The Samba-Bugzilla – Attachment 12013 Details for
Bug 11870
Security problem? ads_sasl_spnego_gensec_bind(KRB5) failed
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
debug level 10
smbd.debug (text/plain), 446.92 KB, created by
Tom Schulz
on 2016-04-21 18:31:18 UTC
(
hide
)
Description:
debug level 10
Filename:
MIME Type:
Creator:
Tom Schulz
Created:
2016-04-21 18:31:18 UTC
Size:
446.92 KB
patch
obsolete
>[2016/04/21 14:10:31.045562, 3, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3742(lp_load_ex) > lp_load_ex: refreshing parameters >[2016/04/21 14:10:31.045623, 5, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1313(free_param_opts) > Freeing parametrics: >[2016/04/21 14:10:31.045694, 3, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:544(init_globals) > Initialising global parameters >[2016/04/21 14:10:31.045731, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:316(max_open_files) > rlimit_max: increasing rlimit_max (256) to minimum Windows limit (16384) >[2016/04/21 14:10:31.045809, 5, pid=26063, effective(0, 0), real(0, 0)] ../lib/util/debug.c:638(debug_dump_status) > INFO: Current debug levels: > all: 10 > tdb: 10 > printdrivers: 10 > lanman: 10 > smb: 10 > rpc_parse: 10 > rpc_srv: 10 > rpc_cli: 10 > passdb: 10 > sam: 10 > auth: 10 > winbind: 10 > vfs: 10 > idmap: 10 > quota: 10 > acls: 10 > locking: 10 > msdfs: 10 > dmapi: 10 > registry: 10 > scavenger: 10 > dns: 10 > ldb: 10 > tevent: 10 >[2016/04/21 14:10:31.046111, 3, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2671(lp_do_section) > Processing section "[global]" > doing parameter workgroup = adi > doing parameter server string = > doing parameter client ldap sasl wrapping = plain > doing parameter require strong key = no > doing parameter client ntlmv2 auth = no > doing parameter client signing = auto > doing parameter winbind sealed pipes = no > doing parameter security = ads > doing parameter load printers = no > doing parameter printcap name = /etc/printers.samba > doing parameter printing = sysv > doing parameter guest account = nobody2 > doing parameter log file = /opt/local/samba4/var/logs/%h/log.%m > doing parameter max log size = 1500 > doing parameter realm = adi.com > doing parameter passdb backend = tdbsam > doing parameter socket options = TCP_NODELAY > doing parameter dns proxy = no > doing parameter dos filemode = yes > doing parameter delete readonly = yes > doing parameter name resolve order = bcast host > doing parameter host msdfs = yes > doing parameter msdfs root = yes > doing parameter unix extensions = no > doing parameter wide links = yes > doing parameter lock directory = /var/samba/locks/%h > doing parameter pid directory = /var/samba/locks/%h > doing parameter include = /opt/local/samba4/etc/smb.conf.%h >[2016/04/21 14:10:31.047198, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[homes]" >[2016/04/21 14:10:31.047277, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 0 for homes >[2016/04/21 14:10:31.047315, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1471(hash_a_service) > hash_a_service: creating servicehash >[2016/04/21 14:10:31.047356, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 0 for service name homes > doing parameter comment = Home Directories > doing parameter browseable = no > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.047585, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[users]" >[2016/04/21 14:10:31.047663, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 1 for users >[2016/04/21 14:10:31.047694, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 1 for service name users > doing parameter comment = User Directories > doing parameter path = /home/users > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.048161, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[projects]" >[2016/04/21 14:10:31.048213, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 2 for projects >[2016/04/21 14:10:31.048243, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 2 for service name projects > doing parameter comment = Project Directories > doing parameter path = /home/projects > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.048356, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[zacltest1]" >[2016/04/21 14:10:31.048408, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 3 for zacltest1 >[2016/04/21 14:10:31.048441, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 3 for service name zacltest1 > doing parameter comment = Acl test > doing parameter path = /home/users/schulz/tmp/acltestmain > doing parameter browseable = yes > doing parameter writable = yes >[2016/04/21 14:10:31.048538, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[zacltest2]" >[2016/04/21 14:10:31.048580, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 4 for zacltest2 >[2016/04/21 14:10:31.048609, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 4 for service name zacltest2 > doing parameter comment = Acl test > doing parameter path = /home/users/schulz/tmp/acltestmain > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.048720, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[zacltest3]" >[2016/04/21 14:10:31.048772, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 5 for zacltest3 >[2016/04/21 14:10:31.048801, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 5 for service name zacltest3 > doing parameter comment = Acl test > doing parameter path = /home/users/schulz/tmp/acltestmain > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit acls = yes >[2016/04/21 14:10:31.048912, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[zacltest4]" >[2016/04/21 14:10:31.048953, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 6 for zacltest4 >[2016/04/21 14:10:31.048982, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 6 for service name zacltest4 > doing parameter comment = Acl test > doing parameter path = /home/users/schulz/tmp/acltestmain > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit acls = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.049116, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[root]" >[2016/04/21 14:10:31.049156, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 7 for root >[2016/04/21 14:10:31.049197, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 7 for service name root > doing parameter comment = All Directories > doing parameter path = / > doing parameter browseable = yes > doing parameter writable = yes >[2016/04/21 14:10:31.049293, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[ftp]" >[2016/04/21 14:10:31.049340, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 8 for ftp >[2016/04/21 14:10:31.049370, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 8 for service name ftp > doing parameter comment = Ftp Directories > doing parameter path = /home/users/ftp > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.049499, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[adi-projects]" >[2016/04/21 14:10:31.049547, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 9 for adi-projects >[2016/04/21 14:10:31.049577, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 9 for service name adi-projects > doing parameter comment = ADI Project Directories > doing parameter path = /home/projects/adirel/projects > doing parameter browseable = yes > doing parameter writable = yes > doing parameter force create mode = 0666 > doing parameter force directory mode = 0666 >[2016/04/21 14:10:31.049780, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[production_test_results]" >[2016/04/21 14:10:31.049823, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 10 for production_test_results >[2016/04/21 14:10:31.049853, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 10 for service name production_test_results > doing parameter comment = sqa production test results > doing parameter path = /home/projects/sqa/production_test_results > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.049974, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[system_configuration_info]" >[2016/04/21 14:10:31.050016, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 11 for system_configuration_info >[2016/04/21 14:10:31.050058, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 11 for service name system_configuration_info > doing parameter comment = sqa system configuration info > doing parameter path = /home/projects/sqa/system_configuration_info > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.050176, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[production_board_test_results]" >[2016/04/21 14:10:31.050222, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 12 for production_board_test_results >[2016/04/21 14:10:31.050253, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 12 for service name production_board_test_results > doing parameter comment = sqa production board test results > doing parameter path = /home/projects/sqa/production_board_test_results > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.050369, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[marketing]" >[2016/04/21 14:10:31.050416, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 13 for marketing >[2016/04/21 14:10:31.050454, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 13 for service name marketing > doing parameter comment = Marketing Project Directories > doing parameter path = /home/projects/marketing > doing parameter browseable = yes > doing parameter writable = yes > doing parameter force create mode = 0664 > doing parameter force directory mode = 0664 >[2016/04/21 14:10:31.050589, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[CustomerSupport]" >[2016/04/21 14:10:31.050630, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 14 for CustomerSupport >[2016/04/21 14:10:31.050659, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 14 for service name CustomerSupport > doing parameter comment = CustomerSupport Project Directories > doing parameter path = /home/projects/CustomerSupport > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.050778, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[proposals]" >[2016/04/21 14:10:31.050818, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 15 for proposals >[2016/04/21 14:10:31.050848, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 15 for service name proposals > doing parameter comment = proposals > doing parameter path = /home/projects/proposals > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.050958, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[bms]" >[2016/04/21 14:10:31.051015, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 16 for bms >[2016/04/21 14:10:31.051045, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 16 for service name bms > doing parameter comment = bms > doing parameter path = /home/projects/bms > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.051157, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[timecards]" >[2016/04/21 14:10:31.051197, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 17 for timecards >[2016/04/21 14:10:31.051234, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 17 for service name timecards > doing parameter comment = Timecard Submission > doing parameter path = /home/projects/timecards > doing parameter browseable = yes > doing parameter writable = yes > doing parameter force create mode = 0666 > doing parameter force directory mode = 0666 >[2016/04/21 14:10:31.051371, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[ProjectManagement]" >[2016/04/21 14:10:31.051412, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 18 for ProjectManagement >[2016/04/21 14:10:31.051442, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 18 for service name ProjectManagement > doing parameter comment = Project Management Directories > doing parameter path = /home/projects/ProjectManagement > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.051585, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[ariel]" >[2016/04/21 14:10:31.051627, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 19 for ariel >[2016/04/21 14:10:31.051657, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 19 for service name ariel > doing parameter comment = Software Development Directories > doing parameter path = /home/projects/ariel > doing parameter browseable = yes > doing parameter writable = yes >[2016/04/21 14:10:31.051747, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[proteus]" >[2016/04/21 14:10:31.051799, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 20 for proteus >[2016/04/21 14:10:31.051839, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 20 for service name proteus > doing parameter comment = Software Development Directories > doing parameter path = /home/projects/proteus > doing parameter browseable = yes > doing parameter writable = yes >[2016/04/21 14:10:31.051947, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[support]" >[2016/04/21 14:10:31.051988, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 21 for support >[2016/04/21 14:10:31.052025, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 21 for service name support > doing parameter comment = Customer Support Directories > doing parameter path = /home/users/support > doing parameter browseable = yes > doing parameter writable = yes > doing parameter create mask = 0777 > doing parameter force create mode = 0666 >[2016/04/21 14:10:31.052163, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[scanner]" >[2016/04/21 14:10:31.052205, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 22 for scanner >[2016/04/21 14:10:31.052234, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 22 for service name scanner > doing parameter comment = Customer Support Directories > doing parameter path = /home/users/scanner > doing parameter browseable = yes > doing parameter writable = yes >[2016/04/21 14:10:31.052324, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[hwdesign]" >[2016/04/21 14:10:31.052368, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 23 for hwdesign >[2016/04/21 14:10:31.052398, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 23 for service name hwdesign > doing parameter comment = Hardware Design Directories > doing parameter path = /home/projects/hwdesign > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.052517, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[HR Recruitment]" >[2016/04/21 14:10:31.052558, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 24 for HR Recruitment >[2016/04/21 14:10:31.052599, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 24 for service name HR Recruitment > doing parameter comment = HR Recruitment > doing parameter path = /home/projects/HR_Recruitment > doing parameter browseable = yes > doing parameter writable = yes > doing parameter inherit permissions = yes >[2016/04/21 14:10:31.052721, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[www]" >[2016/04/21 14:10:31.052763, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 25 for www >[2016/04/21 14:10:31.052792, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 25 for service name www > doing parameter comment = Hardware Design Directories > doing parameter path = /home/projects/www > doing parameter browseable = yes > doing parameter writable = yes >[2016/04/21 14:10:31.052928, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[hr]" >[2016/04/21 14:10:31.052981, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 26 for hr >[2016/04/21 14:10:31.053012, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 26 for service name hr > doing parameter comment = Human Resources > doing parameter path = /home/projects/hr > doing parameter browseable = yes > doing parameter writable = yes >[2016/04/21 14:10:31.053102, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[W000Axxxx]" >[2016/04/21 14:10:31.053143, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 27 for W000Axxxx >[2016/04/21 14:10:31.053172, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 27 for service name W000Axxxx > doing parameter comment = Hardware Design W000Axxxx Directory > doing parameter path = /home/projects/hwdesign/Release/W_Software/W000Axxxx > doing parameter browseable = yes > doing parameter writable = no >[2016/04/21 14:10:31.053269, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[W_Software]" >[2016/04/21 14:10:31.053311, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 28 for W_Software >[2016/04/21 14:10:31.053351, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 28 for service name W_Software > doing parameter comment = Hardware Design W_Software Directory > doing parameter path = /home/projects/hwdesign/Release/W_Software > doing parameter browseable = yes > doing parameter writable = no >[2016/04/21 14:10:31.053477, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) > Processing section "[printers]" >[2016/04/21 14:10:31.053523, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 29 for printers >[2016/04/21 14:10:31.053552, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 29 for service name printers > doing parameter comment = All Printers > doing parameter path = /var/tmp/samba > doing parameter browseable = no > doing parameter writable = no > doing parameter printable = yes >[2016/04/21 14:10:31.053812, 4, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3783(lp_load_ex) > pm_process() returned Yes >[2016/04/21 14:10:31.053936, 8, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) > add_a_service: Creating snum = 30 for IPC$ >[2016/04/21 14:10:31.053971, 10, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) > hash_a_service: hashing index 30 for service name IPC$ >[2016/04/21 14:10:31.054047, 3, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1588(lp_add_ipc) > adding IPC service >[2016/04/21 14:10:31.054123, 6, pid=26063, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2226(lp_file_list_changed) > lp_file_list_changed() > file /opt/local/samba4/etc/smb.conf.%h -> /opt/local/samba4/etc/smb.conf.mackerel last mod_time: Tue Sep 15 10:04:28 2015 > > file /opt/local/samba4/etc/smb.conf -> /opt/local/samba4/etc/smb.conf last mod_time: Tue Apr 19 13:44:13 2016 > >[2016/04/21 14:10:31.055023, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface bnx0:3 ip=192.168.2.40 bcast=192.168.2.255 netmask=255.255.255.0 >[2016/04/21 14:10:31.055186, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface bnx0:4 ip=192.168.2.42 bcast=192.168.2.255 netmask=255.255.255.0 >[2016/04/21 14:10:31.055391, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface bnx0:2 ip=192.168.2.45 bcast=192.168.2.255 netmask=255.255.255.0 >[2016/04/21 14:10:31.055445, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface bnx0:12 ip=192.168.2.126 bcast=192.168.2.255 netmask=255.255.255.0 >[2016/04/21 14:10:31.055485, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface bnx0:11 ip=192.168.2.130 bcast=192.168.2.255 netmask=255.255.255.0 >[2016/04/21 14:10:31.055524, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface bnx0:7 ip=192.168.2.135 bcast=192.168.2.255 netmask=255.255.255.0 >[2016/04/21 14:10:31.055563, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface bnx0:1 ip=192.168.2.137 bcast=192.168.2.255 netmask=255.255.255.0 >[2016/04/21 14:10:31.055607, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface bnx0 ip=192.168.2.150 bcast=192.168.2.255 netmask=255.255.255.0 >[2016/04/21 14:10:31.055646, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface bnx0:10 ip=192.168.2.209 bcast=192.168.2.255 netmask=255.255.255.0 >[2016/04/21 14:10:31.055686, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface bnx0:6 ip=192.168.2.213 bcast=192.168.2.255 netmask=255.255.255.0 >[2016/04/21 14:10:31.055725, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface bnx0:9 ip=192.168.2.238 bcast=192.168.2.255 netmask=255.255.255.0 >[2016/04/21 14:10:31.055763, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface bnx0:5 ip=192.168.3.150 bcast=192.168.3.255 netmask=255.255.255.0 >[2016/04/21 14:10:31.055805, 2, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface bnx0:8 ip=192.168.4.150 bcast=192.168.4.255 netmask=255.255.255.0 >[2016/04/21 14:10:31.064770, 3, pid=26063, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1433(main) > loaded services >[2016/04/21 14:10:31.064859, 5, pid=26063, effective(0, 0), real(0, 0)] ../source3/lib/util_names.c:152(init_names) > Netbios name list:- > my_netbios_names[0]="MACKEREL" >[2016/04/21 14:10:31.065171, 1, pid=26063, effective(0, 0), real(0, 0)] ../source3/profile/profile_dummy.c:30(set_profile_level) > INFO: Profiling support unavailable in this build. >[2016/04/21 14:10:31.065208, 3, pid=26063, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1464(main) > Becoming a daemon. >[2016/04/21 14:10:31.068187, 8, pid=26066, effective(0, 0), real(0, 0)] ../lib/util/util.c:394(fcntl_lock) > fcntl_lock 12 34 0 1 2 >[2016/04/21 14:10:31.068291, 8, pid=26066, effective(0, 0), real(0, 0)] ../lib/util/util.c:429(fcntl_lock) > fcntl_lock: Lock call successful >[2016/04/21 14:10:31.068586, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) > msg_dgm_ref_destructor: refs=0 >[2016/04/21 14:10:31.068853, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) > messaging_dgm_ref: messaging_dgm_init returned Error 0 >[2016/04/21 14:10:31.068913, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) > messaging_dgm_ref: unique = 1372236862694175834 >[2016/04/21 14:10:31.069244, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) > Attempting to register passdb backend smbpasswd >[2016/04/21 14:10:31.069303, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) > Successfully added passdb backend 'smbpasswd' >[2016/04/21 14:10:31.069341, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) > Attempting to register passdb backend tdbsam >[2016/04/21 14:10:31.069413, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) > Successfully added passdb backend 'tdbsam' >[2016/04/21 14:10:31.069451, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) > Attempting to register passdb backend wbc_sam >[2016/04/21 14:10:31.069486, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) > Successfully added passdb backend 'wbc_sam' >[2016/04/21 14:10:31.069519, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) > Attempting to register passdb backend samba_dsdb >[2016/04/21 14:10:31.069553, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) > Successfully added passdb backend 'samba_dsdb' >[2016/04/21 14:10:31.069584, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) > Attempting to register passdb backend samba4 >[2016/04/21 14:10:31.069617, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) > Successfully added passdb backend 'samba4' >[2016/04/21 14:10:31.069654, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) > Attempting to register passdb backend ldapsam >[2016/04/21 14:10:31.069688, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) > Successfully added passdb backend 'ldapsam' >[2016/04/21 14:10:31.069724, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) > Attempting to register passdb backend NDS_ldapsam >[2016/04/21 14:10:31.069761, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) > Successfully added passdb backend 'NDS_ldapsam' >[2016/04/21 14:10:31.069798, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) > Attempting to register passdb backend IPA_ldapsam >[2016/04/21 14:10:31.069832, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) > Successfully added passdb backend 'IPA_ldapsam' >[2016/04/21 14:10:31.069903, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:154(make_pdb_method_name) > Attempting to find a passdb backend to match tdbsam (tdbsam) >[2016/04/21 14:10:31.069936, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:175(make_pdb_method_name) > Found pdb backend tdbsam >[2016/04/21 14:10:31.070086, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:186(make_pdb_method_name) > pdb backend tdbsam has a valid init >[2016/04/21 14:10:31.070855, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) > check lock order 1 for /var/samba/locks/%h/smbXsrv_version_global.tdb >[2016/04/21 14:10:31.070895, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:/var/samba/locks/%h/smbXsrv_version_global.tdb 2:<none> 3:<none> >[2016/04/21 14:10:31.070941, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Locking key 736D62587372765F7665 >[2016/04/21 14:10:31.070987, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) > Allocated locked data 0x80aaee8 >[2016/04/21 14:10:31.086151, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Unlocking key 736D62587372765F7665 >[2016/04/21 14:10:31.086205, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) > release lock order 1 for /var/samba/locks/%h/smbXsrv_version_global.tdb >[2016/04/21 14:10:31.086237, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:<none> 2:<none> 3:<none> >[2016/04/21 14:10:31.086272, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:250(smbXsrv_version_global_init) > smbXsrv_version_global_init >[2016/04/21 14:10:31.086297, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:251(smbXsrv_version_global_init) >[2016/04/21 14:10:31.086327, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) > &global_blob: struct smbXsrv_version_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_version_globalU(case 0) > info0 : * > info0: struct smbXsrv_version_global0 > db_rec : NULL > num_nodes : 0x00000001 (1) > nodes: ARRAY(1) > nodes: struct smbXsrv_version_node0 > server_id: struct server_id > pid : 0x00000000000065d2 (26066) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0x130b2a27fc95345a (1372236862694175834) > min_version : SMBXSRV_VERSION_0 (0) > max_version : SMBXSRV_VERSION_0 (0) > current_version : SMBXSRV_VERSION_0 (0) >[2016/04/21 14:10:31.103713, 10, pid=26067, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) > msg_dgm_ref_destructor: refs=0 >[2016/04/21 14:10:31.104092, 10, pid=26067, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) > messaging_dgm_ref: messaging_dgm_init returned Error 0 >[2016/04/21 14:10:31.104154, 10, pid=26067, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) > messaging_dgm_ref: unique = 365609515480886123 >[2016/04/21 14:10:31.104314, 10, pid=26068, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) > msg_dgm_ref_destructor: refs=0 >[2016/04/21 14:10:31.104657, 10, pid=26068, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) > messaging_dgm_ref: messaging_dgm_init returned Error 0 >[2016/04/21 14:10:31.104715, 10, pid=26068, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) > messaging_dgm_ref: unique = 3200025803312147355 >[2016/04/21 14:10:31.104944, 5, pid=26068, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 13 - private_data=80abd98 >[2016/04/21 14:10:31.105020, 5, pid=26068, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 788 - private_data=80abd98 >[2016/04/21 14:10:31.105052, 5, pid=26068, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 773 - private_data=0 >[2016/04/21 14:10:31.105216, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:469(cleanupd_init) > cleanupd_init: Started cleanupd pid=26068 >[2016/04/21 14:10:31.121648, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 789 - private_data=80aba08 >[2016/04/21 14:10:31.122030, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:768(regdb_init) > regdb_init: registry db openend. refcount reset (1) >[2016/04/21 14:10:31.122143, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:70(reghook_cache_init) > reghook_cache_init: new tree with default ops fffffffffe939800 for key [] >[2016/04/21 14:10:31.122381, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2016/04/21 14:10:31.122553, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Samba Printer Port] len[2] >[2016/04/21 14:10:31.122598, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2016/04/21 14:10:31.122644, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[0]: name[DefaultSpoolDirectory] len[70] >[2016/04/21 14:10:31.122680, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2016/04/21 14:10:31.122718, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[0]: name[DisplayName] len[20] >[2016/04/21 14:10:31.122755, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[1]: name[ErrorControl] len[4] >[2016/04/21 14:10:31.122789, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2016/04/21 14:10:31.122831, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[0]: name[DisplayName] len[20] >[2016/04/21 14:10:31.122864, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[1]: name[ErrorControl] len[4] >[2016/04/21 14:10:31.123092, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops fffffffffed3d300 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] >[2016/04/21 14:10:31.123144, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2016/04/21 14:10:31.123222, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] to tree >[2016/04/21 14:10:31.123272, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2016/04/21 14:10:31.123320, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops fffffffffe939800 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2016/04/21 14:10:31.123352, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2016/04/21 14:10:31.123383, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] to tree >[2016/04/21 14:10:31.123410, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2016/04/21 14:10:31.123448, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops fffffffffe939800 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2016/04/21 14:10:31.123478, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2016/04/21 14:10:31.123507, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] to tree >[2016/04/21 14:10:31.123552, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2016/04/21 14:10:31.123578, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops fffffffffed3d340 for key [\HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] >[2016/04/21 14:10:31.123611, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2016/04/21 14:10:31.123641, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] to tree >[2016/04/21 14:10:31.123667, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2016/04/21 14:10:31.123692, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops fffffffffe130580 for key [\HKLM\SOFTWARE\Samba\smbconf] >[2016/04/21 14:10:31.123720, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2016/04/21 14:10:31.123747, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree >[2016/04/21 14:10:31.123775, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2016/04/21 14:10:31.123799, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops fffffffffed3d380 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] >[2016/04/21 14:10:31.123827, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2016/04/21 14:10:31.123854, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] to tree >[2016/04/21 14:10:31.123879, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2016/04/21 14:10:31.123903, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops fffffffffed3d3c0 for key [\HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] >[2016/04/21 14:10:31.123939, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2016/04/21 14:10:31.123966, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] to tree >[2016/04/21 14:10:31.123992, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2016/04/21 14:10:31.124016, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops fffffffffed3d400 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] >[2016/04/21 14:10:31.124044, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2016/04/21 14:10:31.124074, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] to tree >[2016/04/21 14:10:31.124099, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2016/04/21 14:10:31.124123, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops fffffffffed3d440 for key [\HKPT] >[2016/04/21 14:10:31.124151, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2016/04/21 14:10:31.124175, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKPT] to tree >[2016/04/21 14:10:31.124199, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2016/04/21 14:10:31.124226, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops fffffffffed3d480 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] >[2016/04/21 14:10:31.124255, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2016/04/21 14:10:31.124281, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] to tree >[2016/04/21 14:10:31.124306, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2016/04/21 14:10:31.124330, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops fffffffffed3d4c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] >[2016/04/21 14:10:31.124361, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2016/04/21 14:10:31.124389, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] to tree >[2016/04/21 14:10:31.124413, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2016/04/21 14:10:31.124445, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (1->0) >[2016/04/21 14:10:31.124948, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user nobody2 >[2016/04/21 14:10:31.124985, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody2 >[2016/04/21 14:10:31.125778, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody2]! >[2016/04/21 14:10:31.125902, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user MACKEREL\nobody2 >[2016/04/21 14:10:31.125931, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is mackerel\nobody2 >[2016/04/21 14:10:31.126166, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:128(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as given is MACKEREL\nobody2 >[2016/04/21 14:10:31.126410, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:141(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as uppercase is MACKEREL\NOBODY2 >[2016/04/21 14:10:31.126655, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:153(Get_Pwnam_internals) > Checking combinations of 0 uppercase letters in mackerel\nobody2 >[2016/04/21 14:10:31.126713, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals didn't find user [MACKEREL\nobody2]! >[2016/04/21 14:10:31.126741, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user nobody2 >[2016/04/21 14:10:31.126766, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody2 >[2016/04/21 14:10:31.126792, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody2]! >[2016/04/21 14:10:31.127299, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:77(lookup_name) > lookup_name: MACKEREL\nobody2 => domain=[MACKEREL], name=[nobody2] >[2016/04/21 14:10:31.127342, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:78(lookup_name) > lookup_name: flags = 0x073 >[2016/04/21 14:10:31.127444, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.127492, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.127732, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.127780, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.127829, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.128065, 4, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:558(tdbsam_open) > tdbsam_open: successfully opened /opt/local/samba4/private/passdb.tdb >[2016/04/21 14:10:31.128126, 5, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam) > pdb_getsampwnam (TDB): error fetching database. > Key: USER_nobody2 >[2016/04/21 14:10:31.128173, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.128211, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.128241, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.128268, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.128305, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.128330, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.128526, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.128570, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:77(lookup_name) > lookup_name: Unix User\nobody2 => domain=[Unix User], name=[nobody2] >[2016/04/21 14:10:31.128599, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:78(lookup_name) > lookup_name: flags = 0x073 >[2016/04/21 14:10:31.128727, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user nobody2 >[2016/04/21 14:10:31.128762, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody2 >[2016/04/21 14:10:31.128790, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody2]! >[2016/04/21 14:10:31.128916, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1439(sid_to_uid) > sid S-1-22-1-32767 -> uid 32767 >[2016/04/21 14:10:31.129318, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) > sys_getgrouplist: user [nobody2] >[2016/04/21 14:10:31.129439, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.129472, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.129499, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.129534, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.129558, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.131978, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.132123, 5, pid=26066, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:75(gencache_init) > Opening cache file at /opt/local/samba4/var/cache/gencache.tdb >[2016/04/21 14:10:31.135825, 5, pid=26066, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:126(gencache_init) > Opening cache file at /var/samba/locks/%h/gencache_notrans.tdb >[2016/04/21 14:10:31.140180, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1292(gid_to_sid) > gid_to_sid: winbind failed to find a sid for gid 32767 >[2016/04/21 14:10:31.140229, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.140260, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.140287, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.140314, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.140338, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.140412, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.140521, 10, pid=26066, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:333(gencache_set_data_blob) > Adding cache entry with key=[IDMAP/SID2XID/S-1-22-2-32767] and timeout=[Thu Apr 28 14:10:31 2016 EDT] (604800 seconds ahead) >[2016/04/21 14:10:31.141842, 10, pid=26066, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:333(gencache_set_data_blob) > Adding cache entry with key=[IDMAP/GID2SID/32767] and timeout=[Thu Apr 28 14:10:31 2016 EDT] (604800 seconds ahead) >[2016/04/21 14:10:31.141928, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1155(legacy_gid_to_sid) > LEGACY: gid 32767 -> sid S-1-22-2-32767 >[2016/04/21 14:10:31.142005, 1, pid=26066, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2377(lp_idmap_range) > idmap range not specified for domain '*' >[2016/04/21 14:10:31.142118, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:340(create_local_nt_token) > Create local NT token for S-1-22-1-32767 >[2016/04/21 14:10:31.142207, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user nobody2 >[2016/04/21 14:10:31.142234, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody2 >[2016/04/21 14:10:31.142261, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody2]! >[2016/04/21 14:10:31.142289, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) > sys_getgrouplist: user [nobody2] >[2016/04/21 14:10:31.142316, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.142349, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.142376, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.142403, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.142426, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.144684, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.144749, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) > gid 32767 -> sid S-1-22-2-32767 >[2016/04/21 14:10:31.144857, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.144889, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.144915, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.144943, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.144965, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.145145, 10, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1562(pdb_default_sid_to_id) > Could not find map for sid S-1-5-32-544 >[2016/04/21 14:10:31.145226, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/pdb_util.c:157(create_builtin_administrators) > create_builtin_administrators: Failed to create Administrators >[2016/04/21 14:10:31.145274, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.145332, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.145362, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.145388, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.145415, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.145442, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.145504, 10, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1562(pdb_default_sid_to_id) > Could not find map for sid S-1-5-32-545 >[2016/04/21 14:10:31.145553, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/pdb_util.c:128(create_builtin_users) > create_builtin_users: Failed to create Users >[2016/04/21 14:10:31.145582, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.145619, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.145648, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.145678, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.145706, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.145728, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.145863, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.146016, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-1-32767] >[2016/04/21 14:10:31.146058, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-2-32767] >[2016/04/21 14:10:31.146099, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids) > get_privileges_for_sids: sid = S-1-1-0 > Privilege set: 0x0 >[2016/04/21 14:10:31.146139, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-2] >[2016/04/21 14:10:31.146173, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-32-546] >[2016/04/21 14:10:31.146446, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1360(sids_to_unixids) > wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE >[2016/04/21 14:10:31.146493, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.146525, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.146574, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.146605, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.146630, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.146703, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.146736, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-1-0 >[2016/04/21 14:10:31.146784, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.146817, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.146845, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.146876, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.146901, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.146944, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.146978, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-1-0 >[2016/04/21 14:10:31.147010, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.147041, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.147071, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.147101, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.147126, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.147171, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.147203, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-2 >[2016/04/21 14:10:31.147235, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.147266, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.147294, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.147324, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.147351, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.147401, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.147433, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-2 >[2016/04/21 14:10:31.147465, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.147496, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.147525, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.147556, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.147585, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.147638, 10, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1562(pdb_default_sid_to_id) > Could not find map for sid S-1-5-32-546 >[2016/04/21 14:10:31.147676, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.147709, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2016/04/21 14:10:31.147741, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.147774, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.147802, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.147831, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.147855, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.147903, 10, pid=26066, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1562(pdb_default_sid_to_id) > Could not find map for sid S-1-5-32-546 >[2016/04/21 14:10:31.147940, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.147974, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2016/04/21 14:10:31.148009, 10, pid=26066, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:609(create_local_token) > Could not convert SID S-1-1-0 to gid, ignoring it >[2016/04/21 14:10:31.148041, 10, pid=26066, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:609(create_local_token) > Could not convert SID S-1-5-2 to gid, ignoring it >[2016/04/21 14:10:31.148072, 10, pid=26066, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:609(create_local_token) > Could not convert SID S-1-5-32-546 to gid, ignoring it >[2016/04/21 14:10:31.148113, 10, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (5): > SID[ 0]: S-1-22-1-32767 > SID[ 1]: S-1-22-2-32767 > SID[ 2]: S-1-1-0 > SID[ 3]: S-1-5-2 > SID[ 4]: S-1-5-32-546 > Privileges (0x 0): > Rights (0x 0): >[2016/04/21 14:10:31.148246, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 32767 > Primary group is 32767 and contains 1 supplementary groups > Group[ 0]: 32767 >[2016/04/21 14:10:31.178997, 3, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/svcctl/srv_svcctl_reg.c:565(svcctl_init_winreg) > Initialise the svcctl registry keys if needed. >[2016/04/21 14:10:31.179095, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.179129, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.179156, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.179200, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.179225, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.179389, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.179423, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:885(regdb_open) > regdb_open: registry db opened. refcount reset (1) >[2016/04/21 14:10:31.195935, 4, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:203(make_internal_rpc_pipe_p) > Create pipe requested winreg >[2016/04/21 14:10:31.196018, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:223(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe winreg >[2016/04/21 14:10:31.196078, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:240(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe winreg >[2016/04/21 14:10:31.196768, 4, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:243(make_internal_rpc_pipe_p) > Created internal pipe winreg >[2016/04/21 14:10:31.213836, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > in: struct winreg_OpenHKLM > system_name : NULL > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2016/04/21 14:10:31.225874, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [HKLM] >[2016/04/21 14:10:31.225933, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (1->2) >[2016/04/21 14:10:31.225975, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM] >[2016/04/21 14:10:31.226007, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM] >[2016/04/21 14:10:31.226035, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.226069, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM] >[2016/04/21 14:10:31.226263, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.226385, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > out: struct winreg_OpenHKLM > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-1957-9717d2650000 > result : WERR_OK >[2016/04/21 14:10:31.227460, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > in: struct winreg_OpenKey > parent_handle : * > parent_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-1957-9717d2650000 > keyname: struct winreg_String > name_len : 0x0044 (68) > name_size : 0x0044 (68) > name : * > name : 'SYSTEM\CurrentControlSet\Services' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2016/04/21 14:10:31.250318, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.250477, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2016/04/21 14:10:31.250508, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (2->3) >[2016/04/21 14:10:31.250545, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2016/04/21 14:10:31.250571, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2016/04/21 14:10:31.250599, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.250622, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM] >[2016/04/21 14:10:31.250673, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2016/04/21 14:10:31.250730, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (3->4) >[2016/04/21 14:10:31.250762, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.250788, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.250816, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.250838, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.250893, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2016/04/21 14:10:31.250924, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.250960, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.250986, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.251014, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.251037, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.251102, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.251138, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (4->3) >[2016/04/21 14:10:31.251174, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.251284, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > out: struct winreg_OpenKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-1957-9717d2650000 > result : WERR_OK >[2016/04/21 14:10:31.251528, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > in: struct winreg_QueryInfoKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-1957-9717d2650000 > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL >[2016/04/21 14:10:31.251775, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.251914, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services' (ops fffffffffe939800) >[2016/04/21 14:10:31.251947, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.251992, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2088(regdb_get_secdesc) > regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.252084, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > out: struct winreg_QueryInfoKey > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL > num_subkeys : * > num_subkeys : 0x00000007 (7) > max_subkeylen : * > max_subkeylen : 0x0000001c (28) > max_classlen : * > max_classlen : 0x00000000 (0) > num_values : * > num_values : 0x00000000 (0) > max_valnamelen : * > max_valnamelen : 0x00000002 (2) > max_valbufsize : * > max_valbufsize : 0x00000000 (0) > secdescsize : * > secdescsize : 0x00000078 (120) > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2016/04/21 14:10:31.255382, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-1957-9717d2650000 > enum_index : 0x00000000 (0) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2016/04/21 14:10:31.255670, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.255787, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.255840, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x001a (26) > size : 0x001e (30) > name : * > name : 'LanmanServer' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2016/04/21 14:10:31.256184, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-1957-9717d2650000 > enum_index : 0x00000001 (1) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2016/04/21 14:10:31.256469, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.256589, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.256619, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x0012 (18) > size : 0x001e (30) > name : * > name : 'Eventlog' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2016/04/21 14:10:31.256859, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-1957-9717d2650000 > enum_index : 0x00000002 (2) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2016/04/21 14:10:31.257158, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.257274, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.257303, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x000c (12) > size : 0x001e (30) > name : * > name : 'Tcpip' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2016/04/21 14:10:31.257528, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-1957-9717d2650000 > enum_index : 0x00000003 (3) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2016/04/21 14:10:31.257806, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.257951, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.257981, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x0012 (18) > size : 0x001e (30) > name : * > name : 'Netlogon' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2016/04/21 14:10:31.258215, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-1957-9717d2650000 > enum_index : 0x00000004 (4) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2016/04/21 14:10:31.258484, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.258592, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.258621, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x0010 (16) > size : 0x001e (30) > name : * > name : 'Spooler' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2016/04/21 14:10:31.258850, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-1957-9717d2650000 > enum_index : 0x00000005 (5) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2016/04/21 14:10:31.259119, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.259228, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.259257, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x001e (30) > size : 0x001e (30) > name : * > name : 'RemoteRegistry' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2016/04/21 14:10:31.259485, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-1957-9717d2650000 > enum_index : 0x00000006 (6) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2016/04/21 14:10:31.259754, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.259889, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.259918, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x000a (10) > size : 0x001e (30) > name : * > name : 'WINS' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2016/04/21 14:10:31.260228, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0054 (84) > name_size : 0x0054 (84) > name : * > name : 'SYSTEM\CurrentControlSet\Services\Spooler' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2016/04/21 14:10:31.260690, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.260815, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler' >[2016/04/21 14:10:31.260878, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.260955, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.260995, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2016/04/21 14:10:31.261027, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (3->4) >[2016/04/21 14:10:31.261063, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2016/04/21 14:10:31.261092, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2016/04/21 14:10:31.261123, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.261149, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM] >[2016/04/21 14:10:31.261236, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.261284, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2016/04/21 14:10:31.261315, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.261349, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.261377, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.261406, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.261431, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.261479, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.261518, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.261550, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2016/04/21 14:10:31.261580, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.261615, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.261643, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.261673, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.261698, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.261795, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.261832, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Spooler] >[2016/04/21 14:10:31.261862, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.261897, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2016/04/21 14:10:31.261927, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2016/04/21 14:10:31.261959, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.261985, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2016/04/21 14:10:31.262031, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.262071, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.262193, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-1957-9717d2650000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2016/04/21 14:10:31.262475, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2016/04/21 14:10:31.262943, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.263061, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Start] >[2016/04/21 14:10:31.263101, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.263132, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler' (ops fffffffffe939800) >[2016/04/21 14:10:31.263165, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2016/04/21 14:10:31.263213, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Start] len[4] >[2016/04/21 14:10:31.263251, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[1]: name[Type] len[4] >[2016/04/21 14:10:31.263286, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[2]: name[ErrorControl] len[4] >[2016/04/21 14:10:31.263322, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[3]: name[ObjectName] len[24] >[2016/04/21 14:10:31.263357, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[4]: name[DisplayName] len[28] >[2016/04/21 14:10:31.263391, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[5]: name[ImagePath] len[68] >[2016/04/21 14:10:31.263423, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[6]: name[Description] len[106] >[2016/04/21 14:10:31.263463, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.263549, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2016/04/21 14:10:31.263838, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.263989, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Type] >[2016/04/21 14:10:31.264026, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.264063, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.264145, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2016/04/21 14:10:31.264432, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.264562, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ErrorControl] >[2016/04/21 14:10:31.264597, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.264629, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.264793, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2016/04/21 14:10:31.265419, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.265536, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ObjectName] >[2016/04/21 14:10:31.265571, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.265602, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.265701, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(28) > [0] : 0x50 (80) > [1] : 0x00 (0) > [2] : 0x72 (114) > [3] : 0x00 (0) > [4] : 0x69 (105) > [5] : 0x00 (0) > [6] : 0x6e (110) > [7] : 0x00 (0) > [8] : 0x74 (116) > [9] : 0x00 (0) > [10] : 0x20 (32) > [11] : 0x00 (0) > [12] : 0x53 (83) > [13] : 0x00 (0) > [14] : 0x70 (112) > [15] : 0x00 (0) > [16] : 0x6f (111) > [17] : 0x00 (0) > [18] : 0x6f (111) > [19] : 0x00 (0) > [20] : 0x6c (108) > [21] : 0x00 (0) > [22] : 0x65 (101) > [23] : 0x00 (0) > [24] : 0x72 (114) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > size : 0x0000001c (28) >[2016/04/21 14:10:31.266409, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.266527, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:DisplayName] >[2016/04/21 14:10:31.266560, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.266591, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.266671, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(68) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x70 (112) > [5] : 0x00 (0) > [6] : 0x74 (116) > [7] : 0x00 (0) > [8] : 0x2f (47) > [9] : 0x00 (0) > [10] : 0x6c (108) > [11] : 0x00 (0) > [12] : 0x6f (111) > [13] : 0x00 (0) > [14] : 0x63 (99) > [15] : 0x00 (0) > [16] : 0x61 (97) > [17] : 0x00 (0) > [18] : 0x6c (108) > [19] : 0x00 (0) > [20] : 0x2f (47) > [21] : 0x00 (0) > [22] : 0x73 (115) > [23] : 0x00 (0) > [24] : 0x61 (97) > [25] : 0x00 (0) > [26] : 0x6d (109) > [27] : 0x00 (0) > [28] : 0x62 (98) > [29] : 0x00 (0) > [30] : 0x61 (97) > [31] : 0x00 (0) > [32] : 0x34 (52) > [33] : 0x00 (0) > [34] : 0x2f (47) > [35] : 0x00 (0) > [36] : 0x6c (108) > [37] : 0x00 (0) > [38] : 0x69 (105) > [39] : 0x00 (0) > [40] : 0x62 (98) > [41] : 0x00 (0) > [42] : 0x2f (47) > [43] : 0x00 (0) > [44] : 0x73 (115) > [45] : 0x00 (0) > [46] : 0x76 (118) > [47] : 0x00 (0) > [48] : 0x63 (99) > [49] : 0x00 (0) > [50] : 0x63 (99) > [51] : 0x00 (0) > [52] : 0x74 (116) > [53] : 0x00 (0) > [54] : 0x6c (108) > [55] : 0x00 (0) > [56] : 0x2f (47) > [57] : 0x00 (0) > [58] : 0x73 (115) > [59] : 0x00 (0) > [60] : 0x6d (109) > [61] : 0x00 (0) > [62] : 0x62 (98) > [63] : 0x00 (0) > [64] : 0x64 (100) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > size : 0x00000044 (68) >[2016/04/21 14:10:31.268001, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.268110, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ImagePath] >[2016/04/21 14:10:31.268143, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.268173, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.268252, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(106) > [0] : 0x49 (73) > [1] : 0x00 (0) > [2] : 0x6e (110) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x72 (114) > [9] : 0x00 (0) > [10] : 0x6e (110) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6c (108) > [15] : 0x00 (0) > [16] : 0x20 (32) > [17] : 0x00 (0) > [18] : 0x73 (115) > [19] : 0x00 (0) > [20] : 0x65 (101) > [21] : 0x00 (0) > [22] : 0x72 (114) > [23] : 0x00 (0) > [24] : 0x76 (118) > [25] : 0x00 (0) > [26] : 0x69 (105) > [27] : 0x00 (0) > [28] : 0x63 (99) > [29] : 0x00 (0) > [30] : 0x65 (101) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x66 (102) > [35] : 0x00 (0) > [36] : 0x6f (111) > [37] : 0x00 (0) > [38] : 0x72 (114) > [39] : 0x00 (0) > [40] : 0x20 (32) > [41] : 0x00 (0) > [42] : 0x73 (115) > [43] : 0x00 (0) > [44] : 0x70 (112) > [45] : 0x00 (0) > [46] : 0x6f (111) > [47] : 0x00 (0) > [48] : 0x6f (111) > [49] : 0x00 (0) > [50] : 0x6c (108) > [51] : 0x00 (0) > [52] : 0x69 (105) > [53] : 0x00 (0) > [54] : 0x6e (110) > [55] : 0x00 (0) > [56] : 0x67 (103) > [57] : 0x00 (0) > [58] : 0x20 (32) > [59] : 0x00 (0) > [60] : 0x66 (102) > [61] : 0x00 (0) > [62] : 0x69 (105) > [63] : 0x00 (0) > [64] : 0x6c (108) > [65] : 0x00 (0) > [66] : 0x65 (101) > [67] : 0x00 (0) > [68] : 0x73 (115) > [69] : 0x00 (0) > [70] : 0x20 (32) > [71] : 0x00 (0) > [72] : 0x74 (116) > [73] : 0x00 (0) > [74] : 0x6f (111) > [75] : 0x00 (0) > [76] : 0x20 (32) > [77] : 0x00 (0) > [78] : 0x70 (112) > [79] : 0x00 (0) > [80] : 0x72 (114) > [81] : 0x00 (0) > [82] : 0x69 (105) > [83] : 0x00 (0) > [84] : 0x6e (110) > [85] : 0x00 (0) > [86] : 0x74 (116) > [87] : 0x00 (0) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x64 (100) > [91] : 0x00 (0) > [92] : 0x65 (101) > [93] : 0x00 (0) > [94] : 0x76 (118) > [95] : 0x00 (0) > [96] : 0x69 (105) > [97] : 0x00 (0) > [98] : 0x63 (99) > [99] : 0x00 (0) > [100] : 0x65 (101) > [101] : 0x00 (0) > [102] : 0x73 (115) > [103] : 0x00 (0) > [104] : 0x00 (0) > [105] : 0x00 (0) > size : 0x0000006a (106) >[2016/04/21 14:10:31.270207, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.270317, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Description] >[2016/04/21 14:10:31.270351, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.270381, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.280173, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-1957-9717d2650000 >[2016/04/21 14:10:31.280474, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.280633, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.280750, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2016/04/21 14:10:31.280780, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (4->3) >[2016/04/21 14:10:31.280815, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2016/04/21 14:10:31.280969, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0066 (102) > name_size : 0x0066 (102) > name : * > name : 'SYSTEM\CurrentControlSet\Services\Spooler\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2016/04/21 14:10:31.281430, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.281554, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler\Security' >[2016/04/21 14:10:31.281591, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.281625, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.281658, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2016/04/21 14:10:31.281689, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (3->4) >[2016/04/21 14:10:31.281725, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2016/04/21 14:10:31.281755, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2016/04/21 14:10:31.281786, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.281812, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM] >[2016/04/21 14:10:31.281866, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.281898, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2016/04/21 14:10:31.281928, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.281973, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.282001, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.282031, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.282064, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.282113, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.282151, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.282183, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2016/04/21 14:10:31.282213, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.282248, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.282277, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.282307, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.282332, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.282412, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.282452, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.282483, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Spooler] >[2016/04/21 14:10:31.282513, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.282548, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2016/04/21 14:10:31.282578, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2016/04/21 14:10:31.282610, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.282635, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2016/04/21 14:10:31.282681, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.282719, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2016/04/21 14:10:31.282749, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.282784, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2016/04/21 14:10:31.282814, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2016/04/21 14:10:31.282846, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.282872, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2016/04/21 14:10:31.282922, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.282961, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.283082, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000004-0000-0000-1957-9717d2650000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2016/04/21 14:10:31.283414, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000004-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2016/04/21 14:10:31.285772, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.285892, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security:Security] >[2016/04/21 14:10:31.285929, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.285960, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security' (ops fffffffffe939800) >[2016/04/21 14:10:31.285993, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2016/04/21 14:10:31.286036, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Security] len[120] >[2016/04/21 14:10:31.286072, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.286152, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000004-0000-0000-1957-9717d2650000 >[2016/04/21 14:10:31.286258, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.286372, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.286485, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2016/04/21 14:10:31.286512, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (4->3) >[2016/04/21 14:10:31.286544, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2016/04/21 14:10:31.286688, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0056 (86) > name_size : 0x0056 (86) > name : * > name : 'SYSTEM\CurrentControlSet\Services\NETLOGON' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2016/04/21 14:10:31.287140, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.287264, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON' >[2016/04/21 14:10:31.287300, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.287333, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.287364, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2016/04/21 14:10:31.287395, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (3->4) >[2016/04/21 14:10:31.287430, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2016/04/21 14:10:31.287459, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2016/04/21 14:10:31.287489, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.287515, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM] >[2016/04/21 14:10:31.287565, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.287598, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2016/04/21 14:10:31.287629, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.287663, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.287692, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.287722, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.287746, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.287792, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.287829, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.287859, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2016/04/21 14:10:31.287888, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.287921, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.287949, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.287979, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.288004, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.288080, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.288119, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [NETLOGON] >[2016/04/21 14:10:31.288150, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.288185, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2016/04/21 14:10:31.288214, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2016/04/21 14:10:31.288246, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.288272, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2016/04/21 14:10:31.288322, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.288361, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.288483, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-1957-9717d2650000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2016/04/21 14:10:31.288684, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2016/04/21 14:10:31.288979, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.289103, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Start] >[2016/04/21 14:10:31.289139, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.289170, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON' (ops fffffffffe939800) >[2016/04/21 14:10:31.289203, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2016/04/21 14:10:31.289245, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Start] len[4] >[2016/04/21 14:10:31.289281, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[1]: name[Type] len[4] >[2016/04/21 14:10:31.289316, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[2]: name[ErrorControl] len[4] >[2016/04/21 14:10:31.289350, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[3]: name[ObjectName] len[24] >[2016/04/21 14:10:31.289384, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[4]: name[DisplayName] len[20] >[2016/04/21 14:10:31.289417, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[5]: name[ImagePath] len[68] >[2016/04/21 14:10:31.289452, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[6]: name[Description] len[164] >[2016/04/21 14:10:31.289485, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.289565, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2016/04/21 14:10:31.289846, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.289960, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Type] >[2016/04/21 14:10:31.289996, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.290027, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.290106, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2016/04/21 14:10:31.290390, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.290526, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ErrorControl] >[2016/04/21 14:10:31.290575, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.290608, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.290701, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2016/04/21 14:10:31.291360, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.291484, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ObjectName] >[2016/04/21 14:10:31.291519, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.291550, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.291639, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(20) > [0] : 0x4e (78) > [1] : 0x00 (0) > [2] : 0x65 (101) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x20 (32) > [7] : 0x00 (0) > [8] : 0x4c (76) > [9] : 0x00 (0) > [10] : 0x6f (111) > [11] : 0x00 (0) > [12] : 0x67 (103) > [13] : 0x00 (0) > [14] : 0x6f (111) > [15] : 0x00 (0) > [16] : 0x6e (110) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > size : 0x00000014 (20) >[2016/04/21 14:10:31.292224, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.292358, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:DisplayName] >[2016/04/21 14:10:31.292393, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.292433, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.292524, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(68) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x70 (112) > [5] : 0x00 (0) > [6] : 0x74 (116) > [7] : 0x00 (0) > [8] : 0x2f (47) > [9] : 0x00 (0) > [10] : 0x6c (108) > [11] : 0x00 (0) > [12] : 0x6f (111) > [13] : 0x00 (0) > [14] : 0x63 (99) > [15] : 0x00 (0) > [16] : 0x61 (97) > [17] : 0x00 (0) > [18] : 0x6c (108) > [19] : 0x00 (0) > [20] : 0x2f (47) > [21] : 0x00 (0) > [22] : 0x73 (115) > [23] : 0x00 (0) > [24] : 0x61 (97) > [25] : 0x00 (0) > [26] : 0x6d (109) > [27] : 0x00 (0) > [28] : 0x62 (98) > [29] : 0x00 (0) > [30] : 0x61 (97) > [31] : 0x00 (0) > [32] : 0x34 (52) > [33] : 0x00 (0) > [34] : 0x2f (47) > [35] : 0x00 (0) > [36] : 0x6c (108) > [37] : 0x00 (0) > [38] : 0x69 (105) > [39] : 0x00 (0) > [40] : 0x62 (98) > [41] : 0x00 (0) > [42] : 0x2f (47) > [43] : 0x00 (0) > [44] : 0x73 (115) > [45] : 0x00 (0) > [46] : 0x76 (118) > [47] : 0x00 (0) > [48] : 0x63 (99) > [49] : 0x00 (0) > [50] : 0x63 (99) > [51] : 0x00 (0) > [52] : 0x74 (116) > [53] : 0x00 (0) > [54] : 0x6c (108) > [55] : 0x00 (0) > [56] : 0x2f (47) > [57] : 0x00 (0) > [58] : 0x73 (115) > [59] : 0x00 (0) > [60] : 0x6d (109) > [61] : 0x00 (0) > [62] : 0x62 (98) > [63] : 0x00 (0) > [64] : 0x64 (100) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > size : 0x00000044 (68) >[2016/04/21 14:10:31.293930, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.294049, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ImagePath] >[2016/04/21 14:10:31.294083, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.294115, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.294197, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(164) > [0] : 0x46 (70) > [1] : 0x00 (0) > [2] : 0x69 (105) > [3] : 0x00 (0) > [4] : 0x6c (108) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x20 (32) > [9] : 0x00 (0) > [10] : 0x73 (115) > [11] : 0x00 (0) > [12] : 0x65 (101) > [13] : 0x00 (0) > [14] : 0x72 (114) > [15] : 0x00 (0) > [16] : 0x76 (118) > [17] : 0x00 (0) > [18] : 0x69 (105) > [19] : 0x00 (0) > [20] : 0x63 (99) > [21] : 0x00 (0) > [22] : 0x65 (101) > [23] : 0x00 (0) > [24] : 0x20 (32) > [25] : 0x00 (0) > [26] : 0x70 (112) > [27] : 0x00 (0) > [28] : 0x72 (114) > [29] : 0x00 (0) > [30] : 0x6f (111) > [31] : 0x00 (0) > [32] : 0x76 (118) > [33] : 0x00 (0) > [34] : 0x69 (105) > [35] : 0x00 (0) > [36] : 0x64 (100) > [37] : 0x00 (0) > [38] : 0x69 (105) > [39] : 0x00 (0) > [40] : 0x6e (110) > [41] : 0x00 (0) > [42] : 0x67 (103) > [43] : 0x00 (0) > [44] : 0x20 (32) > [45] : 0x00 (0) > [46] : 0x61 (97) > [47] : 0x00 (0) > [48] : 0x63 (99) > [49] : 0x00 (0) > [50] : 0x63 (99) > [51] : 0x00 (0) > [52] : 0x65 (101) > [53] : 0x00 (0) > [54] : 0x73 (115) > [55] : 0x00 (0) > [56] : 0x73 (115) > [57] : 0x00 (0) > [58] : 0x20 (32) > [59] : 0x00 (0) > [60] : 0x74 (116) > [61] : 0x00 (0) > [62] : 0x6f (111) > [63] : 0x00 (0) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x70 (112) > [67] : 0x00 (0) > [68] : 0x6f (111) > [69] : 0x00 (0) > [70] : 0x6c (108) > [71] : 0x00 (0) > [72] : 0x69 (105) > [73] : 0x00 (0) > [74] : 0x63 (99) > [75] : 0x00 (0) > [76] : 0x79 (121) > [77] : 0x00 (0) > [78] : 0x20 (32) > [79] : 0x00 (0) > [80] : 0x61 (97) > [81] : 0x00 (0) > [82] : 0x6e (110) > [83] : 0x00 (0) > [84] : 0x64 (100) > [85] : 0x00 (0) > [86] : 0x20 (32) > [87] : 0x00 (0) > [88] : 0x70 (112) > [89] : 0x00 (0) > [90] : 0x72 (114) > [91] : 0x00 (0) > [92] : 0x6f (111) > [93] : 0x00 (0) > [94] : 0x66 (102) > [95] : 0x00 (0) > [96] : 0x69 (105) > [97] : 0x00 (0) > [98] : 0x6c (108) > [99] : 0x00 (0) > [100] : 0x65 (101) > [101] : 0x00 (0) > [102] : 0x20 (32) > [103] : 0x00 (0) > [104] : 0x64 (100) > [105] : 0x00 (0) > [106] : 0x61 (97) > [107] : 0x00 (0) > [108] : 0x74 (116) > [109] : 0x00 (0) > [110] : 0x61 (97) > [111] : 0x00 (0) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x28 (40) > [115] : 0x00 (0) > [116] : 0x6e (110) > [117] : 0x00 (0) > [118] : 0x6f (111) > [119] : 0x00 (0) > [120] : 0x74 (116) > [121] : 0x00 (0) > [122] : 0x72 (114) > [123] : 0x00 (0) > [124] : 0x65 (101) > [125] : 0x00 (0) > [126] : 0x6d (109) > [127] : 0x00 (0) > [128] : 0x6f (111) > [129] : 0x00 (0) > [130] : 0x74 (116) > [131] : 0x00 (0) > [132] : 0x65 (101) > [133] : 0x00 (0) > [134] : 0x6c (108) > [135] : 0x00 (0) > [136] : 0x79 (121) > [137] : 0x00 (0) > [138] : 0x20 (32) > [139] : 0x00 (0) > [140] : 0x6d (109) > [141] : 0x00 (0) > [142] : 0x61 (97) > [143] : 0x00 (0) > [144] : 0x6e (110) > [145] : 0x00 (0) > [146] : 0x61 (97) > [147] : 0x00 (0) > [148] : 0x67 (103) > [149] : 0x00 (0) > [150] : 0x65 (101) > [151] : 0x00 (0) > [152] : 0x61 (97) > [153] : 0x00 (0) > [154] : 0x62 (98) > [155] : 0x00 (0) > [156] : 0x6c (108) > [157] : 0x00 (0) > [158] : 0x65 (101) > [159] : 0x00 (0) > [160] : 0x29 (41) > [161] : 0x00 (0) > [162] : 0x00 (0) > [163] : 0x00 (0) > size : 0x000000a4 (164) >[2016/04/21 14:10:31.297257, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.297374, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Description] >[2016/04/21 14:10:31.297409, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.297439, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.297546, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-1957-9717d2650000 >[2016/04/21 14:10:31.297656, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.297784, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.297908, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2016/04/21 14:10:31.297937, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (4->3) >[2016/04/21 14:10:31.297972, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2016/04/21 14:10:31.298116, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0068 (104) > name_size : 0x0068 (104) > name : * > name : 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2016/04/21 14:10:31.298561, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.298697, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' >[2016/04/21 14:10:31.298733, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.298767, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.298804, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2016/04/21 14:10:31.298835, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (3->4) >[2016/04/21 14:10:31.298871, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2016/04/21 14:10:31.298900, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2016/04/21 14:10:31.298931, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.298957, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM] >[2016/04/21 14:10:31.299008, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.299040, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2016/04/21 14:10:31.299070, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.299104, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.299132, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.299161, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.299186, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.299232, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.299269, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.299300, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2016/04/21 14:10:31.299330, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.299380, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.299409, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.299441, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.299466, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.299527, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.299566, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.299597, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [NETLOGON] >[2016/04/21 14:10:31.299627, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.299662, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2016/04/21 14:10:31.299692, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2016/04/21 14:10:31.299724, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.299750, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2016/04/21 14:10:31.299799, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.299834, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2016/04/21 14:10:31.299864, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.299899, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2016/04/21 14:10:31.299928, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2016/04/21 14:10:31.299962, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.299988, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2016/04/21 14:10:31.300031, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.300068, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.300192, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000006-0000-0000-1957-9717d2650000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2016/04/21 14:10:31.300364, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000006-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2016/04/21 14:10:31.302675, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.302815, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security:Security] >[2016/04/21 14:10:31.302853, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.302884, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security' (ops fffffffffe939800) >[2016/04/21 14:10:31.302917, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2016/04/21 14:10:31.302969, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Security] len[120] >[2016/04/21 14:10:31.303013, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.303102, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000006-0000-0000-1957-9717d2650000 >[2016/04/21 14:10:31.303217, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.303341, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.303470, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2016/04/21 14:10:31.303499, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (4->3) >[2016/04/21 14:10:31.303533, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2016/04/21 14:10:31.303707, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0062 (98) > name_size : 0x0062 (98) > name : * > name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2016/04/21 14:10:31.304141, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.304265, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' >[2016/04/21 14:10:31.304301, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.304335, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.304365, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2016/04/21 14:10:31.304396, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (3->4) >[2016/04/21 14:10:31.304431, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2016/04/21 14:10:31.304460, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2016/04/21 14:10:31.304490, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.304516, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM] >[2016/04/21 14:10:31.304568, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.304601, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2016/04/21 14:10:31.304631, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.304664, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.304692, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.304722, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.304746, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.304792, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.304830, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.304860, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2016/04/21 14:10:31.304902, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.304938, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.304968, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.304999, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.305025, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.305094, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.305140, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [RemoteRegistry] >[2016/04/21 14:10:31.305179, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.305215, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2016/04/21 14:10:31.305245, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2016/04/21 14:10:31.305285, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.305358, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2016/04/21 14:10:31.305410, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.305458, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.305590, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-1957-9717d2650000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2016/04/21 14:10:31.305769, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2016/04/21 14:10:31.306083, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.306214, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Start] >[2016/04/21 14:10:31.306251, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.306282, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry' (ops fffffffffe939800) >[2016/04/21 14:10:31.306316, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2016/04/21 14:10:31.306374, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Start] len[4] >[2016/04/21 14:10:31.306422, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[1]: name[Type] len[4] >[2016/04/21 14:10:31.306457, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[2]: name[ErrorControl] len[4] >[2016/04/21 14:10:31.306492, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[3]: name[ObjectName] len[24] >[2016/04/21 14:10:31.306526, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[4]: name[DisplayName] len[48] >[2016/04/21 14:10:31.306560, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[5]: name[ImagePath] len[68] >[2016/04/21 14:10:31.306592, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[6]: name[Description] len[126] >[2016/04/21 14:10:31.306624, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.306707, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2016/04/21 14:10:31.307010, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.307125, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Type] >[2016/04/21 14:10:31.307160, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.307191, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.307278, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2016/04/21 14:10:31.307597, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.307721, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ErrorControl] >[2016/04/21 14:10:31.307757, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.307789, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.307871, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2016/04/21 14:10:31.308471, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.308605, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ObjectName] >[2016/04/21 14:10:31.308641, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.308680, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.308768, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(48) > [0] : 0x52 (82) > [1] : 0x00 (0) > [2] : 0x65 (101) > [3] : 0x00 (0) > [4] : 0x6d (109) > [5] : 0x00 (0) > [6] : 0x6f (111) > [7] : 0x00 (0) > [8] : 0x74 (116) > [9] : 0x00 (0) > [10] : 0x65 (101) > [11] : 0x00 (0) > [12] : 0x20 (32) > [13] : 0x00 (0) > [14] : 0x52 (82) > [15] : 0x00 (0) > [16] : 0x65 (101) > [17] : 0x00 (0) > [18] : 0x67 (103) > [19] : 0x00 (0) > [20] : 0x69 (105) > [21] : 0x00 (0) > [22] : 0x73 (115) > [23] : 0x00 (0) > [24] : 0x74 (116) > [25] : 0x00 (0) > [26] : 0x72 (114) > [27] : 0x00 (0) > [28] : 0x79 (121) > [29] : 0x00 (0) > [30] : 0x20 (32) > [31] : 0x00 (0) > [32] : 0x53 (83) > [33] : 0x00 (0) > [34] : 0x65 (101) > [35] : 0x00 (0) > [36] : 0x72 (114) > [37] : 0x00 (0) > [38] : 0x76 (118) > [39] : 0x00 (0) > [40] : 0x69 (105) > [41] : 0x00 (0) > [42] : 0x63 (99) > [43] : 0x00 (0) > [44] : 0x65 (101) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > size : 0x00000030 (48) >[2016/04/21 14:10:31.309879, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.309997, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:DisplayName] >[2016/04/21 14:10:31.310032, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.310062, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.310143, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(68) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x70 (112) > [5] : 0x00 (0) > [6] : 0x74 (116) > [7] : 0x00 (0) > [8] : 0x2f (47) > [9] : 0x00 (0) > [10] : 0x6c (108) > [11] : 0x00 (0) > [12] : 0x6f (111) > [13] : 0x00 (0) > [14] : 0x63 (99) > [15] : 0x00 (0) > [16] : 0x61 (97) > [17] : 0x00 (0) > [18] : 0x6c (108) > [19] : 0x00 (0) > [20] : 0x2f (47) > [21] : 0x00 (0) > [22] : 0x73 (115) > [23] : 0x00 (0) > [24] : 0x61 (97) > [25] : 0x00 (0) > [26] : 0x6d (109) > [27] : 0x00 (0) > [28] : 0x62 (98) > [29] : 0x00 (0) > [30] : 0x61 (97) > [31] : 0x00 (0) > [32] : 0x34 (52) > [33] : 0x00 (0) > [34] : 0x2f (47) > [35] : 0x00 (0) > [36] : 0x6c (108) > [37] : 0x00 (0) > [38] : 0x69 (105) > [39] : 0x00 (0) > [40] : 0x62 (98) > [41] : 0x00 (0) > [42] : 0x2f (47) > [43] : 0x00 (0) > [44] : 0x73 (115) > [45] : 0x00 (0) > [46] : 0x76 (118) > [47] : 0x00 (0) > [48] : 0x63 (99) > [49] : 0x00 (0) > [50] : 0x63 (99) > [51] : 0x00 (0) > [52] : 0x74 (116) > [53] : 0x00 (0) > [54] : 0x6c (108) > [55] : 0x00 (0) > [56] : 0x2f (47) > [57] : 0x00 (0) > [58] : 0x73 (115) > [59] : 0x00 (0) > [60] : 0x6d (109) > [61] : 0x00 (0) > [62] : 0x62 (98) > [63] : 0x00 (0) > [64] : 0x64 (100) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > size : 0x00000044 (68) >[2016/04/21 14:10:31.311524, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.311641, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ImagePath] >[2016/04/21 14:10:31.311675, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.311705, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.311784, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(126) > [0] : 0x49 (73) > [1] : 0x00 (0) > [2] : 0x6e (110) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x72 (114) > [9] : 0x00 (0) > [10] : 0x6e (110) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6c (108) > [15] : 0x00 (0) > [16] : 0x20 (32) > [17] : 0x00 (0) > [18] : 0x73 (115) > [19] : 0x00 (0) > [20] : 0x65 (101) > [21] : 0x00 (0) > [22] : 0x72 (114) > [23] : 0x00 (0) > [24] : 0x76 (118) > [25] : 0x00 (0) > [26] : 0x69 (105) > [27] : 0x00 (0) > [28] : 0x63 (99) > [29] : 0x00 (0) > [30] : 0x65 (101) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x70 (112) > [35] : 0x00 (0) > [36] : 0x72 (114) > [37] : 0x00 (0) > [38] : 0x6f (111) > [39] : 0x00 (0) > [40] : 0x76 (118) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x64 (100) > [45] : 0x00 (0) > [46] : 0x69 (105) > [47] : 0x00 (0) > [48] : 0x6e (110) > [49] : 0x00 (0) > [50] : 0x67 (103) > [51] : 0x00 (0) > [52] : 0x20 (32) > [53] : 0x00 (0) > [54] : 0x72 (114) > [55] : 0x00 (0) > [56] : 0x65 (101) > [57] : 0x00 (0) > [58] : 0x6d (109) > [59] : 0x00 (0) > [60] : 0x6f (111) > [61] : 0x00 (0) > [62] : 0x74 (116) > [63] : 0x00 (0) > [64] : 0x65 (101) > [65] : 0x00 (0) > [66] : 0x20 (32) > [67] : 0x00 (0) > [68] : 0x61 (97) > [69] : 0x00 (0) > [70] : 0x63 (99) > [71] : 0x00 (0) > [72] : 0x63 (99) > [73] : 0x00 (0) > [74] : 0x65 (101) > [75] : 0x00 (0) > [76] : 0x73 (115) > [77] : 0x00 (0) > [78] : 0x73 (115) > [79] : 0x00 (0) > [80] : 0x20 (32) > [81] : 0x00 (0) > [82] : 0x74 (116) > [83] : 0x00 (0) > [84] : 0x6f (111) > [85] : 0x00 (0) > [86] : 0x20 (32) > [87] : 0x00 (0) > [88] : 0x74 (116) > [89] : 0x00 (0) > [90] : 0x68 (104) > [91] : 0x00 (0) > [92] : 0x65 (101) > [93] : 0x00 (0) > [94] : 0x20 (32) > [95] : 0x00 (0) > [96] : 0x53 (83) > [97] : 0x00 (0) > [98] : 0x61 (97) > [99] : 0x00 (0) > [100] : 0x6d (109) > [101] : 0x00 (0) > [102] : 0x62 (98) > [103] : 0x00 (0) > [104] : 0x61 (97) > [105] : 0x00 (0) > [106] : 0x20 (32) > [107] : 0x00 (0) > [108] : 0x72 (114) > [109] : 0x00 (0) > [110] : 0x65 (101) > [111] : 0x00 (0) > [112] : 0x67 (103) > [113] : 0x00 (0) > [114] : 0x69 (105) > [115] : 0x00 (0) > [116] : 0x73 (115) > [117] : 0x00 (0) > [118] : 0x74 (116) > [119] : 0x00 (0) > [120] : 0x72 (114) > [121] : 0x00 (0) > [122] : 0x79 (121) > [123] : 0x00 (0) > [124] : 0x00 (0) > [125] : 0x00 (0) > size : 0x0000007e (126) >[2016/04/21 14:10:31.314141, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.314258, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Description] >[2016/04/21 14:10:31.314333, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.314365, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.314440, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-1957-9717d2650000 >[2016/04/21 14:10:31.314542, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.314655, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.314766, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2016/04/21 14:10:31.314794, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (4->3) >[2016/04/21 14:10:31.314830, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2016/04/21 14:10:31.314994, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0074 (116) > name_size : 0x0074 (116) > name : * > name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2016/04/21 14:10:31.315435, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.315560, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' >[2016/04/21 14:10:31.315596, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.315629, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.315659, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2016/04/21 14:10:31.315696, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (3->4) >[2016/04/21 14:10:31.315731, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2016/04/21 14:10:31.315760, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2016/04/21 14:10:31.315790, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.315816, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM] >[2016/04/21 14:10:31.315867, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.315900, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2016/04/21 14:10:31.315930, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.315965, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.315993, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.316022, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.316047, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.316093, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.316131, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.316177, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2016/04/21 14:10:31.316208, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.316244, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.316273, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.316304, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.316330, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.316391, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.316429, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.316461, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [RemoteRegistry] >[2016/04/21 14:10:31.316491, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.316528, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2016/04/21 14:10:31.316557, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2016/04/21 14:10:31.316590, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.316615, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2016/04/21 14:10:31.316662, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.316698, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2016/04/21 14:10:31.316728, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.316763, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2016/04/21 14:10:31.316791, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2016/04/21 14:10:31.316822, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.316847, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2016/04/21 14:10:31.316890, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.316927, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.317042, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000008-0000-0000-1957-9717d2650000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2016/04/21 14:10:31.317217, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000008-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2016/04/21 14:10:31.319434, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.319550, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security:Security] >[2016/04/21 14:10:31.319586, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.319616, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' (ops fffffffffe939800) >[2016/04/21 14:10:31.319648, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2016/04/21 14:10:31.319690, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Security] len[120] >[2016/04/21 14:10:31.319726, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.319804, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000008-0000-0000-1957-9717d2650000 >[2016/04/21 14:10:31.319910, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.320026, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.320138, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2016/04/21 14:10:31.320166, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (4->3) >[2016/04/21 14:10:31.320214, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2016/04/21 14:10:31.320360, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x004e (78) > name_size : 0x004e (78) > name : * > name : 'SYSTEM\CurrentControlSet\Services\WINS' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2016/04/21 14:10:31.320799, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.320940, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS' >[2016/04/21 14:10:31.320977, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.321010, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.321041, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2016/04/21 14:10:31.321072, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (3->4) >[2016/04/21 14:10:31.321108, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2016/04/21 14:10:31.321136, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2016/04/21 14:10:31.321168, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.321195, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM] >[2016/04/21 14:10:31.321246, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.321278, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2016/04/21 14:10:31.321308, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.321342, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.321370, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.321400, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.321424, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.321471, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.321509, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.321540, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2016/04/21 14:10:31.321571, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.321606, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.321635, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.321665, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.321691, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.321762, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.321804, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [WINS] >[2016/04/21 14:10:31.321835, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.321870, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2016/04/21 14:10:31.321933, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2016/04/21 14:10:31.321966, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.321993, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2016/04/21 14:10:31.322041, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.322080, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.322193, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-1957-9717d2650000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2016/04/21 14:10:31.322378, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2016/04/21 14:10:31.322653, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.322775, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Start] >[2016/04/21 14:10:31.322811, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.322842, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS' (ops fffffffffe939800) >[2016/04/21 14:10:31.322875, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2016/04/21 14:10:31.322920, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Start] len[4] >[2016/04/21 14:10:31.322957, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[1]: name[Type] len[4] >[2016/04/21 14:10:31.322992, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[2]: name[ErrorControl] len[4] >[2016/04/21 14:10:31.323027, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[3]: name[ObjectName] len[24] >[2016/04/21 14:10:31.323062, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[4]: name[DisplayName] len[74] >[2016/04/21 14:10:31.323097, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[5]: name[ImagePath] len[68] >[2016/04/21 14:10:31.323131, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[6]: name[Description] len[178] >[2016/04/21 14:10:31.323164, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.323243, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2016/04/21 14:10:31.323524, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.323639, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Type] >[2016/04/21 14:10:31.323674, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.323706, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.323783, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2016/04/21 14:10:31.324081, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.324195, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ErrorControl] >[2016/04/21 14:10:31.324230, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.324263, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.324345, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2016/04/21 14:10:31.324972, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.325086, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ObjectName] >[2016/04/21 14:10:31.325121, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.325153, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.325240, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(74) > [0] : 0x57 (87) > [1] : 0x00 (0) > [2] : 0x69 (105) > [3] : 0x00 (0) > [4] : 0x6e (110) > [5] : 0x00 (0) > [6] : 0x64 (100) > [7] : 0x00 (0) > [8] : 0x6f (111) > [9] : 0x00 (0) > [10] : 0x77 (119) > [11] : 0x00 (0) > [12] : 0x73 (115) > [13] : 0x00 (0) > [14] : 0x20 (32) > [15] : 0x00 (0) > [16] : 0x49 (73) > [17] : 0x00 (0) > [18] : 0x6e (110) > [19] : 0x00 (0) > [20] : 0x74 (116) > [21] : 0x00 (0) > [22] : 0x65 (101) > [23] : 0x00 (0) > [24] : 0x72 (114) > [25] : 0x00 (0) > [26] : 0x6e (110) > [27] : 0x00 (0) > [28] : 0x65 (101) > [29] : 0x00 (0) > [30] : 0x74 (116) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x4e (78) > [35] : 0x00 (0) > [36] : 0x61 (97) > [37] : 0x00 (0) > [38] : 0x6d (109) > [39] : 0x00 (0) > [40] : 0x65 (101) > [41] : 0x00 (0) > [42] : 0x20 (32) > [43] : 0x00 (0) > [44] : 0x53 (83) > [45] : 0x00 (0) > [46] : 0x65 (101) > [47] : 0x00 (0) > [48] : 0x72 (114) > [49] : 0x00 (0) > [50] : 0x76 (118) > [51] : 0x00 (0) > [52] : 0x69 (105) > [53] : 0x00 (0) > [54] : 0x63 (99) > [55] : 0x00 (0) > [56] : 0x65 (101) > [57] : 0x00 (0) > [58] : 0x20 (32) > [59] : 0x00 (0) > [60] : 0x28 (40) > [61] : 0x00 (0) > [62] : 0x57 (87) > [63] : 0x00 (0) > [64] : 0x49 (73) > [65] : 0x00 (0) > [66] : 0x4e (78) > [67] : 0x00 (0) > [68] : 0x53 (83) > [69] : 0x00 (0) > [70] : 0x29 (41) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > size : 0x0000004a (74) >[2016/04/21 14:10:31.326804, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.326917, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:DisplayName] >[2016/04/21 14:10:31.326952, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.326983, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.327068, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(68) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x70 (112) > [5] : 0x00 (0) > [6] : 0x74 (116) > [7] : 0x00 (0) > [8] : 0x2f (47) > [9] : 0x00 (0) > [10] : 0x6c (108) > [11] : 0x00 (0) > [12] : 0x6f (111) > [13] : 0x00 (0) > [14] : 0x63 (99) > [15] : 0x00 (0) > [16] : 0x61 (97) > [17] : 0x00 (0) > [18] : 0x6c (108) > [19] : 0x00 (0) > [20] : 0x2f (47) > [21] : 0x00 (0) > [22] : 0x73 (115) > [23] : 0x00 (0) > [24] : 0x61 (97) > [25] : 0x00 (0) > [26] : 0x6d (109) > [27] : 0x00 (0) > [28] : 0x62 (98) > [29] : 0x00 (0) > [30] : 0x61 (97) > [31] : 0x00 (0) > [32] : 0x34 (52) > [33] : 0x00 (0) > [34] : 0x2f (47) > [35] : 0x00 (0) > [36] : 0x6c (108) > [37] : 0x00 (0) > [38] : 0x69 (105) > [39] : 0x00 (0) > [40] : 0x62 (98) > [41] : 0x00 (0) > [42] : 0x2f (47) > [43] : 0x00 (0) > [44] : 0x73 (115) > [45] : 0x00 (0) > [46] : 0x76 (118) > [47] : 0x00 (0) > [48] : 0x63 (99) > [49] : 0x00 (0) > [50] : 0x63 (99) > [51] : 0x00 (0) > [52] : 0x74 (116) > [53] : 0x00 (0) > [54] : 0x6c (108) > [55] : 0x00 (0) > [56] : 0x2f (47) > [57] : 0x00 (0) > [58] : 0x6e (110) > [59] : 0x00 (0) > [60] : 0x6d (109) > [61] : 0x00 (0) > [62] : 0x62 (98) > [63] : 0x00 (0) > [64] : 0x64 (100) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > size : 0x00000044 (68) >[2016/04/21 14:10:31.328473, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.328586, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ImagePath] >[2016/04/21 14:10:31.328620, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.328651, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.328733, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(178) > [0] : 0x49 (73) > [1] : 0x00 (0) > [2] : 0x6e (110) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x72 (114) > [9] : 0x00 (0) > [10] : 0x6e (110) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6c (108) > [15] : 0x00 (0) > [16] : 0x20 (32) > [17] : 0x00 (0) > [18] : 0x73 (115) > [19] : 0x00 (0) > [20] : 0x65 (101) > [21] : 0x00 (0) > [22] : 0x72 (114) > [23] : 0x00 (0) > [24] : 0x76 (118) > [25] : 0x00 (0) > [26] : 0x69 (105) > [27] : 0x00 (0) > [28] : 0x63 (99) > [29] : 0x00 (0) > [30] : 0x65 (101) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x70 (112) > [35] : 0x00 (0) > [36] : 0x72 (114) > [37] : 0x00 (0) > [38] : 0x6f (111) > [39] : 0x00 (0) > [40] : 0x76 (118) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x64 (100) > [45] : 0x00 (0) > [46] : 0x69 (105) > [47] : 0x00 (0) > [48] : 0x6e (110) > [49] : 0x00 (0) > [50] : 0x67 (103) > [51] : 0x00 (0) > [52] : 0x20 (32) > [53] : 0x00 (0) > [54] : 0x61 (97) > [55] : 0x00 (0) > [56] : 0x20 (32) > [57] : 0x00 (0) > [58] : 0x4e (78) > [59] : 0x00 (0) > [60] : 0x65 (101) > [61] : 0x00 (0) > [62] : 0x74 (116) > [63] : 0x00 (0) > [64] : 0x42 (66) > [65] : 0x00 (0) > [66] : 0x49 (73) > [67] : 0x00 (0) > [68] : 0x4f (79) > [69] : 0x00 (0) > [70] : 0x53 (83) > [71] : 0x00 (0) > [72] : 0x20 (32) > [73] : 0x00 (0) > [74] : 0x70 (112) > [75] : 0x00 (0) > [76] : 0x6f (111) > [77] : 0x00 (0) > [78] : 0x69 (105) > [79] : 0x00 (0) > [80] : 0x6e (110) > [81] : 0x00 (0) > [82] : 0x74 (116) > [83] : 0x00 (0) > [84] : 0x2d (45) > [85] : 0x00 (0) > [86] : 0x74 (116) > [87] : 0x00 (0) > [88] : 0x6f (111) > [89] : 0x00 (0) > [90] : 0x2d (45) > [91] : 0x00 (0) > [92] : 0x70 (112) > [93] : 0x00 (0) > [94] : 0x6f (111) > [95] : 0x00 (0) > [96] : 0x69 (105) > [97] : 0x00 (0) > [98] : 0x6e (110) > [99] : 0x00 (0) > [100] : 0x74 (116) > [101] : 0x00 (0) > [102] : 0x20 (32) > [103] : 0x00 (0) > [104] : 0x6e (110) > [105] : 0x00 (0) > [106] : 0x61 (97) > [107] : 0x00 (0) > [108] : 0x6d (109) > [109] : 0x00 (0) > [110] : 0x65 (101) > [111] : 0x00 (0) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x73 (115) > [115] : 0x00 (0) > [116] : 0x65 (101) > [117] : 0x00 (0) > [118] : 0x72 (114) > [119] : 0x00 (0) > [120] : 0x76 (118) > [121] : 0x00 (0) > [122] : 0x65 (101) > [123] : 0x00 (0) > [124] : 0x72 (114) > [125] : 0x00 (0) > [126] : 0x28 (40) > [127] : 0x00 (0) > [128] : 0x6e (110) > [129] : 0x00 (0) > [130] : 0x6f (111) > [131] : 0x00 (0) > [132] : 0x74 (116) > [133] : 0x00 (0) > [134] : 0x20 (32) > [135] : 0x00 (0) > [136] : 0x72 (114) > [137] : 0x00 (0) > [138] : 0x65 (101) > [139] : 0x00 (0) > [140] : 0x6d (109) > [141] : 0x00 (0) > [142] : 0x6f (111) > [143] : 0x00 (0) > [144] : 0x74 (116) > [145] : 0x00 (0) > [146] : 0x65 (101) > [147] : 0x00 (0) > [148] : 0x6c (108) > [149] : 0x00 (0) > [150] : 0x79 (121) > [151] : 0x00 (0) > [152] : 0x20 (32) > [153] : 0x00 (0) > [154] : 0x6d (109) > [155] : 0x00 (0) > [156] : 0x61 (97) > [157] : 0x00 (0) > [158] : 0x6e (110) > [159] : 0x00 (0) > [160] : 0x61 (97) > [161] : 0x00 (0) > [162] : 0x67 (103) > [163] : 0x00 (0) > [164] : 0x65 (101) > [165] : 0x00 (0) > [166] : 0x61 (97) > [167] : 0x00 (0) > [168] : 0x62 (98) > [169] : 0x00 (0) > [170] : 0x6c (108) > [171] : 0x00 (0) > [172] : 0x65 (101) > [173] : 0x00 (0) > [174] : 0x29 (41) > [175] : 0x00 (0) > [176] : 0x00 (0) > [177] : 0x00 (0) > size : 0x000000b2 (178) >[2016/04/21 14:10:31.332027, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.332144, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Description] >[2016/04/21 14:10:31.332178, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.332210, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.332286, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-1957-9717d2650000 >[2016/04/21 14:10:31.332388, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.332506, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.332622, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2016/04/21 14:10:31.332650, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (4->3) >[2016/04/21 14:10:31.332687, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2016/04/21 14:10:31.332829, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0060 (96) > name_size : 0x0060 (96) > name : * > name : 'SYSTEM\CurrentControlSet\Services\WINS\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2016/04/21 14:10:31.333283, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.333407, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS\Security' >[2016/04/21 14:10:31.333444, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.333477, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.333508, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2016/04/21 14:10:31.333539, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (3->4) >[2016/04/21 14:10:31.333574, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2016/04/21 14:10:31.333604, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2016/04/21 14:10:31.333635, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.333660, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM] >[2016/04/21 14:10:31.333712, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.333745, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2016/04/21 14:10:31.333775, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.333809, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.333837, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.333868, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.333893, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.333939, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.333977, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.334008, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2016/04/21 14:10:31.334038, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.334074, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.334103, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.334134, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.334160, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.334221, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.334260, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2016/04/21 14:10:31.334293, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [WINS] >[2016/04/21 14:10:31.334323, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.334358, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2016/04/21 14:10:31.334386, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2016/04/21 14:10:31.334417, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.334442, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2016/04/21 14:10:31.334487, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.334523, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2016/04/21 14:10:31.334553, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.334621, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2016/04/21 14:10:31.334652, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2016/04/21 14:10:31.334684, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.334710, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2016/04/21 14:10:31.334753, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.334790, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.334918, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000a-0000-0000-1957-9717d2650000 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2016/04/21 14:10:31.335096, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000a-0000-0000-1957-9717d2650000 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2016/04/21 14:10:31.337366, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.337491, 8, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security:Security] >[2016/04/21 14:10:31.337527, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/opt/local/samba4/var/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2016/04/21 14:10:31.337558, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security' (ops fffffffffe939800) >[2016/04/21 14:10:31.337591, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2016/04/21 14:10:31.337633, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Security] len[120] >[2016/04/21 14:10:31.337669, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2016/04/21 14:10:31.337748, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000a-0000-0000-1957-9717d2650000 >[2016/04/21 14:10:31.337854, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.337980, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.338102, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2016/04/21 14:10:31.338130, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (4->3) >[2016/04/21 14:10:31.338162, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2016/04/21 14:10:31.338293, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-1957-9717d2650000 >[2016/04/21 14:10:31.338396, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.338519, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.338789, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2016/04/21 14:10:31.338826, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (3->2) >[2016/04/21 14:10:31.338862, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2016/04/21 14:10:31.339008, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (2->1) >[2016/04/21 14:10:31.339071, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (1->0) >[2016/04/21 14:10:31.339129, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:418(close_policy_by_pipe) > Deleted handle list for RPC connection winreg >[2016/04/21 14:10:31.353272, 3, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/eventlog/srv_eventlog_reg.c:59(eventlog_init_winreg) > Initialise the eventlog registry keys if needed. >[2016/04/21 14:10:31.353341, 4, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:203(make_internal_rpc_pipe_p) > Create pipe requested winreg >[2016/04/21 14:10:31.353433, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:223(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe winreg >[2016/04/21 14:10:31.353465, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:240(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe winreg >[2016/04/21 14:10:31.353523, 4, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:243(make_internal_rpc_pipe_p) > Created internal pipe winreg >[2016/04/21 14:10:31.353574, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > in: struct winreg_OpenHKLM > system_name : NULL > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2016/04/21 14:10:31.353744, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [HKLM] >[2016/04/21 14:10:31.353801, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.353835, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.353865, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.353897, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.353924, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.354024, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.354061, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:885(regdb_open) > regdb_open: registry db opened. refcount reset (1) >[2016/04/21 14:10:31.354096, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM] >[2016/04/21 14:10:31.354125, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM] >[2016/04/21 14:10:31.354156, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.354182, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM] >[2016/04/21 14:10:31.354244, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[1] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.354361, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > out: struct winreg_OpenHKLM > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000b-0000-0000-1957-9717d2650000 > result : WERR_OK >[2016/04/21 14:10:31.354504, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > in: struct winreg_OpenKey > parent_handle : * > parent_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000b-0000-0000-1957-9717d2650000 > keyname: struct winreg_String > name_len : 0x0056 (86) > name_size : 0x0056 (86) > name : * > name : 'SYSTEM\CurrentControlSet\Services\Eventlog' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2016/04/21 14:10:31.354835, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.354950, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2016/04/21 14:10:31.354979, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (1->2) >[2016/04/21 14:10:31.355013, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2016/04/21 14:10:31.355040, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2016/04/21 14:10:31.355069, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.355094, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM] >[2016/04/21 14:10:31.355143, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2016/04/21 14:10:31.355175, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (2->3) >[2016/04/21 14:10:31.355208, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.355236, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.355265, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.355290, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet] >[2016/04/21 14:10:31.355364, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2016/04/21 14:10:31.355395, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (3->4) >[2016/04/21 14:10:31.355429, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.355457, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.355487, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.355511, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2016/04/21 14:10:31.355573, 7, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Eventlog] >[2016/04/21 14:10:31.355604, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) > regdb_open: incrementing refcount (4->5) >[2016/04/21 14:10:31.355637, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2016/04/21 14:10:31.355665, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2016/04/21 14:10:31.355696, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2016/04/21 14:10:31.355721, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops fffffffffe939800 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2016/04/21 14:10:31.355765, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (5->4) >[2016/04/21 14:10:31.355801, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (4->3) >[2016/04/21 14:10:31.355835, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (3->2) >[2016/04/21 14:10:31.355871, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[2] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.355986, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > out: struct winreg_OpenKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000c-0000-0000-1957-9717d2650000 > result : WERR_OK >[2016/04/21 14:10:31.356127, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > in: struct winreg_QueryInfoKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000c-0000-0000-1957-9717d2650000 > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL >[2016/04/21 14:10:31.356295, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.356419, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog' (ops fffffffffe939800) >[2016/04/21 14:10:31.356453, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2016/04/21 14:10:31.356498, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[0]: name[DisplayName] len[20] >[2016/04/21 14:10:31.356534, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) > regdb_unpack_values: value[1]: name[ErrorControl] len[4] >[2016/04/21 14:10:31.356578, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2088(regdb_get_secdesc) > regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2016/04/21 14:10:31.356624, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > out: struct winreg_QueryInfoKey > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL > num_subkeys : * > num_subkeys : 0x00000000 (0) > max_subkeylen : * > max_subkeylen : 0x00000000 (0) > max_classlen : * > max_classlen : 0x00000000 (0) > num_values : * > num_values : 0x00000002 (2) > max_valnamelen : * > max_valnamelen : 0x0000001a (26) > max_valbufsize : * > max_valbufsize : 0x00000014 (20) > secdescsize : * > secdescsize : 0x00000078 (120) > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2016/04/21 14:10:31.356953, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000c-0000-0000-1957-9717d2650000 >[2016/04/21 14:10:31.357058, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.357214, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 19 57 97 17 ........ .....W.. > [0010] D2 65 00 00 .e.. >[2016/04/21 14:10:31.357335, 6, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2016/04/21 14:10:31.357363, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (2->1) >[2016/04/21 14:10:31.357397, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2016/04/21 14:10:31.357527, 10, pid=26066, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) > regdb_close: decrementing refcount (1->0) >[2016/04/21 14:10:31.357575, 10, pid=26066, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:418(close_policy_by_pipe) > Deleted handle list for RPC connection winreg >[2016/04/21 14:10:31.357650, 0, pid=26066, effective(0, 0), real(0, 0)] ../lib/util/become_daemon.c:124(daemon_ready) > STATUS=daemon 'smbd' finished starting up and ready to serve connections >[2016/04/21 14:10:31.363769, 7, pid=26066, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) > lp_servicenumber: couldn't find print$ >[2016/04/21 14:10:31.363816, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/printing/nt_printing.c:87(print_driver_directories_init) > No print$ share has been configured. >[2016/04/21 14:10:31.363899, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 515 - private_data=0 >[2016/04/21 14:10:31.364203, 6, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:486(ads_find_dc) > ads_find_dc: (ldap) looking for realm 'ADI.COM' and falling back to domain 'ADI' >[2016/04/21 14:10:31.364394, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:105(sitename_fetch) > sitename_fetch: Returning sitename for ADI.COM: "Default-First-Site-Name" >[2016/04/21 14:10:31.364442, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery_dc.c:77(ads_dc_name) > ads_dc_name: domain=ADI >[2016/04/21 14:10:31.364498, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:105(sitename_fetch) > sitename_fetch: Returning sitename for ADI.COM: "Default-First-Site-Name" >[2016/04/21 14:10:31.364536, 6, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:409(resolve_and_ping_dns) > resolve_and_ping_dns: (cldap) looking for realm 'ADI.COM' >[2016/04/21 14:10:31.364588, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3312(get_sorted_dc_list) > get_sorted_dc_list: attempting lookup for name ADI.COM (sitename Default-First-Site-Name) >[2016/04/21 14:10:31.364687, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:210(saf_fetch) > saf_fetch: failed to find server for "ADI.COM" domain >[2016/04/21 14:10:31.364748, 3, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3117(get_dc_list) > get_dc_list: preferred server list: ", *" >[2016/04/21 14:10:31.364798, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2596(internal_resolve_name) > internal_resolve_name: looking up ADI.COM#1c (sitename Default-First-Site-Name) >[2016/04/21 14:10:31.364888, 10, pid=26066, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:333(gencache_set_data_blob) > Adding cache entry with key=[NBT/ADI.COM#1C] and timeout=[Wed Dec 31 19:00:00 1969 EST] (-1461262231 seconds in the past) >[2016/04/21 14:10:31.364952, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:160(namecache_fetch) > no entry for ADI.COM#1C found. >[2016/04/21 14:10:31.365048, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2407(resolve_ads) > resolve_ads: Attempting to resolve DCs for ADI.COM using DNS >[2016/04/21 14:10:31.368801, 4, pid=26066, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:435(ads_dns_lookup_srv) > ads_dns_lookup_srv: 2 records returned in the answer section. >[2016/04/21 14:10:31.368864, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:216(ads_dns_parse_rr_srv) > ads_dns_parse_rr_srv: Parsed starfish2.adi.com [0, 100, 389] >[2016/04/21 14:10:31.368901, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:216(ads_dns_parse_rr_srv) > ads_dns_parse_rr_srv: Parsed koi.adi.com [0, 100, 389] >[2016/04/21 14:10:31.368996, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1141(remove_duplicate_addrs2) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2016/04/21 14:10:31.369047, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namecache.c:78(namecache_store) > namecache_store: storing 2 addresses for ADI.COM#1c: 192.168.2.178,192.168.2.159 >[2016/04/21 14:10:31.369167, 10, pid=26066, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:333(gencache_set_data_blob) > Adding cache entry with key=[NBT/ADI.COM#1C] and timeout=[Thu Apr 21 14:21:31 2016 EDT] (660 seconds ahead) >[2016/04/21 14:10:31.369239, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2789(internal_resolve_name) > internal_resolve_name: returning 2 addresses: 192.168.2.178:389 192.168.2.159:389 >[2016/04/21 14:10:31.369283, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3139(get_dc_list) > Adding 2 DC's from auto lookup >[2016/04/21 14:10:31.369335, 9, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) > check_negative_conn_cache returning result 0 for domain ADI.COM server 192.168.2.178 >[2016/04/21 14:10:31.369387, 10, pid=26066, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:333(gencache_set_data_blob) > Adding cache entry with key=[NEG_CONN_CACHE/ADI.COM,192.168.2.159] and timeout=[Wed Dec 31 19:00:00 1969 EST] (-1461262231 seconds in the past) >[2016/04/21 14:10:31.369441, 9, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) > check_negative_conn_cache returning result 0 for domain ADI.COM server 192.168.2.159 >[2016/04/21 14:10:31.369475, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1141(remove_duplicate_addrs2) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2016/04/21 14:10:31.369528, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3262(get_dc_list) > get_dc_list: returning 2 ip addresses in an ordered list >[2016/04/21 14:10:31.369560, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3263(get_dc_list) > get_dc_list: 192.168.2.178:389 192.168.2.159:389 >[2016/04/21 14:10:31.369618, 9, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) > check_negative_conn_cache returning result 0 for domain ADI.COM server 192.168.2.178 >[2016/04/21 14:10:31.369664, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:254(ads_try_connect) > ads_try_connect: sending CLDAP request to 192.168.2.178 (realm: ADI.COM) >[2016/04/21 14:10:31.372644, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) > &response->data.nt5_ex: struct NETLOGON_SAM_LOGON_RESPONSE_EX > command : LOGON_SAM_LOGON_RESPONSE_EX (23) > sbz : 0x0000 (0) > server_type : 0x000001fd (509) > 1: NBT_SERVER_PDC > 1: NBT_SERVER_GC > 1: NBT_SERVER_LDAP > 1: NBT_SERVER_DS > 1: NBT_SERVER_KDC > 1: NBT_SERVER_TIMESERV > 1: NBT_SERVER_CLOSEST > 1: NBT_SERVER_WRITABLE > 0: NBT_SERVER_GOOD_TIMESERV > 0: NBT_SERVER_NDNC > 0: NBT_SERVER_SELECT_SECRET_DOMAIN_6 > 0: NBT_SERVER_FULL_SECRET_DOMAIN_6 > 0: NBT_SERVER_ADS_WEB_SERVICE > 0: NBT_SERVER_DS_8 > 0: NBT_SERVER_HAS_DNS_NAME > 0: NBT_SERVER_IS_DEFAULT_NC > 0: NBT_SERVER_FOREST_ROOT > domain_uuid : 4e01c3e7-1adb-4ddb-bf28-b6559f328de8 > forest : 'adi.com' > dns_domain : 'adi.com' > pdc_dns_name : 'starfish2.adi.com' > domain_name : 'ADI' > pdc_name : 'STARFISH2' > user_name : '' > server_site : 'Default-First-Site-Name' > client_site : 'Default-First-Site-Name' > sockaddr_size : 0x00 (0) > sockaddr: struct nbt_sockaddr > sockaddr_family : 0x00000000 (0) > pdc_ip : (NULL) > remaining : DATA_BLOB length=0 > next_closest_site : NULL > nt_version : 0x00000005 (5) > 1: NETLOGON_NT_VERSION_1 > 0: NETLOGON_NT_VERSION_5 > 1: NETLOGON_NT_VERSION_5EX > 0: NETLOGON_NT_VERSION_5EX_WITH_IP > 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE > 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL > 0: NETLOGON_NT_VERSION_PDC > 0: NETLOGON_NT_VERSION_IP > 0: NETLOGON_NT_VERSION_LOCAL > 0: NETLOGON_NT_VERSION_GC > lmnt_token : 0xffff (65535) > lm20_token : 0xffff (65535) >[2016/04/21 14:10:31.373631, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:70(sitename_store) > sitename_store: realm = [ADI], sitename = [Default-First-Site-Name], expire = [2147483647] >[2016/04/21 14:10:31.373685, 10, pid=26066, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:308(gencache_set_data_blob) > Did not store value for AD_SITENAME/DOMAIN/ADI, we already got it >[2016/04/21 14:10:31.373721, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:70(sitename_store) > sitename_store: realm = [adi.com], sitename = [Default-First-Site-Name], expire = [2147483647] >[2016/04/21 14:10:31.373761, 10, pid=26066, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:308(gencache_set_data_blob) > Did not store value for AD_SITENAME/DOMAIN/ADI.COM, we already got it >[2016/04/21 14:10:31.373800, 3, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:618(ads_connect) > Successfully contacted LDAP server 192.168.2.178 >[2016/04/21 14:10:31.373896, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:105(sitename_fetch) > sitename_fetch: Returning sitename for ADI.COM: "Default-First-Site-Name" >[2016/04/21 14:10:31.373948, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:212(ads_closest_dc) > ads_closest_dc: NBT_SERVER_CLOSEST flag set >[2016/04/21 14:10:31.374074, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:874(create_local_private_krb5_conf_for_domain) > create_local_private_krb5_conf_for_domain: fname = /var/samba/locks/%h/smb_krb5/krb5.conf.ADI, realm = ADI.COM, domain = ADI >[2016/04/21 14:10:31.374154, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:210(saf_fetch) > saf_fetch: failed to find server for "ADI.COM" domain >[2016/04/21 14:10:31.374191, 3, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3117(get_dc_list) > get_dc_list: preferred server list: ", *" >[2016/04/21 14:10:31.374227, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2596(internal_resolve_name) > internal_resolve_name: looking up ADI.COM#dcdc (sitename Default-First-Site-Name) >[2016/04/21 14:10:31.374264, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2416(resolve_ads) > resolve_ads: Attempting to resolve KDCs for ADI.COM using DNS >[2016/04/21 14:10:31.416263, 4, pid=26066, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:435(ads_dns_lookup_srv) > ads_dns_lookup_srv: 2 records returned in the answer section. >[2016/04/21 14:10:31.416320, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:216(ads_dns_parse_rr_srv) > ads_dns_parse_rr_srv: Parsed koi.adi.com [0, 100, 88] >[2016/04/21 14:10:31.416356, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:216(ads_dns_parse_rr_srv) > ads_dns_parse_rr_srv: Parsed starfish2.adi.com [0, 100, 88] >[2016/04/21 14:10:31.416395, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1141(remove_duplicate_addrs2) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2016/04/21 14:10:31.416424, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2789(internal_resolve_name) > internal_resolve_name: returning 2 addresses: 192.168.2.159:88 192.168.2.178:88 >[2016/04/21 14:10:31.416465, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3139(get_dc_list) > Adding 2 DC's from auto lookup >[2016/04/21 14:10:31.416509, 9, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) > check_negative_conn_cache returning result 0 for domain ADI.COM server 192.168.2.159 >[2016/04/21 14:10:31.416551, 9, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) > check_negative_conn_cache returning result 0 for domain ADI.COM server 192.168.2.178 >[2016/04/21 14:10:31.416583, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1141(remove_duplicate_addrs2) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2016/04/21 14:10:31.416612, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3262(get_dc_list) > get_dc_list: returning 2 ip addresses in an ordered list >[2016/04/21 14:10:31.416641, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3263(get_dc_list) > get_dc_list: 192.168.2.159:88 192.168.2.178:88 >[2016/04/21 14:10:31.416678, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:706(get_kdc_ip_string) > got 2 addresses from site Default-First-Site-Name search >[2016/04/21 14:10:31.416723, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:210(saf_fetch) > saf_fetch: failed to find server for "ADI.COM" domain >[2016/04/21 14:10:31.416755, 3, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3117(get_dc_list) > get_dc_list: preferred server list: ", *" >[2016/04/21 14:10:31.416784, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2596(internal_resolve_name) > internal_resolve_name: looking up ADI.COM#dcdc (sitename (null)) >[2016/04/21 14:10:31.416820, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2416(resolve_ads) > resolve_ads: Attempting to resolve KDCs for ADI.COM using DNS >[2016/04/21 14:10:31.419196, 4, pid=26066, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:435(ads_dns_lookup_srv) > ads_dns_lookup_srv: 2 records returned in the answer section. >[2016/04/21 14:10:31.419258, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:216(ads_dns_parse_rr_srv) > ads_dns_parse_rr_srv: Parsed koi.adi.com [0, 100, 88] >[2016/04/21 14:10:31.419292, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/addns/dnsquery.c:216(ads_dns_parse_rr_srv) > ads_dns_parse_rr_srv: Parsed starfish2.adi.com [0, 100, 88] >[2016/04/21 14:10:31.419369, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1141(remove_duplicate_addrs2) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2016/04/21 14:10:31.419399, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:2789(internal_resolve_name) > internal_resolve_name: returning 2 addresses: 192.168.2.159:88 192.168.2.178:88 >[2016/04/21 14:10:31.419438, 8, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3139(get_dc_list) > Adding 2 DC's from auto lookup >[2016/04/21 14:10:31.419475, 9, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) > check_negative_conn_cache returning result 0 for domain ADI.COM server 192.168.2.159 >[2016/04/21 14:10:31.419517, 9, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/conncache.c:150(check_negative_conn_cache) > check_negative_conn_cache returning result 0 for domain ADI.COM server 192.168.2.178 >[2016/04/21 14:10:31.419550, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:1141(remove_duplicate_addrs2) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2016/04/21 14:10:31.419578, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3262(get_dc_list) > get_dc_list: returning 2 ip addresses in an ordered list >[2016/04/21 14:10:31.419608, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:3263(get_dc_list) > get_dc_list: 192.168.2.159:88 192.168.2.178:88 >[2016/04/21 14:10:31.419644, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:712(get_kdc_ip_string) > got 2 addresses from site-less search >[2016/04/21 14:10:31.419675, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:744(get_kdc_ip_string) > 1 additional KDCs to test >[2016/04/21 14:10:31.420248, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:804(get_kdc_ip_string) > get_kdc_ip_string: Returning kdc = 192.168.2.178 > >[2016/04/21 14:10:31.420636, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:966(create_local_private_krb5_conf_for_domain) > create_local_private_krb5_conf_for_domain: wrote file /var/samba/locks/%h/smb_krb5/krb5.conf.ADI with realm ADI.COM KDC list = kdc = 192.168.2.178 > >[2016/04/21 14:10:31.420727, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery_dc.c:151(ads_dc_name) > ads_dc_name: using server='STARFISH2.ADI.COM' IP=192.168.2.178 >[2016/04/21 14:10:31.420766, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:254(ads_try_connect) > ads_try_connect: sending CLDAP request to 192.168.2.178 (realm: ADI.COM) >[2016/04/21 14:10:31.422443, 1, pid=26066, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) > &response->data.nt5_ex: struct NETLOGON_SAM_LOGON_RESPONSE_EX > command : LOGON_SAM_LOGON_RESPONSE_EX (23) > sbz : 0x0000 (0) > server_type : 0x000001fd (509) > 1: NBT_SERVER_PDC > 1: NBT_SERVER_GC > 1: NBT_SERVER_LDAP > 1: NBT_SERVER_DS > 1: NBT_SERVER_KDC > 1: NBT_SERVER_TIMESERV > 1: NBT_SERVER_CLOSEST > 1: NBT_SERVER_WRITABLE > 0: NBT_SERVER_GOOD_TIMESERV > 0: NBT_SERVER_NDNC > 0: NBT_SERVER_SELECT_SECRET_DOMAIN_6 > 0: NBT_SERVER_FULL_SECRET_DOMAIN_6 > 0: NBT_SERVER_ADS_WEB_SERVICE > 0: NBT_SERVER_DS_8 > 0: NBT_SERVER_HAS_DNS_NAME > 0: NBT_SERVER_IS_DEFAULT_NC > 0: NBT_SERVER_FOREST_ROOT > domain_uuid : 4e01c3e7-1adb-4ddb-bf28-b6559f328de8 > forest : 'adi.com' > dns_domain : 'adi.com' > pdc_dns_name : 'starfish2.adi.com' > domain_name : 'ADI' > pdc_name : 'STARFISH2' > user_name : '' > server_site : 'Default-First-Site-Name' > client_site : 'Default-First-Site-Name' > sockaddr_size : 0x00 (0) > sockaddr: struct nbt_sockaddr > sockaddr_family : 0x00000000 (0) > pdc_ip : (NULL) > remaining : DATA_BLOB length=0 > next_closest_site : NULL > nt_version : 0x00000005 (5) > 1: NETLOGON_NT_VERSION_1 > 0: NETLOGON_NT_VERSION_5 > 1: NETLOGON_NT_VERSION_5EX > 0: NETLOGON_NT_VERSION_5EX_WITH_IP > 0: NETLOGON_NT_VERSION_WITH_CLOSEST_SITE > 0: NETLOGON_NT_VERSION_AVOID_NT4EMUL > 0: NETLOGON_NT_VERSION_PDC > 0: NETLOGON_NT_VERSION_IP > 0: NETLOGON_NT_VERSION_LOCAL > 0: NETLOGON_NT_VERSION_GC > lmnt_token : 0xffff (65535) > lm20_token : 0xffff (65535) >[2016/04/21 14:10:31.423089, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:70(sitename_store) > sitename_store: realm = [ADI], sitename = [Default-First-Site-Name], expire = [2147483647] >[2016/04/21 14:10:31.423136, 10, pid=26066, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:308(gencache_set_data_blob) > Did not store value for AD_SITENAME/DOMAIN/ADI, we already got it >[2016/04/21 14:10:31.423170, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sitename_cache.c:70(sitename_store) > sitename_store: realm = [adi.com], sitename = [Default-First-Site-Name], expire = [2147483647] >[2016/04/21 14:10:31.423203, 10, pid=26066, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:308(gencache_set_data_blob) > Did not store value for AD_SITENAME/DOMAIN/ADI.COM, we already got it >[2016/04/21 14:10:31.423237, 3, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:618(ads_connect) > Successfully contacted LDAP server 192.168.2.178 >[2016/04/21 14:10:31.423295, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:73(ldap_open_with_timeout) > Opening connection to LDAP server '192.168.2.178:389', timeout 15 seconds >[2016/04/21 14:10:31.424306, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:108(ldap_open_with_timeout) > Initialized connection for LDAP server 'ldap://192.168.2.178:389' >[2016/04/21 14:10:31.424344, 3, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:661(ads_connect) > Connected to LDAP server starfish2.adi.com >[2016/04/21 14:10:31.424371, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:212(ads_closest_dc) > ads_closest_dc: NBT_SERVER_CLOSEST flag set >[2016/04/21 14:10:31.424423, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:88(saf_store) > saf_store: domain = [ADI], server = [starfish2.adi.com], expire = [1461263131] >[2016/04/21 14:10:31.424468, 10, pid=26066, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:333(gencache_set_data_blob) > Adding cache entry with key=[SAF/DOMAIN/ADI] and timeout=[Thu Apr 21 14:25:31 2016 EDT] (900 seconds ahead) >[2016/04/21 14:10:31.424526, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libsmb/namequery.c:88(saf_store) > saf_store: domain = [ADI.COM], server = [starfish2.adi.com], expire = [1461263131] >[2016/04/21 14:10:31.424565, 10, pid=26066, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:333(gencache_set_data_blob) > Adding cache entry with key=[SAF/DOMAIN/ADI.COM] and timeout=[Thu Apr 21 14:25:31 2016 EDT] (900 seconds ahead) >[2016/04/21 14:10:31.425115, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:2980(ads_current_time) > KDC time offset is 0 seconds >[2016/04/21 14:10:31.425471, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:1073(ads_sasl_bind) > Found SASL mechanism GSS-SPNEGO >[2016/04/21 14:10:31.426358, 3, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:723(ads_sasl_spnego_bind) > ads_sasl_spnego_bind: got OID=1.2.840.48018.1.2.2 >[2016/04/21 14:10:31.426394, 3, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:723(ads_sasl_spnego_bind) > ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2 >[2016/04/21 14:10:31.426423, 3, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:723(ads_sasl_spnego_bind) > ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2.3 >[2016/04/21 14:10:31.426452, 3, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:723(ads_sasl_spnego_bind) > ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10 >[2016/04/21 14:10:31.543806, 3, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) > GENSEC backend 'gssapi_spnego' registered >[2016/04/21 14:10:31.543854, 3, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) > GENSEC backend 'gssapi_krb5' registered >[2016/04/21 14:10:31.543881, 3, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) > GENSEC backend 'gssapi_krb5_sasl' registered >[2016/04/21 14:10:31.543915, 3, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) > GENSEC backend 'spnego' registered >[2016/04/21 14:10:31.543948, 3, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) > GENSEC backend 'schannel' registered >[2016/04/21 14:10:31.543982, 3, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) > GENSEC backend 'naclrpc_as_system' registered >[2016/04/21 14:10:31.544010, 3, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) > GENSEC backend 'sasl-EXTERNAL' registered >[2016/04/21 14:10:31.544041, 3, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) > GENSEC backend 'ntlmssp' registered >[2016/04/21 14:10:31.544070, 3, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) > GENSEC backend 'ntlmssp_resume_ccache' registered >[2016/04/21 14:10:31.544098, 3, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) > GENSEC backend 'http_basic' registered >[2016/04/21 14:10:31.544130, 3, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) > GENSEC backend 'http_ntlm' registered >[2016/04/21 14:10:31.544161, 3, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) > GENSEC backend 'krb5' registered >[2016/04/21 14:10:31.544189, 3, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) > GENSEC backend 'fake_gssapi_krb5' registered >[2016/04/21 14:10:31.544637, 5, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) > Starting GENSEC mechanism spnego >[2016/04/21 14:10:31.544713, 5, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) > Starting GENSEC submechanism gse_krb5 >[2016/04/21 14:10:31.547298, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/librpc/crypto/gse.c:265(gse_init_client) > gss_acquire_creds failed for GSS_C_NO_NAME with [ No credentials were supplied, or the credentials were unavailable or inaccessible.: unknown mech-code 0 for mech 1 2 840 113554 1 2 2] -the caller may retry after a kinit. >[2016/04/21 14:10:31.547423, 4, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:687(gensec_start_mech) > Failed to start GENSEC client mech gse_krb5: NT_STATUS_INTERNAL_ERROR >[2016/04/21 14:10:31.557085, 1, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/spnego.c:664(gensec_spnego_create_negTokenInit) > Failed to setup SPNEGO negTokenInit request: NT_STATUS_INTERNAL_ERROR >[2016/04/21 14:10:31.557171, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:752(ads_sasl_spnego_bind) > ads_sasl_spnego_gensec_bind(KRB5) failed with: An internal error occurred., calling kinit >[2016/04/21 14:10:31.564662, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/kerberos.c:217(kerberos_kinit_password_ext) > kerberos_kinit_password: as MACKEREL$@ADI.COM using [MEMORY:prtpub_cache] as ccache and config [/var/samba/locks/%h/smb_krb5/krb5.conf.ADI] >[2016/04/21 14:10:31.582471, 5, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) > Starting GENSEC mechanism spnego >[2016/04/21 14:10:31.582525, 5, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) > Starting GENSEC submechanism gse_krb5 >[2016/04/21 14:10:31.590532, 2, pid=26066, effective(0, 0), real(0, 0)] ../auth/gensec/spnego.c:1179(gensec_spnego_update) > GENSEC SPNEGO: failed to verify mechListMIC: NT_STATUS_INVALID_PARAMETER >[2016/04/21 14:10:31.590876, 0, pid=26066, effective(0, 0), real(0, 0)] ../source3/libads/sasl.c:764(ads_sasl_spnego_bind) > kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed: Unexpected information received >[2016/04/21 14:10:31.597820, 3, pid=26066, effective(0, 0), real(0, 0)] ../source3/printing/nt_printing_ads.c:648(check_published_printers) > ads_connect failed: Unexpected information received >[2016/04/21 14:10:31.598104, 0, pid=26066, effective(0, 0), real(0, 0)] ../source3/printing/nt_printing.c:187(nt_printing_init) > nt_printing_init: error checking published printers: WERR_ACCESS_DENIED >[2016/04/21 14:10:31.605534, 3, pid=26066, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:335(start_background_queue) > start_background_queue: Starting background LPQ thread >[2016/04/21 14:10:31.606881, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) > bind succeeded on port 445 >[2016/04/21 14:10:31.606957, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 0 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 49152 > SO_RCVBUF = 49152 > Could not test socket option SO_SNDLOWAT. > Could not test socket option SO_RCVLOWAT. > Could not test socket option SO_SNDTIMEO. > Could not test socket option SO_RCVTIMEO. >[2016/04/21 14:10:31.607112, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 >[2016/04/21 14:10:31.607079, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:371(start_background_queue) > SO_SNDBUF = 49152 > start_background_queue: background LPQ thread started > SO_RCVBUF = 49152 > Could not test socket option SO_SNDLOWAT. > Could not test socket option SO_RCVLOWAT. > Could not test socket option SO_SNDTIMEO. > Could not test socket option SO_RCVTIMEO. >[2016/04/21 14:10:31.607332, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) > bind succeeded on port 139 >[2016/04/21 14:10:31.607373, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 0 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 49152 > SO_RCVBUF = 49152 > Could not test socket option SO_SNDLOWAT. > Could not test socket option SO_RCVLOWAT. > Could not test socket option SO_SNDTIMEO. > Could not test socket option SO_RCVTIMEO. >[2016/04/21 14:10:31.607513, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 49152 > SO_RCVBUF = 49152 > Could not test socket option SO_SNDLOWAT. > Could not test socket option SO_RCVLOWAT. > Could not test socket option SO_SNDTIMEO. > Could not test socket option SO_RCVTIMEO. >[2016/04/21 14:10:31.607749, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) > bind succeeded on port 445 >[2016/04/21 14:10:31.607789, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 0 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 49152 > SO_RCVBUF = 49152 > Could not test socket option SO_SNDLOWAT. > Could not test socket option SO_RCVLOWAT. > Could not test socket option SO_SNDTIMEO. > Could not test socket option SO_RCVTIMEO. >[2016/04/21 14:10:31.607928, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 49152 > SO_RCVBUF = 49152 > Could not test socket option SO_SNDLOWAT. > Could not test socket option SO_RCVLOWAT. > Could not test socket option SO_SNDTIMEO. > Could not test socket option SO_RCVTIMEO. >[2016/04/21 14:10:31.608051, 10, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) > msg_dgm_ref_destructor: refs=0 >[2016/04/21 14:10:31.608087, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) > bind succeeded on port 139 >[2016/04/21 14:10:31.608125, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 0 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 49152 > SO_RCVBUF = 49152 > Could not test socket option SO_SNDLOWAT. > Could not test socket option SO_RCVLOWAT. > Could not test socket option SO_SNDTIMEO. > Could not test socket option SO_RCVTIMEO. >[2016/04/21 14:10:31.608266, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 1 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_SNDBUF = 49152 > SO_RCVBUF = 49152 > Could not test socket option SO_SNDLOWAT. >[2016/04/21 14:10:31.608355, 10, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) > Could not test socket option SO_RCVLOWAT. > Could not test socket option SO_SNDTIMEO. > Could not test socket option SO_RCVTIMEO. > messaging_dgm_ref: messaging_dgm_init returned Error 0 >[2016/04/21 14:10:31.608428, 10, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) >[2016/04/21 14:10:31.608434, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) > messaging_dgm_ref: unique = 7625672853729576663 > check lock order 2 for /var/samba/locks/%h/serverid.tdb >[2016/04/21 14:10:31.608482, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:<none> 2:/var/samba/locks/%h/serverid.tdb 3:<none> >[2016/04/21 14:10:31.608537, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Locking key D265000000000000FFFF >[2016/04/21 14:10:31.608579, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) > Allocated locked data 0x80b3920 >[2016/04/21 14:10:31.608642, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Unlocking key D265000000000000FFFF >[2016/04/21 14:10:31.608668, 10, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) >[2016/04/21 14:10:31.608676, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) > event_add_idle: idle_evt(print_queue_housekeeping) 80b33b8 > release lock order 2 for /var/samba/locks/%h/serverid.tdb >[2016/04/21 14:10:31.608709, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:<none> 2:<none> 3:<none> >[2016/04/21 14:10:31.608738, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) > check lock order 2 for /var/samba/locks/%h/serverid.tdb >[2016/04/21 14:10:31.608755, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 13 - private_data=0 >[2016/04/21 14:10:31.608772, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) >[2016/04/21 14:10:31.608788, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > lock order: 1:<none> 2:/var/samba/locks/%h/serverid.tdb 3:<none> > Registering messaging pointer for type 33 - private_data=8097440 >[2016/04/21 14:10:31.608821, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 783 - private_data=0 >[2016/04/21 14:10:31.608831, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Locking key E665000000000000FFFF >[2016/04/21 14:10:31.608851, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 1 - private_data=0 >[2016/04/21 14:10:31.608881, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:464(messaging_register) > Overriding messaging pointer for type 1 - private_data=0 >[2016/04/21 14:10:31.608888, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) > Allocated locked data 0x80b3418 >[2016/04/21 14:10:31.608916, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 770 - private_data=0 >[2016/04/21 14:10:31.608947, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 790 - private_data=0 >[2016/04/21 14:10:31.608963, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Unlocking key E665000000000000FFFF >[2016/04/21 14:10:31.608977, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 791 - private_data=0 >[2016/04/21 14:10:31.608998, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) >[2016/04/21 14:10:31.609007, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > release lock order 2 for /var/samba/locks/%h/serverid.tdb >[2016/04/21 14:10:31.609034, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:<none> 2:<none> 3:<none> > Registering messaging pointer for type 15 - private_data=0 >[2016/04/21 14:10:31.609087, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 16 - private_data=0 >[2016/04/21 14:10:31.609095, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 33 - private_data=8097440 >[2016/04/21 14:10:31.609128, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) > Registering messaging pointer for type 517 - private_data=0 >[2016/04/21 14:10:31.609156, 1, pid=26066, effective(0, 0), real(0, 0)] ../source3/printing/printer_list.c:234(printer_list_get_last_refresh) > Failed to fetch record! >[2016/04/21 14:10:31.609168, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:496(messaging_deregister) > Deregistering messaging pointer for type 515 - private_data=0 >[2016/04/21 14:10:31.609213, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) >[2016/04/21 14:10:31.609214, 2, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1110(smbd_parent_loop) > Registering messaging pointer for type 515 - private_data=0 > waiting for connections >[2016/04/21 14:10:31.609280, 3, pid=26086, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:140(pcap_cache_reload) > reloading printcap cache >[2016/04/21 14:10:31.610038, 3, pid=26086, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:189(pcap_cache_reload) > reload status: ok >[2016/04/21 14:10:31.610118, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) > check lock order 1 for /var/samba/locks/%h/printer_list.tdb >[2016/04/21 14:10:31.610152, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:/var/samba/locks/%h/printer_list.tdb 2:<none> 3:<none> >[2016/04/21 14:10:31.610197, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Locking key 5052494E5445524C4953 >[2016/04/21 14:10:31.610237, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) > Allocated locked data 0x80bc280 >[2016/04/21 14:10:31.610664, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Unlocking key 5052494E5445524C4953 >[2016/04/21 14:10:31.610700, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) > release lock order 1 for /var/samba/locks/%h/printer_list.tdb >[2016/04/21 14:10:31.610731, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:<none> 2:<none> 3:<none> >[2016/04/21 14:10:31.610803, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) > check lock order 1 for /var/samba/locks/%h/printer_list.tdb >[2016/04/21 14:10:31.610836, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:/var/samba/locks/%h/printer_list.tdb 2:<none> 3:<none> >[2016/04/21 14:10:31.610881, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Locking key 5052494E5445524C4953 >[2016/04/21 14:10:31.610915, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) > Allocated locked data 0x80bc388 >[2016/04/21 14:10:31.610955, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Unlocking key 5052494E5445524C4953 >[2016/04/21 14:10:31.610986, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) > release lock order 1 for /var/samba/locks/%h/printer_list.tdb >[2016/04/21 14:10:31.611017, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:<none> 2:<none> 3:<none> >[2016/04/21 14:10:31.611061, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) > check lock order 1 for /var/samba/locks/%h/printer_list.tdb >[2016/04/21 14:10:31.611091, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:/var/samba/locks/%h/printer_list.tdb 2:<none> 3:<none> >[2016/04/21 14:10:31.611135, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Locking key 5052494E5445524C4953 >[2016/04/21 14:10:31.611167, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) > Allocated locked data 0x80b5b80 >[2016/04/21 14:10:31.611206, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Unlocking key 5052494E5445524C4953 >[2016/04/21 14:10:31.611238, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) > release lock order 1 for /var/samba/locks/%h/printer_list.tdb >[2016/04/21 14:10:31.611270, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:<none> 2:<none> 3:<none> >[2016/04/21 14:10:31.611312, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) > check lock order 1 for /var/samba/locks/%h/printer_list.tdb >[2016/04/21 14:10:31.611343, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:/var/samba/locks/%h/printer_list.tdb 2:<none> 3:<none> >[2016/04/21 14:10:31.611387, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Locking key 5052494E5445524C4953 >[2016/04/21 14:10:31.611418, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) > Allocated locked data 0x80bc398 >[2016/04/21 14:10:31.611457, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Unlocking key 5052494E5445524C4953 >[2016/04/21 14:10:31.611488, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) > release lock order 1 for /var/samba/locks/%h/printer_list.tdb >[2016/04/21 14:10:31.611519, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:<none> 2:<none> 3:<none> >[2016/04/21 14:10:31.611561, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) > check lock order 1 for /var/samba/locks/%h/printer_list.tdb >[2016/04/21 14:10:31.611592, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:/var/samba/locks/%h/printer_list.tdb 2:<none> 3:<none> >[2016/04/21 14:10:31.611636, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Locking key 5052494E5445524C4953 >[2016/04/21 14:10:31.611668, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) > Allocated locked data 0x80b5b80 >[2016/04/21 14:10:31.611706, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Unlocking key 5052494E5445524C4953 >[2016/04/21 14:10:31.611738, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) > release lock order 1 for /var/samba/locks/%h/printer_list.tdb >[2016/04/21 14:10:31.611768, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:<none> 2:<none> 3:<none> >[2016/04/21 14:10:31.611810, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) > check lock order 1 for /var/samba/locks/%h/printer_list.tdb >[2016/04/21 14:10:31.611840, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:/var/samba/locks/%h/printer_list.tdb 2:<none> 3:<none> >[2016/04/21 14:10:31.611886, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Locking key 5052494E5445524C4953 >[2016/04/21 14:10:31.611917, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) > Allocated locked data 0x80bc3a0 >[2016/04/21 14:10:31.611956, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Unlocking key 5052494E5445524C4953 >[2016/04/21 14:10:31.611987, 5, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) > release lock order 1 for /var/samba/locks/%h/printer_list.tdb >[2016/04/21 14:10:31.612018, 10, pid=26086, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:<none> 2:<none> 3:<none> >[2016/04/21 14:10:31.612512, 10, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/server_reload.c:87(delete_and_reload_printers) > reloading printer services from pcap cache >[2016/04/21 14:10:31.612697, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.612781, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.612818, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.612854, 5, pid=26086, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.612945, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.613017, 10, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) > messaging_dgm_send: Sending message to 26066 >[2016/04/21 14:10:31.613218, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.613267, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.613301, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.613331, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.613355, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:254(messaging_recv_cb) >[2016/04/21 14:10:31.613362, 5, pid=26086, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) > messaging_recv_cb: Received message 0x207 len 0 (num_fds:0) from 26086 >[2016/04/21 14:10:31.613397, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.613441, 10, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) > messaging_dgm_send: Sending message to 10495 >[2016/04/21 14:10:31.613555, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.613612, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.613647, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.613676, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.613708, 5, pid=26086, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.613734, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.613776, 10, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) > messaging_dgm_send: Sending message to 19783 >[2016/04/21 14:10:31.613824, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.613871, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.613904, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.613934, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.613967, 5, pid=26086, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.613993, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.614035, 10, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) > messaging_dgm_send: Sending message to 26086 >[2016/04/21 14:10:31.614082, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.614125, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.614158, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.614188, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.614220, 5, pid=26086, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.614247, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.614288, 10, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) > messaging_dgm_send: Sending message to 27582 >[2016/04/21 14:10:31.614335, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.614378, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.614411, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.614440, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2016/04/21 14:10:31.614472, 5, pid=26086, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:10:31.614498, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:10:31.614539, 10, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) > messaging_dgm_send: Sending message to 27202 >[2016/04/21 14:10:31.614586, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:10:31.614629, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:424(start_background_queue) > start_background_queue: background LPQ thread waiting for messages >[2016/04/21 14:10:31.614777, 10, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:254(messaging_recv_cb) > messaging_recv_cb: Received message 0x207 len 0 (num_fds:0) from 26086 >[2016/04/21 14:11:26.657260, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:11:26.657311, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:11:26.657341, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:11:26.657417, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2016/04/21 14:11:26.657520, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:11:26.657552, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:11:26.657578, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:11:26.657617, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2016/04/21 14:11:26.657651, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:11:26.657681, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:11:26.657707, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:11:26.657745, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2016/04/21 14:11:26.657778, 4, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:11:26.657809, 5, pid=26066, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:11:26.657834, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:11:26.657872, 5, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2016/04/21 14:11:26.657935, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) > check lock order 2 for /var/samba/locks/%h/serverid.tdb >[2016/04/21 14:11:26.657970, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:<none> 2:/var/samba/locks/%h/serverid.tdb 3:<none> >[2016/04/21 14:11:26.658015, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Locking key D265000000000000FFFF >[2016/04/21 14:11:26.658057, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) > Allocated locked data 0x80b0610 >[2016/04/21 14:11:26.658121, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) > Unlocking key D265000000000000FFFF >[2016/04/21 14:11:26.658155, 5, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) > release lock order 2 for /var/samba/locks/%h/serverid.tdb >[2016/04/21 14:11:26.658185, 10, pid=26066, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) > lock order: 1:<none> 2:<none> 3:<none> >[2016/04/21 14:11:26.658289, 10, pid=26066, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) > msg_dgm_ref_destructor: refs=0 >[2016/04/21 14:11:26.658588, 3, pid=26066, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) > Server exit (termination signal) >[2016/04/21 14:11:26.672044, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:11:26.672092, 5, pid=26086, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:11:26.672123, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:11:26.672165, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2016/04/21 14:11:26.672267, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:11:26.672300, 5, pid=26086, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:11:26.672326, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:11:26.672365, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2016/04/21 14:11:26.672400, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:11:26.672431, 5, pid=26086, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:11:26.672457, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:11:26.672495, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2016/04/21 14:11:26.672530, 4, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2016/04/21 14:11:26.672561, 5, pid=26086, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2016/04/21 14:11:26.672587, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2016/04/21 14:11:26.672626, 5, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2016/04/21 14:11:26.672692, 10, pid=26086, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) > msg_dgm_ref_destructor: refs=0 >[2016/04/21 14:11:26.672900, 3, pid=26086, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) > Server exit (termination signal)
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 11870
: 12013 |
12014
|
12019