46:17.052835, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2015/06/24 03:46:17.052844, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2015/06/24 03:46:17.052858, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2015/06/24 03:46:17.052868, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2015/06/24 03:46:17.052878, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2015/06/24 03:46:17.052887, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2015/06/24 03:46:17.052923, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC mechanism spnego [2015/06/24 03:46:17.052936, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.052946, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.052955, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.052964, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.052973, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.053017, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2015/06/24 03:46:17.053067, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xa2088207 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_56 [2015/06/24 03:46:17.053138, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0xa2088207 (2718466567) 1: NTLMSSP_NEGOTIATE_UNICODE 1: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : NULL WorkstationLen : 0x0000 (0) WorkstationMaxLen : 0x0000 (0) Workstation : NULL Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x0a28 (2600) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2015/06/24 03:46:17.053390, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x0006 (6) TargetNameMaxLen : 0x0006 (6) TargetName : * TargetName : 'MUC' NegotiateFlags : 0xa2898205 (2726920709) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 1: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 ServerChallenge : 48854f6f40c12f7c Reserved : 0000000000000000 TargetInfoLen : 0x006c (108) TargetNameInfoMaxLen : 0x006c (108) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x0006 (6) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'MUC' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0014 (20) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'STORAGE-03' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0014 (20) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'mr.lfmg.de' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x002a (42) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'storage-03.mr.lfmg.de' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1) ProductBuild : 0x0000 (0) Reserved : 000000 NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF) [2015/06/24 03:46:17.053685, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.053718, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.053727, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=300 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=43892 smb_mid=16320 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 201 (0xC9) smb_bcc=257 [2015/06/24 03:46:17.053769, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] A1 81 C6 30 81 C3 A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 AD 04 81 AA 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 06 00 06 00 38 TLMSSP.. .......8 [0030] 00 00 00 05 82 89 A2 48 85 4F 6F 40 C1 2F 7C 00 .......H .Oo@./|. [0040] 00 00 00 00 00 00 00 6C 00 6C 00 3E 00 00 00 06 .......l .l.>.... [0050] 01 00 00 00 00 00 0F 4D 00 55 00 43 00 02 00 06 .......M .U.C.... [0060] 00 4D 00 55 00 43 00 01 00 14 00 53 00 54 00 4F .M.U.C.. ...S.T.O [0070] 00 52 00 41 00 47 00 45 00 2D 00 30 00 33 00 04 .R.A.G.E .-.0.3.. [0080] 00 14 00 6D 00 72 00 2E 00 6C 00 66 00 6D 00 67 ...m.r.. .l.f.m.g [0090] 00 2E 00 64 00 65 00 03 00 2A 00 73 00 74 00 6F ...d.e.. .*.s.t.o [00A0] 00 72 00 61 00 67 00 65 00 2D 00 30 00 33 00 2E .r.a.g.e .-.0.3.. [00B0] 00 6D 00 72 00 2E 00 6C 00 66 00 6D 00 67 00 2E .m.r...l .f.m.g.. [00C0] 00 64 00 65 00 00 00 00 00 57 00 69 00 6E 00 64 .d.e.... .W.i.n.d [00D0] 00 6F 00 77 00 73 00 20 00 36 00 2E 00 31 00 00 .o.w.s. .6...1.. [00E0] 00 53 00 61 00 6D 00 62 00 61 00 20 00 34 00 2E .S.a.m.b .a. .4.. [00F0] 00 32 00 2E 00 32 00 00 00 4D 00 55 00 43 00 00 .2...2.. .M.U.C.. [0100] 00 . [2015/06/24 03:46:17.089417, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:369(read_smb_length_return_keepalive) got smb length of 318 [2015/06/24 03:46:17.089445, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1877(process_smb) got message type 0x0 of len 0x13e [2015/06/24 03:46:17.089457, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1879(process_smb) Transaction 3 of length 322 (0 toread) [2015/06/24 03:46:17.089467, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.089473, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=318 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=43892 smb_mid=16384 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 318 (0x13E) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 156 (0x9C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=259 [2015/06/24 03:46:17.089533, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] A1 81 99 30 81 96 A2 81 93 04 81 90 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 60 00 00 00 SSP..... ....`... [0020] 18 00 18 00 78 00 00 00 00 00 00 00 48 00 00 00 ....x... ....H... [0030] 02 00 02 00 48 00 00 00 16 00 16 00 4A 00 00 00 ....H... ....J... [0040] 00 00 00 00 90 00 00 00 05 82 88 A2 05 01 28 0A ........ ......(. [0050] 00 00 00 0F 40 00 49 00 4D 00 4D 00 55 00 4E 00 ....@.I. M.M.U.N. [0060] 42 00 49 00 4F 00 2D 00 31 00 31 00 10 D7 C3 3C B.I.O.-. 1.1....< [0070] 46 70 A7 7C 00 00 00 00 00 00 00 00 00 00 00 00 Fp.|.... ........ [0080] 00 00 00 00 3C E1 1F 1E 6A 3A 0F 3C 35 07 AD 68 ....<... j:.<5..h [0090] 96 78 95 A3 E0 52 15 4A 27 0F B6 32 00 57 00 69 .x...R.J '..2.W.i [00A0] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [00B0] 00 30 00 32 00 20 00 53 00 65 00 72 00 76 00 69 .0.2. .S .e.r.v.i [00C0] 00 63 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 .c.e. .P .a.c.k. [00D0] 00 33 00 20 00 32 00 36 00 30 00 30 00 00 00 57 .3. .2.6 .0.0...W [00E0] 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 .i.n.d.o .w.s. .2 [00F0] 00 30 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 .0.0.2. .5...1.. [0100] 00 00 00 ... [2015/06/24 03:46:17.089751, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1489(switch_message) switch message SMBsesssetupX (pid 32134) conn 0x0 [2015/06/24 03:46:17.089767, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.089777, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.089786, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.089803, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2015/06/24 03:46:17.089813, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:609(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2015/06/24 03:46:17.089823, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:551(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2015/06/24 03:46:17.089832, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego) Doing spnego session setup [2015/06/24 03:46:17.089843, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego) NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2015/06/24 03:46:17.089854, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.089864, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.089873, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.089882, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.089890, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.089945, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 10d7c33c4670a77c00000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 3ce11f1e6a3a0f3c3507ad68967895a3e052154a270fb632 DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : * DomainName : '' UserNameLen : 0x0002 (2) UserNameMaxLen : 0x0002 (2) UserName : * UserName : '@' WorkstationLen : 0x0016 (22) WorkstationMaxLen : 0x0016 (22) Workstation : * Workstation : 'IMMUNBIO-11' EncryptedRandomSessionKeyLen: 0x0000 (0) EncryptedRandomSessionKeyMaxLen: 0x0000 (0) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=0 NegotiateFlags : 0xa2888205 (2726855173) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x0a28 (2600) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2015/06/24 03:46:17.090202, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:359(ntlmssp_server_preauth) Got user=[@] domain=[] workstation=[IMMUNBIO-11] len1=24 len2=24 [2015/06/24 03:46:17.090222, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:124(auth3_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2015/06/24 03:46:17.090233, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:125(auth3_set_challenge) challenge is: [2015/06/24 03:46:17.090242, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] C5 8E 64 1F CD 8F C0 50 ..d....P [2015/06/24 03:46:17.090278, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3647(lp_load_ex) lp_load_ex: refreshing parameters [2015/06/24 03:46:17.090319, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1234(free_param_opts) Freeing parametrics: [2015/06/24 03:46:17.090472, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:564(init_globals) Initialising global parameters [2015/06/24 03:46:17.090641, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2597(lp_do_section) Processing section "[global]" doing parameter netbios name = storage-03 doing parameter server string = doing parameter workgroup = MUC doing parameter security = ADS doing parameter realm = MUC.MEDIZINISCHE-GENETIK.DE doing parameter encrypt passwords = yes doing parameter interfaces = localhost eth0 doing parameter bind interfaces only = true doing parameter log file = /var/log/samba/%m.log doing parameter debug pid = yes doing parameter log level = 10 [2015/06/24 03:46:17.090777, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 doing parameter max log size = 50000 doing parameter lock directory = /usr/var/samba/lock/ doing parameter state directory = /usr/var/samba/state/ doing parameter cache directory = /usr/var/samba/cache/ doing parameter local master = no doing parameter domain master = no doing parameter preferred master = no doing parameter veto files = /.bash_history/Platform.ini/ doing parameter delete veto files = yes doing parameter wins server = 192.168.29.2 doing parameter name resolve order = wins bcast host doing parameter acl allow execute always = yes doing parameter unix extensions = yes doing parameter use sendfile = yes doing parameter guest account = nobody doing parameter panic action = "/usr/local/bin/panic-action %d" doing parameter load printers = no doing parameter idmap config *:backend = tdb doing parameter idmap config *:range = 70001-80000 doing parameter idmap config MUC:backend = ad doing parameter idmap config MUC:schema_mode = rfc2307 doing parameter idmap config MUC:range = 500-40000 doing parameter winbind nss info = rfc2307 doing parameter winbind expand groups = 2 doing parameter winbind trusted domains only = no doing parameter winbind use default domain = yes doing parameter winbind enum users = yes doing parameter winbind enum groups = yes doing parameter map archive = no doing parameter map system = no doing parameter map hidden = no doing parameter admin users = MUC\Administrator doing parameter writeable = yes doing parameter inherit permissions = yes doing parameter include = /etc/samba/shares.conf [2015/06/24 03:46:17.091743, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[AcronisImages]" doing parameter comment = Acronis Workstation Backups doing parameter path = /srv/samba/AcronisImages doing parameter browsable = yes doing parameter force create mode = 0660 doing parameter force directory mode = 770 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.091901, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[AppleBackups]" doing parameter comment = Apple Backups doing parameter path = /srv/samba/AppleBackups doing parameter browsable = yes doing parameter force create mode = 0640 doing parameter force directory mode = 750 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.092040, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[DSSImages]" doing parameter comment = Drive SnapShot Backups doing parameter path = /srv/samba/DSSImages/ doing parameter browsable = yes doing parameter force create mode = 0660 doing parameter force directory mode = 770 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.092210, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3688(lp_load_ex) pm_process() returned Yes [2015/06/24 03:46:17.092240, 7, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3995(lp_servicenumber) lp_servicenumber: couldn't find homes [2015/06/24 03:46:17.092274, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1495(lp_add_ipc) adding IPC service [2015/06/24 03:46:17.092326, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:116(make_user_info_map) Mapping user []\[@] from workstation [IMMUNBIO-11] [2015/06/24 03:46:17.092366, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:138(make_user_info_map) Mapped domain from [] to [STORAGE-03] for user [@] from workstation [IMMUNBIO-11] [2015/06/24 03:46:17.092385, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:62(make_user_info) attempting to make a user_info for @ (@) [2015/06/24 03:46:17.092404, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:70(make_user_info) making strings for @'s user_info struct [2015/06/24 03:46:17.092424, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:108(make_user_info) making blobs for @'s user_info struct [2015/06/24 03:46:17.092440, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:159(make_user_info) made a user_info for @ (@) [2015/06/24 03:46:17.092457, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:178(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[@]@[IMMUNBIO-11] with the new password interface [2015/06/24 03:46:17.092474, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:181(auth_check_ntlm_password) check_ntlm_password: mapped user is: [STORAGE-03]\[@]@[IMMUNBIO-11] [2015/06/24 03:46:17.092489, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:190(auth_check_ntlm_password) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2015/06/24 03:46:17.092504, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:192(auth_check_ntlm_password) challenge is: [2015/06/24 03:46:17.092518, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] C5 8E 64 1F CD 8F C0 50 ..d....P [2015/06/24 03:46:17.092552, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:44(check_guest_security) Check auth for: [@] [2015/06/24 03:46:17.092567, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: guest had nothing to say [2015/06/24 03:46:17.092585, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth) Check auth for: [@] [2015/06/24 03:46:17.092604, 8, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1205(is_myname) is_myname("STORAGE-03") returns 1 [2015/06/24 03:46:17.092633, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2015/06/24 03:46:17.092651, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2015/06/24 03:46:17.092666, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2015/06/24 03:46:17.092689, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.092705, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.092752, 5, pid=32134, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_@ [2015/06/24 03:46:17.092779, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.092795, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/check_samsec.c:400(check_sam_security) check_sam_security: Couldn't find user '@' in passdb. [2015/06/24 03:46:17.092814, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:252(auth_check_ntlm_password) check_ntlm_password: sam authentication for user [@] FAILED with error NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.092836, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:50(check_winbind_security) Check auth for: [@] [2015/06/24 03:46:17.092853, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:60(check_winbind_security) check_winbind_security: Not using winbind, requested domain [STORAGE-03] was for this SAM. [2015/06/24 03:46:17.092868, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: winbind had nothing to say [2015/06/24 03:46:17.092884, 2, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:315(auth_check_ntlm_password) check_ntlm_password: Authentication for user [@] -> [@] FAILED with error NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.092900, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:188(auth3_check_password) Checking NTLMSSP password for \@ failed: NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.092921, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:455(ntlmssp_server_check_password) ../auth/ntlmssp/ntlmssp_server.c:455: Checking NTLMSSP password for \@ failed: NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.092941, 2, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/spnego.c:746(gensec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.092971, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.092990, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.093007, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:17.093028, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key AF7BE7EC [2015/06/24 03:46:17.093050, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240bd40e0 [2015/06/24 03:46:17.093083, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key AF7BE7EC [2015/06/24 03:46:17.093102, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.093118, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:17.093148, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/error.c:82(error_packet_set) NT error packet at ../source3/smbd/sesssetup.c(267) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2015/06/24 03:46:17.093176, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.093188, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=43892 smb_mid=16384 smt_wct=0 smb_bcc=0 [2015/06/24 03:46:17.093241, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [2015/06/24 03:46:17.096778, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:369(read_smb_length_return_keepalive) got smb length of 236 [2015/06/24 03:46:17.096825, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1877(process_smb) got message type 0x0 of len 0xec [2015/06/24 03:46:17.096845, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1879(process_smb) Transaction 4 of length 240 (0 toread) [2015/06/24 03:46:17.096861, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.096871, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=16448 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2015/06/24 03:46:17.096973, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* [0020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 07 82 .(NTLMSS P....... [0030] 08 A2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [0050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [0060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [0070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 33 .e. .P.a .c.k. .3 [0080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [0090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [00A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [00B0] 00 . [2015/06/24 03:46:17.097224, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1489(switch_message) switch message SMBsesssetupX (pid 32134) conn 0x0 [2015/06/24 03:46:17.097242, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.097258, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.097285, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.097311, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2015/06/24 03:46:17.097328, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:609(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2015/06/24 03:46:17.097343, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:551(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2015/06/24 03:46:17.097369, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego) Doing spnego session setup [2015/06/24 03:46:17.097397, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego) NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2015/06/24 03:46:17.097421, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.097438, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:17.097459, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key 004C1DC3 [2015/06/24 03:46:17.097482, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240bbeb10 [2015/06/24 03:46:17.097567, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:882(smbXsrv_session_global_store) [2015/06/24 03:46:17.097586, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:884(smbXsrv_session_global_store) smbXsrv_session_global_store: key '004C1DC3' stored [2015/06/24 03:46:17.097605, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x004c1dc3 (4988355) session_wire_id : 0x000000000000564a (22090) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * [2015/06/24 03:46:17.097826, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key 004C1DC3 [2015/06/24 03:46:17.097847, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.097863, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:17.097880, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1276(smbXsrv_session_create) [2015/06/24 03:46:17.097900, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1284(smbXsrv_session_create) smbXsrv_session_create: global_id (0x004c1dc3) stored [2015/06/24 03:46:17.097916, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x0000564a (22090) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x004c1dc3 (4988355) session_wire_id : 0x000000000000564a (22090) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Jun 24 03:46:17 2015 CEST nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) gensec : NULL compat : NULL tcon_table : NULL [2015/06/24 03:46:17.098224, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2015/06/24 03:46:17.098248, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2015/06/24 03:46:17.098273, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2015/06/24 03:46:17.098292, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2015/06/24 03:46:17.098309, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2015/06/24 03:46:17.098332, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2015/06/24 03:46:17.098349, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2015/06/24 03:46:17.098367, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2015/06/24 03:46:17.098382, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2015/06/24 03:46:17.098444, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC mechanism spnego [2015/06/24 03:46:17.098466, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.098483, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.098499, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.098514, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.098529, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.098602, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2015/06/24 03:46:17.098643, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xa2088207 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_56 [2015/06/24 03:46:17.098718, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0xa2088207 (2718466567) 1: NTLMSSP_NEGOTIATE_UNICODE 1: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : NULL WorkstationLen : 0x0000 (0) WorkstationMaxLen : 0x0000 (0) Workstation : NULL Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x0a28 (2600) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2015/06/24 03:46:17.099043, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x0006 (6) TargetNameMaxLen : 0x0006 (6) TargetName : * TargetName : 'MUC' NegotiateFlags : 0xa2898205 (2726920709) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 1: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 ServerChallenge : 231283e2e48ab41b Reserved : 0000000000000000 TargetInfoLen : 0x006c (108) TargetNameInfoMaxLen : 0x006c (108) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x0006 (6) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'MUC' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0014 (20) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'STORAGE-03' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0014 (20) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'mr.lfmg.de' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x002a (42) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'storage-03.mr.lfmg.de' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1) ProductBuild : 0x0000 (0) Reserved : 000000 NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF) [2015/06/24 03:46:17.099531, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.099563, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.099575, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=300 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=22090 smb_mid=16448 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 201 (0xC9) smb_bcc=257 [2015/06/24 03:46:17.099645, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] A1 81 C6 30 81 C3 A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 AD 04 81 AA 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 06 00 06 00 38 TLMSSP.. .......8 [0030] 00 00 00 05 82 89 A2 23 12 83 E2 E4 8A B4 1B 00 .......# ........ [0040] 00 00 00 00 00 00 00 6C 00 6C 00 3E 00 00 00 06 .......l .l.>.... [0050] 01 00 00 00 00 00 0F 4D 00 55 00 43 00 02 00 06 .......M .U.C.... [0060] 00 4D 00 55 00 43 00 01 00 14 00 53 00 54 00 4F .M.U.C.. ...S.T.O [0070] 00 52 00 41 00 47 00 45 00 2D 00 30 00 33 00 04 .R.A.G.E .-.0.3.. [0080] 00 14 00 6D 00 72 00 2E 00 6C 00 66 00 6D 00 67 ...m.r.. .l.f.m.g [0090] 00 2E 00 64 00 65 00 03 00 2A 00 73 00 74 00 6F ...d.e.. .*.s.t.o [00A0] 00 72 00 61 00 67 00 65 00 2D 00 30 00 33 00 2E .r.a.g.e .-.0.3.. [00B0] 00 6D 00 72 00 2E 00 6C 00 66 00 6D 00 67 00 2E .m.r...l .f.m.g.. [00C0] 00 64 00 65 00 00 00 00 00 57 00 69 00 6E 00 64 .d.e.... .W.i.n.d [00D0] 00 6F 00 77 00 73 00 20 00 36 00 2E 00 31 00 00 .o.w.s. .6...1.. [00E0] 00 53 00 61 00 6D 00 62 00 61 00 20 00 34 00 2E .S.a.m.b .a. .4.. [00F0] 00 32 00 2E 00 32 00 00 00 4D 00 55 00 43 00 00 .2...2.. .M.U.C.. [0100] 00 . [2015/06/24 03:46:17.143032, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:369(read_smb_length_return_keepalive) got smb length of 318 [2015/06/24 03:46:17.143079, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1877(process_smb) got message type 0x0 of len 0x13e [2015/06/24 03:46:17.143098, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1879(process_smb) Transaction 5 of length 322 (0 toread) [2015/06/24 03:46:17.143114, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.143125, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=318 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=22090 smb_mid=16512 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 318 (0x13E) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 156 (0x9C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=259 [2015/06/24 03:46:17.143226, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] A1 81 99 30 81 96 A2 81 93 04 81 90 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 60 00 00 00 SSP..... ....`... [0020] 18 00 18 00 78 00 00 00 00 00 00 00 48 00 00 00 ....x... ....H... [0030] 02 00 02 00 48 00 00 00 16 00 16 00 4A 00 00 00 ....H... ....J... [0040] 00 00 00 00 90 00 00 00 05 82 88 A2 05 01 28 0A ........ ......(. [0050] 00 00 00 0F 40 00 49 00 4D 00 4D 00 55 00 4E 00 ....@.I. M.M.U.N. [0060] 42 00 49 00 4F 00 2D 00 31 00 31 00 D1 AF 05 9D B.I.O.-. 1.1..... [0070] CD FF ED 76 00 00 00 00 00 00 00 00 00 00 00 00 ...v.... ........ [0080] 00 00 00 00 A4 12 7A 0F EE B4 B1 3F BD E3 6E 8C ......z. ...?..n. [0090] 34 E9 57 10 97 2A 4B 25 75 8A 9D 86 00 57 00 69 4.W..*K% u....W.i [00A0] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [00B0] 00 30 00 32 00 20 00 53 00 65 00 72 00 76 00 69 .0.2. .S .e.r.v.i [00C0] 00 63 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 .c.e. .P .a.c.k. [00D0] 00 33 00 20 00 32 00 36 00 30 00 30 00 00 00 57 .3. .2.6 .0.0...W [00E0] 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 .i.n.d.o .w.s. .2 [00F0] 00 30 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 .0.0.2. .5...1.. [0100] 00 00 00 ... [2015/06/24 03:46:17.143603, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1489(switch_message) switch message SMBsesssetupX (pid 32134) conn 0x0 [2015/06/24 03:46:17.143624, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.143641, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.143656, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.143684, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2015/06/24 03:46:17.143701, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:609(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2015/06/24 03:46:17.143717, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:551(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2015/06/24 03:46:17.143732, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego) Doing spnego session setup [2015/06/24 03:46:17.143752, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego) NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2015/06/24 03:46:17.143778, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.143802, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.143817, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.143832, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.143846, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.143918, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : d1af059dcdffed7600000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : a4127a0feeb4b13fbde36e8c34e95710972a4b25758a9d86 DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : * DomainName : '' UserNameLen : 0x0002 (2) UserNameMaxLen : 0x0002 (2) UserName : * UserName : '@' WorkstationLen : 0x0016 (22) WorkstationMaxLen : 0x0016 (22) Workstation : * Workstation : 'IMMUNBIO-11' EncryptedRandomSessionKeyLen: 0x0000 (0) EncryptedRandomSessionKeyMaxLen: 0x0000 (0) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=0 NegotiateFlags : 0xa2888205 (2726855173) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x0a28 (2600) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2015/06/24 03:46:17.144346, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:359(ntlmssp_server_preauth) Got user=[@] domain=[] workstation=[IMMUNBIO-11] len1=24 len2=24 [2015/06/24 03:46:17.144369, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:124(auth3_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2015/06/24 03:46:17.144385, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:125(auth3_set_challenge) challenge is: [2015/06/24 03:46:17.144399, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 5C CB 22 5B 4A 97 BE 37 \."[J..7 [2015/06/24 03:46:17.144432, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3647(lp_load_ex) lp_load_ex: refreshing parameters [2015/06/24 03:46:17.144458, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1234(free_param_opts) Freeing parametrics: [2015/06/24 03:46:17.144572, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:564(init_globals) Initialising global parameters [2015/06/24 03:46:17.144723, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2597(lp_do_section) Processing section "[global]" doing parameter netbios name = storage-03 doing parameter server string = doing parameter workgroup = MUC doing parameter security = ADS doing parameter realm = MUC.MEDIZINISCHE-GENETIK.DE doing parameter encrypt passwords = yes doing parameter interfaces = localhost eth0 doing parameter bind interfaces only = true doing parameter log file = /var/log/samba/%m.log doing parameter debug pid = yes doing parameter log level = 10 [2015/06/24 03:46:17.144856, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 doing parameter max log size = 50000 doing parameter lock directory = /usr/var/samba/lock/ doing parameter state directory = /usr/var/samba/state/ doing parameter cache directory = /usr/var/samba/cache/ doing parameter local master = no doing parameter domain master = no doing parameter preferred master = no doing parameter veto files = /.bash_history/Platform.ini/ doing parameter delete veto files = yes doing parameter wins server = 192.168.29.2 doing parameter name resolve order = wins bcast host doing parameter acl allow execute always = yes doing parameter unix extensions = yes doing parameter use sendfile = yes doing parameter guest account = nobody doing parameter panic action = "/usr/local/bin/panic-action %d" doing parameter load printers = no doing parameter idmap config *:backend = tdb doing parameter idmap config *:range = 70001-80000 doing parameter idmap config MUC:backend = ad doing parameter idmap config MUC:schema_mode = rfc2307 doing parameter idmap config MUC:range = 500-40000 doing parameter winbind nss info = rfc2307 doing parameter winbind expand groups = 2 doing parameter winbind trusted domains only = no doing parameter winbind use default domain = yes doing parameter winbind enum users = yes doing parameter winbind enum groups = yes doing parameter map archive = no doing parameter map system = no doing parameter map hidden = no doing parameter admin users = MUC\Administrator doing parameter writeable = yes doing parameter inherit permissions = yes doing parameter include = /etc/samba/shares.conf [2015/06/24 03:46:17.145827, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[AcronisImages]" doing parameter comment = Acronis Workstation Backups doing parameter path = /srv/samba/AcronisImages doing parameter browsable = yes doing parameter force create mode = 0660 doing parameter force directory mode = 770 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.145972, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[AppleBackups]" doing parameter comment = Apple Backups doing parameter path = /srv/samba/AppleBackups doing parameter browsable = yes doing parameter force create mode = 0640 doing parameter force directory mode = 750 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.146105, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[DSSImages]" doing parameter comment = Drive SnapShot Backups doing parameter path = /srv/samba/DSSImages/ doing parameter browsable = yes doing parameter force create mode = 0660 doing parameter force directory mode = 770 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.146282, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3688(lp_load_ex) pm_process() returned Yes [2015/06/24 03:46:17.146320, 7, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3995(lp_servicenumber) lp_servicenumber: couldn't find homes [2015/06/24 03:46:17.146342, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1495(lp_add_ipc) adding IPC service [2015/06/24 03:46:17.146369, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:116(make_user_info_map) Mapping user []\[@] from workstation [IMMUNBIO-11] [2015/06/24 03:46:17.146387, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:138(make_user_info_map) Mapped domain from [] to [STORAGE-03] for user [@] from workstation [IMMUNBIO-11] [2015/06/24 03:46:17.146403, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:62(make_user_info) attempting to make a user_info for @ (@) [2015/06/24 03:46:17.146417, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:70(make_user_info) making strings for @'s user_info struct [2015/06/24 03:46:17.146439, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:108(make_user_info) making blobs for @'s user_info struct [2015/06/24 03:46:17.146456, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:159(make_user_info) made a user_info for @ (@) [2015/06/24 03:46:17.146470, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:178(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[@]@[IMMUNBIO-11] with the new password interface [2015/06/24 03:46:17.146487, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:181(auth_check_ntlm_password) check_ntlm_password: mapped user is: [STORAGE-03]\[@]@[IMMUNBIO-11] [2015/06/24 03:46:17.146501, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:190(auth_check_ntlm_password) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2015/06/24 03:46:17.146515, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:192(auth_check_ntlm_password) challenge is: [2015/06/24 03:46:17.146528, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 5C CB 22 5B 4A 97 BE 37 \."[J..7 [2015/06/24 03:46:17.146556, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:44(check_guest_security) Check auth for: [@] [2015/06/24 03:46:17.146570, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: guest had nothing to say [2015/06/24 03:46:17.146586, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth) Check auth for: [@] [2015/06/24 03:46:17.146601, 8, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1205(is_myname) is_myname("STORAGE-03") returns 1 [2015/06/24 03:46:17.146619, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2015/06/24 03:46:17.146634, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2015/06/24 03:46:17.146648, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2015/06/24 03:46:17.146670, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.146684, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.146717, 5, pid=32134, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_@ [2015/06/24 03:46:17.146739, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.146754, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/check_samsec.c:400(check_sam_security) check_sam_security: Couldn't find user '@' in passdb. [2015/06/24 03:46:17.146769, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:252(auth_check_ntlm_password) check_ntlm_password: sam authentication for user [@] FAILED with error NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.146788, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:50(check_winbind_security) Check auth for: [@] [2015/06/24 03:46:17.146804, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:60(check_winbind_security) check_winbind_security: Not using winbind, requested domain [STORAGE-03] was for this SAM. [2015/06/24 03:46:17.146818, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: winbind had nothing to say [2015/06/24 03:46:17.146832, 2, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:315(auth_check_ntlm_password) check_ntlm_password: Authentication for user [@] -> [@] FAILED with error NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.146847, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:188(auth3_check_password) Checking NTLMSSP password for \@ failed: NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.146864, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:455(ntlmssp_server_check_password) ../auth/ntlmssp/ntlmssp_server.c:455: Checking NTLMSSP password for \@ failed: NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.146882, 2, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/spnego.c:746(gensec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.146910, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.146928, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.146943, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:17.146963, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key 004C1DC3 [2015/06/24 03:46:17.146983, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240ba2660 [2015/06/24 03:46:17.147013, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key 004C1DC3 [2015/06/24 03:46:17.147030, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.147046, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:17.147074, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/error.c:82(error_packet_set) NT error packet at ../source3/smbd/sesssetup.c(267) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2015/06/24 03:46:17.147100, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.147111, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=22090 smb_mid=16512 smt_wct=0 smb_bcc=0 [2015/06/24 03:46:17.147162, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [2015/06/24 03:46:17.148209, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:369(read_smb_length_return_keepalive) got smb length of 236 [2015/06/24 03:46:17.148253, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1877(process_smb) got message type 0x0 of len 0xec [2015/06/24 03:46:17.148280, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1879(process_smb) Transaction 6 of length 240 (0 toread) [2015/06/24 03:46:17.148295, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.148306, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=16576 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2015/06/24 03:46:17.148400, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* [0020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 07 82 .(NTLMSS P....... [0030] 08 A2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [0050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [0060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [0070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 33 .e. .P.a .c.k. .3 [0080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [0090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [00A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [00B0] 00 . [2015/06/24 03:46:17.148639, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1489(switch_message) switch message SMBsesssetupX (pid 32134) conn 0x0 [2015/06/24 03:46:17.148656, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.148671, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.148685, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.148710, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2015/06/24 03:46:17.148726, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:609(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2015/06/24 03:46:17.148740, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:551(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2015/06/24 03:46:17.148764, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego) Doing spnego session setup [2015/06/24 03:46:17.148789, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego) NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2015/06/24 03:46:17.148814, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.148831, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:17.148850, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key 56B3DB7C [2015/06/24 03:46:17.148872, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240bbf420 [2015/06/24 03:46:17.148932, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:882(smbXsrv_session_global_store) [2015/06/24 03:46:17.148948, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:884(smbXsrv_session_global_store) smbXsrv_session_global_store: key '56B3DB7C' stored [2015/06/24 03:46:17.148965, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x56b3db7c (1454627708) session_wire_id : 0x0000000000005e5b (24155) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * [2015/06/24 03:46:17.149174, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key 56B3DB7C [2015/06/24 03:46:17.149192, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.149208, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:17.149224, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1276(smbXsrv_session_create) [2015/06/24 03:46:17.149242, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1284(smbXsrv_session_create) smbXsrv_session_create: global_id (0x56b3db7c) stored [2015/06/24 03:46:17.149258, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x00005e5b (24155) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x56b3db7c (1454627708) session_wire_id : 0x0000000000005e5b (24155) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Jun 24 03:46:17 2015 CEST nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) gensec : NULL compat : NULL tcon_table : NULL [2015/06/24 03:46:17.149559, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2015/06/24 03:46:17.149581, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2015/06/24 03:46:17.149599, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2015/06/24 03:46:17.149613, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2015/06/24 03:46:17.149628, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2015/06/24 03:46:17.149650, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2015/06/24 03:46:17.149667, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2015/06/24 03:46:17.149682, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2015/06/24 03:46:17.149697, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2015/06/24 03:46:17.149754, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC mechanism spnego [2015/06/24 03:46:17.149775, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.149790, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.149805, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.149819, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.149833, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.149900, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2015/06/24 03:46:17.149938, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xa2088207 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_56 [2015/06/24 03:46:17.150001, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0xa2088207 (2718466567) 1: NTLMSSP_NEGOTIATE_UNICODE 1: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : NULL WorkstationLen : 0x0000 (0) WorkstationMaxLen : 0x0000 (0) Workstation : NULL Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x0a28 (2600) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2015/06/24 03:46:17.150314, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x0006 (6) TargetNameMaxLen : 0x0006 (6) TargetName : * TargetName : 'MUC' NegotiateFlags : 0xa2898205 (2726920709) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 1: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 ServerChallenge : ee685e479c49f845 Reserved : 0000000000000000 TargetInfoLen : 0x006c (108) TargetNameInfoMaxLen : 0x006c (108) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x0006 (6) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'MUC' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0014 (20) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'STORAGE-03' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0014 (20) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'mr.lfmg.de' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x002a (42) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'storage-03.mr.lfmg.de' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1) ProductBuild : 0x0000 (0) Reserved : 000000 NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF) [2015/06/24 03:46:17.150776, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.150806, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.150817, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=300 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=24155 smb_mid=16576 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 201 (0xC9) smb_bcc=257 [2015/06/24 03:46:17.150885, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] A1 81 C6 30 81 C3 A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 AD 04 81 AA 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 06 00 06 00 38 TLMSSP.. .......8 [0030] 00 00 00 05 82 89 A2 EE 68 5E 47 9C 49 F8 45 00 ........ h^G.I.E. [0040] 00 00 00 00 00 00 00 6C 00 6C 00 3E 00 00 00 06 .......l .l.>.... [0050] 01 00 00 00 00 00 0F 4D 00 55 00 43 00 02 00 06 .......M .U.C.... [0060] 00 4D 00 55 00 43 00 01 00 14 00 53 00 54 00 4F .M.U.C.. ...S.T.O [0070] 00 52 00 41 00 47 00 45 00 2D 00 30 00 33 00 04 .R.A.G.E .-.0.3.. [0080] 00 14 00 6D 00 72 00 2E 00 6C 00 66 00 6D 00 67 ...m.r.. .l.f.m.g [0090] 00 2E 00 64 00 65 00 03 00 2A 00 73 00 74 00 6F ...d.e.. .*.s.t.o [00A0] 00 72 00 61 00 67 00 65 00 2D 00 30 00 33 00 2E .r.a.g.e .-.0.3.. [00B0] 00 6D 00 72 00 2E 00 6C 00 66 00 6D 00 67 00 2E .m.r...l .f.m.g.. [00C0] 00 64 00 65 00 00 00 00 00 57 00 69 00 6E 00 64 .d.e.... .W.i.n.d [00D0] 00 6F 00 77 00 73 00 20 00 36 00 2E 00 31 00 00 .o.w.s. .6...1.. [00E0] 00 53 00 61 00 6D 00 62 00 61 00 20 00 34 00 2E .S.a.m.b .a. .4.. [00F0] 00 32 00 2E 00 32 00 00 00 4D 00 55 00 43 00 00 .2...2.. .M.U.C.. [0100] 00 . [2015/06/24 03:46:17.225237, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:369(read_smb_length_return_keepalive) got smb length of 318 [2015/06/24 03:46:17.225298, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1877(process_smb) got message type 0x0 of len 0x13e [2015/06/24 03:46:17.225318, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1879(process_smb) Transaction 7 of length 322 (0 toread) [2015/06/24 03:46:17.225334, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.225345, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=318 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=24155 smb_mid=16640 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 318 (0x13E) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 156 (0x9C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=259 [2015/06/24 03:46:17.225445, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] A1 81 99 30 81 96 A2 81 93 04 81 90 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 60 00 00 00 SSP..... ....`... [0020] 18 00 18 00 78 00 00 00 00 00 00 00 48 00 00 00 ....x... ....H... [0030] 02 00 02 00 48 00 00 00 16 00 16 00 4A 00 00 00 ....H... ....J... [0040] 00 00 00 00 90 00 00 00 05 82 88 A2 05 01 28 0A ........ ......(. [0050] 00 00 00 0F 40 00 49 00 4D 00 4D 00 55 00 4E 00 ....@.I. M.M.U.N. [0060] 42 00 49 00 4F 00 2D 00 31 00 31 00 FF 43 28 F0 B.I.O.-. 1.1..C(. [0070] 80 A8 1D A7 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0080] 00 00 00 00 CA F9 4E 5E 79 F6 43 8A 6A 94 E3 E5 ......N^ y.C.j... [0090] 36 78 1E B1 CA A7 8B 5F F8 78 0E 1A 00 57 00 69 6x....._ .x...W.i [00A0] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [00B0] 00 30 00 32 00 20 00 53 00 65 00 72 00 76 00 69 .0.2. .S .e.r.v.i [00C0] 00 63 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 .c.e. .P .a.c.k. [00D0] 00 33 00 20 00 32 00 36 00 30 00 30 00 00 00 57 .3. .2.6 .0.0...W [00E0] 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 .i.n.d.o .w.s. .2 [00F0] 00 30 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 .0.0.2. .5...1.. [0100] 00 00 00 ... [2015/06/24 03:46:17.225810, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1489(switch_message) switch message SMBsesssetupX (pid 32134) conn 0x0 [2015/06/24 03:46:17.225831, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.225847, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.225862, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.225890, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2015/06/24 03:46:17.225908, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:609(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2015/06/24 03:46:17.225924, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:551(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2015/06/24 03:46:17.225939, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego) Doing spnego session setup [2015/06/24 03:46:17.225958, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego) NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2015/06/24 03:46:17.225992, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.226009, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.226024, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.226039, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.226053, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.226125, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : ff4328f080a81da700000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : caf94e5e79f6438a6a94e3e536781eb1caa78b5ff8780e1a DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : * DomainName : '' UserNameLen : 0x0002 (2) UserNameMaxLen : 0x0002 (2) UserName : * UserName : '@' WorkstationLen : 0x0016 (22) WorkstationMaxLen : 0x0016 (22) Workstation : * Workstation : 'IMMUNBIO-11' EncryptedRandomSessionKeyLen: 0x0000 (0) EncryptedRandomSessionKeyMaxLen: 0x0000 (0) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=0 NegotiateFlags : 0xa2888205 (2726855173) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x0a28 (2600) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2015/06/24 03:46:17.226551, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:359(ntlmssp_server_preauth) Got user=[@] domain=[] workstation=[IMMUNBIO-11] len1=24 len2=24 [2015/06/24 03:46:17.226575, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:124(auth3_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2015/06/24 03:46:17.226591, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:125(auth3_set_challenge) challenge is: [2015/06/24 03:46:17.226606, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 54 52 71 14 38 F8 A5 91 TRq.8... [2015/06/24 03:46:17.226639, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3647(lp_load_ex) lp_load_ex: refreshing parameters [2015/06/24 03:46:17.226664, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1234(free_param_opts) Freeing parametrics: [2015/06/24 03:46:17.226777, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:564(init_globals) Initialising global parameters [2015/06/24 03:46:17.226931, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2597(lp_do_section) Processing section "[global]" doing parameter netbios name = storage-03 doing parameter server string = doing parameter workgroup = MUC doing parameter security = ADS doing parameter realm = MUC.MEDIZINISCHE-GENETIK.DE doing parameter encrypt passwords = yes doing parameter interfaces = localhost eth0 doing parameter bind interfaces only = true doing parameter log file = /var/log/samba/%m.log doing parameter debug pid = yes doing parameter log level = 10 [2015/06/24 03:46:17.227065, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 doing parameter max log size = 50000 doing parameter lock directory = /usr/var/samba/lock/ doing parameter state directory = /usr/var/samba/state/ doing parameter cache directory = /usr/var/samba/cache/ doing parameter local master = no doing parameter domain master = no doing parameter preferred master = no doing parameter veto files = /.bash_history/Platform.ini/ doing parameter delete veto files = yes doing parameter wins server = 192.168.29.2 doing parameter name resolve order = wins bcast host doing parameter acl allow execute always = yes doing parameter unix extensions = yes doing parameter use sendfile = yes doing parameter guest account = nobody doing parameter panic action = "/usr/local/bin/panic-action %d" doing parameter load printers = no doing parameter idmap config *:backend = tdb doing parameter idmap config *:range = 70001-80000 doing parameter idmap config MUC:backend = ad doing parameter idmap config MUC:schema_mode = rfc2307 doing parameter idmap config MUC:range = 500-40000 doing parameter winbind nss info = rfc2307 doing parameter winbind expand groups = 2 doing parameter winbind trusted domains only = no doing parameter winbind use default domain = yes doing parameter winbind enum users = yes doing parameter winbind enum groups = yes doing parameter map archive = no doing parameter map system = no doing parameter map hidden = no doing parameter admin users = MUC\Administrator doing parameter writeable = yes doing parameter inherit permissions = yes doing parameter include = /etc/samba/shares.conf [2015/06/24 03:46:17.228032, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[AcronisImages]" doing parameter comment = Acronis Workstation Backups doing parameter path = /srv/samba/AcronisImages doing parameter browsable = yes doing parameter force create mode = 0660 doing parameter force directory mode = 770 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.228177, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[AppleBackups]" doing parameter comment = Apple Backups doing parameter path = /srv/samba/AppleBackups doing parameter browsable = yes doing parameter force create mode = 0640 doing parameter force directory mode = 750 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.228331, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[DSSImages]" doing parameter comment = Drive SnapShot Backups doing parameter path = /srv/samba/DSSImages/ doing parameter browsable = yes doing parameter force create mode = 0660 doing parameter force directory mode = 770 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.228487, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3688(lp_load_ex) pm_process() returned Yes [2015/06/24 03:46:17.228516, 7, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3995(lp_servicenumber) lp_servicenumber: couldn't find homes [2015/06/24 03:46:17.228539, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1495(lp_add_ipc) adding IPC service [2015/06/24 03:46:17.228567, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:116(make_user_info_map) Mapping user []\[@] from workstation [IMMUNBIO-11] [2015/06/24 03:46:17.228587, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:138(make_user_info_map) Mapped domain from [] to [STORAGE-03] for user [@] from workstation [IMMUNBIO-11] [2015/06/24 03:46:17.228604, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:62(make_user_info) attempting to make a user_info for @ (@) [2015/06/24 03:46:17.228619, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:70(make_user_info) making strings for @'s user_info struct [2015/06/24 03:46:17.228637, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:108(make_user_info) making blobs for @'s user_info struct [2015/06/24 03:46:17.228653, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:159(make_user_info) made a user_info for @ (@) [2015/06/24 03:46:17.228668, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:178(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[@]@[IMMUNBIO-11] with the new password interface [2015/06/24 03:46:17.228685, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:181(auth_check_ntlm_password) check_ntlm_password: mapped user is: [STORAGE-03]\[@]@[IMMUNBIO-11] [2015/06/24 03:46:17.228701, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:190(auth_check_ntlm_password) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2015/06/24 03:46:17.228716, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:192(auth_check_ntlm_password) challenge is: [2015/06/24 03:46:17.228730, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 54 52 71 14 38 F8 A5 91 TRq.8... [2015/06/24 03:46:17.228759, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:44(check_guest_security) Check auth for: [@] [2015/06/24 03:46:17.228774, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: guest had nothing to say [2015/06/24 03:46:17.228791, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth) Check auth for: [@] [2015/06/24 03:46:17.228807, 8, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1205(is_myname) is_myname("STORAGE-03") returns 1 [2015/06/24 03:46:17.228825, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2015/06/24 03:46:17.228842, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2015/06/24 03:46:17.228857, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2015/06/24 03:46:17.228880, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.228896, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.228929, 5, pid=32134, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_@ [2015/06/24 03:46:17.228954, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.228970, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/check_samsec.c:400(check_sam_security) check_sam_security: Couldn't find user '@' in passdb. [2015/06/24 03:46:17.228986, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:252(auth_check_ntlm_password) check_ntlm_password: sam authentication for user [@] FAILED with error NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.229005, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:50(check_winbind_security) Check auth for: [@] [2015/06/24 03:46:17.229022, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:60(check_winbind_security) check_winbind_security: Not using winbind, requested domain [STORAGE-03] was for this SAM. [2015/06/24 03:46:17.229038, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: winbind had nothing to say [2015/06/24 03:46:17.229052, 2, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:315(auth_check_ntlm_password) check_ntlm_password: Authentication for user [@] -> [@] FAILED with error NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.229069, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:188(auth3_check_password) Checking NTLMSSP password for \@ failed: NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.229086, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:455(ntlmssp_server_check_password) ../auth/ntlmssp/ntlmssp_server.c:455: Checking NTLMSSP password for \@ failed: NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.229105, 2, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/spnego.c:746(gensec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.229135, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.229154, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.229171, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:17.229192, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key 56B3DB7C [2015/06/24 03:46:17.229213, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240ba3c50 [2015/06/24 03:46:17.229245, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key 56B3DB7C [2015/06/24 03:46:17.229272, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.229291, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:17.229321, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/error.c:82(error_packet_set) NT error packet at ../source3/smbd/sesssetup.c(267) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2015/06/24 03:46:17.229349, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.229360, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=24155 smb_mid=16640 smt_wct=0 smb_bcc=0 [2015/06/24 03:46:17.229413, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [2015/06/24 03:46:17.254969, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:369(read_smb_length_return_keepalive) got smb length of 1548 [2015/06/24 03:46:17.255016, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1877(process_smb) got message type 0x0 of len 0x60c [2015/06/24 03:46:17.255035, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1879(process_smb) Transaction 8 of length 1552 (0 toread) [2015/06/24 03:46:17.255051, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.255061, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=1548 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=16704 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1548 (0x60C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1387 (0x56B) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=1489 [2015/06/24 03:46:17.255162, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 60 82 05 67 06 06 2B 06 01 05 05 02 A0 82 05 5B `..g..+. .......[ [0010] 30 82 05 57 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..W.$0" ..*.H... [0020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [0030] 2B 06 01 04 01 82 37 02 02 0A A2 82 05 2D 04 82 +.....7. .....-.. [0040] 05 29 60 82 05 25 06 09 2A 86 48 86 F7 12 01 02 .)`..%.. *.H..... [0050] 02 01 00 6E 82 05 14 30 82 05 10 A0 03 02 01 05 ...n...0 ........ [0060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [0070] 04 25 61 82 04 21 30 82 04 1D A0 03 02 01 05 A1 .%a..!0. ........ [0080] 1D 1B 1B 4D 55 43 2E 4D 45 44 49 5A 49 4E 49 53 ...MUC.M EDIZINIS [0090] 43 48 45 2D 47 45 4E 45 54 49 4B 2E 44 45 A2 28 CHE-GENE TIK.DE.( [00A0] 30 26 A0 03 02 01 02 A1 1F 30 1D 1B 04 63 69 66 0&...... .0...cif [00B0] 73 1B 15 73 74 6F 72 61 67 65 2D 30 33 2E 6D 72 s..stora ge-03.mr [00C0] 2E 6C 66 6D 67 2E 64 65 A3 82 03 CB 30 82 03 C7 .lfmg.de ....0... [00D0] A0 03 02 01 17 A1 03 02 01 01 A2 82 03 B9 04 82 ........ ........ [00E0] 03 B5 DA 46 79 64 08 91 D9 BE B2 2A 17 6F 8A 68 ...Fyd.. ...*.o.h [00F0] DA AF C2 59 54 AF 5F B7 F3 71 98 B2 F3 33 3B 9A ...YT._. .q...3;. [0100] FF AA 4C 57 78 8A 52 31 F9 BE 37 82 CA 47 B2 8A ..LWx.R1 ..7..G.. [0110] 8C 3E 8C 7D FC 38 97 9C AB EC 57 B2 A7 B8 AB 1A .>.}.8.. ..W..... [0120] 2A 1F FF 37 3A 3D 47 C6 7C A2 46 C8 35 F8 07 AD *..7:=G. |.F.5... [0130] E5 A5 17 AD 4E A1 48 CE C8 06 8E 31 E9 B4 43 60 ....N.H. ...1..C` [0140] E6 14 41 77 07 A1 D4 F3 4E 7B DD 29 63 9F EF 5C ..Aw.... N{.)c..\ [0150] 14 D8 B6 A0 05 DB 33 AA DB 77 48 5C 3E CB 9B 64 ......3. .wH\>..d [0160] C1 44 05 55 F0 84 95 B6 48 A2 CC ED D3 EB 39 E9 .D.U.... H.....9. [0170] 1E 3D DD AE 41 E2 29 D4 41 B6 50 FB 04 21 AA 5C .=..A.). A.P..!.\ [0180] A6 BD 9C BB FA C7 2C 2F FE 44 F7 89 16 2E 31 C4 ......,/ .D....1. [0190] 0B C7 49 85 E0 91 3C 2D 29 7B CF B2 FD 0C AC 05 ..I...<- ){...... [01A0] 27 48 06 3C AA B0 C7 B5 6F 44 E2 2E 73 1E 45 01 'H.<.... oD..s.E. [01B0] 14 EE F6 22 E0 D7 2B 06 B0 68 2C 07 C7 AA E7 0D ..."..+. .h,..... [01C0] D0 F9 6B 03 C5 98 CA F0 13 E3 EA 91 4E 6C 93 CF ..k..... ....Nl.. [01D0] 4D 69 67 99 2E 59 40 21 05 B4 0B 30 AF 8C E0 8D Mig..Y@! ...0.... [01E0] 59 7A 17 16 A3 0F 79 86 16 9D 85 5D 09 56 2B 04 Yz....y. ...].V+. [01F0] A9 EF 71 FB 82 AF CD EF 00 E9 10 F1 49 DF 54 E0 ..q..... ....I.T. [2015/06/24 03:46:17.255822, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1489(switch_message) switch message SMBsesssetupX (pid 32134) conn 0x0 [2015/06/24 03:46:17.255841, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.255856, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.255870, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.255897, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2015/06/24 03:46:17.255914, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:609(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2015/06/24 03:46:17.255928, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:551(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2015/06/24 03:46:17.255942, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego) Doing spnego session setup [2015/06/24 03:46:17.255965, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego) NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2015/06/24 03:46:17.255990, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.256006, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:17.256026, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key EE663C14 [2015/06/24 03:46:17.256048, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240bacef0 [2015/06/24 03:46:17.256107, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:882(smbXsrv_session_global_store) [2015/06/24 03:46:17.256123, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:884(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'EE663C14' stored [2015/06/24 03:46:17.256141, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xee663c14 (3999677460) session_wire_id : 0x00000000000058b0 (22704) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * [2015/06/24 03:46:17.256371, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key EE663C14 [2015/06/24 03:46:17.256391, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.256407, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:17.256424, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1276(smbXsrv_session_create) [2015/06/24 03:46:17.256434, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1284(smbXsrv_session_create) smbXsrv_session_create: global_id (0xee663c14) stored [2015/06/24 03:46:17.256449, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x000058b0 (22704) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xee663c14 (3999677460) session_wire_id : 0x00000000000058b0 (22704) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Jun 24 03:46:17 2015 CEST nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) gensec : NULL compat : NULL tcon_table : NULL [2015/06/24 03:46:17.256743, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2015/06/24 03:46:17.256766, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2015/06/24 03:46:17.256783, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2015/06/24 03:46:17.256798, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2015/06/24 03:46:17.256813, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2015/06/24 03:46:17.256828, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2015/06/24 03:46:17.256843, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2015/06/24 03:46:17.256858, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2015/06/24 03:46:17.256872, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2015/06/24 03:46:17.256930, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC mechanism spnego [2015/06/24 03:46:17.256951, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.256966, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.256981, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.256995, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.257009, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.257101, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC submechanism gse_krb5 [2015/06/24 03:46:17.366176, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/librpc/crypto/gse_krb5.c:279(fill_mem_keytab_from_secrets) ../source3/librpc/crypto/gse_krb5.c:279: no prev machine password [2015/06/24 03:46:17.366356, 1, pid=32134, effective(0, 0), real(0, 0)] ../source3/librpc/crypto/gse.c:466(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/storage-03.mr.lfmg.de@MUC.MEDIZINISCHE-GENETIK.DE(kvno 1) in keytab MEMORY:cifs_srv_keytab (arcfour-hmac-md5)] [2015/06/24 03:46:17.366381, 1, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/spnego.c:576(gensec_spnego_parse_negTokenInit) SPNEGO(gse_krb5) NEG_TOKEN_INIT failed: NT_STATUS_LOGON_FAILURE [2015/06/24 03:46:17.366398, 2, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/spnego.c:746(gensec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_LOGON_FAILURE [2015/06/24 03:46:17.366418, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.366430, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.366439, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:17.366451, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key EE663C14 [2015/06/24 03:46:17.366464, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240bd4490 [2015/06/24 03:46:17.366483, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key EE663C14 [2015/06/24 03:46:17.366494, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.366503, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:17.366518, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/error.c:82(error_packet_set) NT error packet at ../source3/smbd/sesssetup.c(267) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2015/06/24 03:46:17.366529, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.366535, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=16704 smt_wct=0 smb_bcc=0 [2015/06/24 03:46:17.366565, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [2015/06/24 03:46:17.367682, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:369(read_smb_length_return_keepalive) got smb length of 236 [2015/06/24 03:46:17.367709, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1877(process_smb) got message type 0x0 of len 0xec [2015/06/24 03:46:17.367721, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1879(process_smb) Transaction 9 of length 240 (0 toread) [2015/06/24 03:46:17.367730, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.367736, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=16768 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2015/06/24 03:46:17.367793, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* [0020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 07 82 .(NTLMSS P....... [0030] 08 A2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [0050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [0060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [0070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 33 .e. .P.a .c.k. .3 [0080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [0090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [00A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [00B0] 00 . [2015/06/24 03:46:17.367944, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1489(switch_message) switch message SMBsesssetupX (pid 32134) conn 0x0 [2015/06/24 03:46:17.367955, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.367964, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.367973, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.367988, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2015/06/24 03:46:17.367998, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:609(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2015/06/24 03:46:17.368006, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:551(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2015/06/24 03:46:17.368015, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego) Doing spnego session setup [2015/06/24 03:46:17.368026, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego) NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2015/06/24 03:46:17.368041, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.368051, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:17.368063, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key 5C44DF28 [2015/06/24 03:46:17.368076, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240bacef0 [2015/06/24 03:46:17.368112, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:882(smbXsrv_session_global_store) [2015/06/24 03:46:17.368122, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:884(smbXsrv_session_global_store) smbXsrv_session_global_store: key '5C44DF28' stored [2015/06/24 03:46:17.368132, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x5c44df28 (1548017448) session_wire_id : 0x000000000000d1d4 (53716) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * [2015/06/24 03:46:17.368270, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key 5C44DF28 [2015/06/24 03:46:17.368283, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.368293, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:17.368303, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1276(smbXsrv_session_create) [2015/06/24 03:46:17.368309, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1284(smbXsrv_session_create) smbXsrv_session_create: global_id (0x5c44df28) stored [2015/06/24 03:46:17.368318, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x0000d1d4 (53716) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x5c44df28 (1548017448) session_wire_id : 0x000000000000d1d4 (53716) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Jun 24 03:46:17 2015 CEST nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) gensec : NULL compat : NULL tcon_table : NULL [2015/06/24 03:46:17.368497, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2015/06/24 03:46:17.368511, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2015/06/24 03:46:17.368521, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2015/06/24 03:46:17.368530, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2015/06/24 03:46:17.368539, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2015/06/24 03:46:17.368548, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2015/06/24 03:46:17.368557, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2015/06/24 03:46:17.368566, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2015/06/24 03:46:17.368575, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2015/06/24 03:46:17.368610, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC mechanism spnego [2015/06/24 03:46:17.368622, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.368632, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.368641, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.368649, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.368658, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.368699, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2015/06/24 03:46:17.368722, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xa2088207 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_56 [2015/06/24 03:46:17.368766, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0xa2088207 (2718466567) 1: NTLMSSP_NEGOTIATE_UNICODE 1: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : NULL WorkstationLen : 0x0000 (0) WorkstationMaxLen : 0x0000 (0) Workstation : NULL Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x0a28 (2600) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2015/06/24 03:46:17.368946, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x0006 (6) TargetNameMaxLen : 0x0006 (6) TargetName : * TargetName : 'MUC' NegotiateFlags : 0xa2898205 (2726920709) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 1: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 ServerChallenge : 575d730e37e764e1 Reserved : 0000000000000000 TargetInfoLen : 0x006c (108) TargetNameInfoMaxLen : 0x006c (108) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x0006 (6) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'MUC' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0014 (20) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'STORAGE-03' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0014 (20) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'mr.lfmg.de' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x002a (42) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'storage-03.mr.lfmg.de' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1) ProductBuild : 0x0000 (0) Reserved : 000000 NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF) [2015/06/24 03:46:17.369217, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.369235, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.369242, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=300 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=53716 smb_mid=16768 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 201 (0xC9) smb_bcc=257 [2015/06/24 03:46:17.369289, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] A1 81 C6 30 81 C3 A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 AD 04 81 AA 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 06 00 06 00 38 TLMSSP.. .......8 [0030] 00 00 00 05 82 89 A2 57 5D 73 0E 37 E7 64 E1 00 .......W ]s.7.d.. [0040] 00 00 00 00 00 00 00 6C 00 6C 00 3E 00 00 00 06 .......l .l.>.... [0050] 01 00 00 00 00 00 0F 4D 00 55 00 43 00 02 00 06 .......M .U.C.... [0060] 00 4D 00 55 00 43 00 01 00 14 00 53 00 54 00 4F .M.U.C.. ...S.T.O [0070] 00 52 00 41 00 47 00 45 00 2D 00 30 00 33 00 04 .R.A.G.E .-.0.3.. [0080] 00 14 00 6D 00 72 00 2E 00 6C 00 66 00 6D 00 67 ...m.r.. .l.f.m.g [0090] 00 2E 00 64 00 65 00 03 00 2A 00 73 00 74 00 6F ...d.e.. .*.s.t.o [00A0] 00 72 00 61 00 67 00 65 00 2D 00 30 00 33 00 2E .r.a.g.e .-.0.3.. [00B0] 00 6D 00 72 00 2E 00 6C 00 66 00 6D 00 67 00 2E .m.r...l .f.m.g.. [00C0] 00 64 00 65 00 00 00 00 00 57 00 69 00 6E 00 64 .d.e.... .W.i.n.d [00D0] 00 6F 00 77 00 73 00 20 00 36 00 2E 00 31 00 00 .o.w.s. .6...1.. [00E0] 00 53 00 61 00 6D 00 62 00 61 00 20 00 34 00 2E .S.a.m.b .a. .4.. [00F0] 00 32 00 2E 00 32 00 00 00 4D 00 55 00 43 00 00 .2...2.. .M.U.C.. [0100] 00 . [2015/06/24 03:46:17.452902, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:369(read_smb_length_return_keepalive) got smb length of 318 [2015/06/24 03:46:17.452950, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1877(process_smb) got message type 0x0 of len 0x13e [2015/06/24 03:46:17.452969, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1879(process_smb) Transaction 10 of length 322 (0 toread) [2015/06/24 03:46:17.452985, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.452996, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=318 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=53716 smb_mid=16832 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 318 (0x13E) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 156 (0x9C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=259 [2015/06/24 03:46:17.453097, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] A1 81 99 30 81 96 A2 81 93 04 81 90 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 60 00 00 00 SSP..... ....`... [0020] 18 00 18 00 78 00 00 00 00 00 00 00 48 00 00 00 ....x... ....H... [0030] 02 00 02 00 48 00 00 00 16 00 16 00 4A 00 00 00 ....H... ....J... [0040] 00 00 00 00 90 00 00 00 05 82 88 A2 05 01 28 0A ........ ......(. [0050] 00 00 00 0F 40 00 49 00 4D 00 4D 00 55 00 4E 00 ....@.I. M.M.U.N. [0060] 42 00 49 00 4F 00 2D 00 31 00 31 00 B5 29 B0 9B B.I.O.-. 1.1..).. [0070] 63 98 AA 67 00 00 00 00 00 00 00 00 00 00 00 00 c..g.... ........ [0080] 00 00 00 00 9A BF 2A A8 45 BB 16 0F 6F D0 23 E2 ......*. E...o.#. [0090] ED 00 3E 7F D2 B4 6A 6D 20 AF 4A 6C 00 57 00 69 ..>...jm .Jl.W.i [00A0] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [00B0] 00 30 00 32 00 20 00 53 00 65 00 72 00 76 00 69 .0.2. .S .e.r.v.i [00C0] 00 63 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 .c.e. .P .a.c.k. [00D0] 00 33 00 20 00 32 00 36 00 30 00 30 00 00 00 57 .3. .2.6 .0.0...W [00E0] 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 .i.n.d.o .w.s. .2 [00F0] 00 30 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 .0.0.2. .5...1.. [0100] 00 00 00 ... [2015/06/24 03:46:17.453464, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1489(switch_message) switch message SMBsesssetupX (pid 32134) conn 0x0 [2015/06/24 03:46:17.453485, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.453501, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.453516, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.453544, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2015/06/24 03:46:17.453573, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:609(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2015/06/24 03:46:17.453589, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:551(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2015/06/24 03:46:17.453605, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego) Doing spnego session setup [2015/06/24 03:46:17.453625, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego) NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2015/06/24 03:46:17.453643, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.453660, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.453675, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.453690, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.453704, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.453775, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : b529b09b6398aa6700000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 9abf2aa845bb160f6fd023e2ed003e7fd2b46a6d20af4a6c DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : * DomainName : '' UserNameLen : 0x0002 (2) UserNameMaxLen : 0x0002 (2) UserName : * UserName : '@' WorkstationLen : 0x0016 (22) WorkstationMaxLen : 0x0016 (22) Workstation : * Workstation : 'IMMUNBIO-11' EncryptedRandomSessionKeyLen: 0x0000 (0) EncryptedRandomSessionKeyMaxLen: 0x0000 (0) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=0 NegotiateFlags : 0xa2888205 (2726855173) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x0a28 (2600) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2015/06/24 03:46:17.454193, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:359(ntlmssp_server_preauth) Got user=[@] domain=[] workstation=[IMMUNBIO-11] len1=24 len2=24 [2015/06/24 03:46:17.454216, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:124(auth3_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2015/06/24 03:46:17.454232, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:125(auth3_set_challenge) challenge is: [2015/06/24 03:46:17.454246, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 8B DA 3E 39 1A 3B 81 2C ..>9.;., [2015/06/24 03:46:17.454291, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3647(lp_load_ex) lp_load_ex: refreshing parameters [2015/06/24 03:46:17.454310, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1234(free_param_opts) Freeing parametrics: [2015/06/24 03:46:17.454420, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:564(init_globals) Initialising global parameters [2015/06/24 03:46:17.454572, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2597(lp_do_section) Processing section "[global]" doing parameter netbios name = storage-03 doing parameter server string = doing parameter workgroup = MUC doing parameter security = ADS doing parameter realm = MUC.MEDIZINISCHE-GENETIK.DE doing parameter encrypt passwords = yes doing parameter interfaces = localhost eth0 doing parameter bind interfaces only = true doing parameter log file = /var/log/samba/%m.log doing parameter debug pid = yes doing parameter log level = 10 [2015/06/24 03:46:17.454705, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 doing parameter max log size = 50000 doing parameter lock directory = /usr/var/samba/lock/ doing parameter state directory = /usr/var/samba/state/ doing parameter cache directory = /usr/var/samba/cache/ doing parameter local master = no doing parameter domain master = no doing parameter preferred master = no doing parameter veto files = /.bash_history/Platform.ini/ doing parameter delete veto files = yes doing parameter wins server = 192.168.29.2 doing parameter name resolve order = wins bcast host doing parameter acl allow execute always = yes doing parameter unix extensions = yes doing parameter use sendfile = yes doing parameter guest account = nobody doing parameter panic action = "/usr/local/bin/panic-action %d" doing parameter load printers = no doing parameter idmap config *:backend = tdb doing parameter idmap config *:range = 70001-80000 doing parameter idmap config MUC:backend = ad doing parameter idmap config MUC:schema_mode = rfc2307 doing parameter idmap config MUC:range = 500-40000 doing parameter winbind nss info = rfc2307 doing parameter winbind expand groups = 2 doing parameter winbind trusted domains only = no doing parameter winbind use default domain = yes doing parameter winbind enum users = yes doing parameter winbind enum groups = yes doing parameter map archive = no doing parameter map system = no doing parameter map hidden = no doing parameter admin users = MUC\Administrator doing parameter writeable = yes doing parameter inherit permissions = yes doing parameter include = /etc/samba/shares.conf [2015/06/24 03:46:17.455684, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[AcronisImages]" doing parameter comment = Acronis Workstation Backups doing parameter path = /srv/samba/AcronisImages doing parameter browsable = yes doing parameter force create mode = 0660 doing parameter force directory mode = 770 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.455828, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[AppleBackups]" doing parameter comment = Apple Backups doing parameter path = /srv/samba/AppleBackups doing parameter browsable = yes doing parameter force create mode = 0640 doing parameter force directory mode = 750 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.455962, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[DSSImages]" doing parameter comment = Drive SnapShot Backups doing parameter path = /srv/samba/DSSImages/ doing parameter browsable = yes doing parameter force create mode = 0660 doing parameter force directory mode = 770 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.456117, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3688(lp_load_ex) pm_process() returned Yes [2015/06/24 03:46:17.456146, 7, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3995(lp_servicenumber) lp_servicenumber: couldn't find homes [2015/06/24 03:46:17.456170, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1495(lp_add_ipc) adding IPC service [2015/06/24 03:46:17.456198, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:116(make_user_info_map) Mapping user []\[@] from workstation [IMMUNBIO-11] [2015/06/24 03:46:17.456217, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:138(make_user_info_map) Mapped domain from [] to [STORAGE-03] for user [@] from workstation [IMMUNBIO-11] [2015/06/24 03:46:17.456234, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:62(make_user_info) attempting to make a user_info for @ (@) [2015/06/24 03:46:17.456249, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:70(make_user_info) making strings for @'s user_info struct [2015/06/24 03:46:17.456275, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:108(make_user_info) making blobs for @'s user_info struct [2015/06/24 03:46:17.456292, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:159(make_user_info) made a user_info for @ (@) [2015/06/24 03:46:17.456307, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:178(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[@]@[IMMUNBIO-11] with the new password interface [2015/06/24 03:46:17.456333, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:181(auth_check_ntlm_password) check_ntlm_password: mapped user is: [STORAGE-03]\[@]@[IMMUNBIO-11] [2015/06/24 03:46:17.456349, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:190(auth_check_ntlm_password) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2015/06/24 03:46:17.456364, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:192(auth_check_ntlm_password) challenge is: [2015/06/24 03:46:17.456378, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 8B DA 3E 39 1A 3B 81 2C ..>9.;., [2015/06/24 03:46:17.456409, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:44(check_guest_security) Check auth for: [@] [2015/06/24 03:46:17.456424, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: guest had nothing to say [2015/06/24 03:46:17.456441, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth) Check auth for: [@] [2015/06/24 03:46:17.456457, 8, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1205(is_myname) is_myname("STORAGE-03") returns 1 [2015/06/24 03:46:17.456476, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2015/06/24 03:46:17.456492, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2015/06/24 03:46:17.456507, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2015/06/24 03:46:17.456522, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.456537, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.456570, 5, pid=32134, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_@ [2015/06/24 03:46:17.456594, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.456610, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/check_samsec.c:400(check_sam_security) check_sam_security: Couldn't find user '@' in passdb. [2015/06/24 03:46:17.456626, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:252(auth_check_ntlm_password) check_ntlm_password: sam authentication for user [@] FAILED with error NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.456646, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:50(check_winbind_security) Check auth for: [@] [2015/06/24 03:46:17.456662, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:60(check_winbind_security) check_winbind_security: Not using winbind, requested domain [STORAGE-03] was for this SAM. [2015/06/24 03:46:17.456677, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: winbind had nothing to say [2015/06/24 03:46:17.456692, 2, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:315(auth_check_ntlm_password) check_ntlm_password: Authentication for user [@] -> [@] FAILED with error NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.456708, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:188(auth3_check_password) Checking NTLMSSP password for \@ failed: NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.456734, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:455(ntlmssp_server_check_password) ../auth/ntlmssp/ntlmssp_server.c:455: Checking NTLMSSP password for \@ failed: NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.456754, 2, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/spnego.c:746(gensec_spnego_server_negTokenTarg) SPNEGO login failed: NT_STATUS_NO_SUCH_USER [2015/06/24 03:46:17.456784, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.456804, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.456820, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:17.456841, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key 5C44DF28 [2015/06/24 03:46:17.456862, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240ba1ac0 [2015/06/24 03:46:17.456894, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key 5C44DF28 [2015/06/24 03:46:17.456914, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.456930, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:17.456959, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/error.c:82(error_packet_set) NT error packet at ../source3/smbd/sesssetup.c(267) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2015/06/24 03:46:17.456978, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.456989, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=53716 smb_mid=16832 smt_wct=0 smb_bcc=0 [2015/06/24 03:46:17.457041, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [2015/06/24 03:46:17.458709, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:369(read_smb_length_return_keepalive) got smb length of 236 [2015/06/24 03:46:17.458756, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1877(process_smb) got message type 0x0 of len 0xec [2015/06/24 03:46:17.458776, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1879(process_smb) Transaction 11 of length 240 (0 toread) [2015/06/24 03:46:17.458792, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.458803, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=16896 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2015/06/24 03:46:17.458904, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* [0020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 07 82 .(NTLMSS P....... [0030] 08 A2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [0050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [0060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [0070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 33 .e. .P.a .c.k. .3 [0080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [0090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [00A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [00B0] 00 . [2015/06/24 03:46:17.459169, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1489(switch_message) switch message SMBsesssetupX (pid 32134) conn 0x0 [2015/06/24 03:46:17.459189, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.459205, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.459219, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.459245, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2015/06/24 03:46:17.459271, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:609(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2015/06/24 03:46:17.459289, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:551(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2015/06/24 03:46:17.459305, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego) Doing spnego session setup [2015/06/24 03:46:17.459329, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego) NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2015/06/24 03:46:17.459355, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.459372, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:17.459393, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key 2891629E [2015/06/24 03:46:17.459416, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240bbf420 [2015/06/24 03:46:17.459480, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:882(smbXsrv_session_global_store) [2015/06/24 03:46:17.459497, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:884(smbXsrv_session_global_store) smbXsrv_session_global_store: key '2891629E' stored [2015/06/24 03:46:17.459515, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x2891629e (680616606) session_wire_id : 0x000000000000e527 (58663) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * [2015/06/24 03:46:17.459748, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key 2891629E [2015/06/24 03:46:17.459769, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.459786, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:17.459803, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1276(smbXsrv_session_create) [2015/06/24 03:46:17.459814, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1284(smbXsrv_session_create) smbXsrv_session_create: global_id (0x2891629e) stored [2015/06/24 03:46:17.459829, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x0000e527 (58663) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x2891629e (680616606) session_wire_id : 0x000000000000e527 (58663) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000000 (0) connection : * status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Mi Jun 24 03:46:17 2015 CEST nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) gensec : NULL compat : NULL tcon_table : NULL [2015/06/24 03:46:17.460145, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:477(make_auth_context_subsystem) Making default auth method list for server role = 'domain member' [2015/06/24 03:46:17.460170, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2015/06/24 03:46:17.460188, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2015/06/24 03:46:17.460203, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2015/06/24 03:46:17.460220, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2015/06/24 03:46:17.460235, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2015/06/24 03:46:17.460251, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match ntdomain [2015/06/24 03:46:17.460276, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method ntdomain has a valid init [2015/06/24 03:46:17.460292, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method winbind has a valid init [2015/06/24 03:46:17.460355, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC mechanism spnego [2015/06/24 03:46:17.460377, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.460393, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.460409, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.460424, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.460439, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.460511, 5, pid=32134, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:664(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2015/06/24 03:46:17.460550, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xa2088207 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_56 [2015/06/24 03:46:17.460627, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0xa2088207 (2718466567) 1: NTLMSSP_NEGOTIATE_UNICODE 1: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : NULL WorkstationLen : 0x0000 (0) WorkstationMaxLen : 0x0000 (0) Workstation : NULL Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x0a28 (2600) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2015/06/24 03:46:17.460945, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x0006 (6) TargetNameMaxLen : 0x0006 (6) TargetName : * TargetName : 'MUC' NegotiateFlags : 0xa2898205 (2726920709) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 1: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 ServerChallenge : 92972330f1889a03 Reserved : 0000000000000000 TargetInfoLen : 0x006c (108) TargetNameInfoMaxLen : 0x006c (108) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x0006 (6) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'MUC' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x0014 (20) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'STORAGE-03' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0014 (20) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'mr.lfmg.de' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x002a (42) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'storage-03.mr.lfmg.de' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1) ProductBuild : 0x0000 (0) Reserved : 000000 NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF) [2015/06/24 03:46:17.461452, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.461484, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.461496, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=300 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=58663 smb_mid=16896 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 201 (0xC9) smb_bcc=257 [2015/06/24 03:46:17.461565, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] A1 81 C6 30 81 C3 A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 AD 04 81 AA 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 06 00 06 00 38 TLMSSP.. .......8 [0030] 00 00 00 05 82 89 A2 92 97 23 30 F1 88 9A 03 00 ........ .#0..... [0040] 00 00 00 00 00 00 00 6C 00 6C 00 3E 00 00 00 06 .......l .l.>.... [0050] 01 00 00 00 00 00 0F 4D 00 55 00 43 00 02 00 06 .......M .U.C.... [0060] 00 4D 00 55 00 43 00 01 00 14 00 53 00 54 00 4F .M.U.C.. ...S.T.O [0070] 00 52 00 41 00 47 00 45 00 2D 00 30 00 33 00 04 .R.A.G.E .-.0.3.. [0080] 00 14 00 6D 00 72 00 2E 00 6C 00 66 00 6D 00 67 ...m.r.. .l.f.m.g [0090] 00 2E 00 64 00 65 00 03 00 2A 00 73 00 74 00 6F ...d.e.. .*.s.t.o [00A0] 00 72 00 61 00 67 00 65 00 2D 00 30 00 33 00 2E .r.a.g.e .-.0.3.. [00B0] 00 6D 00 72 00 2E 00 6C 00 66 00 6D 00 67 00 2E .m.r...l .f.m.g.. [00C0] 00 64 00 65 00 00 00 00 00 57 00 69 00 6E 00 64 .d.e.... .W.i.n.d [00D0] 00 6F 00 77 00 73 00 20 00 36 00 2E 00 31 00 00 .o.w.s. .6...1.. [00E0] 00 53 00 61 00 6D 00 62 00 61 00 20 00 34 00 2E .S.a.m.b .a. .4.. [00F0] 00 32 00 2E 00 32 00 00 00 4D 00 55 00 43 00 00 .2...2.. .M.U.C.. [0100] 00 . [2015/06/24 03:46:17.505730, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:369(read_smb_length_return_keepalive) got smb length of 342 [2015/06/24 03:46:17.505778, 6, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1877(process_smb) got message type 0x0 of len 0x156 [2015/06/24 03:46:17.505797, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1879(process_smb) Transaction 12 of length 346 (0 toread) [2015/06/24 03:46:17.505813, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:168(show_msg) [2015/06/24 03:46:17.505824, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:178(show_msg) size=342 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=58663 smb_mid=16960 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 342 (0x156) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 180 (0xB4) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=283 [2015/06/24 03:46:17.505925, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] A1 81 B1 30 81 AE A2 81 AB 04 81 A8 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 78 00 00 00 SSP..... ....x... [0020] 18 00 18 00 90 00 00 00 06 00 06 00 48 00 00 00 ........ ....H... [0030] 14 00 14 00 4E 00 00 00 16 00 16 00 62 00 00 00 ....N... ....b... [0040] 00 00 00 00 A8 00 00 00 05 82 88 A2 05 01 28 0A ........ ......(. [0050] 00 00 00 0F 4D 00 55 00 43 00 61 00 63 00 72 00 ....M.U. C.a.c.r. [0060] 6F 00 6E 00 69 00 73 00 77 00 6B 00 73 00 49 00 o.n.i.s. w.k.s.I. [0070] 4D 00 4D 00 55 00 4E 00 42 00 49 00 4F 00 2D 00 M.M.U.N. B.I.O.-. [0080] 31 00 31 00 72 FF 4D D5 EE 98 7E D8 00 00 00 00 1.1.r.M. ..~..... [0090] 00 00 00 00 00 00 00 00 00 00 00 00 52 4E 77 C6 ........ ....RNw. [00A0] 7B A3 4C 84 95 9D 19 E5 8A CF F8 84 AA E2 43 7A {.L..... ......Cz [00B0] B7 29 49 7B 00 57 00 69 00 6E 00 64 00 6F 00 77 .)I{.W.i .n.d.o.w [00C0] 00 73 00 20 00 32 00 30 00 30 00 32 00 20 00 53 .s. .2.0 .0.2. .S [00D0] 00 65 00 72 00 76 00 69 00 63 00 65 00 20 00 50 .e.r.v.i .c.e. .P [00E0] 00 61 00 63 00 6B 00 20 00 33 00 20 00 32 00 36 .a.c.k. .3. .2.6 [00F0] 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 00 6F .0.0...W .i.n.d.o [0100] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. [0110] 00 35 00 2E 00 31 00 00 00 00 00 .5...1.. ... [2015/06/24 03:46:17.506314, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1489(switch_message) switch message SMBsesssetupX (pid 32134) conn 0x0 [2015/06/24 03:46:17.506335, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.506352, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.506366, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.506408, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2015/06/24 03:46:17.506427, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:609(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2015/06/24 03:46:17.506442, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:551(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2015/06/24 03:46:17.506458, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:142(reply_sesssetup_and_X_spnego) Doing spnego session setup [2015/06/24 03:46:17.506477, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:183(reply_sesssetup_and_X_spnego) NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2015/06/24 03:46:17.506503, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.506528, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.506543, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.506558, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.506573, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.506644, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 72ff4dd5ee987ed800000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 524e77c67ba34c84959d19e58acff884aae2437ab729497b DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MUC' UserNameLen : 0x0014 (20) UserNameMaxLen : 0x0014 (20) UserName : * UserName : 'acroniswks' WorkstationLen : 0x0016 (22) WorkstationMaxLen : 0x0016 (22) Workstation : * Workstation : 'IMMUNBIO-11' EncryptedRandomSessionKeyLen: 0x0000 (0) EncryptedRandomSessionKeyMaxLen: 0x0000 (0) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=0 NegotiateFlags : 0xa2888205 (2726855173) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 0: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 0: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_5 (5) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) ProductBuild : 0x0a28 (2600) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2015/06/24 03:46:17.507063, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:359(ntlmssp_server_preauth) Got user=[acroniswks] domain=[MUC] workstation=[IMMUNBIO-11] len1=24 len2=24 [2015/06/24 03:46:17.507086, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:124(auth3_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2015/06/24 03:46:17.507102, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:125(auth3_set_challenge) challenge is: [2015/06/24 03:46:17.507116, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 8C DB 10 68 C8 AD 01 8A ...h.... [2015/06/24 03:46:17.507150, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3647(lp_load_ex) lp_load_ex: refreshing parameters [2015/06/24 03:46:17.507168, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1234(free_param_opts) Freeing parametrics: [2015/06/24 03:46:17.507289, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:564(init_globals) Initialising global parameters [2015/06/24 03:46:17.507444, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2597(lp_do_section) Processing section "[global]" doing parameter netbios name = storage-03 doing parameter server string = doing parameter workgroup = MUC doing parameter security = ADS doing parameter realm = MUC.MEDIZINISCHE-GENETIK.DE doing parameter encrypt passwords = yes doing parameter interfaces = localhost eth0 doing parameter bind interfaces only = true doing parameter log file = /var/log/samba/%m.log doing parameter debug pid = yes doing parameter log level = 10 [2015/06/24 03:46:17.507577, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/debug.c:334(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 doing parameter max log size = 50000 doing parameter lock directory = /usr/var/samba/lock/ doing parameter state directory = /usr/var/samba/state/ doing parameter cache directory = /usr/var/samba/cache/ doing parameter local master = no doing parameter domain master = no doing parameter preferred master = no doing parameter veto files = /.bash_history/Platform.ini/ doing parameter delete veto files = yes doing parameter wins server = 192.168.29.2 doing parameter name resolve order = wins bcast host doing parameter acl allow execute always = yes doing parameter unix extensions = yes doing parameter use sendfile = yes doing parameter guest account = nobody doing parameter panic action = "/usr/local/bin/panic-action %d" doing parameter load printers = no doing parameter idmap config *:backend = tdb doing parameter idmap config *:range = 70001-80000 doing parameter idmap config MUC:backend = ad doing parameter idmap config MUC:schema_mode = rfc2307 doing parameter idmap config MUC:range = 500-40000 doing parameter winbind nss info = rfc2307 doing parameter winbind expand groups = 2 doing parameter winbind trusted domains only = no doing parameter winbind use default domain = yes doing parameter winbind enum users = yes doing parameter winbind enum groups = yes doing parameter map archive = no doing parameter map system = no doing parameter map hidden = no doing parameter admin users = MUC\Administrator doing parameter writeable = yes doing parameter inherit permissions = yes doing parameter include = /etc/samba/shares.conf [2015/06/24 03:46:17.508552, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[AcronisImages]" doing parameter comment = Acronis Workstation Backups doing parameter path = /srv/samba/AcronisImages doing parameter browsable = yes doing parameter force create mode = 0660 doing parameter force directory mode = 770 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.508687, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[AppleBackups]" doing parameter comment = Apple Backups doing parameter path = /srv/samba/AppleBackups doing parameter browsable = yes doing parameter force create mode = 0640 doing parameter force directory mode = 750 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.508814, 2, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2614(lp_do_section) Processing section "[DSSImages]" doing parameter comment = Drive SnapShot Backups doing parameter path = /srv/samba/DSSImages/ doing parameter browsable = yes doing parameter force create mode = 0660 doing parameter force directory mode = 770 doing parameter guest ok = no doing parameter valid users = doing parameter invalid users = [2015/06/24 03:46:17.508960, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3688(lp_load_ex) pm_process() returned Yes [2015/06/24 03:46:17.508986, 7, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3995(lp_servicenumber) lp_servicenumber: couldn't find homes [2015/06/24 03:46:17.509008, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1495(lp_add_ipc) adding IPC service [2015/06/24 03:46:17.509034, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:116(make_user_info_map) Mapping user [MUC]\[acroniswks] from workstation [IMMUNBIO-11] [2015/06/24 03:46:17.509956, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:62(make_user_info) attempting to make a user_info for acroniswks (acroniswks) [2015/06/24 03:46:17.509996, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:70(make_user_info) making strings for acroniswks's user_info struct [2015/06/24 03:46:17.510017, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:108(make_user_info) making blobs for acroniswks's user_info struct [2015/06/24 03:46:17.510033, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:159(make_user_info) made a user_info for acroniswks (acroniswks) [2015/06/24 03:46:17.510048, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:178(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user [MUC]\[acroniswks]@[IMMUNBIO-11] with the new password interface [2015/06/24 03:46:17.510075, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:181(auth_check_ntlm_password) check_ntlm_password: mapped user is: [MUC]\[acroniswks]@[IMMUNBIO-11] [2015/06/24 03:46:17.510092, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:190(auth_check_ntlm_password) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2015/06/24 03:46:17.510106, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:192(auth_check_ntlm_password) challenge is: [2015/06/24 03:46:17.510120, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 8C DB 10 68 C8 AD 01 8A ...h.... [2015/06/24 03:46:17.510149, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:44(check_guest_security) Check auth for: [acroniswks] [2015/06/24 03:46:17.510164, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: guest had nothing to say [2015/06/24 03:46:17.510181, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:75(auth_samstrict_auth) Check auth for: [acroniswks] [2015/06/24 03:46:17.510197, 8, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1205(is_myname) is_myname("MUC") returns 0 [2015/06/24 03:46:17.510212, 6, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_sam.c:88(auth_samstrict_auth) check_samstrict_security: MUC is not one of my local names (ROLE_DOMAIN_MEMBER) [2015/06/24 03:46:17.510227, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:233(auth_check_ntlm_password) check_ntlm_password: sam had nothing to say [2015/06/24 03:46:17.510243, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_winbind.c:50(check_winbind_security) Check auth for: [acroniswks] [2015/06/24 03:46:17.510259, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2015/06/24 03:46:17.510285, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2015/06/24 03:46:17.510300, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2015/06/24 03:46:17.510314, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.510328, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.528296, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.528403, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user MUC\acroniswks [2015/06/24 03:46:17.528426, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is muc\acroniswks [2015/06/24 03:46:17.543018, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [MUC\acroniswks]! [2015/06/24 03:46:17.543092, 3, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:249(auth_check_ntlm_password) check_ntlm_password: winbind authentication for user [acroniswks] succeeded [2015/06/24 03:46:17.543127, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2015/06/24 03:46:17.543145, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2015/06/24 03:46:17.543171, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2015/06/24 03:46:17.543186, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.543200, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.543237, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.543253, 5, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:292(auth_check_ntlm_password) check_ntlm_password: PAM Account for user [MUC\acroniswks] succeeded [2015/06/24 03:46:17.543280, 2, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:305(auth_check_ntlm_password) check_ntlm_password: authentication for user [acroniswks] -> [acroniswks] -> [MUC\acroniswks] succeeded [2015/06/24 03:46:17.543307, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:213(auth3_check_password) Got NT session key of length 16 [2015/06/24 03:46:17.543321, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:220(auth3_check_password) Got LM session key of length 0 [2015/06/24 03:46:17.543345, 10, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:495(ntlmssp_server_postauth) ntlmssp_server_auth: Created NTLM2 session key. [2015/06/24 03:46:17.543366, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init) NTLMSSP Sign/Seal - Initialising with flags: [2015/06/24 03:46:17.543381, 3, pid=32134, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xa2088205 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_56 [2015/06/24 03:46:17.543465, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.543708, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3) Create local NT token for acroniswks [2015/06/24 03:46:17.543826, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-5740]: value=[2370:U] [2015/06/24 03:46:17.543847, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-5740]: id=[2370], endptr=[:U] [2015/06/24 03:46:17.543864, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1425(sid_to_uid) sid S-1-5-21-1362721961-1801182073-732966438-5740 -> uid 2370 [2015/06/24 03:46:17.544804, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) sys_getgrouplist: user [acroniswks] [2015/06/24 03:46:17.544907, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1257(gid_to_sid) gid 513 -> sid S-1-5-21-1362721961-1801182073-732966438-513 [2015/06/24 03:46:17.544975, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.544994, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.545008, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.545031, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.545045, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.545225, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.545258, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1362721961-1801182073-732966438-5740] [2015/06/24 03:46:17.545318, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1362721961-1801182073-732966438-513] [2015/06/24 03:46:17.545343, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1362721961-1801182073-732966438-3063] [2015/06/24 03:46:17.545365, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1362721961-1801182073-732966438-17274] [2015/06/24 03:46:17.545387, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1362721961-1801182073-732966438-17297] [2015/06/24 03:46:17.545408, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1362721961-1801182073-732966438-17478] [2015/06/24 03:46:17.545430, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1362721961-1801182073-732966438-512] [2015/06/24 03:46:17.545451, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1362721961-1801182073-732966438-572] [2015/06/24 03:46:17.545472, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1362721961-1801182073-732966438-17214] [2015/06/24 03:46:17.545494, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1362721961-1801182073-732966438-17550] [2015/06/24 03:46:17.545516, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: 0x0 [2015/06/24 03:46:17.545539, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2015/06/24 03:46:17.545558, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-11] [2015/06/24 03:46:17.545578, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-545] [2015/06/24 03:46:17.545599, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-5-32-544 Privilege set: 0x1ffffff0 [2015/06/24 03:46:17.545639, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-5740]: value=[2370:U] [2015/06/24 03:46:17.545656, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-5740]: id=[2370], endptr=[:U] [2015/06/24 03:46:17.545699, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-513]: value=[513:G] [2015/06/24 03:46:17.545716, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-513]: id=[513], endptr=[:G] [2015/06/24 03:46:17.545743, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-3063]: value=[1031:G] [2015/06/24 03:46:17.545758, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-3063]: id=[1031], endptr=[:G] [2015/06/24 03:46:17.545784, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-17274]: value=[30462:G] [2015/06/24 03:46:17.545800, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-17274]: id=[30462], endptr=[:G] [2015/06/24 03:46:17.545828, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-17297]: value=[30463:G] [2015/06/24 03:46:17.545844, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-17297]: id=[30463], endptr=[:G] [2015/06/24 03:46:17.545870, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-17478]: value=[30470:G] [2015/06/24 03:46:17.545886, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-17478]: id=[30470], endptr=[:G] [2015/06/24 03:46:17.545917, 10, pid=32134, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:313(gencache_set_data_blob) Adding cache entry with key=[IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-512] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1435110377 seconds in the past) [2015/06/24 03:46:17.547651, 10, pid=32134, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:313(gencache_set_data_blob) Adding cache entry with key=[IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-572] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1435110377 seconds in the past) [2015/06/24 03:46:17.547734, 10, pid=32134, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:313(gencache_set_data_blob) Adding cache entry with key=[IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-17214] and timeout=[Do Jan 1 01:00:00 1970 CET] (-1435110377 seconds in the past) [2015/06/24 03:46:17.547785, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-17550]: value=[30479:G] [2015/06/24 03:46:17.547803, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-1362721961-1801182073-732966438-17550]: id=[30479], endptr=[:G] [2015/06/24 03:46:17.547829, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-1-0]: value=[70003:G] [2015/06/24 03:46:17.547845, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-1-0]: id=[70003], endptr=[:G] [2015/06/24 03:46:17.547881, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-2]: value=[70004:G] [2015/06/24 03:46:17.547898, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-2]: id=[70004], endptr=[:G] [2015/06/24 03:46:17.547921, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-11]: value=[70005:G] [2015/06/24 03:46:17.547937, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-11]: id=[70005], endptr=[:G] [2015/06/24 03:46:17.547961, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: value=[70002:G] [2015/06/24 03:46:17.547976, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-32-545]: id=[70002], endptr=[:G] [2015/06/24 03:46:17.548000, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: value=[70001:G] [2015/06/24 03:46:17.548015, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-32-544]: id=[70001], endptr=[:G] [2015/06/24 03:46:17.622180, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.622231, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.622249, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.622273, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.622290, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.622335, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.622353, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1131(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-1362721961-1801182073-732966438-512 [2015/06/24 03:46:17.622390, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.622405, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.622419, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.622432, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.622446, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.622470, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.622486, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1131(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-1362721961-1801182073-732966438-512 [2015/06/24 03:46:17.622515, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.622531, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.622545, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.622559, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.622572, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.622596, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.622612, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1131(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-1362721961-1801182073-732966438-572 [2015/06/24 03:46:17.622630, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.622645, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.622658, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.622672, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.622685, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.622710, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.622725, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1131(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-1362721961-1801182073-732966438-572 [2015/06/24 03:46:17.622743, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.622757, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.622771, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.622785, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.622798, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.622823, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.622838, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1131(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-1362721961-1801182073-732966438-17214 [2015/06/24 03:46:17.622856, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.622870, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2015/06/24 03:46:17.622890, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:316(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2015/06/24 03:46:17.622905, 5, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2015/06/24 03:46:17.622918, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2015/06/24 03:46:17.622943, 4, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:421(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2015/06/24 03:46:17.622959, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1131(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-1362721961-1801182073-732966438-17214 [2015/06/24 03:46:17.622981, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:594(create_local_token) Could not convert SID S-1-5-21-1362721961-1801182073-732966438-512 to gid, ignoring it [2015/06/24 03:46:17.623000, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:594(create_local_token) Could not convert SID S-1-5-21-1362721961-1801182073-732966438-572 to gid, ignoring it [2015/06/24 03:46:17.623017, 10, pid=32134, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:594(create_local_token) Could not convert SID S-1-5-21-1362721961-1801182073-732966438-17214 to gid, ignoring it [2015/06/24 03:46:17.623051, 10, pid=32134, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (27): SID[ 0]: S-1-5-21-1362721961-1801182073-732966438-5740 SID[ 1]: S-1-5-21-1362721961-1801182073-732966438-513 SID[ 2]: S-1-5-21-1362721961-1801182073-732966438-3063 SID[ 3]: S-1-5-21-1362721961-1801182073-732966438-17274 SID[ 4]: S-1-5-21-1362721961-1801182073-732966438-17297 SID[ 5]: S-1-5-21-1362721961-1801182073-732966438-17478 SID[ 6]: S-1-5-21-1362721961-1801182073-732966438-512 SID[ 7]: S-1-5-21-1362721961-1801182073-732966438-572 SID[ 8]: S-1-5-21-1362721961-1801182073-732966438-17214 SID[ 9]: S-1-5-21-1362721961-1801182073-732966438-17550 SID[ 10]: S-1-1-0 SID[ 11]: S-1-5-2 SID[ 12]: S-1-5-11 SID[ 13]: S-1-5-32-545 SID[ 14]: S-1-5-32-544 SID[ 15]: S-1-22-1-2370 SID[ 16]: S-1-22-2-513 SID[ 17]: S-1-22-2-1031 SID[ 18]: S-1-22-2-30462 SID[ 19]: S-1-22-2-30463 SID[ 20]: S-1-22-2-30470 SID[ 21]: S-1-22-2-30479 SID[ 22]: S-1-22-2-70003 SID[ 23]: S-1-22-2-70004 SID[ 24]: S-1-22-2-70005 SID[ 25]: S-1-22-2-70002 SID[ 26]: S-1-22-2-70001 Privileges (0x 1FFFFFF0): Privilege[ 0]: SeMachineAccountPrivilege Privilege[ 1]: SeTakeOwnershipPrivilege Privilege[ 2]: SeBackupPrivilege Privilege[ 3]: SeRestorePrivilege Privilege[ 4]: SeRemoteShutdownPrivilege Privilege[ 5]: SePrintOperatorPrivilege Privilege[ 6]: SeAddUsersPrivilege Privilege[ 7]: SeDiskOperatorPrivilege Privilege[ 8]: SeSecurityPrivilege Privilege[ 9]: SeSystemtimePrivilege Privilege[ 10]: SeShutdownPrivilege Privilege[ 11]: SeDebugPrivilege Privilege[ 12]: SeSystemEnvironmentPrivilege Privilege[ 13]: SeSystemProfilePrivilege Privilege[ 14]: SeProfileSingleProcessPrivilege Privilege[ 15]: SeIncreaseBasePriorityPrivilege Privilege[ 16]: SeLoadDriverPrivilege Privilege[ 17]: SeCreatePagefilePrivilege Privilege[ 18]: SeIncreaseQuotaPrivilege Privilege[ 19]: SeChangeNotifyPrivilege Privilege[ 20]: SeUndockPrivilege Privilege[ 21]: SeManageVolumePrivilege Privilege[ 22]: SeImpersonatePrivilege Privilege[ 23]: SeCreateGlobalPrivilege Privilege[ 24]: SeEnableDelegationPrivilege Rights (0x 0): [2015/06/24 03:46:17.623342, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 2370 Primary group is 513 and contains 11 supplementary groups Group[ 0]: 513 Group[ 1]: 1031 Group[ 2]: 30462 Group[ 3]: 30463 Group[ 4]: 30470 Group[ 5]: 30479 Group[ 6]: 70003 Group[ 7]: 70004 Group[ 8]: 70005 Group[ 9]: 70002 Group[ 10]: 70001 [2015/06/24 03:46:17.623442, 7, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3995(lp_servicenumber) lp_servicenumber: couldn't find MUC\acroniswks [2015/06/24 03:46:17.623464, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user MUC\acroniswks [2015/06/24 03:46:17.623478, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is muc\acroniswks [2015/06/24 03:46:17.623495, 5, pid=32134, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [MUC\acroniswks]! [2015/06/24 03:46:17.623509, 3, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/password.c:144(register_homes_share) Adding homes service for user 'MUC\acroniswks' using home directory: '/home/acroniswks' [2015/06/24 03:46:17.623534, 7, pid=32134, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3995(lp_servicenumber) lp_servicenumber: couldn't find homes [2015/06/24 03:46:17.623583, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.623602, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/var/samba/lock/smbXsrv_session_global.tdb 2: 3: [2015/06/24 03:46:17.623621, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Locking key 2891629E [2015/06/24 03:46:17.623642, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:144(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fe240bc4830 [2015/06/24 03:46:17.623726, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:882(smbXsrv_session_global_store) [2015/06/24 03:46:17.623742, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:884(smbXsrv_session_global_store) smbXsrv_session_global_store: key '2891629E' stored [2015/06/24 03:46:17.623759, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x2891629e (680616606) session_wire_id : 0x000000000000e527 (58663) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : Mi Jun 24 03:46:18 2015 CEST auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x0000001b (27) sids: ARRAY(27) sids : S-1-5-21-1362721961-1801182073-732966438-5740 sids : S-1-5-21-1362721961-1801182073-732966438-513 sids : S-1-5-21-1362721961-1801182073-732966438-3063 sids : S-1-5-21-1362721961-1801182073-732966438-17274 sids : S-1-5-21-1362721961-1801182073-732966438-17297 sids : S-1-5-21-1362721961-1801182073-732966438-17478 sids : S-1-5-21-1362721961-1801182073-732966438-512 sids : S-1-5-21-1362721961-1801182073-732966438-572 sids : S-1-5-21-1362721961-1801182073-732966438-17214 sids : S-1-5-21-1362721961-1801182073-732966438-17550 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-545 sids : S-1-5-32-544 sids : S-1-22-1-2370 sids : S-1-22-2-513 sids : S-1-22-2-1031 sids : S-1-22-2-30462 sids : S-1-22-2-30463 sids : S-1-22-2-30470 sids : S-1-22-2-30479 sids : S-1-22-2-70003 sids : S-1-22-2-70004 sids : S-1-22-2-70005 sids : S-1-22-2-70002 sids : S-1-22-2-70001 privilege_mask : 0x000000001ffffff0 (536870896) 1: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 1: SEC_PRIV_ADD_USERS_BIT 1: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x0000000000000942 (2370) gid : 0x0000000000000201 (513) ngroups : 0x0000000b (11) groups: ARRAY(11) groups : 0x0000000000000201 (513) groups : 0x0000000000000407 (1031) groups : 0x00000000000076fe (30462) groups : 0x00000000000076ff (30463) groups : 0x0000000000007706 (30470) groups : 0x000000000000770f (30479) groups : 0x0000000000011173 (70003) groups : 0x0000000000011174 (70004) groups : 0x0000000000011175 (70005) groups : 0x0000000000011172 (70002) groups : 0x0000000000011171 (70001) info : * info: struct auth_user_info account_name : * account_name : 'acroniswks' domain_name : * domain_name : 'MUC' full_name : * full_name : 'Acronis Workstation' logon_script : * logon_script : 'logonscript.bat' profile_path : * profile_path : '' home_directory : * home_directory : '\\genome\homedirs\acroniswks' home_drive : * home_drive : 'H:' logon_server : * logon_server : 'EXON' last_logon : NTTIME(0) last_logoff : Di Jan 19 04:14:07 2038 CET acct_expiry : Do Sep 14 04:48:05 30828 CEST last_password_change : Fr Jun 6 09:55:59 2014 CEST allow_password_change : Fr Jun 13 09:55:59 2014 CEST force_password_change : Do Sep 14 04:48:05 30828 CEST logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000210 (528) authenticated : 0x01 (1) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'MUC\acroniswks' sanitized_username : * sanitized_username : 'acroniswks' torture : NULL credentials : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000001 (1) connection : * [2015/06/24 03:46:17.624918, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:60(db_tdb_log_key) Unlocking key 2891629E [2015/06/24 03:46:17.624938, 5, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/var/samba/lock/smbXsrv_session_global.tdb [2015/06/24 03:46:17.624953, 10, pid=32134, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2015/06/24 03:46:17.624969, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1330(smbXsrv_session_update) [2015/06/24 03:46:17.624979, 10, pid=32134, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1338(smbXsrv_session_update) smbXsrv_session_update: global_id (0x2891629e) stored [2015/06/24 03:46:17.624992, 1, pid=32134, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x0000e527 (58663) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x2891629e (680616606) session_wire_id : 0x000000000000e527 (58663) creation_time : Mi Jun 24 03:46:17 2015 CEST expiration_time : Do Jan 1 01:00:00 1970 CET auth_time : Mi Jun 24 03:46:18 2015 CEST auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x0000001b (27) sids: ARRAY(27) sids : S-1-5-21-1362721961-1801182073-732966438-5740 sids : S-1-5-21-1362721961-1801182073-732966438-513 sids : S-1-5-21-1362721961-1801182073-732966438-3063 sids : S-1-5-21-1362721961-1801182073-732966438-17274 sids : S-1-5-21-1362721961-1801182073-732966438-17297 sids : S-1-5-21-1362721961-1801182073-732966438-17478 sids : S-1-5-21-1362721961-1801182073-732966438-512 sids : S-1-5-21-1362721961-1801182073-732966438-572 sids : S-1-5-21-1362721961-1801182073-732966438-17214 sids : S-1-5-21-1362721961-1801182073-732966438-17550 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-11 sids : S-1-5-32-545 sids : S-1-5-32-544 sids : S-1-22-1-2370 sids : S-1-22-2-513 sids : S-1-22-2-1031 sids : S-1-22-2-30462 sids : S-1-22-2-30463 sids : S-1-22-2-30470 sids : S-1-22-2-30479 sids : S-1-22-2-70003 sids : S-1-22-2-70004 sids : S-1-22-2-70005 sids : S-1-22-2-70002 sids : S-1-22-2-70001 privilege_mask : 0x000000001ffffff0 (536870896) 1: SEC_PRIV_MACHINE_ACCOUNT_BIT 1: SEC_PRIV_PRINT_OPERATOR_BIT 1: SEC_PRIV_ADD_USERS_BIT 1: SEC_PRIV_DISK_OPERATOR_BIT 1: SEC_PRIV_REMOTE_SHUTDOWN_BIT 1: SEC_PRIV_BACKUP_BIT 1: SEC_PRIV_RESTORE_BIT 1: SEC_PRIV_TAKE_OWNERSHIP_BIT 1: SEC_PRIV_INCREASE_QUOTA_BIT 1: SEC_PRIV_SECURITY_BIT 1: SEC_PRIV_LOAD_DRIVER_BIT 1: SEC_PRIV_SYSTEM_PROFILE_BIT 1: SEC_PRIV_SYSTEMTIME_BIT 1: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 1: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 1: SEC_PRIV_CREATE_PAGEFILE_BIT 1: SEC_PRIV_SHUTDOWN_BIT 1: SEC_PRIV_DEBUG_BIT 1: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 1: SEC_PRIV_CHANGE_NOTIFY_BIT 1: SEC_PRIV_UNDOCK_BIT 1: SEC_PRIV_ENABLE_DELEGATION_BIT 1: SEC_PRIV_MANAGE_VOLUME_BIT 1: SEC_PRIV_IMPERSONATE_BIT 1: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x0000000000000942 (2370) gid : 0x0000000000000201 (513) ngroups : 0x0000000b (11) groups: ARRAY(11) groups : 0x0000000000000201 (513) groups : 0x0000000000000407 (1031) groups : 0x00000000000076fe (30462) groups : 0x00000000000076ff (30463) groups : 0x0000000000007706 (30470) groups : 0x000000000000770f (30479) groups : 0x0000000000011173 (70003) groups : 0x0000000000011174 (70004) groups : 0x0000000000011175 (70005) groups : 0x0000000000011172 (70002) groups : 0x0000000000011171 (70001) info : * info: struct auth_user_info account_name : * account_name : 'acroniswks' domain_name : * domain_name : 'MUC' full_name : * full_name : 'Acronis Workstation' logon_script : * logon_script : 'logonscript.bat' profile_path : * profile_path : '' home_directory : * home_directory : '\\genome\homedirs\acroniswks' home_drive : * home_drive : 'H:' logon_server : * logon_server : 'EXON' last_logon : NTTIME(0) last_logoff : Di Jan 19 04:14:07 2038 CET acct_expiry : Do Sep 14 04:48:05 30828 CEST last_password_change : Fr Jun 6 09:55:59 2014 CEST allow_password_change : Fr Jun 13 09:55:59 2014 CEST force_password_change : Do Sep 14 04:48:05 30828 CEST logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000210 (528) authenticated : 0x01 (1) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'MUC\acroniswks' sanitized_username : * sanitized_username : 'acroniswks' torture : NULL credentials : NULL connection_dialect : 0x0000 (0) signing_required : 0x00 (0) encryption_required : 0x00 (0) num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000007d86 (32134) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0xab9e30f1405fac69 (-6080368634178327447) local_address : 'ipv4:192.168.29.19:445' remote_address : 'ipv4:10.1.1.167:4120' remote_name : '10.1.1.167' auth_session_info_seqnum : 0x00000001 (1) connection : * status : NT_STATUS_OK idle_time : Mi Jun 24 03:46:18 2015 CEST nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) gensec : * compat : * tcon_table : NULL