[2016/08/09 11:27:03.413707, 3, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3742(lp_load_ex) lp_load_ex: refreshing parameters [2016/08/09 11:27:03.413716, 5, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1313(free_param_opts) Freeing parametrics: [2016/08/09 11:27:03.413747, 3, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:544(init_globals) Initialising global parameters [2016/08/09 11:27:03.413754, 2, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:316(max_open_files) rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) [2016/08/09 11:27:03.413792, 3, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2671(lp_do_section) Processing section "[global]" doing parameter workgroup = EXAMPLE doing parameter security = user doing parameter map to guest = Bad User doing parameter log level = 10 [2016/08/09 11:27:03.413819, 5, pid=5533, effective(0, 0), real(0, 0)] ../lib/util/debug.c:638(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 tevent: 10 doing parameter debug pid = true [2016/08/09 11:27:03.413846, 2, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) Processing section "[test]" [2016/08/09 11:27:03.413857, 8, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) add_a_service: Creating snum = 0 for test [2016/08/09 11:27:03.413861, 10, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1471(hash_a_service) hash_a_service: creating servicehash [2016/08/09 11:27:03.413865, 10, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) hash_a_service: hashing index 0 for service name test doing parameter comment = Test doing parameter guest ok = yes doing parameter path = /data/test doing parameter read only = no [2016/08/09 11:27:03.413898, 4, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3783(lp_load_ex) pm_process() returned Yes [2016/08/09 11:27:03.413906, 7, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find homes [2016/08/09 11:27:03.413917, 8, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1430(add_a_service) add_a_service: Creating snum = 1 for IPC$ [2016/08/09 11:27:03.413921, 10, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1480(hash_a_service) hash_a_service: hashing index 1 for service name IPC$ [2016/08/09 11:27:03.413926, 3, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1588(lp_add_ipc) adding IPC service [2016/08/09 11:27:03.413936, 6, pid=5533, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2226(lp_file_list_changed) lp_file_list_changed() file /usr/local/samba/etc/smb.conf -> /usr/local/samba/etc/smb.conf last mod_time: Tue Aug 9 11:21:31 2016 [2016/08/09 11:27:03.414027, 2, pid=5533, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) added interface eth0 ip=192.168.0.8 bcast=192.168.0.255 netmask=255.255.255.0 [2016/08/09 11:27:03.414044, 3, pid=5533, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1448(main) loaded services [2016/08/09 11:27:03.414049, 5, pid=5533, effective(0, 0), real(0, 0)] ../source3/lib/util_names.c:152(init_names) Netbios name list:- my_netbios_names[0]="DEVTEST" [2016/08/09 11:27:03.414071, 1, pid=5533, effective(0, 0), real(0, 0)] ../source3/profile/profile_dummy.c:30(set_profile_level) INFO: Profiling support unavailable in this build. [2016/08/09 11:27:03.414076, 3, pid=5533, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1479(main) Becoming a daemon. [2016/08/09 11:27:03.415084, 8, pid=5534, effective(0, 0), real(0, 0)] ../lib/util/util.c:394(fcntl_lock) fcntl_lock 12 6 0 1 1 [2016/08/09 11:27:03.415106, 8, pid=5534, effective(0, 0), real(0, 0)] ../lib/util/util.c:429(fcntl_lock) fcntl_lock: Lock call successful [2016/08/09 11:27:03.415128, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:27:03.415174, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2016/08/09 11:27:03.415184, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 4482278920107174125 [2016/08/09 11:27:03.415207, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) Attempting to register passdb backend smbpasswd [2016/08/09 11:27:03.415215, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) Successfully added passdb backend 'smbpasswd' [2016/08/09 11:27:03.415218, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) Attempting to register passdb backend tdbsam [2016/08/09 11:27:03.415222, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) Successfully added passdb backend 'tdbsam' [2016/08/09 11:27:03.415225, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) Attempting to register passdb backend wbc_sam [2016/08/09 11:27:03.415228, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) Successfully added passdb backend 'wbc_sam' [2016/08/09 11:27:03.415231, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) Attempting to register passdb backend samba_dsdb [2016/08/09 11:27:03.415235, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) Successfully added passdb backend 'samba_dsdb' [2016/08/09 11:27:03.415238, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) Attempting to register passdb backend samba4 [2016/08/09 11:27:03.415241, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) Successfully added passdb backend 'samba4' [2016/08/09 11:27:03.415245, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) Attempting to register passdb backend ldapsam [2016/08/09 11:27:03.415249, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) Successfully added passdb backend 'ldapsam' [2016/08/09 11:27:03.415252, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) Attempting to register passdb backend NDS_ldapsam [2016/08/09 11:27:03.415255, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) Successfully added passdb backend 'NDS_ldapsam' [2016/08/09 11:27:03.415259, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:78(smb_register_passdb) Attempting to register passdb backend IPA_ldapsam [2016/08/09 11:27:03.415262, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:91(smb_register_passdb) Successfully added passdb backend 'IPA_ldapsam' [2016/08/09 11:27:03.415268, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:154(make_pdb_method_name) Attempting to find a passdb backend to match tdbsam (tdbsam) [2016/08/09 11:27:03.415273, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:175(make_pdb_method_name) Found pdb backend tdbsam [2016/08/09 11:27:03.415283, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:186(make_pdb_method_name) pdb backend tdbsam has a valid init [2016/08/09 11:27:03.415354, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_version_global.tdb [2016/08/09 11:27:03.415360, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_version_global.tdb 2: 3: [2016/08/09 11:27:03.415367, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 736D62587372765F7665 [2016/08/09 11:27:03.415372, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0b77f0 [2016/08/09 11:27:03.415417, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 736D62587372765F7665 [2016/08/09 11:27:03.415423, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_version_global.tdb [2016/08/09 11:27:03.415427, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:27:03.415431, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:250(smbXsrv_version_global_init) smbXsrv_version_global_init [2016/08/09 11:27:03.415434, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:251(smbXsrv_version_global_init) [2016/08/09 11:27:03.415437, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_version_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_version_globalU(case 0) info0 : * info0: struct smbXsrv_version_global0 db_rec : NULL num_nodes : 0x00000001 (1) nodes: ARRAY(1) nodes: struct smbXsrv_version_node0 server_id: struct server_id pid : 0x000000000000159e (5534) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x3e3440ee0135a8ed (4482278920107174125) min_version : SMBXSRV_VERSION_0 (0) max_version : SMBXSRV_VERSION_0 (0) current_version : SMBXSRV_VERSION_0 (0) [2016/08/09 11:27:03.416367, 10, pid=5538, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:27:03.416439, 10, pid=5538, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2016/08/09 11:27:03.416455, 10, pid=5538, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 11072761812021239247 [2016/08/09 11:27:03.416466, 5, pid=5538, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 13 - private_data=0x7fd7df0b90b0 [2016/08/09 11:27:03.416473, 5, pid=5538, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 788 - private_data=0x7fd7df0b90b0 [2016/08/09 11:27:03.416478, 5, pid=5538, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 773 - private_data=(nil) [2016/08/09 11:27:03.416490, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:469(cleanupd_init) cleanupd_init: Started cleanupd pid=5538 [2016/08/09 11:27:03.416525, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 789 - private_data=0x7fd7df0b9710 [2016/08/09 11:27:03.416584, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:768(regdb_init) regdb_init: registry db openend. refcount reset (1) [2016/08/09 11:27:03.416594, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:70(reghook_cache_init) reghook_cache_init: new tree with default ops 0x7fd7dd282200 for key [] [2016/08/09 11:27:03.416653, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2016/08/09 11:27:03.416668, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Samba Printer Port] len[2] [2016/08/09 11:27:03.416675, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2016/08/09 11:27:03.416686, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[DefaultSpoolDirectory] len[70] [2016/08/09 11:27:03.416692, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2016/08/09 11:27:03.416701, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[DisplayName] len[20] [2016/08/09 11:27:03.416705, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[ErrorControl] len[4] [2016/08/09 11:27:03.416710, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2016/08/09 11:27:03.416717, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[DisplayName] len[20] [2016/08/09 11:27:03.416721, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[ErrorControl] len[4] [2016/08/09 11:27:03.416729, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7fd7de281a00 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] [2016/08/09 11:27:03.416733, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2016/08/09 11:27:03.416740, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] to tree [2016/08/09 11:27:03.416745, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2016/08/09 11:27:03.416749, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7fd7dd282200 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2016/08/09 11:27:03.416756, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2016/08/09 11:27:03.416763, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] to tree [2016/08/09 11:27:03.416768, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2016/08/09 11:27:03.416772, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7fd7dd282200 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2016/08/09 11:27:03.416775, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2016/08/09 11:27:03.416780, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] to tree [2016/08/09 11:27:03.416783, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2016/08/09 11:27:03.416787, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7fd7de281a80 for key [\HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] [2016/08/09 11:27:03.416790, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2016/08/09 11:27:03.416795, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] to tree [2016/08/09 11:27:03.416798, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2016/08/09 11:27:03.416801, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7fd7dba55540 for key [\HKLM\SOFTWARE\Samba\smbconf] [2016/08/09 11:27:03.416805, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2016/08/09 11:27:03.416808, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree [2016/08/09 11:27:03.416812, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2016/08/09 11:27:03.416815, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7fd7de281b00 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] [2016/08/09 11:27:03.416818, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2016/08/09 11:27:03.416823, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] to tree [2016/08/09 11:27:03.416829, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2016/08/09 11:27:03.416833, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7fd7de281b80 for key [\HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] [2016/08/09 11:27:03.416836, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2016/08/09 11:27:03.416842, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] to tree [2016/08/09 11:27:03.416846, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2016/08/09 11:27:03.416849, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7fd7de281c00 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] [2016/08/09 11:27:03.416853, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2016/08/09 11:27:03.416857, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] to tree [2016/08/09 11:27:03.416860, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2016/08/09 11:27:03.416863, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7fd7de281c80 for key [\HKPT] [2016/08/09 11:27:03.416866, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2016/08/09 11:27:03.416870, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKPT] to tree [2016/08/09 11:27:03.416873, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2016/08/09 11:27:03.416876, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7fd7de281d00 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] [2016/08/09 11:27:03.416880, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2016/08/09 11:27:03.416884, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] to tree [2016/08/09 11:27:03.416887, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2016/08/09 11:27:03.416891, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7fd7de281d80 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] [2016/08/09 11:27:03.416894, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2016/08/09 11:27:03.416899, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] to tree [2016/08/09 11:27:03.416902, 8, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2016/08/09 11:27:03.416905, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (1->0) [2016/08/09 11:27:03.416953, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2016/08/09 11:27:03.416960, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2016/08/09 11:27:03.417427, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2016/08/09 11:27:03.417449, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user DEVTEST\nobody [2016/08/09 11:27:03.417458, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is devtest\nobody [2016/08/09 11:27:03.417557, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:128(Get_Pwnam_internals) Trying _Get_Pwnam(), username as given is DEVTEST\nobody [2016/08/09 11:27:03.417577, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:141(Get_Pwnam_internals) Trying _Get_Pwnam(), username as uppercase is DEVTEST\NOBODY [2016/08/09 11:27:03.417593, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:153(Get_Pwnam_internals) Checking combinations of 0 uppercase letters in devtest\nobody [2016/08/09 11:27:03.417598, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals didn't find user [DEVTEST\nobody]! [2016/08/09 11:27:03.417603, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2016/08/09 11:27:03.417606, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2016/08/09 11:27:03.417611, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2016/08/09 11:27:03.417621, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:224(create_local_nt_token_from_info3) Create local NT token for nobody [2016/08/09 11:27:03.417628, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) Finding user nobody [2016/08/09 11:27:03.417632, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2016/08/09 11:27:03.417636, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2016/08/09 11:27:03.417645, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) sys_getgrouplist: user [nobody] [2016/08/09 11:27:03.417692, 5, pid=5534, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:75(gencache_init) Opening cache file at /usr/local/samba/var/cache/gencache.tdb [2016/08/09 11:27:03.417782, 5, pid=5534, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:126(gencache_init) Opening cache file at /usr/local/samba/var/lock/gencache_notrans.tdb [2016/08/09 11:27:03.418115, 10, pid=5537, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:27:03.418179, 10, pid=5537, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2016/08/09 11:27:03.418190, 10, pid=5537, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 8371127996251241664 [2016/08/09 11:27:03.418838, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1300(gid_to_sid) gid 65534 -> sid S-1-22-2-65534 [2016/08/09 11:27:03.418884, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.418893, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.418897, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.418900, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.418904, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.418918, 3, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:547(finalize_local_nt_token) Failed to fetch domain sid for EXAMPLE [2016/08/09 11:27:03.418924, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.418930, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.418933, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.418936, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.418939, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.418942, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.418949, 3, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:579(finalize_local_nt_token) Failed to fetch domain sid for EXAMPLE [2016/08/09 11:27:03.418953, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.418957, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.418960, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.418963, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.418966, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.418969, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.418993, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419013, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-675121440-1470025956-3331568166-501] [2016/08/09 11:27:03.419020, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-675121440-1470025956-3331568166-514] [2016/08/09 11:27:03.419025, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-65534] [2016/08/09 11:27:03.419031, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: 0x0 [2016/08/09 11:27:03.419036, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2016/08/09 11:27:03.419041, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2016/08/09 11:27:03.419052, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-675121440-1470025956-3331568166-501]: value=[65534:U] [2016/08/09 11:27:03.419057, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-675121440-1470025956-3331568166-501]: id=[65534], endptr=[:U] [2016/08/09 11:27:03.419080, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1360(sids_to_unixids) wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE [2016/08/09 11:27:03.419084, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419088, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419091, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419094, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.419097, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.419104, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1748(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 514. [2016/08/09 11:27:03.419109, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2016/08/09 11:27:03.419112, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419115, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2016/08/09 11:27:03.419118, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.419121, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.419139, 4, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:558(tdbsam_open) tdbsam_open: successfully opened /usr/local/samba/private/passdb.tdb [2016/08/09 11:27:03.419144, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:658(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202. [2016/08/09 11:27:03.419152, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419156, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1824(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2016/08/09 11:27:03.419159, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1534(pdb_default_sid_to_id) SID S-1-5-21-675121440-1470025956-3331568166-514 belongs to our domain, but there is no corresponding object in the database. [2016/08/09 11:27:03.419165, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419168, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-675121440-1470025956-3331568166-514 [2016/08/09 11:27:03.419172, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419175, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419178, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419183, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.419186, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.419191, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1748(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 514. [2016/08/09 11:27:03.419195, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2016/08/09 11:27:03.419198, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419201, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2016/08/09 11:27:03.419204, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.419207, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.419213, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:658(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202. [2016/08/09 11:27:03.419222, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419225, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1824(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2016/08/09 11:27:03.419228, 5, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1534(pdb_default_sid_to_id) SID S-1-5-21-675121440-1470025956-3331568166-514 belongs to our domain, but there is no corresponding object in the database. [2016/08/09 11:27:03.419233, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419237, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-21-675121440-1470025956-3331568166-514 [2016/08/09 11:27:03.419241, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419244, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419247, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419250, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.419253, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.419260, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419264, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-1-0 [2016/08/09 11:27:03.419268, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419271, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419275, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419278, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.419281, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.419287, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419290, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-1-0 [2016/08/09 11:27:03.419294, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419297, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419300, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419303, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.419306, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.419311, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419316, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-2 [2016/08/09 11:27:03.419319, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419322, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419325, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419328, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.419331, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.419337, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419340, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-2 [2016/08/09 11:27:03.419344, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419347, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419350, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419353, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.419355, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.419364, 10, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1562(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-546 [2016/08/09 11:27:03.419369, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419373, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-546 [2016/08/09 11:27:03.419376, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419379, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419382, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419385, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.419388, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.419395, 10, pid=5534, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1562(pdb_default_sid_to_id) Could not find map for sid S-1-5-32-546 [2016/08/09 11:27:03.419400, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419403, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1174(legacy_sid_to_unixid) LEGACY: mapping failed for sid S-1-5-32-546 [2016/08/09 11:27:03.419407, 10, pid=5534, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:609(create_local_token) Could not convert SID S-1-5-21-675121440-1470025956-3331568166-514 to gid, ignoring it [2016/08/09 11:27:03.419411, 10, pid=5534, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:609(create_local_token) Could not convert SID S-1-1-0 to gid, ignoring it [2016/08/09 11:27:03.419414, 10, pid=5534, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:609(create_local_token) Could not convert SID S-1-5-2 to gid, ignoring it [2016/08/09 11:27:03.419418, 10, pid=5534, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:609(create_local_token) Could not convert SID S-1-5-32-546 to gid, ignoring it [2016/08/09 11:27:03.419422, 10, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) Security token SIDs (7): SID[ 0]: S-1-5-21-675121440-1470025956-3331568166-501 SID[ 1]: S-1-5-21-675121440-1470025956-3331568166-514 SID[ 2]: S-1-22-2-65534 SID[ 3]: S-1-1-0 SID[ 4]: S-1-5-2 SID[ 5]: S-1-5-32-546 SID[ 6]: S-1-22-1-65534 Privileges (0x 0): Rights (0x 0): [2016/08/09 11:27:03.419438, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 65534 Primary group is 65534 and contains 1 supplementary groups Group[ 0]: 65534 [2016/08/09 11:27:03.419542, 3, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/svcctl/srv_svcctl_reg.c:565(svcctl_init_winreg) Initialise the svcctl registry keys if needed. [2016/08/09 11:27:03.419551, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419555, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419558, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.419563, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.419567, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.419585, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.419590, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:885(regdb_open) regdb_open: registry db opened. refcount reset (1) [2016/08/09 11:27:03.419674, 4, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:203(make_internal_rpc_pipe_p) Create pipe requested winreg [2016/08/09 11:27:03.419682, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:223(init_pipe_handles) init_pipe_handle_list: created handle list for pipe winreg [2016/08/09 11:27:03.419686, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:240(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe winreg [2016/08/09 11:27:03.419719, 4, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:243(make_internal_rpc_pipe_p) Created internal pipe winreg [2016/08/09 11:27:03.419740, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2016/08/09 11:27:03.419764, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2016/08/09 11:27:03.419768, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (1->2) [2016/08/09 11:27:03.419773, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2016/08/09 11:27:03.419776, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2016/08/09 11:27:03.419780, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.419783, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM] [2016/08/09 11:27:03.419804, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.419818, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-a957-f7af9e150000 result : WERR_OK [2016/08/09 11:27:03.419856, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-a957-f7af9e150000 keyname: struct winreg_String name_len : 0x0044 (68) name_size : 0x0044 (68) name : * name : 'SYSTEM\CurrentControlSet\Services' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2016/08/09 11:27:03.419897, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.419911, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2016/08/09 11:27:03.419915, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (2->3) [2016/08/09 11:27:03.419919, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2016/08/09 11:27:03.419922, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2016/08/09 11:27:03.419926, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.419929, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM] [2016/08/09 11:27:03.419939, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2016/08/09 11:27:03.419943, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2016/08/09 11:27:03.419947, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.419950, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.419954, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.419957, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.419968, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2016/08/09 11:27:03.419972, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.419977, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.419980, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.419985, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.419988, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.420005, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.420009, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2016/08/09 11:27:03.420013, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.420026, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-a957-f7af9e150000 result : WERR_OK [2016/08/09 11:27:03.420052, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-a957-f7af9e150000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2016/08/09 11:27:03.420074, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.420087, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services' (ops 0x7fd7dd282200) [2016/08/09 11:27:03.420091, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.420098, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2088(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.420114, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000007 (7) max_subkeylen : * max_subkeylen : 0x0000001c (28) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000000 (0) max_valnamelen : * max_valnamelen : 0x00000002 (2) max_valbufsize : * max_valbufsize : 0x00000000 (0) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2016/08/09 11:27:03.420164, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-a957-f7af9e150000 enum_index : 0x00000000 (0) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2016/08/09 11:27:03.420199, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.420212, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.420216, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x001a (26) size : 0x001e (30) name : * name : 'LanmanServer' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2016/08/09 11:27:03.420256, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-a957-f7af9e150000 enum_index : 0x00000001 (1) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2016/08/09 11:27:03.420290, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.420302, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.420306, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0012 (18) size : 0x001e (30) name : * name : 'Eventlog' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2016/08/09 11:27:03.420342, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-a957-f7af9e150000 enum_index : 0x00000002 (2) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2016/08/09 11:27:03.420378, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.420390, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.420393, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x000c (12) size : 0x001e (30) name : * name : 'Tcpip' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2016/08/09 11:27:03.420432, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-a957-f7af9e150000 enum_index : 0x00000003 (3) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2016/08/09 11:27:03.420466, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.420477, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.420481, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0012 (18) size : 0x001e (30) name : * name : 'Netlogon' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2016/08/09 11:27:03.420519, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-a957-f7af9e150000 enum_index : 0x00000004 (4) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2016/08/09 11:27:03.420552, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.420564, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.420568, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x0010 (16) size : 0x001e (30) name : * name : 'Spooler' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2016/08/09 11:27:03.420604, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-a957-f7af9e150000 enum_index : 0x00000005 (5) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2016/08/09 11:27:03.420638, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.420650, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.420654, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x001e (30) size : 0x001e (30) name : * name : 'RemoteRegistry' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2016/08/09 11:27:03.420690, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey in: struct winreg_EnumKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-a957-f7af9e150000 enum_index : 0x00000006 (6) name : * name: struct winreg_StringBuf length : 0x0000 (0) size : 0x001e (30) name : * name : '' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) [2016/08/09 11:27:03.420723, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.420735, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.420738, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_EnumKey: struct winreg_EnumKey out: struct winreg_EnumKey name : * name: struct winreg_StringBuf length : 0x000a (10) size : 0x001e (30) name : * name : 'WINS' keyclass : * keyclass: struct winreg_StringBuf length : 0x0000 (0) size : 0x0002 (2) name : * name : '' last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2016/08/09 11:27:03.420783, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0054 (84) name_size : 0x0054 (84) name : * name : 'SYSTEM\CurrentControlSet\Services\Spooler' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2016/08/09 11:27:03.420835, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.420847, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler' [2016/08/09 11:27:03.420852, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.420856, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.420860, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2016/08/09 11:27:03.420863, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2016/08/09 11:27:03.420868, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2016/08/09 11:27:03.420871, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2016/08/09 11:27:03.420875, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.420880, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM] [2016/08/09 11:27:03.420890, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.420894, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2016/08/09 11:27:03.420897, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.420901, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.420904, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.420908, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.420911, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.420922, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.420926, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.420929, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2016/08/09 11:27:03.420933, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.420937, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.420940, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.420944, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.420947, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.420964, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.420969, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2016/08/09 11:27:03.420972, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.420976, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2016/08/09 11:27:03.420980, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2016/08/09 11:27:03.420986, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.420989, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2016/08/09 11:27:03.420998, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.421003, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.421016, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-a957-f7af9e150000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2016/08/09 11:27:03.421044, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2016/08/09 11:27:03.421077, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.421090, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Start] [2016/08/09 11:27:03.421094, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.421097, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler' (ops 0x7fd7dd282200) [2016/08/09 11:27:03.421101, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2016/08/09 11:27:03.421109, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Start] len[4] [2016/08/09 11:27:03.421115, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[Type] len[4] [2016/08/09 11:27:03.421119, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[2]: name[ErrorControl] len[4] [2016/08/09 11:27:03.421222, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[3]: name[ObjectName] len[24] [2016/08/09 11:27:03.421231, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[4]: name[DisplayName] len[28] [2016/08/09 11:27:03.421235, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[5]: name[ImagePath] len[66] [2016/08/09 11:27:03.421239, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[6]: name[Description] len[106] [2016/08/09 11:27:03.421244, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.421270, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2016/08/09 11:27:03.421303, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.421316, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Type] [2016/08/09 11:27:03.421321, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.421325, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.421354, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2016/08/09 11:27:03.421407, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.421420, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ErrorControl] [2016/08/09 11:27:03.421424, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.421428, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.421449, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2016/08/09 11:27:03.421513, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.421525, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ObjectName] [2016/08/09 11:27:03.421529, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.421533, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.421549, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(28) [0] : 0x50 (80) [1] : 0x00 (0) [2] : 0x72 (114) [3] : 0x00 (0) [4] : 0x69 (105) [5] : 0x00 (0) [6] : 0x6e (110) [7] : 0x00 (0) [8] : 0x74 (116) [9] : 0x00 (0) [10] : 0x20 (32) [11] : 0x00 (0) [12] : 0x53 (83) [13] : 0x00 (0) [14] : 0x70 (112) [15] : 0x00 (0) [16] : 0x6f (111) [17] : 0x00 (0) [18] : 0x6f (111) [19] : 0x00 (0) [20] : 0x6c (108) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x72 (114) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) size : 0x0000001c (28) [2016/08/09 11:27:03.421617, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.421629, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:DisplayName] [2016/08/09 11:27:03.421634, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.421638, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.421653, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(66) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x6f (111) [13] : 0x00 (0) [14] : 0x63 (99) [15] : 0x00 (0) [16] : 0x61 (97) [17] : 0x00 (0) [18] : 0x6c (108) [19] : 0x00 (0) [20] : 0x2f (47) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x6d (109) [27] : 0x00 (0) [28] : 0x62 (98) [29] : 0x00 (0) [30] : 0x61 (97) [31] : 0x00 (0) [32] : 0x2f (47) [33] : 0x00 (0) [34] : 0x6c (108) [35] : 0x00 (0) [36] : 0x69 (105) [37] : 0x00 (0) [38] : 0x62 (98) [39] : 0x00 (0) [40] : 0x2f (47) [41] : 0x00 (0) [42] : 0x73 (115) [43] : 0x00 (0) [44] : 0x76 (118) [45] : 0x00 (0) [46] : 0x63 (99) [47] : 0x00 (0) [48] : 0x63 (99) [49] : 0x00 (0) [50] : 0x74 (116) [51] : 0x00 (0) [52] : 0x6c (108) [53] : 0x00 (0) [54] : 0x2f (47) [55] : 0x00 (0) [56] : 0x73 (115) [57] : 0x00 (0) [58] : 0x6d (109) [59] : 0x00 (0) [60] : 0x62 (98) [61] : 0x00 (0) [62] : 0x64 (100) [63] : 0x00 (0) [64] : 0x00 (0) [65] : 0x00 (0) size : 0x00000042 (66) [2016/08/09 11:27:03.421780, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.421792, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ImagePath] [2016/08/09 11:27:03.421796, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.421800, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.421815, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(106) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x66 (102) [35] : 0x00 (0) [36] : 0x6f (111) [37] : 0x00 (0) [38] : 0x72 (114) [39] : 0x00 (0) [40] : 0x20 (32) [41] : 0x00 (0) [42] : 0x73 (115) [43] : 0x00 (0) [44] : 0x70 (112) [45] : 0x00 (0) [46] : 0x6f (111) [47] : 0x00 (0) [48] : 0x6f (111) [49] : 0x00 (0) [50] : 0x6c (108) [51] : 0x00 (0) [52] : 0x69 (105) [53] : 0x00 (0) [54] : 0x6e (110) [55] : 0x00 (0) [56] : 0x67 (103) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x66 (102) [61] : 0x00 (0) [62] : 0x69 (105) [63] : 0x00 (0) [64] : 0x6c (108) [65] : 0x00 (0) [66] : 0x65 (101) [67] : 0x00 (0) [68] : 0x73 (115) [69] : 0x00 (0) [70] : 0x20 (32) [71] : 0x00 (0) [72] : 0x74 (116) [73] : 0x00 (0) [74] : 0x6f (111) [75] : 0x00 (0) [76] : 0x20 (32) [77] : 0x00 (0) [78] : 0x70 (112) [79] : 0x00 (0) [80] : 0x72 (114) [81] : 0x00 (0) [82] : 0x69 (105) [83] : 0x00 (0) [84] : 0x6e (110) [85] : 0x00 (0) [86] : 0x74 (116) [87] : 0x00 (0) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x64 (100) [91] : 0x00 (0) [92] : 0x65 (101) [93] : 0x00 (0) [94] : 0x76 (118) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x63 (99) [99] : 0x00 (0) [100] : 0x65 (101) [101] : 0x00 (0) [102] : 0x73 (115) [103] : 0x00 (0) [104] : 0x00 (0) [105] : 0x00 (0) size : 0x0000006a (106) [2016/08/09 11:27:03.422007, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.422019, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Description] [2016/08/09 11:27:03.422023, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.422028, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.422045, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000003-0000-0000-a957-f7af9e150000 [2016/08/09 11:27:03.422057, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.422069, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.422081, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2016/08/09 11:27:03.422086, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2016/08/09 11:27:03.422089, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2016/08/09 11:27:03.422117, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0066 (102) name_size : 0x0066 (102) name : * name : 'SYSTEM\CurrentControlSet\Services\Spooler\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2016/08/09 11:27:03.422169, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.422181, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler\Security' [2016/08/09 11:27:03.422185, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.422189, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.422193, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2016/08/09 11:27:03.422197, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2016/08/09 11:27:03.422201, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2016/08/09 11:27:03.422204, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2016/08/09 11:27:03.422208, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.422211, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM] [2016/08/09 11:27:03.422222, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.422227, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2016/08/09 11:27:03.422231, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.422235, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.422238, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.422242, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.422245, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.422256, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.422260, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.422264, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2016/08/09 11:27:03.422267, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.422271, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.422274, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.422278, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.422281, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.422299, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.422303, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.422307, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2016/08/09 11:27:03.422310, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.422314, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2016/08/09 11:27:03.422317, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2016/08/09 11:27:03.422322, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.422326, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2016/08/09 11:27:03.422336, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.422340, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2016/08/09 11:27:03.422344, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.422348, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2016/08/09 11:27:03.422365, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2016/08/09 11:27:03.422370, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.422373, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2016/08/09 11:27:03.422381, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.422385, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.422399, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-a957-f7af9e150000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2016/08/09 11:27:03.422432, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2016/08/09 11:27:03.422657, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.422670, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security:Security] [2016/08/09 11:27:03.422674, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.422678, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security' (ops 0x7fd7dd282200) [2016/08/09 11:27:03.422682, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2016/08/09 11:27:03.422690, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Security] len[120] [2016/08/09 11:27:03.422694, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.422710, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000004-0000-0000-a957-f7af9e150000 [2016/08/09 11:27:03.422723, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.422735, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.422747, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2016/08/09 11:27:03.422750, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2016/08/09 11:27:03.422754, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2016/08/09 11:27:03.422791, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0056 (86) name_size : 0x0056 (86) name : * name : 'SYSTEM\CurrentControlSet\Services\NETLOGON' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2016/08/09 11:27:03.422846, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.422873, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON' [2016/08/09 11:27:03.422877, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.422881, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.422884, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2016/08/09 11:27:03.422888, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2016/08/09 11:27:03.422892, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2016/08/09 11:27:03.422895, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2016/08/09 11:27:03.422899, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.422902, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM] [2016/08/09 11:27:03.422911, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.422915, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2016/08/09 11:27:03.422919, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.422923, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.422926, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.422930, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.422933, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.422943, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.422948, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.422951, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2016/08/09 11:27:03.422955, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.422960, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.422963, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.422967, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.422970, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.422988, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.422992, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2016/08/09 11:27:03.422996, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.423000, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2016/08/09 11:27:03.423003, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2016/08/09 11:27:03.423007, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.423010, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2016/08/09 11:27:03.423025, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.423029, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.423042, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-a957-f7af9e150000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2016/08/09 11:27:03.423070, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2016/08/09 11:27:03.423104, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.423117, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Start] [2016/08/09 11:27:03.423121, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.423124, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON' (ops 0x7fd7dd282200) [2016/08/09 11:27:03.423128, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2016/08/09 11:27:03.423135, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Start] len[4] [2016/08/09 11:27:03.423139, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[Type] len[4] [2016/08/09 11:27:03.423143, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[2]: name[ErrorControl] len[4] [2016/08/09 11:27:03.423147, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[3]: name[ObjectName] len[24] [2016/08/09 11:27:03.423151, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[4]: name[DisplayName] len[20] [2016/08/09 11:27:03.423155, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[5]: name[ImagePath] len[66] [2016/08/09 11:27:03.423159, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[6]: name[Description] len[164] [2016/08/09 11:27:03.423163, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.423178, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2016/08/09 11:27:03.423212, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.423224, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Type] [2016/08/09 11:27:03.423228, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.423232, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.423246, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2016/08/09 11:27:03.423278, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.423290, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ErrorControl] [2016/08/09 11:27:03.423294, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.423298, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.423312, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2016/08/09 11:27:03.423376, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.423388, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ObjectName] [2016/08/09 11:27:03.423392, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.423396, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.423412, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(20) [0] : 0x4e (78) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x20 (32) [7] : 0x00 (0) [8] : 0x4c (76) [9] : 0x00 (0) [10] : 0x6f (111) [11] : 0x00 (0) [12] : 0x67 (103) [13] : 0x00 (0) [14] : 0x6f (111) [15] : 0x00 (0) [16] : 0x6e (110) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) size : 0x00000014 (20) [2016/08/09 11:27:03.423469, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.423481, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:DisplayName] [2016/08/09 11:27:03.423485, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.423489, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.423504, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(66) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x6f (111) [13] : 0x00 (0) [14] : 0x63 (99) [15] : 0x00 (0) [16] : 0x61 (97) [17] : 0x00 (0) [18] : 0x6c (108) [19] : 0x00 (0) [20] : 0x2f (47) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x6d (109) [27] : 0x00 (0) [28] : 0x62 (98) [29] : 0x00 (0) [30] : 0x61 (97) [31] : 0x00 (0) [32] : 0x2f (47) [33] : 0x00 (0) [34] : 0x6c (108) [35] : 0x00 (0) [36] : 0x69 (105) [37] : 0x00 (0) [38] : 0x62 (98) [39] : 0x00 (0) [40] : 0x2f (47) [41] : 0x00 (0) [42] : 0x73 (115) [43] : 0x00 (0) [44] : 0x76 (118) [45] : 0x00 (0) [46] : 0x63 (99) [47] : 0x00 (0) [48] : 0x63 (99) [49] : 0x00 (0) [50] : 0x74 (116) [51] : 0x00 (0) [52] : 0x6c (108) [53] : 0x00 (0) [54] : 0x2f (47) [55] : 0x00 (0) [56] : 0x73 (115) [57] : 0x00 (0) [58] : 0x6d (109) [59] : 0x00 (0) [60] : 0x62 (98) [61] : 0x00 (0) [62] : 0x64 (100) [63] : 0x00 (0) [64] : 0x00 (0) [65] : 0x00 (0) size : 0x00000042 (66) [2016/08/09 11:27:03.423636, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.423649, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ImagePath] [2016/08/09 11:27:03.423653, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.423658, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.423675, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(164) [0] : 0x46 (70) [1] : 0x00 (0) [2] : 0x69 (105) [3] : 0x00 (0) [4] : 0x6c (108) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x20 (32) [9] : 0x00 (0) [10] : 0x73 (115) [11] : 0x00 (0) [12] : 0x65 (101) [13] : 0x00 (0) [14] : 0x72 (114) [15] : 0x00 (0) [16] : 0x76 (118) [17] : 0x00 (0) [18] : 0x69 (105) [19] : 0x00 (0) [20] : 0x63 (99) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x20 (32) [25] : 0x00 (0) [26] : 0x70 (112) [27] : 0x00 (0) [28] : 0x72 (114) [29] : 0x00 (0) [30] : 0x6f (111) [31] : 0x00 (0) [32] : 0x76 (118) [33] : 0x00 (0) [34] : 0x69 (105) [35] : 0x00 (0) [36] : 0x64 (100) [37] : 0x00 (0) [38] : 0x69 (105) [39] : 0x00 (0) [40] : 0x6e (110) [41] : 0x00 (0) [42] : 0x67 (103) [43] : 0x00 (0) [44] : 0x20 (32) [45] : 0x00 (0) [46] : 0x61 (97) [47] : 0x00 (0) [48] : 0x63 (99) [49] : 0x00 (0) [50] : 0x63 (99) [51] : 0x00 (0) [52] : 0x65 (101) [53] : 0x00 (0) [54] : 0x73 (115) [55] : 0x00 (0) [56] : 0x73 (115) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x74 (116) [61] : 0x00 (0) [62] : 0x6f (111) [63] : 0x00 (0) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x70 (112) [67] : 0x00 (0) [68] : 0x6f (111) [69] : 0x00 (0) [70] : 0x6c (108) [71] : 0x00 (0) [72] : 0x69 (105) [73] : 0x00 (0) [74] : 0x63 (99) [75] : 0x00 (0) [76] : 0x79 (121) [77] : 0x00 (0) [78] : 0x20 (32) [79] : 0x00 (0) [80] : 0x61 (97) [81] : 0x00 (0) [82] : 0x6e (110) [83] : 0x00 (0) [84] : 0x64 (100) [85] : 0x00 (0) [86] : 0x20 (32) [87] : 0x00 (0) [88] : 0x70 (112) [89] : 0x00 (0) [90] : 0x72 (114) [91] : 0x00 (0) [92] : 0x6f (111) [93] : 0x00 (0) [94] : 0x66 (102) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x6c (108) [99] : 0x00 (0) [100] : 0x65 (101) [101] : 0x00 (0) [102] : 0x20 (32) [103] : 0x00 (0) [104] : 0x64 (100) [105] : 0x00 (0) [106] : 0x61 (97) [107] : 0x00 (0) [108] : 0x74 (116) [109] : 0x00 (0) [110] : 0x61 (97) [111] : 0x00 (0) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x28 (40) [115] : 0x00 (0) [116] : 0x6e (110) [117] : 0x00 (0) [118] : 0x6f (111) [119] : 0x00 (0) [120] : 0x74 (116) [121] : 0x00 (0) [122] : 0x72 (114) [123] : 0x00 (0) [124] : 0x65 (101) [125] : 0x00 (0) [126] : 0x6d (109) [127] : 0x00 (0) [128] : 0x6f (111) [129] : 0x00 (0) [130] : 0x74 (116) [131] : 0x00 (0) [132] : 0x65 (101) [133] : 0x00 (0) [134] : 0x6c (108) [135] : 0x00 (0) [136] : 0x79 (121) [137] : 0x00 (0) [138] : 0x20 (32) [139] : 0x00 (0) [140] : 0x6d (109) [141] : 0x00 (0) [142] : 0x61 (97) [143] : 0x00 (0) [144] : 0x6e (110) [145] : 0x00 (0) [146] : 0x61 (97) [147] : 0x00 (0) [148] : 0x67 (103) [149] : 0x00 (0) [150] : 0x65 (101) [151] : 0x00 (0) [152] : 0x61 (97) [153] : 0x00 (0) [154] : 0x62 (98) [155] : 0x00 (0) [156] : 0x6c (108) [157] : 0x00 (0) [158] : 0x65 (101) [159] : 0x00 (0) [160] : 0x29 (41) [161] : 0x00 (0) [162] : 0x00 (0) [163] : 0x00 (0) size : 0x000000a4 (164) [2016/08/09 11:27:03.423954, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.423966, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Description] [2016/08/09 11:27:03.423970, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.423975, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.423989, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000005-0000-0000-a957-f7af9e150000 [2016/08/09 11:27:03.424001, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.424013, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.424025, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2016/08/09 11:27:03.424029, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2016/08/09 11:27:03.424037, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2016/08/09 11:27:03.424062, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0068 (104) name_size : 0x0068 (104) name : * name : 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2016/08/09 11:27:03.424113, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.424125, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' [2016/08/09 11:27:03.424130, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.424133, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.424137, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2016/08/09 11:27:03.424141, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2016/08/09 11:27:03.424145, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2016/08/09 11:27:03.424148, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2016/08/09 11:27:03.424154, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.424157, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM] [2016/08/09 11:27:03.424167, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.424171, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2016/08/09 11:27:03.424175, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.424178, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.424182, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.424186, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.424189, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.424199, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.424204, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.424207, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2016/08/09 11:27:03.424211, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.424215, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.424218, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.424222, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.424225, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.424243, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.424247, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.424250, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2016/08/09 11:27:03.424254, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.424259, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2016/08/09 11:27:03.424262, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2016/08/09 11:27:03.424267, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.424270, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2016/08/09 11:27:03.424281, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.424285, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2016/08/09 11:27:03.424288, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.424292, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2016/08/09 11:27:03.424296, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2016/08/09 11:27:03.424300, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.424303, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2016/08/09 11:27:03.424311, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.424315, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.424328, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-a957-f7af9e150000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2016/08/09 11:27:03.424359, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2016/08/09 11:27:03.424571, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.424584, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security:Security] [2016/08/09 11:27:03.424588, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.424592, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security' (ops 0x7fd7dd282200) [2016/08/09 11:27:03.424597, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2016/08/09 11:27:03.424605, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Security] len[120] [2016/08/09 11:27:03.424609, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.424624, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000006-0000-0000-a957-f7af9e150000 [2016/08/09 11:27:03.424636, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.424649, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.424660, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2016/08/09 11:27:03.424664, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2016/08/09 11:27:03.424668, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2016/08/09 11:27:03.424691, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0062 (98) name_size : 0x0062 (98) name : * name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2016/08/09 11:27:03.424744, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.424756, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' [2016/08/09 11:27:03.424760, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.424764, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.424768, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2016/08/09 11:27:03.424771, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2016/08/09 11:27:03.424775, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2016/08/09 11:27:03.424779, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2016/08/09 11:27:03.424783, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.424785, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM] [2016/08/09 11:27:03.424795, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.424798, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2016/08/09 11:27:03.424802, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.424806, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.424809, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.424813, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.424816, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.424827, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.424833, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.424836, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2016/08/09 11:27:03.424840, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.424844, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.424847, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.424851, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.424854, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.424871, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.424875, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2016/08/09 11:27:03.424879, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.424883, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2016/08/09 11:27:03.424886, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2016/08/09 11:27:03.424890, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.424893, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2016/08/09 11:27:03.424903, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.424907, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.424934, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-a957-f7af9e150000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2016/08/09 11:27:03.424962, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2016/08/09 11:27:03.424998, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.425011, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Start] [2016/08/09 11:27:03.425015, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.425019, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry' (ops 0x7fd7dd282200) [2016/08/09 11:27:03.425023, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2016/08/09 11:27:03.425031, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Start] len[4] [2016/08/09 11:27:03.425048, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[Type] len[4] [2016/08/09 11:27:03.425052, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[2]: name[ErrorControl] len[4] [2016/08/09 11:27:03.425055, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[3]: name[ObjectName] len[24] [2016/08/09 11:27:03.425059, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[4]: name[DisplayName] len[48] [2016/08/09 11:27:03.425063, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[5]: name[ImagePath] len[66] [2016/08/09 11:27:03.425067, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[6]: name[Description] len[126] [2016/08/09 11:27:03.425071, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.425087, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2016/08/09 11:27:03.425120, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.425138, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Type] [2016/08/09 11:27:03.425142, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.425146, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.425161, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2016/08/09 11:27:03.425192, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.425204, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ErrorControl] [2016/08/09 11:27:03.425208, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.425212, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.425229, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2016/08/09 11:27:03.425291, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.425303, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ObjectName] [2016/08/09 11:27:03.425307, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.425311, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.425326, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(48) [0] : 0x52 (82) [1] : 0x00 (0) [2] : 0x65 (101) [3] : 0x00 (0) [4] : 0x6d (109) [5] : 0x00 (0) [6] : 0x6f (111) [7] : 0x00 (0) [8] : 0x74 (116) [9] : 0x00 (0) [10] : 0x65 (101) [11] : 0x00 (0) [12] : 0x20 (32) [13] : 0x00 (0) [14] : 0x52 (82) [15] : 0x00 (0) [16] : 0x65 (101) [17] : 0x00 (0) [18] : 0x67 (103) [19] : 0x00 (0) [20] : 0x69 (105) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x74 (116) [25] : 0x00 (0) [26] : 0x72 (114) [27] : 0x00 (0) [28] : 0x79 (121) [29] : 0x00 (0) [30] : 0x20 (32) [31] : 0x00 (0) [32] : 0x53 (83) [33] : 0x00 (0) [34] : 0x65 (101) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x76 (118) [39] : 0x00 (0) [40] : 0x69 (105) [41] : 0x00 (0) [42] : 0x63 (99) [43] : 0x00 (0) [44] : 0x65 (101) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) size : 0x00000030 (48) [2016/08/09 11:27:03.425428, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.425440, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:DisplayName] [2016/08/09 11:27:03.425444, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.425449, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.425471, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(66) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x6f (111) [13] : 0x00 (0) [14] : 0x63 (99) [15] : 0x00 (0) [16] : 0x61 (97) [17] : 0x00 (0) [18] : 0x6c (108) [19] : 0x00 (0) [20] : 0x2f (47) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x6d (109) [27] : 0x00 (0) [28] : 0x62 (98) [29] : 0x00 (0) [30] : 0x61 (97) [31] : 0x00 (0) [32] : 0x2f (47) [33] : 0x00 (0) [34] : 0x6c (108) [35] : 0x00 (0) [36] : 0x69 (105) [37] : 0x00 (0) [38] : 0x62 (98) [39] : 0x00 (0) [40] : 0x2f (47) [41] : 0x00 (0) [42] : 0x73 (115) [43] : 0x00 (0) [44] : 0x76 (118) [45] : 0x00 (0) [46] : 0x63 (99) [47] : 0x00 (0) [48] : 0x63 (99) [49] : 0x00 (0) [50] : 0x74 (116) [51] : 0x00 (0) [52] : 0x6c (108) [53] : 0x00 (0) [54] : 0x2f (47) [55] : 0x00 (0) [56] : 0x73 (115) [57] : 0x00 (0) [58] : 0x6d (109) [59] : 0x00 (0) [60] : 0x62 (98) [61] : 0x00 (0) [62] : 0x64 (100) [63] : 0x00 (0) [64] : 0x00 (0) [65] : 0x00 (0) size : 0x00000042 (66) [2016/08/09 11:27:03.425601, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.425614, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ImagePath] [2016/08/09 11:27:03.425619, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.425623, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.425637, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(126) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x70 (112) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x6f (111) [39] : 0x00 (0) [40] : 0x76 (118) [41] : 0x00 (0) [42] : 0x69 (105) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x69 (105) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x67 (103) [51] : 0x00 (0) [52] : 0x20 (32) [53] : 0x00 (0) [54] : 0x72 (114) [55] : 0x00 (0) [56] : 0x65 (101) [57] : 0x00 (0) [58] : 0x6d (109) [59] : 0x00 (0) [60] : 0x6f (111) [61] : 0x00 (0) [62] : 0x74 (116) [63] : 0x00 (0) [64] : 0x65 (101) [65] : 0x00 (0) [66] : 0x20 (32) [67] : 0x00 (0) [68] : 0x61 (97) [69] : 0x00 (0) [70] : 0x63 (99) [71] : 0x00 (0) [72] : 0x63 (99) [73] : 0x00 (0) [74] : 0x65 (101) [75] : 0x00 (0) [76] : 0x73 (115) [77] : 0x00 (0) [78] : 0x73 (115) [79] : 0x00 (0) [80] : 0x20 (32) [81] : 0x00 (0) [82] : 0x74 (116) [83] : 0x00 (0) [84] : 0x6f (111) [85] : 0x00 (0) [86] : 0x20 (32) [87] : 0x00 (0) [88] : 0x74 (116) [89] : 0x00 (0) [90] : 0x68 (104) [91] : 0x00 (0) [92] : 0x65 (101) [93] : 0x00 (0) [94] : 0x20 (32) [95] : 0x00 (0) [96] : 0x53 (83) [97] : 0x00 (0) [98] : 0x61 (97) [99] : 0x00 (0) [100] : 0x6d (109) [101] : 0x00 (0) [102] : 0x62 (98) [103] : 0x00 (0) [104] : 0x61 (97) [105] : 0x00 (0) [106] : 0x20 (32) [107] : 0x00 (0) [108] : 0x72 (114) [109] : 0x00 (0) [110] : 0x65 (101) [111] : 0x00 (0) [112] : 0x67 (103) [113] : 0x00 (0) [114] : 0x69 (105) [115] : 0x00 (0) [116] : 0x73 (115) [117] : 0x00 (0) [118] : 0x74 (116) [119] : 0x00 (0) [120] : 0x72 (114) [121] : 0x00 (0) [122] : 0x79 (121) [123] : 0x00 (0) [124] : 0x00 (0) [125] : 0x00 (0) size : 0x0000007e (126) [2016/08/09 11:27:03.425861, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.425873, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Description] [2016/08/09 11:27:03.425878, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.425882, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.425895, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000007-0000-0000-a957-f7af9e150000 [2016/08/09 11:27:03.425907, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.425920, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.425931, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2016/08/09 11:27:03.425935, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2016/08/09 11:27:03.425941, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2016/08/09 11:27:03.425965, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0074 (116) name_size : 0x0074 (116) name : * name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2016/08/09 11:27:03.426016, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.426028, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' [2016/08/09 11:27:03.426033, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.426037, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.426040, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2016/08/09 11:27:03.426044, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2016/08/09 11:27:03.426048, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2016/08/09 11:27:03.426053, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2016/08/09 11:27:03.426057, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.426060, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM] [2016/08/09 11:27:03.426070, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.426074, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2016/08/09 11:27:03.426078, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.426081, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.426085, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.426089, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.426092, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.426102, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.426106, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.426109, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2016/08/09 11:27:03.426113, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.426117, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.426120, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.426124, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.426127, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.426146, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.426150, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.426154, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2016/08/09 11:27:03.426158, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.426163, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2016/08/09 11:27:03.426167, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2016/08/09 11:27:03.426171, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.426174, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2016/08/09 11:27:03.426184, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.426188, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2016/08/09 11:27:03.426192, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.426195, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2016/08/09 11:27:03.426199, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2016/08/09 11:27:03.426203, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.426206, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2016/08/09 11:27:03.426214, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.426218, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.426231, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-a957-f7af9e150000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2016/08/09 11:27:03.426262, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2016/08/09 11:27:03.426475, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.426488, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security:Security] [2016/08/09 11:27:03.426492, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.426496, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' (ops 0x7fd7dd282200) [2016/08/09 11:27:03.426501, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2016/08/09 11:27:03.426509, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Security] len[120] [2016/08/09 11:27:03.426514, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.426528, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000008-0000-0000-a957-f7af9e150000 [2016/08/09 11:27:03.426540, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.426553, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.426564, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2016/08/09 11:27:03.426568, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2016/08/09 11:27:03.426571, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2016/08/09 11:27:03.426595, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x004e (78) name_size : 0x004e (78) name : * name : 'SYSTEM\CurrentControlSet\Services\WINS' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_ACTION_NONE (0) [2016/08/09 11:27:03.426648, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.426660, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS' [2016/08/09 11:27:03.426665, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.426668, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.426672, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2016/08/09 11:27:03.426675, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2016/08/09 11:27:03.426679, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2016/08/09 11:27:03.426683, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2016/08/09 11:27:03.426686, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.426689, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM] [2016/08/09 11:27:03.426698, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.426702, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2016/08/09 11:27:03.426706, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.426710, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.426713, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.426717, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.426720, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.426730, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.426736, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.426740, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2016/08/09 11:27:03.426743, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.426747, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.426750, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.426754, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.426757, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.426775, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.426779, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2016/08/09 11:27:03.426782, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.426786, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2016/08/09 11:27:03.426789, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2016/08/09 11:27:03.426794, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.426797, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2016/08/09 11:27:03.426806, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.426811, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.426823, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-a957-f7af9e150000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2016/08/09 11:27:03.426850, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x000c (12) name_size : 0x000c (12) name : * name : 'Start' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x02 (2) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2016/08/09 11:27:03.426884, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.426896, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Start] [2016/08/09 11:27:03.426900, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.426904, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS' (ops 0x7fd7dd282200) [2016/08/09 11:27:03.426907, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2016/08/09 11:27:03.426915, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Start] len[4] [2016/08/09 11:27:03.426919, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[Type] len[4] [2016/08/09 11:27:03.426923, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[2]: name[ErrorControl] len[4] [2016/08/09 11:27:03.426927, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[3]: name[ObjectName] len[24] [2016/08/09 11:27:03.426931, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[4]: name[DisplayName] len[74] [2016/08/09 11:27:03.426935, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[5]: name[ImagePath] len[66] [2016/08/09 11:27:03.426939, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[6]: name[Description] len[178] [2016/08/09 11:27:03.426943, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.426958, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x000a (10) name_size : 0x000a (10) name : * name : 'Type' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x10 (16) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2016/08/09 11:27:03.426992, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.427004, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Type] [2016/08/09 11:27:03.427008, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.427012, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.427026, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x001a (26) name_size : 0x001a (26) name : * name : 'ErrorControl' type : REG_DWORD (4) data : * data: ARRAY(4) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x00 (0) [3] : 0x00 (0) size : 0x00000004 (4) [2016/08/09 11:27:03.427057, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.427069, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ErrorControl] [2016/08/09 11:27:03.427073, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.427077, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.427094, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0016 (22) name_size : 0x0016 (22) name : * name : 'ObjectName' type : REG_SZ (1) data : * data: ARRAY(24) [0] : 0x4c (76) [1] : 0x00 (0) [2] : 0x6f (111) [3] : 0x00 (0) [4] : 0x63 (99) [5] : 0x00 (0) [6] : 0x61 (97) [7] : 0x00 (0) [8] : 0x6c (108) [9] : 0x00 (0) [10] : 0x53 (83) [11] : 0x00 (0) [12] : 0x79 (121) [13] : 0x00 (0) [14] : 0x73 (115) [15] : 0x00 (0) [16] : 0x74 (116) [17] : 0x00 (0) [18] : 0x65 (101) [19] : 0x00 (0) [20] : 0x6d (109) [21] : 0x00 (0) [22] : 0x00 (0) [23] : 0x00 (0) size : 0x00000018 (24) [2016/08/09 11:27:03.427157, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.427169, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ObjectName] [2016/08/09 11:27:03.427173, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.427177, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.427194, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'DisplayName' type : REG_SZ (1) data : * data: ARRAY(74) [0] : 0x57 (87) [1] : 0x00 (0) [2] : 0x69 (105) [3] : 0x00 (0) [4] : 0x6e (110) [5] : 0x00 (0) [6] : 0x64 (100) [7] : 0x00 (0) [8] : 0x6f (111) [9] : 0x00 (0) [10] : 0x77 (119) [11] : 0x00 (0) [12] : 0x73 (115) [13] : 0x00 (0) [14] : 0x20 (32) [15] : 0x00 (0) [16] : 0x49 (73) [17] : 0x00 (0) [18] : 0x6e (110) [19] : 0x00 (0) [20] : 0x74 (116) [21] : 0x00 (0) [22] : 0x65 (101) [23] : 0x00 (0) [24] : 0x72 (114) [25] : 0x00 (0) [26] : 0x6e (110) [27] : 0x00 (0) [28] : 0x65 (101) [29] : 0x00 (0) [30] : 0x74 (116) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x4e (78) [35] : 0x00 (0) [36] : 0x61 (97) [37] : 0x00 (0) [38] : 0x6d (109) [39] : 0x00 (0) [40] : 0x65 (101) [41] : 0x00 (0) [42] : 0x20 (32) [43] : 0x00 (0) [44] : 0x53 (83) [45] : 0x00 (0) [46] : 0x65 (101) [47] : 0x00 (0) [48] : 0x72 (114) [49] : 0x00 (0) [50] : 0x76 (118) [51] : 0x00 (0) [52] : 0x69 (105) [53] : 0x00 (0) [54] : 0x63 (99) [55] : 0x00 (0) [56] : 0x65 (101) [57] : 0x00 (0) [58] : 0x20 (32) [59] : 0x00 (0) [60] : 0x28 (40) [61] : 0x00 (0) [62] : 0x57 (87) [63] : 0x00 (0) [64] : 0x49 (73) [65] : 0x00 (0) [66] : 0x4e (78) [67] : 0x00 (0) [68] : 0x53 (83) [69] : 0x00 (0) [70] : 0x29 (41) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) size : 0x0000004a (74) [2016/08/09 11:27:03.427341, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.427354, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:DisplayName] [2016/08/09 11:27:03.427358, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.427362, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.427379, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0014 (20) name_size : 0x0014 (20) name : * name : 'ImagePath' type : REG_SZ (1) data : * data: ARRAY(66) [0] : 0x2f (47) [1] : 0x00 (0) [2] : 0x75 (117) [3] : 0x00 (0) [4] : 0x73 (115) [5] : 0x00 (0) [6] : 0x72 (114) [7] : 0x00 (0) [8] : 0x2f (47) [9] : 0x00 (0) [10] : 0x6c (108) [11] : 0x00 (0) [12] : 0x6f (111) [13] : 0x00 (0) [14] : 0x63 (99) [15] : 0x00 (0) [16] : 0x61 (97) [17] : 0x00 (0) [18] : 0x6c (108) [19] : 0x00 (0) [20] : 0x2f (47) [21] : 0x00 (0) [22] : 0x73 (115) [23] : 0x00 (0) [24] : 0x61 (97) [25] : 0x00 (0) [26] : 0x6d (109) [27] : 0x00 (0) [28] : 0x62 (98) [29] : 0x00 (0) [30] : 0x61 (97) [31] : 0x00 (0) [32] : 0x2f (47) [33] : 0x00 (0) [34] : 0x6c (108) [35] : 0x00 (0) [36] : 0x69 (105) [37] : 0x00 (0) [38] : 0x62 (98) [39] : 0x00 (0) [40] : 0x2f (47) [41] : 0x00 (0) [42] : 0x73 (115) [43] : 0x00 (0) [44] : 0x76 (118) [45] : 0x00 (0) [46] : 0x63 (99) [47] : 0x00 (0) [48] : 0x63 (99) [49] : 0x00 (0) [50] : 0x74 (116) [51] : 0x00 (0) [52] : 0x6c (108) [53] : 0x00 (0) [54] : 0x2f (47) [55] : 0x00 (0) [56] : 0x6e (110) [57] : 0x00 (0) [58] : 0x6d (109) [59] : 0x00 (0) [60] : 0x62 (98) [61] : 0x00 (0) [62] : 0x64 (100) [63] : 0x00 (0) [64] : 0x00 (0) [65] : 0x00 (0) size : 0x00000042 (66) [2016/08/09 11:27:03.427528, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.427540, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ImagePath] [2016/08/09 11:27:03.427544, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.427548, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.427564, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0018 (24) name_size : 0x0018 (24) name : * name : 'Description' type : REG_SZ (1) data : * data: ARRAY(178) [0] : 0x49 (73) [1] : 0x00 (0) [2] : 0x6e (110) [3] : 0x00 (0) [4] : 0x74 (116) [5] : 0x00 (0) [6] : 0x65 (101) [7] : 0x00 (0) [8] : 0x72 (114) [9] : 0x00 (0) [10] : 0x6e (110) [11] : 0x00 (0) [12] : 0x61 (97) [13] : 0x00 (0) [14] : 0x6c (108) [15] : 0x00 (0) [16] : 0x20 (32) [17] : 0x00 (0) [18] : 0x73 (115) [19] : 0x00 (0) [20] : 0x65 (101) [21] : 0x00 (0) [22] : 0x72 (114) [23] : 0x00 (0) [24] : 0x76 (118) [25] : 0x00 (0) [26] : 0x69 (105) [27] : 0x00 (0) [28] : 0x63 (99) [29] : 0x00 (0) [30] : 0x65 (101) [31] : 0x00 (0) [32] : 0x20 (32) [33] : 0x00 (0) [34] : 0x70 (112) [35] : 0x00 (0) [36] : 0x72 (114) [37] : 0x00 (0) [38] : 0x6f (111) [39] : 0x00 (0) [40] : 0x76 (118) [41] : 0x00 (0) [42] : 0x69 (105) [43] : 0x00 (0) [44] : 0x64 (100) [45] : 0x00 (0) [46] : 0x69 (105) [47] : 0x00 (0) [48] : 0x6e (110) [49] : 0x00 (0) [50] : 0x67 (103) [51] : 0x00 (0) [52] : 0x20 (32) [53] : 0x00 (0) [54] : 0x61 (97) [55] : 0x00 (0) [56] : 0x20 (32) [57] : 0x00 (0) [58] : 0x4e (78) [59] : 0x00 (0) [60] : 0x65 (101) [61] : 0x00 (0) [62] : 0x74 (116) [63] : 0x00 (0) [64] : 0x42 (66) [65] : 0x00 (0) [66] : 0x49 (73) [67] : 0x00 (0) [68] : 0x4f (79) [69] : 0x00 (0) [70] : 0x53 (83) [71] : 0x00 (0) [72] : 0x20 (32) [73] : 0x00 (0) [74] : 0x70 (112) [75] : 0x00 (0) [76] : 0x6f (111) [77] : 0x00 (0) [78] : 0x69 (105) [79] : 0x00 (0) [80] : 0x6e (110) [81] : 0x00 (0) [82] : 0x74 (116) [83] : 0x00 (0) [84] : 0x2d (45) [85] : 0x00 (0) [86] : 0x74 (116) [87] : 0x00 (0) [88] : 0x6f (111) [89] : 0x00 (0) [90] : 0x2d (45) [91] : 0x00 (0) [92] : 0x70 (112) [93] : 0x00 (0) [94] : 0x6f (111) [95] : 0x00 (0) [96] : 0x69 (105) [97] : 0x00 (0) [98] : 0x6e (110) [99] : 0x00 (0) [100] : 0x74 (116) [101] : 0x00 (0) [102] : 0x20 (32) [103] : 0x00 (0) [104] : 0x6e (110) [105] : 0x00 (0) [106] : 0x61 (97) [107] : 0x00 (0) [108] : 0x6d (109) [109] : 0x00 (0) [110] : 0x65 (101) [111] : 0x00 (0) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x73 (115) [115] : 0x00 (0) [116] : 0x65 (101) [117] : 0x00 (0) [118] : 0x72 (114) [119] : 0x00 (0) [120] : 0x76 (118) [121] : 0x00 (0) [122] : 0x65 (101) [123] : 0x00 (0) [124] : 0x72 (114) [125] : 0x00 (0) [126] : 0x28 (40) [127] : 0x00 (0) [128] : 0x6e (110) [129] : 0x00 (0) [130] : 0x6f (111) [131] : 0x00 (0) [132] : 0x74 (116) [133] : 0x00 (0) [134] : 0x20 (32) [135] : 0x00 (0) [136] : 0x72 (114) [137] : 0x00 (0) [138] : 0x65 (101) [139] : 0x00 (0) [140] : 0x6d (109) [141] : 0x00 (0) [142] : 0x6f (111) [143] : 0x00 (0) [144] : 0x74 (116) [145] : 0x00 (0) [146] : 0x65 (101) [147] : 0x00 (0) [148] : 0x6c (108) [149] : 0x00 (0) [150] : 0x79 (121) [151] : 0x00 (0) [152] : 0x20 (32) [153] : 0x00 (0) [154] : 0x6d (109) [155] : 0x00 (0) [156] : 0x61 (97) [157] : 0x00 (0) [158] : 0x6e (110) [159] : 0x00 (0) [160] : 0x61 (97) [161] : 0x00 (0) [162] : 0x67 (103) [163] : 0x00 (0) [164] : 0x65 (101) [165] : 0x00 (0) [166] : 0x61 (97) [167] : 0x00 (0) [168] : 0x62 (98) [169] : 0x00 (0) [170] : 0x6c (108) [171] : 0x00 (0) [172] : 0x65 (101) [173] : 0x00 (0) [174] : 0x29 (41) [175] : 0x00 (0) [176] : 0x00 (0) [177] : 0x00 (0) size : 0x000000b2 (178) [2016/08/09 11:27:03.428869, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.428885, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Description] [2016/08/09 11:27:03.428891, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.428897, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.428919, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000009-0000-0000-a957-f7af9e150000 [2016/08/09 11:27:03.428933, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.428946, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.428959, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2016/08/09 11:27:03.428964, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2016/08/09 11:27:03.428968, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2016/08/09 11:27:03.428994, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey in: struct winreg_CreateKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0060 (96) name_size : 0x0060 (96) name : * name : 'SYSTEM\CurrentControlSet\Services\WINS\Security' keyclass: struct winreg_String name_len : 0x0002 (2) name_size : 0x0002 (2) name : * name : '' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY secdesc : NULL action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) [2016/08/09 11:27:03.429046, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.429059, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS\Security' [2016/08/09 11:27:03.429063, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.429067, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.429071, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2016/08/09 11:27:03.429077, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2016/08/09 11:27:03.429081, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2016/08/09 11:27:03.429084, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2016/08/09 11:27:03.429088, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.429091, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM] [2016/08/09 11:27:03.429102, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.429106, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2016/08/09 11:27:03.429110, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.429114, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.429117, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.429121, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.429128, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.429139, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.429144, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.429147, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2016/08/09 11:27:03.429151, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.429155, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.429158, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.429162, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.429165, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.429183, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.429187, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 2 [2016/08/09 11:27:03.429192, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2016/08/09 11:27:03.429196, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.429199, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2016/08/09 11:27:03.429203, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2016/08/09 11:27:03.429207, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.429210, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2016/08/09 11:27:03.429219, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.429223, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2016/08/09 11:27:03.429226, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.429230, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2016/08/09 11:27:03.429233, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2016/08/09 11:27:03.429238, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.429241, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2016/08/09 11:27:03.429249, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.429253, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[3] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.429266, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CreateKey: struct winreg_CreateKey out: struct winreg_CreateKey new_handle : * new_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-a957-f7af9e150000 action_taken : * action_taken : REG_OPENED_EXISTING_KEY (2) result : WERR_OK [2016/08/09 11:27:03.429298, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue in: struct winreg_SetValue handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-a957-f7af9e150000 name: struct winreg_String name_len : 0x0012 (18) name_size : 0x0012 (18) name : * name : 'Security' type : REG_BINARY (3) data : * data: ARRAY(120) [0] : 0x01 (1) [1] : 0x00 (0) [2] : 0x04 (4) [3] : 0x80 (128) [4] : 0x00 (0) [5] : 0x00 (0) [6] : 0x00 (0) [7] : 0x00 (0) [8] : 0x00 (0) [9] : 0x00 (0) [10] : 0x00 (0) [11] : 0x00 (0) [12] : 0x00 (0) [13] : 0x00 (0) [14] : 0x00 (0) [15] : 0x00 (0) [16] : 0x14 (20) [17] : 0x00 (0) [18] : 0x00 (0) [19] : 0x00 (0) [20] : 0x02 (2) [21] : 0x00 (0) [22] : 0x64 (100) [23] : 0x00 (0) [24] : 0x04 (4) [25] : 0x00 (0) [26] : 0x00 (0) [27] : 0x00 (0) [28] : 0x00 (0) [29] : 0x00 (0) [30] : 0x14 (20) [31] : 0x00 (0) [32] : 0x8d (141) [33] : 0x01 (1) [34] : 0x02 (2) [35] : 0x00 (0) [36] : 0x01 (1) [37] : 0x01 (1) [38] : 0x00 (0) [39] : 0x00 (0) [40] : 0x00 (0) [41] : 0x00 (0) [42] : 0x00 (0) [43] : 0x01 (1) [44] : 0x00 (0) [45] : 0x00 (0) [46] : 0x00 (0) [47] : 0x00 (0) [48] : 0x00 (0) [49] : 0x00 (0) [50] : 0x18 (24) [51] : 0x00 (0) [52] : 0xfd (253) [53] : 0x01 (1) [54] : 0x02 (2) [55] : 0x00 (0) [56] : 0x01 (1) [57] : 0x02 (2) [58] : 0x00 (0) [59] : 0x00 (0) [60] : 0x00 (0) [61] : 0x00 (0) [62] : 0x00 (0) [63] : 0x05 (5) [64] : 0x20 (32) [65] : 0x00 (0) [66] : 0x00 (0) [67] : 0x00 (0) [68] : 0x23 (35) [69] : 0x02 (2) [70] : 0x00 (0) [71] : 0x00 (0) [72] : 0x00 (0) [73] : 0x00 (0) [74] : 0x18 (24) [75] : 0x00 (0) [76] : 0xff (255) [77] : 0x01 (1) [78] : 0x0f (15) [79] : 0x00 (0) [80] : 0x01 (1) [81] : 0x02 (2) [82] : 0x00 (0) [83] : 0x00 (0) [84] : 0x00 (0) [85] : 0x00 (0) [86] : 0x00 (0) [87] : 0x05 (5) [88] : 0x20 (32) [89] : 0x00 (0) [90] : 0x00 (0) [91] : 0x00 (0) [92] : 0x25 (37) [93] : 0x02 (2) [94] : 0x00 (0) [95] : 0x00 (0) [96] : 0x00 (0) [97] : 0x00 (0) [98] : 0x18 (24) [99] : 0x00 (0) [100] : 0xff (255) [101] : 0x01 (1) [102] : 0x0f (15) [103] : 0x00 (0) [104] : 0x01 (1) [105] : 0x02 (2) [106] : 0x00 (0) [107] : 0x00 (0) [108] : 0x00 (0) [109] : 0x00 (0) [110] : 0x00 (0) [111] : 0x05 (5) [112] : 0x20 (32) [113] : 0x00 (0) [114] : 0x00 (0) [115] : 0x00 (0) [116] : 0x20 (32) [117] : 0x02 (2) [118] : 0x00 (0) [119] : 0x00 (0) size : 0x00000078 (120) [2016/08/09 11:27:03.429571, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.429584, 8, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security:Security] [2016/08/09 11:27:03.429590, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) tdb(/usr/local/samba/var/locks/registry.tdb): tdb_transaction_start: nesting 1 [2016/08/09 11:27:03.429594, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security' (ops 0x7fd7dd282200) [2016/08/09 11:27:03.429598, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2016/08/09 11:27:03.429606, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Security] len[120] [2016/08/09 11:27:03.429610, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_SetValue: struct winreg_SetValue out: struct winreg_SetValue result : WERR_OK [2016/08/09 11:27:03.429624, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000a-0000-0000-a957-f7af9e150000 [2016/08/09 11:27:03.429637, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.429650, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.429662, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2016/08/09 11:27:03.429665, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2016/08/09 11:27:03.429669, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2016/08/09 11:27:03.429688, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-a957-f7af9e150000 [2016/08/09 11:27:03.429701, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.429713, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.429727, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2016/08/09 11:27:03.429732, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (3->2) [2016/08/09 11:27:03.429735, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2016/08/09 11:27:03.429754, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (2->1) [2016/08/09 11:27:03.429765, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (1->0) [2016/08/09 11:27:03.429776, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:418(close_policy_by_pipe) Deleted handle list for RPC connection winreg [2016/08/09 11:27:03.429794, 3, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/eventlog/srv_eventlog_reg.c:59(eventlog_init_winreg) Initialise the eventlog registry keys if needed. [2016/08/09 11:27:03.429804, 4, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:203(make_internal_rpc_pipe_p) Create pipe requested winreg [2016/08/09 11:27:03.429809, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:223(init_pipe_handles) init_pipe_handle_list: created handle list for pipe winreg [2016/08/09 11:27:03.429813, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:240(init_pipe_handles) init_pipe_handle_list: pipe_handles ref count = 1 for pipe winreg [2016/08/09 11:27:03.429830, 4, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:243(make_internal_rpc_pipe_p) Created internal pipe winreg [2016/08/09 11:27:03.429839, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM in: struct winreg_OpenHKLM system_name : NULL access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2016/08/09 11:27:03.429860, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2016/08/09 11:27:03.429867, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.429871, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.429874, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.429877, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.429882, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.429903, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.429907, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:885(regdb_open) regdb_open: registry db opened. refcount reset (1) [2016/08/09 11:27:03.429912, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2016/08/09 11:27:03.429915, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2016/08/09 11:27:03.429919, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.429922, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM] [2016/08/09 11:27:03.429935, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[1] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.429949, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_OpenHKLM: struct winreg_OpenHKLM out: struct winreg_OpenHKLM handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000b-0000-0000-a957-f7af9e150000 result : WERR_OK [2016/08/09 11:27:03.429977, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey in: struct winreg_OpenKey parent_handle : * parent_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000b-0000-0000-a957-f7af9e150000 keyname: struct winreg_String name_len : 0x0056 (86) name_size : 0x0056 (86) name : * name : 'SYSTEM\CurrentControlSet\Services\Eventlog' options : 0x00000000 (0) 0: REG_OPTION_VOLATILE 0: REG_OPTION_CREATE_LINK 0: REG_OPTION_BACKUP_RESTORE 0: REG_OPTION_OPEN_LINK access_mask : 0x02000000 (33554432) 0: KEY_QUERY_VALUE 0: KEY_SET_VALUE 0: KEY_CREATE_SUB_KEY 0: KEY_ENUMERATE_SUB_KEYS 0: KEY_NOTIFY 0: KEY_CREATE_LINK 0: KEY_WOW64_64KEY 0: KEY_WOW64_32KEY [2016/08/09 11:27:03.430019, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.430032, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2016/08/09 11:27:03.430036, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (1->2) [2016/08/09 11:27:03.430042, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] [2016/08/09 11:27:03.430045, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM] [2016/08/09 11:27:03.430049, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.430052, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM] [2016/08/09 11:27:03.430062, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2016/08/09 11:27:03.430066, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (2->3) [2016/08/09 11:27:03.430070, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.430073, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.430077, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.430080, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet] [2016/08/09 11:27:03.430091, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2016/08/09 11:27:03.430095, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2016/08/09 11:27:03.430099, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.430102, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.430107, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.430110, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services] [2016/08/09 11:27:03.430128, 7, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Eventlog] [2016/08/09 11:27:03.430132, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.430136, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2016/08/09 11:27:03.430139, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2016/08/09 11:27:03.430143, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.430148, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2016/08/09 11:27:03.430157, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.430161, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2016/08/09 11:27:03.430165, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (3->2) [2016/08/09 11:27:03.430169, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) Opened policy hnd[2] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.430182, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_OpenKey: struct winreg_OpenKey out: struct winreg_OpenKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-a957-f7af9e150000 result : WERR_OK [2016/08/09 11:27:03.430205, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey in: struct winreg_QueryInfoKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-a957-f7af9e150000 classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL [2016/08/09 11:27:03.430226, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.430240, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog' (ops 0x7fd7dd282200) [2016/08/09 11:27:03.430243, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2016/08/09 11:27:03.430252, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[DisplayName] len[20] [2016/08/09 11:27:03.430257, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[ErrorControl] len[4] [2016/08/09 11:27:03.430261, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2088(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2016/08/09 11:27:03.430270, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_QueryInfoKey: struct winreg_QueryInfoKey out: struct winreg_QueryInfoKey classname : * classname: struct winreg_String name_len : 0x0000 (0) name_size : 0x0000 (0) name : NULL num_subkeys : * num_subkeys : 0x00000000 (0) max_subkeylen : * max_subkeylen : 0x00000000 (0) max_classlen : * max_classlen : 0x00000000 (0) num_values : * num_values : 0x00000002 (2) max_valnamelen : * max_valnamelen : 0x0000001a (26) max_valbufsize : * max_valbufsize : 0x00000014 (20) secdescsize : * secdescsize : 0x00000078 (120) last_changed_time : * last_changed_time : NTTIME(0) result : WERR_OK [2016/08/09 11:27:03.430319, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey in: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 0000000c-0000-0000-a957-f7af9e150000 [2016/08/09 11:27:03.430338, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.430351, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 A9 57 F7 AF ........ .....W.. [0010] 9E 15 00 00 .... [2016/08/09 11:27:03.430363, 6, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) Closed policy [2016/08/09 11:27:03.430367, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (2->1) [2016/08/09 11:27:03.430371, 1, pid=5534, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:439(ndr_print_function_debug) winreg_CloseKey: struct winreg_CloseKey out: struct winreg_CloseKey handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : WERR_OK [2016/08/09 11:27:03.430389, 10, pid=5534, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (1->0) [2016/08/09 11:27:03.430399, 10, pid=5534, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:418(close_policy_by_pipe) Deleted handle list for RPC connection winreg [2016/08/09 11:27:03.430411, 0, pid=5534, effective(0, 0), real(0, 0)] ../lib/util/become_daemon.c:124(daemon_ready) STATUS=daemon 'smbd' finished starting up and ready to serve connections [2016/08/09 11:27:03.431002, 7, pid=5534, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find print$ [2016/08/09 11:27:03.431008, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/printing/nt_printing.c:87(print_driver_directories_init) No print$ share has been configured. [2016/08/09 11:27:03.431017, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 515 - private_data=(nil) [2016/08/09 11:27:03.431026, 3, pid=5534, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:335(start_background_queue) start_background_queue: Starting background LPQ thread [2016/08/09 11:27:03.431321, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) bind succeeded on port 445 [2016/08/09 11:27:03.431349, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2016/08/09 11:27:03.431375, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2016/08/09 11:27:03.431405, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) bind succeeded on port 139 [2016/08/09 11:27:03.431411, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2016/08/09 11:27:03.431433, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2016/08/09 11:27:03.431460, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) bind succeeded on port 445 [2016/08/09 11:27:03.431465, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2016/08/09 11:27:03.431498, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2016/08/09 11:27:03.431521, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) bind succeeded on port 139 [2016/08/09 11:27:03.431526, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2016/08/09 11:27:03.431549, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2016/08/09 11:27:03.431574, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:27:03.431582, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2:/usr/local/samba/var/lock/serverid.tdb 3: [2016/08/09 11:27:03.431591, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 9E15000000000000FFFF [2016/08/09 11:27:03.431602, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0c2ec0 [2016/08/09 11:27:03.431614, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 9E15000000000000FFFF [2016/08/09 11:27:03.431619, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:27:03.431622, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:27:03.431626, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 13 - private_data=(nil) [2016/08/09 11:27:03.431629, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 33 - private_data=0x7fd7df0b0d60 [2016/08/09 11:27:03.431633, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 783 - private_data=(nil) [2016/08/09 11:27:03.431636, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2016/08/09 11:27:03.431639, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:464(messaging_register) Overriding messaging pointer for type 1 - private_data=(nil) [2016/08/09 11:27:03.431644, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 770 - private_data=(nil) [2016/08/09 11:27:03.431652, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 790 - private_data=(nil) [2016/08/09 11:27:03.431656, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 791 - private_data=(nil) [2016/08/09 11:27:03.431659, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2016/08/09 11:27:03.431662, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 16 - private_data=(nil) [2016/08/09 11:27:03.431670, 1, pid=5534, effective(0, 0), real(0, 0)] ../source3/printing/printer_list.c:234(printer_list_get_last_refresh) Failed to fetch record! [2016/08/09 11:27:03.431682, 2, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1125(smbd_parent_loop) waiting for connections [2016/08/09 11:27:03.432139, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:371(start_background_queue) start_background_queue: background LPQ thread started [2016/08/09 11:27:03.432228, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:27:03.432308, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2016/08/09 11:27:03.432319, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 3551040038150052847 [2016/08/09 11:27:03.432347, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(print_queue_housekeeping) 0x7fd7df0c2f50 [2016/08/09 11:27:03.432355, 5, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:27:03.432361, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2:/usr/local/samba/var/lock/serverid.tdb 3: [2016/08/09 11:27:03.432370, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key AA15000000000000FFFF [2016/08/09 11:27:03.432378, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0c3110 [2016/08/09 11:27:03.432387, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key AA15000000000000FFFF [2016/08/09 11:27:03.432391, 5, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:27:03.432394, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:27:03.432402, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 33 - private_data=0x7fd7df0b0d60 [2016/08/09 11:27:03.432406, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 517 - private_data=(nil) [2016/08/09 11:27:03.432409, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:496(messaging_deregister) Deregistering messaging pointer for type 515 - private_data=(nil) [2016/08/09 11:27:03.432414, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 515 - private_data=(nil) [2016/08/09 11:27:03.432433, 3, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:140(pcap_cache_reload) reloading printcap cache [2016/08/09 11:27:03.432441, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:450(cups_pcap_load_async) cups_pcap_load_async: asynchronously loading cups printers [2016/08/09 11:27:03.432799, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:467(cups_pcap_load_async) cups_pcap_load_async: child pid = 5548 [2016/08/09 11:27:03.432814, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:588(cups_cache_reload) cups_cache_reload: async read on fd 16 [2016/08/09 11:27:03.432821, 3, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:189(pcap_cache_reload) reload status: ok [2016/08/09 11:27:03.432826, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:424(start_background_queue) start_background_queue: background LPQ thread waiting for messages [2016/08/09 11:27:03.433332, 10, pid=5548, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:27:03.433411, 10, pid=5548, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2016/08/09 11:27:03.433426, 10, pid=5548, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 5883854684604001750 [2016/08/09 11:27:03.433436, 5, pid=5548, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:319(cups_cache_reload_async) reloading cups printcap cache [2016/08/09 11:27:03.433642, 10, pid=5548, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:131(cups_connect) connecting to cups server /var/run/cups/cups.sock:631 [2016/08/09 11:27:03.434078, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:514(cups_async_callback) cups_async_callback: callback received for printer data. fd = 16 [2016/08/09 11:27:03.434090, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:197(recv_pcap_blob) successfully recvd blob of len 12 [2016/08/09 11:27:03.434116, 5, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/printer_list.tdb [2016/08/09 11:27:03.434122, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/printer_list.tdb 2: 3: [2016/08/09 11:27:03.434129, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 5052494E5445524C4953 [2016/08/09 11:27:03.434137, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0c7550 [2016/08/09 11:27:03.434170, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 5052494E5445524C4953 [2016/08/09 11:27:03.434176, 5, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/printer_list.tdb [2016/08/09 11:27:03.434180, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:27:03.434211, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:27:03.434254, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:27:03.434265, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_init_smbconf.c:41(registry_init_smbconf) registry_init_smbconf called [2016/08/09 11:27:03.434301, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:768(regdb_init) regdb_init: registry db openend. refcount reset (1) [2016/08/09 11:27:03.434359, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2016/08/09 11:27:03.434375, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[Samba Printer Port] len[2] [2016/08/09 11:27:03.434382, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2016/08/09 11:27:03.434394, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[DefaultSpoolDirectory] len[70] [2016/08/09 11:27:03.434403, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2016/08/09 11:27:03.434412, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[DisplayName] len[20] [2016/08/09 11:27:03.434417, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[ErrorControl] len[4] [2016/08/09 11:27:03.434421, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1905(regdb_fetch_values_internal) regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2016/08/09 11:27:03.434429, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[0]: name[DisplayName] len[20] [2016/08/09 11:27:03.434433, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1850(regdb_unpack_values) regdb_unpack_values: value[1]: name[ErrorControl] len[4] [2016/08/09 11:27:03.434440, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) reghook_cache_add: Adding ops 0x7fd7dba55540 for key [\HKLM\SOFTWARE\Samba\smbconf] [2016/08/09 11:27:03.434445, 8, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) pathtree_add: Enter [2016/08/09 11:27:03.434452, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree [2016/08/09 11:27:03.434457, 8, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) pathtree_add: Exit [2016/08/09 11:27:03.434460, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (1->0) [2016/08/09 11:27:03.434478, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.434484, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.434488, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.434491, 5, pid=5546, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.434495, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.434515, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.434519, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:885(regdb_open) regdb_open: registry db opened. refcount reset (1) [2016/08/09 11:27:03.434524, 7, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2016/08/09 11:27:03.434528, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (1->2) [2016/08/09 11:27:03.434532, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM] [2016/08/09 11:27:03.434538, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM] [2016/08/09 11:27:03.434542, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.434545, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM] [2016/08/09 11:27:03.434563, 7, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [SOFTWARE] [2016/08/09 11:27:03.434568, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (2->3) [2016/08/09 11:27:03.434572, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE] [2016/08/09 11:27:03.434575, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE] [2016/08/09 11:27:03.434578, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.434581, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SOFTWARE] [2016/08/09 11:27:03.434596, 7, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [Samba] [2016/08/09 11:27:03.434602, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (3->4) [2016/08/09 11:27:03.434606, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Samba] [2016/08/09 11:27:03.434610, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE\Samba] [2016/08/09 11:27:03.434614, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.434617, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dd282200 for key [\HKLM\SOFTWARE\Samba] [2016/08/09 11:27:03.434628, 7, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [smbconf] [2016/08/09 11:27:03.434632, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (4->5) [2016/08/09 11:27:03.434636, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Samba\smbconf] [2016/08/09 11:27:03.434639, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE\Samba\smbconf] [2016/08/09 11:27:03.434643, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.434646, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dba55540 for key [\HKLM\SOFTWARE\Samba\smbconf] [2016/08/09 11:27:03.434654, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (5->4) [2016/08/09 11:27:03.434659, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (4->3) [2016/08/09 11:27:03.434665, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (3->2) [2016/08/09 11:27:03.434669, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2055(process_registry_service) process_registry_service: service name printers [2016/08/09 11:27:03.434673, 7, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [printers] [2016/08/09 11:27:03.434676, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (2->3) [2016/08/09 11:27:03.434680, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Samba\smbconf\printers] [2016/08/09 11:27:03.434683, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE\Samba\smbconf\printers] [2016/08/09 11:27:03.434687, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.434690, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dba55540 for key [\HKLM\SOFTWARE\Samba\smbconf\printers] [2016/08/09 11:27:03.434696, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1739(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Samba\smbconf\printers] not found [2016/08/09 11:27:03.434700, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (3->2) [2016/08/09 11:27:03.434705, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:27:03.434709, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:27:03.434715, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:27:03.434718, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/server_reload.c:87(delete_and_reload_printers) reloading printer services from pcap cache [2016/08/09 11:27:03.434724, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:27:03.434728, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2055(process_registry_service) process_registry_service: service name printers [2016/08/09 11:27:03.434731, 7, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [printers] [2016/08/09 11:27:03.434735, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (2->3) [2016/08/09 11:27:03.434738, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Samba\smbconf\printers] [2016/08/09 11:27:03.434742, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE\Samba\smbconf\printers] [2016/08/09 11:27:03.434746, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:27:03.434749, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dba55540 for key [\HKLM\SOFTWARE\Samba\smbconf\printers] [2016/08/09 11:27:03.434756, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1739(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Samba\smbconf\printers] not found [2016/08/09 11:27:03.434760, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (3->2) [2016/08/09 11:27:03.434764, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:27:03.434768, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:27:03.434779, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.434783, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.434786, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.434789, 5, pid=5546, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.434793, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.434799, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 5546 [2016/08/09 11:27:03.434809, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.434816, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.434819, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:27:03.434822, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:27:03.434825, 5, pid=5546, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:27:03.434828, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:27:03.434833, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 5534 [2016/08/09 11:27:03.434847, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:254(messaging_recv_cb) messaging_recv_cb: Received message 0x207 len 0 (num_fds:0) from 5546 [2016/08/09 11:27:03.434862, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:27:03.434876, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:254(messaging_recv_cb) messaging_recv_cb: Received message 0x207 len 0 (num_fds:0) from 5546 [2016/08/09 11:27:03.434882, 10, pid=5548, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:172(send_pcap_blob) successfully sent blob of len 12 [2016/08/09 11:27:03.434892, 10, pid=5548, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:27:03.435178, 6, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:275(bq_sig_chld_handler) Bq child process 5548 terminated with 0 [2016/08/09 11:28:03.491254, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/events.c:426(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) called [2016/08/09 11:28:03.491293, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:163(print_queue_housekeeping) print queue housekeeping [2016/08/09 11:28:03.491298, 3, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:169(print_queue_housekeeping) Printcap cache time expired. [2016/08/09 11:28:03.491302, 3, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:140(pcap_cache_reload) reloading printcap cache [2016/08/09 11:28:03.491311, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:450(cups_pcap_load_async) cups_pcap_load_async: asynchronously loading cups printers [2016/08/09 11:28:03.491781, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:467(cups_pcap_load_async) cups_pcap_load_async: child pid = 5688 [2016/08/09 11:28:03.491806, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:588(cups_cache_reload) cups_cache_reload: async read on fd 16 [2016/08/09 11:28:03.491820, 3, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:189(pcap_cache_reload) reload status: ok [2016/08/09 11:28:03.491828, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/events.c:437(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) rescheduled [2016/08/09 11:28:03.492196, 10, pid=5688, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:28:03.492328, 10, pid=5688, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2016/08/09 11:28:03.492345, 10, pid=5688, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 3895727866286274132 [2016/08/09 11:28:03.492357, 5, pid=5688, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:319(cups_cache_reload_async) reloading cups printcap cache [2016/08/09 11:28:03.492616, 10, pid=5688, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:131(cups_connect) connecting to cups server /var/run/cups/cups.sock:631 [2016/08/09 11:28:03.493049, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:514(cups_async_callback) cups_async_callback: callback received for printer data. fd = 16 [2016/08/09 11:28:03.493062, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:197(recv_pcap_blob) successfully recvd blob of len 12 [2016/08/09 11:28:03.493075, 5, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/printer_list.tdb [2016/08/09 11:28:03.493082, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/printer_list.tdb 2: 3: [2016/08/09 11:28:03.493089, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 5052494E5445524C4953 [2016/08/09 11:28:03.493099, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0c83d0 [2016/08/09 11:28:03.493108, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 5052494E5445524C4953 [2016/08/09 11:28:03.493114, 5, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/printer_list.tdb [2016/08/09 11:28:03.493117, 10, pid=5546, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:03.493142, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:28:03.493183, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:28:03.493193, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2055(process_registry_service) process_registry_service: service name printers [2016/08/09 11:28:03.493198, 7, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [printers] [2016/08/09 11:28:03.493202, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (2->3) [2016/08/09 11:28:03.493210, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Samba\smbconf\printers] [2016/08/09 11:28:03.493217, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE\Samba\smbconf\printers] [2016/08/09 11:28:03.493223, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:28:03.493226, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dba55540 for key [\HKLM\SOFTWARE\Samba\smbconf\printers] [2016/08/09 11:28:03.493235, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1739(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Samba\smbconf\printers] not found [2016/08/09 11:28:03.493240, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (3->2) [2016/08/09 11:28:03.493245, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:28:03.493249, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:28:03.493253, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:28:03.493256, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/server_reload.c:87(delete_and_reload_printers) reloading printer services from pcap cache [2016/08/09 11:28:03.493261, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:28:03.493265, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2055(process_registry_service) process_registry_service: service name printers [2016/08/09 11:28:03.493268, 7, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) regkey_open_onelevel: name = [printers] [2016/08/09 11:28:03.493272, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:857(regdb_open) regdb_open: incrementing refcount (2->3) [2016/08/09 11:28:03.493276, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Samba\smbconf\printers] [2016/08/09 11:28:03.493279, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) pathtree_find: Enter [\HKLM\SOFTWARE\Samba\smbconf\printers] [2016/08/09 11:28:03.493283, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) pathtree_find: Exit [2016/08/09 11:28:03.493286, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fd7dba55540 for key [\HKLM\SOFTWARE\Samba\smbconf\printers] [2016/08/09 11:28:03.493295, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1739(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Samba\smbconf\printers] not found [2016/08/09 11:28:03.493299, 10, pid=5546, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:902(regdb_close) regdb_close: decrementing refcount (3->2) [2016/08/09 11:28:03.493304, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:28:03.493307, 7, pid=5546, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find printers [2016/08/09 11:28:03.493319, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:28:03.493325, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:28:03.493328, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:28:03.493331, 5, pid=5546, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:03.493335, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:03.493346, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 5546 [2016/08/09 11:28:03.493359, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:03.493367, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:28:03.493370, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:28:03.493374, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:28:03.493377, 5, pid=5546, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:03.493380, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:03.493385, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 5534 [2016/08/09 11:28:03.493392, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:03.493406, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:254(messaging_recv_cb) messaging_recv_cb: Received message 0x207 len 0 (num_fds:0) from 5546 [2016/08/09 11:28:03.493422, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:254(messaging_recv_cb) messaging_recv_cb: Received message 0x207 len 0 (num_fds:0) from 5546 [2016/08/09 11:28:03.493435, 10, pid=5688, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:172(send_pcap_blob) successfully sent blob of len 12 [2016/08/09 11:28:03.493444, 10, pid=5688, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:28:03.493733, 6, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:275(bq_sig_chld_handler) Bq child process 5688 terminated with 0 [2016/08/09 11:28:14.847911, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:28:14.848215, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2016/08/09 11:28:14.848243, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 6388714991210776728 [2016/08/09 11:28:14.848361, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:535(smbXsrv_client_create) [2016/08/09 11:28:14.848369, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:543(smbXsrv_client_create) smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2016/08/09 11:28:14.848384, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &client_blob: struct smbXsrv_clientB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_clientU(case 0) info0 : * info0: struct smbXsrv_client table : * ev_ctx : * msg_ctx : * global : * global: struct smbXsrv_client_global0 db_rec : NULL server_id: struct server_id pid : 0x0000000000001639 (5689) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x58a9466f8654c898 (6388714991210776728) local_address : NULL remote_address : NULL remote_name : NULL initial_connect_time : Tue Aug 9 11:28:15 2016 BST client_guid : 00000000-0000-0000-0000-000000000000 stored : 0x00 (0) sconn : NULL session_table : NULL last_session_id : 0x0000000000000000 (0) tcon_table : NULL open_table : NULL connections : NULL server_multi_channel_enabled: 0x00 (0) [2016/08/09 11:28:14.848519, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:28:14.848530, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2:/usr/local/samba/var/lock/serverid.tdb 3: [2016/08/09 11:28:14.848541, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 3916000000000000FFFF [2016/08/09 11:28:14.848552, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0c7420 [2016/08/09 11:28:14.848577, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 3916000000000000FFFF [2016/08/09 11:28:14.848584, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:28:14.848589, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.848607, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2016/08/09 11:28:14.848663, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2016/08/09 11:28:14.848744, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 192.168.0.190 (192.168.0.190) [2016/08/09 11:28:14.848752, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3836(smbd_add_connection) Connection allowed from ipv4:192.168.0.190:49682 to ipv4:192.168.0.8:445 [2016/08/09 11:28:14.848786, 6, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2226(lp_file_list_changed) lp_file_list_changed() file /usr/local/samba/etc/smb.conf -> /usr/local/samba/etc/smb.conf last mod_time: Tue Aug 9 11:21:31 2016 [2016/08/09 11:28:14.848811, 3, pid=5689, effective(0, 0), real(0, 0), class=locking] ../source3/smbd/oplock.c:1310(init_oplocks) init_oplocks: initializing messages. [2016/08/09 11:28:14.848819, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 774 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.848825, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 778 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.848831, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 770 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.848836, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 787 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.848842, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 779 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.848848, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2016/08/09 11:28:14.848853, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:464(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2016/08/09 11:28:14.848858, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:496(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2016/08/09 11:28:14.848864, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 16 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.848870, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:496(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x7fd7df0b0d60 [2016/08/09 11:28:14.848875, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 33 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.848880, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:496(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2016/08/09 11:28:14.848889, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 790 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.848895, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:496(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2016/08/09 11:28:14.848900, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:496(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2016/08/09 11:28:14.848906, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2016/08/09 11:28:14.848917, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(keepalive) 0x7fd7df0c9080 [2016/08/09 11:28:14.848926, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(deadtime) 0x7fd7df0c92d0 [2016/08/09 11:28:14.848932, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x7fd7df0c9520 [2016/08/09 11:28:14.848953, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 155 [2016/08/09 11:28:14.848963, 6, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0x9b [2016/08/09 11:28:14.848969, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 0 of length 159 (0 toread) [2016/08/09 11:28:14.848975, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/util.c:171(show_msg) [2016/08/09 11:28:14.848978, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/util.c:181(show_msg) size=155 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=65535 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=120 [2016/08/09 11:28:14.848998, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [0020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [0030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [0040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [0050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [0060] 32 00 02 53 4D 42 20 32 2E 30 30 32 00 02 53 4D 2..SMB 2 .002..SM [0070] 42 20 32 2E 3F 3F 3F 00 B 2.???. [2016/08/09 11:28:14.849091, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1538(switch_message) switch message SMBnegprot (pid 5689) conn 0x0 [2016/08/09 11:28:14.849102, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.849114, 5, pid=5689, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.849187, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.849219, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.849715, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2016/08/09 11:28:14.849728, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [LANMAN1.0] [2016/08/09 11:28:14.849735, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [Windows for Workgroups 3.1a] [2016/08/09 11:28:14.849744, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [LM1.2X002] [2016/08/09 11:28:14.849750, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [LANMAN2.1] [2016/08/09 11:28:14.849755, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [NT LM 0.12] [2016/08/09 11:28:14.849764, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [SMB 2.002] [2016/08/09 11:28:14.849772, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:601(reply_negprot) Requested protocol [SMB 2.???] [2016/08/09 11:28:14.849779, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1294(set_remote_arch) set_remote_arch: Client arch is 'UNKNOWN' [2016/08/09 11:28:14.849794, 6, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2226(lp_file_list_changed) lp_file_list_changed() file /usr/local/samba/etc/smb.conf -> /usr/local/samba/etc/smb.conf last mod_time: Tue Aug 9 11:21:31 2016 [2016/08/09 11:28:14.849808, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:28:14.849813, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2:/usr/local/samba/var/lock/serverid.tdb 3: [2016/08/09 11:28:14.849822, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 3916000000000000FFFF [2016/08/09 11:28:14.849831, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0ca260 [2016/08/09 11:28:14.849839, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 3916000000000000FFFF [2016/08/09 11:28:14.849846, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:28:14.849851, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.849864, 6, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2226(lp_file_list_changed) lp_file_list_changed() file /usr/local/samba/etc/smb.conf -> /usr/local/samba/etc/smb.conf last mod_time: Tue Aug 9 11:21:31 2016 [2016/08/09 11:28:14.849879, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3464(smbd_smb2_process_negprot) smbd_smb2_first_negprot: packet length 102 [2016/08/09 11:28:14.849889, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 0 (position 0) from bitmap [2016/08/09 11:28:14.849897, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2258(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_NEGPROT] mid = 0 [2016/08/09 11:28:14.849905, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.849911, 5, pid=5689, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.849916, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.849925, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.849947, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1294(set_remote_arch) set_remote_arch: Client arch is 'Vista' [2016/08/09 11:28:14.849958, 6, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2226(lp_file_list_changed) lp_file_list_changed() file /usr/local/samba/etc/smb.conf -> /usr/local/samba/etc/smb.conf last mod_time: Tue Aug 9 11:21:31 2016 [2016/08/09 11:28:14.849970, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_negprot.c:278(smbd_smb2_request_process_negprot) Selected protocol SMB2_FF [2016/08/09 11:28:14.849978, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:491(make_auth_context_subsystem) Making default auth method list for server role = 'standalone server', encrypt passwords = yes [2016/08/09 11:28:14.849987, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend trustdomain [2016/08/09 11:28:14.849996, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'trustdomain' [2016/08/09 11:28:14.850004, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend ntdomain [2016/08/09 11:28:14.850009, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'ntdomain' [2016/08/09 11:28:14.850015, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend guest [2016/08/09 11:28:14.850020, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'guest' [2016/08/09 11:28:14.850026, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam [2016/08/09 11:28:14.850031, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam' [2016/08/09 11:28:14.850036, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2016/08/09 11:28:14.850041, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2016/08/09 11:28:14.850047, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend winbind [2016/08/09 11:28:14.850052, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'winbind' [2016/08/09 11:28:14.850057, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend unix [2016/08/09 11:28:14.850069, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'unix' [2016/08/09 11:28:14.850075, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend wbc [2016/08/09 11:28:14.850080, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'wbc' [2016/08/09 11:28:14.850085, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend samba4 [2016/08/09 11:28:14.850091, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'samba4' [2016/08/09 11:28:14.850096, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2016/08/09 11:28:14.850105, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2016/08/09 11:28:14.850111, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2016/08/09 11:28:14.850117, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2016/08/09 11:28:14.851126, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'gssapi_spnego' registered [2016/08/09 11:28:14.851138, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'gssapi_krb5' registered [2016/08/09 11:28:14.851177, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'gssapi_krb5_sasl' registered [2016/08/09 11:28:14.851184, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'spnego' registered [2016/08/09 11:28:14.851190, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'schannel' registered [2016/08/09 11:28:14.851197, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'naclrpc_as_system' registered [2016/08/09 11:28:14.851203, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'sasl-EXTERNAL' registered [2016/08/09 11:28:14.851209, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'ntlmssp' registered [2016/08/09 11:28:14.851215, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'ntlmssp_resume_ccache' registered [2016/08/09 11:28:14.851222, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'http_basic' registered [2016/08/09 11:28:14.851228, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'http_ntlm' registered [2016/08/09 11:28:14.851234, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'krb5' registered [2016/08/09 11:28:14.851241, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'fake_gssapi_krb5' registered [2016/08/09 11:28:14.851268, 5, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) Starting GENSEC mechanism spnego [2016/08/09 11:28:14.851284, 5, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2016/08/09 11:28:14.851321, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2989(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[64] dyn[yes:74] at ../source3/smbd/smb2_negprot.c:691 [2016/08/09 11:28:14.851352, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/1/1 [2016/08/09 11:28:14.851418, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:711(reply_negprot) Selected protocol SMB 2.??? [2016/08/09 11:28:14.851427, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:718(reply_negprot) negprot index=7 [2016/08/09 11:28:14.851675, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3849(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2016/08/09 11:28:14.851687, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 1 (position 1) from bitmap [2016/08/09 11:28:14.851698, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2258(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_NEGPROT] mid = 1 [2016/08/09 11:28:14.851705, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.851711, 5, pid=5689, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.851717, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.851727, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.851750, 6, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2226(lp_file_list_changed) lp_file_list_changed() file /usr/local/samba/etc/smb.conf -> /usr/local/samba/etc/smb.conf last mod_time: Tue Aug 9 11:21:31 2016 [2016/08/09 11:28:14.851764, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_negprot.c:278(smbd_smb2_request_process_negprot) Selected protocol SMB3_11 [2016/08/09 11:28:14.851771, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:491(make_auth_context_subsystem) Making default auth method list for server role = 'standalone server', encrypt passwords = yes [2016/08/09 11:28:14.851780, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2016/08/09 11:28:14.851787, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2016/08/09 11:28:14.851793, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2016/08/09 11:28:14.851799, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2016/08/09 11:28:14.851824, 5, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) Starting GENSEC mechanism spnego [2016/08/09 11:28:14.851837, 5, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2016/08/09 11:28:14.851879, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2989(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[64] dyn[yes:140] at ../source3/smbd/smb2_negprot.c:646 [2016/08/09 11:28:14.851888, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/2/1 [2016/08/09 11:28:14.852554, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3849(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2016/08/09 11:28:14.852568, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 2 (position 2) from bitmap [2016/08/09 11:28:14.852576, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2258(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 2 [2016/08/09 11:28:14.852583, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.852594, 5, pid=5689, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.852601, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.852611, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.852625, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.852632, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_session_global.tdb 2: 3: [2016/08/09 11:28:14.852640, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 271D8913 [2016/08/09 11:28:14.852659, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0d6030 [2016/08/09 11:28:14.852806, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:930(smbXsrv_session_global_store) [2016/08/09 11:28:14.852812, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:932(smbXsrv_session_global_store) smbXsrv_session_global_store: key '271D8913' stored [2016/08/09 11:28:14.852820, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x271d8913 (656247059) session_wire_id : 0x00000000271d8913 (656247059) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000001639 (5689) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x58a9466f8654c898 (6388714991210776728) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49682' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2016/08/09 11:28:14.852947, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 271D8913 [2016/08/09 11:28:14.852955, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.852961, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.852968, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1296(smbXsrv_session_create) [2016/08/09 11:28:14.852972, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1304(smbXsrv_session_create) smbXsrv_session_create: global_id (0x271d8913) stored [2016/08/09 11:28:14.852977, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x271d8913 (656247059) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x271d8913 (656247059) session_wire_id : 0x00000000271d8913 (656247059) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000001639 (5689) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x58a9466f8654c898 (6388714991210776728) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49682' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Tue Aug 9 11:28:15 2016 BST nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : NULL [2016/08/09 11:28:14.853159, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:491(make_auth_context_subsystem) Making default auth method list for server role = 'standalone server', encrypt passwords = yes [2016/08/09 11:28:14.853168, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2016/08/09 11:28:14.853175, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2016/08/09 11:28:14.853181, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2016/08/09 11:28:14.853201, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2016/08/09 11:28:14.853227, 5, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) Starting GENSEC mechanism spnego [2016/08/09 11:28:14.853235, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.853241, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_session_global.tdb 2: 3: [2016/08/09 11:28:14.853250, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 271D8913 [2016/08/09 11:28:14.853257, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0d9090 [2016/08/09 11:28:14.853274, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:930(smbXsrv_session_global_store) [2016/08/09 11:28:14.853278, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:932(smbXsrv_session_global_store) smbXsrv_session_global_store: key '271D8913' stored [2016/08/09 11:28:14.853284, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x271d8913 (656247059) session_wire_id : 0x00000000271d8913 (656247059) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000001639 (5689) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x58a9466f8654c898 (6388714991210776728) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49682' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2016/08/09 11:28:14.853405, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 271D8913 [2016/08/09 11:28:14.853413, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.853418, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.853424, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1391(smbXsrv_session_update) [2016/08/09 11:28:14.853428, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1399(smbXsrv_session_update) smbXsrv_session_update: global_id (0x271d8913) stored [2016/08/09 11:28:14.853434, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x271d8913 (656247059) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x271d8913 (656247059) session_wire_id : 0x00000000271d8913 (656247059) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000001639 (5689) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x58a9466f8654c898 (6388714991210776728) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49682' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Tue Aug 9 11:28:15 2016 BST nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : * in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Tue Aug 9 11:28:15 2016 BST idle_time : Tue Aug 9 11:28:15 2016 BST [2016/08/09 11:28:14.853631, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.853639, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:28:14.853644, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.853650, 5, pid=5689, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.853655, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.853684, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 24 req->in.vector[4].iov_len = 74 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2016/08/09 11:28:14.853751, 5, pid=5689, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2016/08/09 11:28:14.853764, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2016/08/09 11:28:14.853804, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0xe2088297 (3792208535) 1: NTLMSSP_NEGOTIATE_UNICODE 1: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 1: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : NULL WorkstationLen : 0x0000 (0) WorkstationMaxLen : 0x0000 (0) Workstation : NULL Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_10 (10) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_0 (0) ProductBuild : 0x295a (10586) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2016/08/09 11:28:14.853966, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x000e (14) TargetNameMaxLen : 0x000e (14) TargetName : * TargetName : 'DEVTEST' NegotiateFlags : 0xe28a8215 (3800728085) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 ServerChallenge : 004c2974e94b16ec Reserved : 0000000000000000 TargetInfoLen : 0x0094 (148) TargetInfoMaxLen : 0x0094 (148) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000006 (6) pair: ARRAY(6) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'DEVTEST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'DEVTEST' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0024 (36) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'samdom.example.com' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0034 (52) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'devtest.samdom.example.com' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Tue Aug 9 11:28:15 2016 BST pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1) ProductBuild : 0x0000 (0) Reserved : 000000 NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF) [2016/08/09 11:28:14.854189, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.854196, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:28:14.854201, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.854206, 5, pid=5689, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.854211, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.854222, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.854231, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2989(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_MORE_PROCESSING_REQUIRED] body[8] dyn[yes:249] at ../source3/smbd/smb2_sesssetup.c:171 [2016/08/09 11:28:14.854241, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 31, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/3/1 [2016/08/09 11:28:14.854680, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3849(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2016/08/09 11:28:14.854691, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 3 (position 3) from bitmap [2016/08/09 11:28:14.854698, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2258(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 3 [2016/08/09 11:28:14.854705, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.854711, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_session_global.tdb 2: 3: [2016/08/09 11:28:14.854719, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 271D8913 [2016/08/09 11:28:14.854728, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0dcf30 [2016/08/09 11:28:14.854744, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:930(smbXsrv_session_global_store) [2016/08/09 11:28:14.854749, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:932(smbXsrv_session_global_store) smbXsrv_session_global_store: key '271D8913' stored [2016/08/09 11:28:14.854755, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000003 (3) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x271d8913 (656247059) session_wire_id : 0x00000000271d8913 (656247059) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000001639 (5689) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x58a9466f8654c898 (6388714991210776728) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49682' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2016/08/09 11:28:14.854873, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 271D8913 [2016/08/09 11:28:14.854880, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.854885, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.854892, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1391(smbXsrv_session_update) [2016/08/09 11:28:14.854895, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1399(smbXsrv_session_update) smbXsrv_session_update: global_id (0x271d8913) stored [2016/08/09 11:28:14.854901, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x271d8913 (656247059) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x271d8913 (656247059) session_wire_id : 0x00000000271d8913 (656247059) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000001639 (5689) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x58a9466f8654c898 (6388714991210776728) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49682' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Tue Aug 9 11:28:15 2016 BST nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : * in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Tue Aug 9 11:28:15 2016 BST idle_time : Tue Aug 9 11:28:15 2016 BST [2016/08/09 11:28:14.855093, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.855099, 5, pid=5689, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.855104, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.855114, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.855122, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.855127, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_session_global.tdb 2: 3: [2016/08/09 11:28:14.855135, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 271D8913 [2016/08/09 11:28:14.855142, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0d7880 [2016/08/09 11:28:14.855156, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:930(smbXsrv_session_global_store) [2016/08/09 11:28:14.855187, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:932(smbXsrv_session_global_store) smbXsrv_session_global_store: key '271D8913' stored [2016/08/09 11:28:14.855194, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000004 (4) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x271d8913 (656247059) session_wire_id : 0x00000000271d8913 (656247059) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000001639 (5689) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x58a9466f8654c898 (6388714991210776728) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49682' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2016/08/09 11:28:14.855309, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 271D8913 [2016/08/09 11:28:14.855316, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.855322, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.855328, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1391(smbXsrv_session_update) [2016/08/09 11:28:14.855331, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1399(smbXsrv_session_update) smbXsrv_session_update: global_id (0x271d8913) stored [2016/08/09 11:28:14.855337, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x271d8913 (656247059) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x271d8913 (656247059) session_wire_id : 0x00000000271d8913 (656247059) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000001639 (5689) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x58a9466f8654c898 (6388714991210776728) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49682' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Tue Aug 9 11:28:15 2016 BST nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : * in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Tue Aug 9 11:28:15 2016 BST idle_time : Tue Aug 9 11:28:15 2016 BST [2016/08/09 11:28:14.855535, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.855541, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:28:14.855546, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.855552, 5, pid=5689, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.855557, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.855568, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 24 req->in.vector[4].iov_len = 156 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2016/08/09 11:28:14.855618, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0001 (1) LmChallengeResponseMaxLen: 0x0001 (1) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 1) NtChallengeResponseLen : 0x0000 (0) NtChallengeResponseMaxLen: 0x0000 (0) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 0) DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : * DomainName : '' UserNameLen : 0x0000 (0) UserNameMaxLen : 0x0000 (0) UserName : * UserName : '' WorkstationLen : 0x0010 (16) WorkstationMaxLen : 0x0010 (16) Workstation : * Workstation : 'MINWINPC' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [0000] 84 1A D2 F5 B2 D7 D3 35 18 18 B9 5B 2B EE 4B F7 .......5 ...[+.K. NegotiateFlags : 0xe2888a15 (3800599061) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 1: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_10 (10) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_0 (0) ProductBuild : 0x295a (10586) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2016/08/09 11:28:14.855797, 3, pid=5689, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:452(ntlmssp_server_preauth) Got user=[] domain=[] workstation=[MINWINPC] len1=1 len2=0 [2016/08/09 11:28:14.855807, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3742(lp_load_ex) lp_load_ex: refreshing parameters [2016/08/09 11:28:14.855813, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1313(free_param_opts) Freeing parametrics: [2016/08/09 11:28:14.855869, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:544(init_globals) Initialising global parameters [2016/08/09 11:28:14.855956, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2671(lp_do_section) Processing section "[global]" doing parameter workgroup = EXAMPLE doing parameter security = user doing parameter map to guest = Bad User doing parameter log level = 10 [2016/08/09 11:28:14.856016, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/util/debug.c:638(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 tevent: 10 doing parameter debug pid = true [2016/08/09 11:28:14.856065, 2, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) Processing section "[test]" doing parameter comment = Test doing parameter guest ok = yes doing parameter path = /data/test doing parameter read only = no [2016/08/09 11:28:14.856117, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3783(lp_load_ex) pm_process() returned Yes [2016/08/09 11:28:14.856128, 7, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find homes [2016/08/09 11:28:14.856137, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1588(lp_add_ipc) adding IPC service [2016/08/09 11:28:14.856161, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:117(make_user_info_map) Mapping user []\[] from workstation [MINWINPC] [2016/08/09 11:28:14.856170, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:139(make_user_info_map) Mapped domain from [] to [DEVTEST] for user [] from workstation [MINWINPC] [2016/08/09 11:28:14.856176, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:62(make_user_info) attempting to make a user_info for () [2016/08/09 11:28:14.856181, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:70(make_user_info) making strings for 's user_info struct [2016/08/09 11:28:14.856188, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:108(make_user_info) making blobs for 's user_info struct [2016/08/09 11:28:14.856194, 10, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:159(make_user_info) made a user_info for () [2016/08/09 11:28:14.856199, 3, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:178(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[]@[MINWINPC] with the new password interface [2016/08/09 11:28:14.856205, 3, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:181(auth_check_ntlm_password) check_ntlm_password: mapped user is: [DEVTEST]\[]@[MINWINPC] [2016/08/09 11:28:14.856211, 10, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:190(auth_check_ntlm_password) check_ntlm_password: auth_context challenge created by random [2016/08/09 11:28:14.856216, 10, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:192(auth_check_ntlm_password) challenge is: [2016/08/09 11:28:14.856221, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 00 4C 29 74 E9 4B 16 EC .L)t.K.. [2016/08/09 11:28:14.856235, 10, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:41(check_guest_security) Check auth for: [] [2016/08/09 11:28:14.856245, 3, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:249(auth_check_ntlm_password) check_ntlm_password: guest authentication for user [] succeeded [2016/08/09 11:28:14.856251, 5, pid=5689, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:305(auth_check_ntlm_password) check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded [2016/08/09 11:28:14.856258, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:215(auth3_check_password) Got NT session key of length 16 [2016/08/09 11:28:14.856266, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:222(auth3_check_password) Got LM session key of length 16 [2016/08/09 11:28:14.856277, 10, pid=5689, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:858(ntlmssp_server_postauth) ntlmssp_server_auth: Using unmodified nt session key. [2016/08/09 11:28:14.856294, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.856300, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:28:14.856307, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.856315, 5, pid=5689, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.856320, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.856331, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.856395, 6, pid=5689, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2226(lp_file_list_changed) lp_file_list_changed() file /usr/local/samba/etc/smb.conf -> /usr/local/samba/etc/smb.conf last mod_time: Tue Aug 9 11:21:31 2016 [2016/08/09 11:28:14.856416, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.856422, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_session_global.tdb 2: 3: [2016/08/09 11:28:14.856430, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 271D8913 [2016/08/09 11:28:14.856438, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0d4e50 [2016/08/09 11:28:14.856471, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:930(smbXsrv_session_global_store) [2016/08/09 11:28:14.856477, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:932(smbXsrv_session_global_store) smbXsrv_session_global_store: key '271D8913' stored [2016/08/09 11:28:14.856483, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000005 (5) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0x271d8913 (656247059) session_wire_id : 0x00000000271d8913 (656247059) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : Tue Aug 9 11:28:15 2016 BST auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000007 (7) sids: ARRAY(7) sids : S-1-5-21-675121440-1470025956-3331568166-501 sids : S-1-5-21-675121440-1470025956-3331568166-514 sids : S-1-22-2-65534 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-32-546 sids : S-1-22-1-65534 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x000000000000fffe (65534) gid : 0x000000000000fffe (65534) ngroups : 0x00000001 (1) groups: ARRAY(1) groups : 0x000000000000fffe (65534) info : * info: struct auth_user_info account_name : * account_name : 'nobody' domain_name : * domain_name : 'DEVTEST' full_name : NULL logon_script : NULL profile_path : NULL home_directory : NULL home_drive : NULL logon_server : NULL last_logon : NTTIME(0) last_logoff : NTTIME(0) acct_expiry : NTTIME(0) last_password_change : NTTIME(0) allow_password_change : NTTIME(0) force_password_change : NTTIME(0) logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000000 (0) authenticated : 0x00 (0) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'nobody' sanitized_username : * sanitized_username : '' torture : NULL credentials : NULL connection_dialect : 0x0311 (785) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000001639 (5689) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x58a9466f8654c898 (6388714991210776728) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49682' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x0001 (1) [2016/08/09 11:28:14.856931, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 271D8913 [2016/08/09 11:28:14.856939, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.856945, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.856951, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1391(smbXsrv_session_update) [2016/08/09 11:28:14.856955, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1399(smbXsrv_session_update) smbXsrv_session_update: global_id (0x271d8913) stored [2016/08/09 11:28:14.856963, 1, pid=5689, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0x271d8913 (656247059) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0x271d8913 (656247059) session_wire_id : 0x00000000271d8913 (656247059) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : Tue Aug 9 11:28:15 2016 BST auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000007 (7) sids: ARRAY(7) sids : S-1-5-21-675121440-1470025956-3331568166-501 sids : S-1-5-21-675121440-1470025956-3331568166-514 sids : S-1-22-2-65534 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-32-546 sids : S-1-22-1-65534 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x000000000000fffe (65534) gid : 0x000000000000fffe (65534) ngroups : 0x00000001 (1) groups: ARRAY(1) groups : 0x000000000000fffe (65534) info : * info: struct auth_user_info account_name : * account_name : 'nobody' domain_name : * domain_name : 'DEVTEST' full_name : NULL logon_script : NULL profile_path : NULL home_directory : NULL home_drive : NULL logon_server : NULL last_logon : NTTIME(0) last_logoff : NTTIME(0) acct_expiry : NTTIME(0) last_password_change : NTTIME(0) allow_password_change : NTTIME(0) force_password_change : NTTIME(0) logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000000 (0) authenticated : 0x00 (0) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'nobody' sanitized_username : * sanitized_username : '' torture : NULL credentials : NULL connection_dialect : 0x0311 (785) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x0000000000001639 (5689) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x58a9466f8654c898 (6388714991210776728) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49682' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x0001 (1) status : NT_STATUS_OK idle_time : Tue Aug 9 11:28:15 2016 BST nonce_high_random : 0xd0d4cdc48ae14730 (-3398865574730578128) nonce_high_max : 0x0000000000ffffff (16777215) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : * tcon_table : * pending_auth : NULL [2016/08/09 11:28:14.857489, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2989(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[8] dyn[yes:9] at ../source3/smbd/smb2_sesssetup.c:171 [2016/08/09 11:28:14.857497, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 31, charge 1, granted 31, current possible/max 512/512, total granted/max/low/range 31/8192/4/31 [2016/08/09 11:28:14.857902, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:1069(smbd_server_connection_terminate_ex) smbd_server_connection_terminate_ex: conn[ipv4:192.168.0.190:49682] reason[NT_STATUS_CONNECTION_RESET] at ../source3/smbd/smb2_server.c:3901 [2016/08/09 11:28:14.857923, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.857931, 5, pid=5689, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.857937, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.857947, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.857957, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.857963, 5, pid=5689, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.857968, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.857976, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.857982, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.857987, 5, pid=5689, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.857992, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.858000, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.858008, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.858014, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_session_global.tdb 2: 3: [2016/08/09 11:28:14.858022, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 271D8913 [2016/08/09 11:28:14.858031, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0ae4b0 [2016/08/09 11:28:14.858044, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 271D8913 [2016/08/09 11:28:14.858050, 5, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.858056, 10, pid=5689, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.858071, 4, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.858077, 5, pid=5689, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.858082, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.858094, 5, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.858121, 10, pid=5689, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:28:14.858185, 3, pid=5689, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (NT_STATUS_CONNECTION_RESET) [2016/08/09 11:28:14.860112, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.860137, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:28:14.860148, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.860155, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.860161, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.860176, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 5538 [2016/08/09 11:28:14.860198, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.860205, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:599(remove_child_pid) messaging_send_iov returned NT_STATUS_OK [2016/08/09 11:28:14.860246, 10, pid=5538, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:254(messaging_recv_cb) messaging_recv_cb: Received message 0x314 len 5 (num_fds:0) from 5534 [2016/08/09 11:28:14.860265, 10, pid=5538, effective(0, 0), real(0, 0)] ../source3/smbd/smbd_cleanupd.c:129(smbd_cleanupd_process_exited) smbd_cleanupd_process_exited: 5689 exited clean [2016/08/09 11:28:14.860279, 3, pid=5538, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid: messaging_dgm_get_unique failed: No such file or directory [2016/08/09 11:28:14.860358, 5, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:28:14.860370, 10, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2:/usr/local/samba/var/lock/serverid.tdb 3: [2016/08/09 11:28:14.860387, 10, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 3916000000000000FFFF [2016/08/09 11:28:14.860398, 10, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0b9d40 [2016/08/09 11:28:14.860414, 10, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 3916000000000000FFFF [2016/08/09 11:28:14.860421, 5, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:28:14.860427, 10, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.864373, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:28:14.864508, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:76(messaging_dgm_ref) messaging_dgm_ref: messaging_dgm_init returned Success [2016/08/09 11:28:14.864531, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:105(messaging_dgm_ref) messaging_dgm_ref: unique = 6212763066494402091 [2016/08/09 11:28:14.864626, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:535(smbXsrv_client_create) [2016/08/09 11:28:14.864634, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:543(smbXsrv_client_create) smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored [2016/08/09 11:28:14.864648, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &client_blob: struct smbXsrv_clientB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_clientU(case 0) info0 : * info0: struct smbXsrv_client table : * ev_ctx : * msg_ctx : * global : * global: struct smbXsrv_client_global0 db_rec : NULL server_id: struct server_id pid : 0x000000000000163a (5690) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x56382b17a410be2b (6212763066494402091) local_address : NULL remote_address : NULL remote_name : NULL initial_connect_time : Tue Aug 9 11:28:15 2016 BST client_guid : 00000000-0000-0000-0000-000000000000 stored : 0x00 (0) sconn : NULL session_table : NULL last_session_id : 0x0000000000000000 (0) tcon_table : NULL open_table : NULL connections : NULL server_multi_channel_enabled: 0x00 (0) [2016/08/09 11:28:14.864796, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:28:14.864806, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2:/usr/local/samba/var/lock/serverid.tdb 3: [2016/08/09 11:28:14.864818, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 3A16000000000000FFFF [2016/08/09 11:28:14.864829, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0c7420 [2016/08/09 11:28:14.864844, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 3A16000000000000FFFF [2016/08/09 11:28:14.864851, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:28:14.864857, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.864874, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2016/08/09 11:28:14.864913, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_REUSEPORT = 1 SO_SNDBUF = 87040 SO_RCVBUF = 374400 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 TCP_DEFER_ACCEPT = 0 [2016/08/09 11:28:14.864983, 3, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/access.c:338(allow_access) Allowed connection from 192.168.0.190 (192.168.0.190) [2016/08/09 11:28:14.864992, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3836(smbd_add_connection) Connection allowed from ipv4:192.168.0.190:49683 to ipv4:192.168.0.8:445 [2016/08/09 11:28:14.865033, 6, pid=5690, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2226(lp_file_list_changed) lp_file_list_changed() file /usr/local/samba/etc/smb.conf -> /usr/local/samba/etc/smb.conf last mod_time: Tue Aug 9 11:21:31 2016 [2016/08/09 11:28:14.865060, 3, pid=5690, effective(0, 0), real(0, 0), class=locking] ../source3/smbd/oplock.c:1310(init_oplocks) init_oplocks: initializing messages. [2016/08/09 11:28:14.865068, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 774 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.865074, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 778 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.865080, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 770 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.865086, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 787 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.865092, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 779 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.865097, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 15 - private_data=(nil) [2016/08/09 11:28:14.865103, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:464(messaging_register) Overriding messaging pointer for type 15 - private_data=(nil) [2016/08/09 11:28:14.865109, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:496(messaging_deregister) Deregistering messaging pointer for type 16 - private_data=(nil) [2016/08/09 11:28:14.865115, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 16 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.865120, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:496(messaging_deregister) Deregistering messaging pointer for type 33 - private_data=0x7fd7df0b0d60 [2016/08/09 11:28:14.865132, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 33 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.865138, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:496(messaging_deregister) Deregistering messaging pointer for type 790 - private_data=(nil) [2016/08/09 11:28:14.865144, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 790 - private_data=0x7fd7df0b68f0 [2016/08/09 11:28:14.865150, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:496(messaging_deregister) Deregistering messaging pointer for type 791 - private_data=(nil) [2016/08/09 11:28:14.865156, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:496(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2016/08/09 11:28:14.865162, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:449(messaging_register) Registering messaging pointer for type 1 - private_data=(nil) [2016/08/09 11:28:14.865174, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(keepalive) 0x7fd7df0c9080 [2016/08/09 11:28:14.865183, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(deadtime) 0x7fd7df0c92d0 [2016/08/09 11:28:14.865189, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/events.c:483(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x7fd7df0c9520 [2016/08/09 11:28:14.865213, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) got smb length of 174 [2016/08/09 11:28:14.865224, 6, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1955(process_smb) got message type 0x0 of len 0xae [2016/08/09 11:28:14.865231, 3, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1957(process_smb) Transaction 0 of length 178 (0 toread) [2016/08/09 11:28:14.865241, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3464(smbd_smb2_process_negprot) smbd_smb2_first_negprot: packet length 174 [2016/08/09 11:28:14.865251, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 0 (position 0) from bitmap [2016/08/09 11:28:14.865261, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2258(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_NEGPROT] mid = 0 [2016/08/09 11:28:14.865273, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.865285, 5, pid=5690, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.865294, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.865308, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.865322, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1294(set_remote_arch) set_remote_arch: Client arch is 'Vista' [2016/08/09 11:28:14.865340, 6, pid=5690, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2226(lp_file_list_changed) lp_file_list_changed() file /usr/local/samba/etc/smb.conf -> /usr/local/samba/etc/smb.conf last mod_time: Tue Aug 9 11:21:31 2016 [2016/08/09 11:28:14.865355, 3, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_negprot.c:278(smbd_smb2_request_process_negprot) Selected protocol SMB3_11 [2016/08/09 11:28:14.865366, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:491(make_auth_context_subsystem) Making default auth method list for server role = 'standalone server', encrypt passwords = yes [2016/08/09 11:28:14.865375, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend trustdomain [2016/08/09 11:28:14.865384, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'trustdomain' [2016/08/09 11:28:14.865391, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend ntdomain [2016/08/09 11:28:14.865397, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'ntdomain' [2016/08/09 11:28:14.865403, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend guest [2016/08/09 11:28:14.865409, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'guest' [2016/08/09 11:28:14.865414, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam [2016/08/09 11:28:14.865420, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam' [2016/08/09 11:28:14.865425, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2016/08/09 11:28:14.865434, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2016/08/09 11:28:14.865440, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend winbind [2016/08/09 11:28:14.865445, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'winbind' [2016/08/09 11:28:14.865451, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend unix [2016/08/09 11:28:14.865458, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'unix' [2016/08/09 11:28:14.865464, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend wbc [2016/08/09 11:28:14.865469, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'wbc' [2016/08/09 11:28:14.865475, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) Attempting to register auth backend samba4 [2016/08/09 11:28:14.865481, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) Successfully added auth method 'samba4' [2016/08/09 11:28:14.865486, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2016/08/09 11:28:14.865493, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2016/08/09 11:28:14.865498, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2016/08/09 11:28:14.865504, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2016/08/09 11:28:14.866873, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'gssapi_spnego' registered [2016/08/09 11:28:14.866886, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'gssapi_krb5' registered [2016/08/09 11:28:14.866893, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'gssapi_krb5_sasl' registered [2016/08/09 11:28:14.866899, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'spnego' registered [2016/08/09 11:28:14.866906, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'schannel' registered [2016/08/09 11:28:14.866913, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'naclrpc_as_system' registered [2016/08/09 11:28:14.866920, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'sasl-EXTERNAL' registered [2016/08/09 11:28:14.866926, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'ntlmssp' registered [2016/08/09 11:28:14.866933, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'ntlmssp_resume_ccache' registered [2016/08/09 11:28:14.866939, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'http_basic' registered [2016/08/09 11:28:14.866946, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'http_ntlm' registered [2016/08/09 11:28:14.866957, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'krb5' registered [2016/08/09 11:28:14.866963, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:907(gensec_register) GENSEC backend 'fake_gssapi_krb5' registered [2016/08/09 11:28:14.866993, 5, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) Starting GENSEC mechanism spnego [2016/08/09 11:28:14.867009, 5, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2016/08/09 11:28:14.867062, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2989(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[64] dyn[yes:140] at ../source3/smbd/smb2_negprot.c:646 [2016/08/09 11:28:14.867079, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 31, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/1/1 [2016/08/09 11:28:14.867516, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3849(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2016/08/09 11:28:14.867529, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 1 (position 1) from bitmap [2016/08/09 11:28:14.867536, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2258(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 1 [2016/08/09 11:28:14.867543, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.867549, 5, pid=5690, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.867555, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.867565, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.867583, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.867591, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_session_global.tdb 2: 3: [2016/08/09 11:28:14.867600, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key DC25C0EF [2016/08/09 11:28:14.867611, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0c3190 [2016/08/09 11:28:14.867713, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:930(smbXsrv_session_global_store) [2016/08/09 11:28:14.867720, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:932(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'DC25C0EF' stored [2016/08/09 11:28:14.867727, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000001 (1) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xdc25c0ef (3693461743) session_wire_id : 0x00000000dc25c0ef (3693461743) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000163a (5690) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x56382b17a410be2b (6212763066494402091) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49683' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2016/08/09 11:28:14.867853, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key DC25C0EF [2016/08/09 11:28:14.867860, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.867866, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.867873, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1296(smbXsrv_session_create) [2016/08/09 11:28:14.867877, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1304(smbXsrv_session_create) smbXsrv_session_create: global_id (0xdc25c0ef) stored [2016/08/09 11:28:14.867882, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xdc25c0ef (3693461743) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xdc25c0ef (3693461743) session_wire_id : 0x00000000dc25c0ef (3693461743) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000163a (5690) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x56382b17a410be2b (6212763066494402091) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49683' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Tue Aug 9 11:28:15 2016 BST nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : NULL [2016/08/09 11:28:14.868059, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:491(make_auth_context_subsystem) Making default auth method list for server role = 'standalone server', encrypt passwords = yes [2016/08/09 11:28:14.868074, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2016/08/09 11:28:14.868080, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method guest has a valid init [2016/08/09 11:28:14.868086, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:378(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2016/08/09 11:28:14.868092, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:403(load_auth_module) load_auth_module: auth method sam has a valid init [2016/08/09 11:28:14.868122, 5, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) Starting GENSEC mechanism spnego [2016/08/09 11:28:14.868131, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.868138, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_session_global.tdb 2: 3: [2016/08/09 11:28:14.868146, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key DC25C0EF [2016/08/09 11:28:14.868157, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0d2230 [2016/08/09 11:28:14.868175, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:930(smbXsrv_session_global_store) [2016/08/09 11:28:14.868180, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:932(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'DC25C0EF' stored [2016/08/09 11:28:14.868186, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000002 (2) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xdc25c0ef (3693461743) session_wire_id : 0x00000000dc25c0ef (3693461743) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000163a (5690) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x56382b17a410be2b (6212763066494402091) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49683' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2016/08/09 11:28:14.868301, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key DC25C0EF [2016/08/09 11:28:14.868308, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.868314, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.868321, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1391(smbXsrv_session_update) [2016/08/09 11:28:14.868324, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1399(smbXsrv_session_update) smbXsrv_session_update: global_id (0xdc25c0ef) stored [2016/08/09 11:28:14.868330, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xdc25c0ef (3693461743) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xdc25c0ef (3693461743) session_wire_id : 0x00000000dc25c0ef (3693461743) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x00 (0) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x00 (0) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000163a (5690) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x56382b17a410be2b (6212763066494402091) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49683' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Tue Aug 9 11:28:15 2016 BST nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : * in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Tue Aug 9 11:28:15 2016 BST idle_time : Tue Aug 9 11:28:15 2016 BST [2016/08/09 11:28:14.868533, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.868542, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:28:14.868548, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.868554, 5, pid=5690, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.868559, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.868572, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 24 req->in.vector[4].iov_len = 74 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2016/08/09 11:28:14.868626, 5, pid=5690, effective(0, 0), real(0, 0)] ../auth/gensec/gensec_start.c:680(gensec_start_mech) Starting GENSEC submechanism ntlmssp [2016/08/09 11:28:14.868639, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2016/08/09 11:28:14.868812, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0xe2088297 (3792208535) 1: NTLMSSP_NEGOTIATE_UNICODE 1: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 1: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : NULL WorkstationLen : 0x0000 (0) WorkstationMaxLen : 0x0000 (0) Workstation : NULL Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_10 (10) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_0 (0) ProductBuild : 0x295a (10586) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2016/08/09 11:28:14.869002, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x000e (14) TargetNameMaxLen : 0x000e (14) TargetName : * TargetName : 'DEVTEST' NegotiateFlags : 0xe28a8215 (3800728085) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 ServerChallenge : 09ae9fa46d12dcdb Reserved : 0000000000000000 TargetInfoLen : 0x0094 (148) TargetInfoMaxLen : 0x0094 (148) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000006 (6) pair: ARRAY(6) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'DEVTEST' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'DEVTEST' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0024 (36) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'samdom.example.com' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x0034 (52) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'devtest.samdom.example.com' pair: struct AV_PAIR AvId : MsvAvTimestamp (0x7) AvLen : 0x0008 (8) Value : union ntlmssp_AvValue(case 0x7) AvTimestamp : Tue Aug 9 11:28:15 2016 BST pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1) ProductBuild : 0x0000 (0) Reserved : 000000 NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF) [2016/08/09 11:28:14.869258, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.869265, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:28:14.869271, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.869276, 5, pid=5690, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.869282, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.869294, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.869302, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2989(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_MORE_PROCESSING_REQUIRED] body[8] dyn[yes:249] at ../source3/smbd/smb2_sesssetup.c:171 [2016/08/09 11:28:14.869311, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 31, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/2/1 [2016/08/09 11:28:14.869694, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3849(smbd_smb2_io_handler) smbd_smb2_request idx[1] of 5 vectors [2016/08/09 11:28:14.869707, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:660(smb2_validate_sequence_number) smb2_validate_sequence_number: clearing id 2 (position 2) from bitmap [2016/08/09 11:28:14.869714, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2258(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 2 [2016/08/09 11:28:14.869722, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.869728, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_session_global.tdb 2: 3: [2016/08/09 11:28:14.869737, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key DC25C0EF [2016/08/09 11:28:14.869746, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0d23b0 [2016/08/09 11:28:14.869763, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:930(smbXsrv_session_global_store) [2016/08/09 11:28:14.869768, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:932(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'DC25C0EF' stored [2016/08/09 11:28:14.869774, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000003 (3) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xdc25c0ef (3693461743) session_wire_id : 0x00000000dc25c0ef (3693461743) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000163a (5690) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x56382b17a410be2b (6212763066494402091) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49683' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2016/08/09 11:28:14.869901, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key DC25C0EF [2016/08/09 11:28:14.869908, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.869914, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.869920, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1391(smbXsrv_session_update) [2016/08/09 11:28:14.869924, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1399(smbXsrv_session_update) smbXsrv_session_update: global_id (0xdc25c0ef) stored [2016/08/09 11:28:14.869930, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xdc25c0ef (3693461743) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xdc25c0ef (3693461743) session_wire_id : 0x00000000dc25c0ef (3693461743) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000163a (5690) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x56382b17a410be2b (6212763066494402091) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49683' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Tue Aug 9 11:28:15 2016 BST nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : * in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Tue Aug 9 11:28:15 2016 BST idle_time : Tue Aug 9 11:28:15 2016 BST [2016/08/09 11:28:14.870133, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.870139, 5, pid=5690, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.870145, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.870154, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.870166, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.870172, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_session_global.tdb 2: 3: [2016/08/09 11:28:14.870180, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key DC25C0EF [2016/08/09 11:28:14.870188, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0d2f90 [2016/08/09 11:28:14.870203, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:930(smbXsrv_session_global_store) [2016/08/09 11:28:14.870208, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:932(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'DC25C0EF' stored [2016/08/09 11:28:14.870214, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000004 (4) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xdc25c0ef (3693461743) session_wire_id : 0x00000000dc25c0ef (3693461743) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000163a (5690) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x56382b17a410be2b (6212763066494402091) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49683' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) [2016/08/09 11:28:14.870333, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key DC25C0EF [2016/08/09 11:28:14.870340, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.870346, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.870353, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1391(smbXsrv_session_update) [2016/08/09 11:28:14.870359, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1399(smbXsrv_session_update) smbXsrv_session_update: global_id (0xdc25c0ef) stored [2016/08/09 11:28:14.870365, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xdc25c0ef (3693461743) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xdc25c0ef (3693461743) session_wire_id : 0x00000000dc25c0ef (3693461743) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : NTTIME(0) auth_session_info_seqnum : 0x00000000 (0) auth_session_info : NULL connection_dialect : 0x0311 (785) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000163a (5690) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x56382b17a410be2b (6212763066494402091) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49683' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000000 (0) connection : * encryption_cipher : 0x0000 (0) status : NT_STATUS_MORE_PROCESSING_REQUIRED idle_time : Tue Aug 9 11:28:15 2016 BST nonce_high_random : 0x0000000000000000 (0) nonce_high_max : 0x0000000000000000 (0) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : NULL tcon_table : * pending_auth : * pending_auth: struct smbXsrv_session_auth0 prev : * next : NULL session : * connection : * gensec : * preauth : * in_flags : 0x00 (0) in_security_mode : 0x01 (1) creation_time : Tue Aug 9 11:28:15 2016 BST idle_time : Tue Aug 9 11:28:15 2016 BST [2016/08/09 11:28:14.870565, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.870572, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:28:14.870577, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.870583, 5, pid=5690, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.870588, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.870600, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 smbd_smb2_request_pending_queue: req->current_idx = 1 req->in.vector[0].iov_len = 0 req->in.vector[1].iov_len = 0 req->in.vector[2].iov_len = 64 req->in.vector[3].iov_len = 24 req->in.vector[4].iov_len = 156 req->out.vector[0].iov_len = 4 req->out.vector[1].iov_len = 0 req->out.vector[2].iov_len = 64 req->out.vector[3].iov_len = 8 req->out.vector[4].iov_len = 0 [2016/08/09 11:28:14.870656, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0001 (1) LmChallengeResponseMaxLen: 0x0001 (1) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 1) NtChallengeResponseLen : 0x0000 (0) NtChallengeResponseMaxLen: 0x0000 (0) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 0) DomainNameLen : 0x0000 (0) DomainNameMaxLen : 0x0000 (0) DomainName : * DomainName : '' UserNameLen : 0x0000 (0) UserNameMaxLen : 0x0000 (0) UserName : * UserName : '' WorkstationLen : 0x0010 (16) WorkstationMaxLen : 0x0010 (16) Workstation : * Workstation : 'MINWINPC' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [0000] C9 63 89 98 CE 2A D9 49 B3 39 E8 12 FA BF AC 12 .c...*.I .9...... NegotiateFlags : 0xe2888a15 (3800599061) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 1: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 1: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 1: NTLMSSP_NEGOTIATE_56 Version: struct ntlmssp_VERSION ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_10 (10) ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_0 (0) ProductBuild : 0x295a (10586) Reserved: ARRAY(3) [0] : 0x00 (0) [1] : 0x00 (0) [2] : 0x00 (0) NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (15) [2016/08/09 11:28:14.870846, 3, pid=5690, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:452(ntlmssp_server_preauth) Got user=[] domain=[] workstation=[MINWINPC] len1=1 len2=0 [2016/08/09 11:28:14.870856, 3, pid=5690, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3742(lp_load_ex) lp_load_ex: refreshing parameters [2016/08/09 11:28:14.870863, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1313(free_param_opts) Freeing parametrics: [2016/08/09 11:28:14.870919, 3, pid=5690, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:544(init_globals) Initialising global parameters [2016/08/09 11:28:14.870992, 3, pid=5690, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2671(lp_do_section) Processing section "[global]" doing parameter workgroup = EXAMPLE doing parameter security = user doing parameter map to guest = Bad User doing parameter log level = 10 [2016/08/09 11:28:14.871043, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/util/debug.c:638(debug_dump_status) INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10 rpc_cli: 10 passdb: 10 sam: 10 auth: 10 winbind: 10 vfs: 10 idmap: 10 quota: 10 acls: 10 locking: 10 msdfs: 10 dmapi: 10 registry: 10 scavenger: 10 dns: 10 ldb: 10 tevent: 10 doing parameter debug pid = true [2016/08/09 11:28:14.871094, 2, pid=5690, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2688(lp_do_section) Processing section "[test]" doing parameter comment = Test doing parameter guest ok = yes doing parameter path = /data/test doing parameter read only = no [2016/08/09 11:28:14.871151, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3783(lp_load_ex) pm_process() returned Yes [2016/08/09 11:28:14.871164, 7, pid=5690, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4099(lp_servicenumber) lp_servicenumber: couldn't find homes [2016/08/09 11:28:14.871173, 3, pid=5690, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1588(lp_add_ipc) adding IPC service [2016/08/09 11:28:14.871198, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:117(make_user_info_map) Mapping user []\[] from workstation [MINWINPC] [2016/08/09 11:28:14.871207, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:139(make_user_info_map) Mapped domain from [] to [DEVTEST] for user [] from workstation [MINWINPC] [2016/08/09 11:28:14.871213, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:62(make_user_info) attempting to make a user_info for () [2016/08/09 11:28:14.871220, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:70(make_user_info) making strings for 's user_info struct [2016/08/09 11:28:14.871230, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:108(make_user_info) making blobs for 's user_info struct [2016/08/09 11:28:14.871236, 10, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:159(make_user_info) made a user_info for () [2016/08/09 11:28:14.871242, 3, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:178(auth_check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[]@[MINWINPC] with the new password interface [2016/08/09 11:28:14.871249, 3, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:181(auth_check_ntlm_password) check_ntlm_password: mapped user is: [DEVTEST]\[]@[MINWINPC] [2016/08/09 11:28:14.871255, 10, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:190(auth_check_ntlm_password) check_ntlm_password: auth_context challenge created by random [2016/08/09 11:28:14.871260, 10, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:192(auth_check_ntlm_password) challenge is: [2016/08/09 11:28:14.871266, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/util/util.c:559(dump_data) [0000] 09 AE 9F A4 6D 12 DC DB ....m... [2016/08/09 11:28:14.871280, 10, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:41(check_guest_security) Check auth for: [] [2016/08/09 11:28:14.871290, 3, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:249(auth_check_ntlm_password) check_ntlm_password: guest authentication for user [] succeeded [2016/08/09 11:28:14.871296, 5, pid=5690, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:305(auth_check_ntlm_password) check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded [2016/08/09 11:28:14.871303, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:215(auth3_check_password) Got NT session key of length 16 [2016/08/09 11:28:14.871308, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:222(auth3_check_password) Got LM session key of length 16 [2016/08/09 11:28:14.871321, 10, pid=5690, effective(0, 0), real(0, 0)] ../auth/ntlmssp/ntlmssp_server.c:858(ntlmssp_server_postauth) ntlmssp_server_auth: Using unmodified nt session key. [2016/08/09 11:28:14.871338, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.871344, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:28:14.871350, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.871355, 5, pid=5690, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.871361, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.871372, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.871437, 6, pid=5690, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2226(lp_file_list_changed) lp_file_list_changed() file /usr/local/samba/etc/smb.conf -> /usr/local/samba/etc/smb.conf last mod_time: Tue Aug 9 11:21:31 2016 [2016/08/09 11:28:14.871459, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.871465, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_session_global.tdb 2: 3: [2016/08/09 11:28:14.871477, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key DC25C0EF [2016/08/09 11:28:14.871486, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0d0150 [2016/08/09 11:28:14.871514, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:930(smbXsrv_session_global_store) [2016/08/09 11:28:14.871519, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:932(smbXsrv_session_global_store) smbXsrv_session_global_store: key 'DC25C0EF' stored [2016/08/09 11:28:14.871526, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &global_blob: struct smbXsrv_session_globalB version : SMBXSRV_VERSION_0 (0) seqnum : 0x00000005 (5) info : union smbXsrv_session_globalU(case 0) info0 : * info0: struct smbXsrv_session_global0 db_rec : * session_global_id : 0xdc25c0ef (3693461743) session_wire_id : 0x00000000dc25c0ef (3693461743) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : Tue Aug 9 11:28:15 2016 BST auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000007 (7) sids: ARRAY(7) sids : S-1-5-21-675121440-1470025956-3331568166-501 sids : S-1-5-21-675121440-1470025956-3331568166-514 sids : S-1-22-2-65534 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-32-546 sids : S-1-22-1-65534 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x000000000000fffe (65534) gid : 0x000000000000fffe (65534) ngroups : 0x00000001 (1) groups: ARRAY(1) groups : 0x000000000000fffe (65534) info : * info: struct auth_user_info account_name : * account_name : 'nobody' domain_name : * domain_name : 'DEVTEST' full_name : NULL logon_script : NULL profile_path : NULL home_directory : NULL home_drive : NULL logon_server : NULL last_logon : NTTIME(0) last_logoff : NTTIME(0) acct_expiry : NTTIME(0) last_password_change : NTTIME(0) allow_password_change : NTTIME(0) force_password_change : NTTIME(0) logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000000 (0) authenticated : 0x00 (0) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'nobody' sanitized_username : * sanitized_username : '' torture : NULL credentials : NULL connection_dialect : 0x0311 (785) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000163a (5690) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x56382b17a410be2b (6212763066494402091) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49683' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x0001 (1) [2016/08/09 11:28:14.871990, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key DC25C0EF [2016/08/09 11:28:14.871999, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.872005, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.872012, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1391(smbXsrv_session_update) [2016/08/09 11:28:14.872016, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1399(smbXsrv_session_update) smbXsrv_session_update: global_id (0xdc25c0ef) stored [2016/08/09 11:28:14.872021, 1, pid=5690, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:402(ndr_print_debug) &session_blob: struct smbXsrv_sessionB version : SMBXSRV_VERSION_0 (0) reserved : 0x00000000 (0) info : union smbXsrv_sessionU(case 0) info0 : * info0: struct smbXsrv_session table : * db_rec : NULL client : * local_id : 0xdc25c0ef (3693461743) global : * global: struct smbXsrv_session_global0 db_rec : NULL session_global_id : 0xdc25c0ef (3693461743) session_wire_id : 0x00000000dc25c0ef (3693461743) creation_time : Tue Aug 9 11:28:15 2016 BST expiration_time : Thu Jan 1 01:00:00 1970 BST auth_time : Tue Aug 9 11:28:15 2016 BST auth_session_info_seqnum : 0x00000001 (1) auth_session_info : * auth_session_info: struct auth_session_info security_token : * security_token: struct security_token num_sids : 0x00000007 (7) sids: ARRAY(7) sids : S-1-5-21-675121440-1470025956-3331568166-501 sids : S-1-5-21-675121440-1470025956-3331568166-514 sids : S-1-22-2-65534 sids : S-1-1-0 sids : S-1-5-2 sids : S-1-5-32-546 sids : S-1-22-1-65534 privilege_mask : 0x0000000000000000 (0) 0: SEC_PRIV_MACHINE_ACCOUNT_BIT 0: SEC_PRIV_PRINT_OPERATOR_BIT 0: SEC_PRIV_ADD_USERS_BIT 0: SEC_PRIV_DISK_OPERATOR_BIT 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT 0: SEC_PRIV_BACKUP_BIT 0: SEC_PRIV_RESTORE_BIT 0: SEC_PRIV_TAKE_OWNERSHIP_BIT 0: SEC_PRIV_INCREASE_QUOTA_BIT 0: SEC_PRIV_SECURITY_BIT 0: SEC_PRIV_LOAD_DRIVER_BIT 0: SEC_PRIV_SYSTEM_PROFILE_BIT 0: SEC_PRIV_SYSTEMTIME_BIT 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT 0: SEC_PRIV_CREATE_PAGEFILE_BIT 0: SEC_PRIV_SHUTDOWN_BIT 0: SEC_PRIV_DEBUG_BIT 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT 0: SEC_PRIV_CHANGE_NOTIFY_BIT 0: SEC_PRIV_UNDOCK_BIT 0: SEC_PRIV_ENABLE_DELEGATION_BIT 0: SEC_PRIV_MANAGE_VOLUME_BIT 0: SEC_PRIV_IMPERSONATE_BIT 0: SEC_PRIV_CREATE_GLOBAL_BIT rights_mask : 0x00000000 (0) 0: LSA_POLICY_MODE_INTERACTIVE 0: LSA_POLICY_MODE_NETWORK 0: LSA_POLICY_MODE_BATCH 0: LSA_POLICY_MODE_SERVICE 0: LSA_POLICY_MODE_PROXY 0: LSA_POLICY_MODE_DENY_INTERACTIVE 0: LSA_POLICY_MODE_DENY_NETWORK 0: LSA_POLICY_MODE_DENY_BATCH 0: LSA_POLICY_MODE_DENY_SERVICE 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE 0x00: LSA_POLICY_MODE_ALL (0) 0x00: LSA_POLICY_MODE_ALL_NT4 (0) unix_token : * unix_token: struct security_unix_token uid : 0x000000000000fffe (65534) gid : 0x000000000000fffe (65534) ngroups : 0x00000001 (1) groups: ARRAY(1) groups : 0x000000000000fffe (65534) info : * info: struct auth_user_info account_name : * account_name : 'nobody' domain_name : * domain_name : 'DEVTEST' full_name : NULL logon_script : NULL profile_path : NULL home_directory : NULL home_drive : NULL logon_server : NULL last_logon : NTTIME(0) last_logoff : NTTIME(0) acct_expiry : NTTIME(0) last_password_change : NTTIME(0) allow_password_change : NTTIME(0) force_password_change : NTTIME(0) logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) acct_flags : 0x00000000 (0) authenticated : 0x00 (0) unix_info : * unix_info: struct auth_user_info_unix unix_name : * unix_name : 'nobody' sanitized_username : * sanitized_username : '' torture : NULL credentials : NULL connection_dialect : 0x0311 (785) signing_flags : 0x04 (4) 0: SMBXSRV_SIGNING_REQUIRED 0: SMBXSRV_PROCESSED_SIGNED_PACKET 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET encryption_flags : 0x08 (8) 0: SMBXSRV_ENCRYPTION_REQUIRED 0: SMBXSRV_ENCRYPTION_DESIRED 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET num_channels : 0x00000001 (1) channels: ARRAY(1) channels: struct smbXsrv_channel_global0 server_id: struct server_id pid : 0x000000000000163a (5690) task_id : 0x00000000 (0) vnn : 0xffffffff (4294967295) unique_id : 0x56382b17a410be2b (6212763066494402091) local_address : 'ipv4:192.168.0.8:445' remote_address : 'ipv4:192.168.0.190:49683' remote_name : '192.168.0.190' auth_session_info_seqnum : 0x00000001 (1) connection : * encryption_cipher : 0x0001 (1) status : NT_STATUS_OK idle_time : Tue Aug 9 11:28:15 2016 BST nonce_high_random : 0x99dda7f3aa3edd76 (-7359541551078384266) nonce_high_max : 0x0000000000ffffff (16777215) nonce_high : 0x0000000000000000 (0) nonce_low : 0x0000000000000000 (0) compat : * tcon_table : * pending_auth : NULL [2016/08/09 11:28:14.872534, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2989(smbd_smb2_request_done_ex) smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[8] dyn[yes:9] at ../source3/smbd/smb2_sesssetup.c:171 [2016/08/09 11:28:14.872543, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:912(smb2_set_operation_credit) smb2_set_operation_credit: requested 31, charge 1, granted 31, current possible/max 512/512, total granted/max/low/range 31/8192/3/31 [2016/08/09 11:28:14.872928, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:1069(smbd_server_connection_terminate_ex) smbd_server_connection_terminate_ex: conn[ipv4:192.168.0.190:49683] reason[NT_STATUS_CONNECTION_RESET] at ../source3/smbd/smb2_server.c:3901 [2016/08/09 11:28:14.872950, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.872958, 5, pid=5690, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.872964, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.872980, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.872987, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.872992, 5, pid=5690, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.872998, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.873006, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.873012, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.873018, 5, pid=5690, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.873023, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.873031, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.873039, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.873046, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1:/usr/local/samba/var/lock/smbXsrv_session_global.tdb 2: 3: [2016/08/09 11:28:14.873054, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key DC25C0EF [2016/08/09 11:28:14.873067, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0d03a0 [2016/08/09 11:28:14.873081, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key DC25C0EF [2016/08/09 11:28:14.873088, 5, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 1 for /usr/local/samba/var/lock/smbXsrv_session_global.tdb [2016/08/09 11:28:14.873093, 10, pid=5690, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:28:14.873107, 4, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.873113, 5, pid=5690, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.873118, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.873132, 5, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:28:14.873160, 10, pid=5690, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:28:14.873228, 3, pid=5690, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (NT_STATUS_CONNECTION_RESET) [2016/08/09 11:28:14.875215, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:217(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.875241, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2016/08/09 11:28:14.875248, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2016/08/09 11:28:14.875254, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:28:14.875260, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:28:14.875276, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:323(messaging_dgm_send) messaging_dgm_send: Sending message to 5538 [2016/08/09 11:28:14.875294, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:28:14.875301, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:599(remove_child_pid) messaging_send_iov returned NT_STATUS_OK [2016/08/09 11:28:14.875337, 10, pid=5538, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:254(messaging_recv_cb) messaging_recv_cb: Received message 0x314 len 5 (num_fds:0) from 5534 [2016/08/09 11:28:14.875350, 10, pid=5538, effective(0, 0), real(0, 0)] ../source3/smbd/smbd_cleanupd.c:129(smbd_cleanupd_process_exited) smbd_cleanupd_process_exited: 5690 exited clean [2016/08/09 11:28:14.875365, 3, pid=5538, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) pid_to_procid: messaging_dgm_get_unique failed: No such file or directory [2016/08/09 11:28:14.875380, 5, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:28:14.875386, 10, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2:/usr/local/samba/var/lock/serverid.tdb 3: [2016/08/09 11:28:14.875401, 10, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 3A16000000000000FFFF [2016/08/09 11:28:14.875413, 10, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0b9d40 [2016/08/09 11:28:14.875426, 10, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 3A16000000000000FFFF [2016/08/09 11:28:14.875433, 5, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:28:14.875438, 10, pid=5538, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:29:03.551054, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/events.c:426(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) called [2016/08/09 11:29:03.551132, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:163(print_queue_housekeeping) print queue housekeeping [2016/08/09 11:29:03.551145, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/events.c:437(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) rescheduled [2016/08/09 11:30:03.610421, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/events.c:426(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) called [2016/08/09 11:30:03.610459, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:163(print_queue_housekeeping) print queue housekeeping [2016/08/09 11:30:03.610464, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/events.c:437(smbd_idle_event_handler) smbd_idle_event_handler: idle_evt(print_queue_housekeeping) (nil) rescheduled [2016/08/09 11:30:17.525605, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:30:17.525623, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:30:17.525628, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:30:17.525638, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:30:17.525643, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:30:17.525647, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:30:17.525650, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:30:17.525655, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:30:17.525659, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:30:17.525662, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:30:17.525665, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:30:17.525670, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:30:17.525679, 4, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:30:17.525682, 5, pid=5534, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:30:17.525685, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:30:17.525690, 5, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:30:17.525698, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:30:17.525703, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2:/usr/local/samba/var/lock/serverid.tdb 3: [2016/08/09 11:30:17.525710, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Locking key 9E15000000000000FFFF [2016/08/09 11:30:17.525722, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:143(db_tdb_fetch_locked_internal) Allocated locked data 0x0x7fd7df0c70d0 [2016/08/09 11:30:17.525735, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:59(db_tdb_log_key) Unlocking key 9E15000000000000FFFF [2016/08/09 11:30:17.525739, 5, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:146(dbwrap_lock_order_state_destructor) release lock order 2 for /usr/local/samba/var/lock/serverid.tdb [2016/08/09 11:30:17.525742, 10, pid=5534, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:133(debug_lock_order) lock order: 1: 2: 3: [2016/08/09 11:30:17.525764, 10, pid=5534, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:30:17.525837, 3, pid=5534, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (termination signal) [2016/08/09 11:30:17.526345, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:30:17.526356, 5, pid=5546, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:30:17.526359, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:30:17.526367, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:30:17.526371, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:30:17.526374, 5, pid=5546, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:30:17.526377, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:30:17.526382, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:30:17.526386, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:30:17.526389, 5, pid=5546, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:30:17.526392, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:30:17.526400, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:30:17.526404, 4, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:321(set_sec_ctx_internal) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2016/08/09 11:30:17.526407, 5, pid=5546, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) Security token: (NULL) [2016/08/09 11:30:17.526410, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2016/08/09 11:30:17.526415, 5, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2016/08/09 11:30:17.526433, 10, pid=5546, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:142(msg_dgm_ref_destructor) msg_dgm_ref_destructor: refs=(nil) [2016/08/09 11:30:17.526483, 3, pid=5546, effective(0, 0), real(0, 0)] ../source3/smbd/server_exit.c:246(exit_server_common) Server exit (termination signal)