[2005/06/16 17:40:05, 5] lib/debug.c:debug_dump_status(366) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 doing parameter panic action = /usr/share/samba/panic-action %d doing parameter ldap admin dn = cn=admin,dc=serveur,dc=cavesorsat,dc=ch doing parameter ldap idmap suffix = ou=idmap doing parameter ldap suffix = dc=serveur,dc=cavesorsat,dc=ch doing parameter idmap backend = ldap:ldap://fileserver.cavesorsat.ch doing parameter winbind nested groups = Yes doing parameter winbind separator = / doing parameter idmap uid = 10000-20000 doing parameter idmap gid = 10000-20000 doing parameter winbind enum users = yes doing parameter winbind enum groups = yes doing parameter template homedir = /home/%U doing parameter template shell = /bin/bash [2005/06/16 17:40:05, 2] param/loadparm.c:do_section(3434) Processing section "[homes]" [2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327) add_a_service: Creating snum = 0 for homes doing parameter comment = Home Directories doing parameter writeable = Yes doing parameter create mask = 0700 doing parameter directory mask = 0700 doing parameter browseable = No doing parameter valid users = ORSAT/%S doing parameter root preexec = /etc/samba/mkhomedir.sh %H %u %g doing parameter include = /etc/samba/shares/toto.conf [2005/06/16 17:40:05, 3] param/params.c:pm_process(573) params.c:pm_process() - Processing configuration file "/etc/samba/shares/toto.conf" [2005/06/16 17:40:05, 2] param/loadparm.c:do_section(3434) Processing section "[toto]" [2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327) add_a_service: Creating snum = 1 for toto doing parameter comment = doing parameter path = /var/spool/samba/scsi/toto doing parameter writeable = yes doing parameter nt acl support = Yes doing parameter inherit acls = Yes doing parameter force unknown acl user = Yes doing parameter store dos attributes = Yes doing parameter security mask = 0777 doing parameter force security mode = 0 [2005/06/16 17:40:05, 5] lib/debug.c:debug_dump_status(366) doing parameter directory security mask = 0777 INFO: Current debug levels: all: True/10 doing parameter force directory security mode = 0 [2005/06/16 17:40:05, 4] param/loadparm.c:lp_load(3946) tdb: False/0 pm_process() returned Yes printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 doing parameter panic action = /usr/share/samba/panic-action %d [2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327) add_a_service: Creating snum = 2 for IPC$ doing parameter ldap admin dn = cn=admin,dc=serveur,dc=cavesorsat,dc=ch [2005/06/16 17:40:05, 3] param/loadparm.c:lp_add_ipc(2409) adding IPC service doing parameter ldap idmap suffix = ou=idmap [2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327) add_a_service: Creating snum = 3 for ADMIN$ doing parameter ldap suffix = dc=serveur,dc=cavesorsat,dc=ch [2005/06/16 17:40:05, 3] param/loadparm.c:lp_add_ipc(2409) adding IPC service [2005/06/16 17:40:05, 10] param/loadparm.c:set_server_role(3864) doing parameter idmap backend = ldap:ldap://fileserver.cavesorsat.ch set_server_role: role = ROLE_DOMAIN_MEMBER doing parameter winbind nested groups = Yes [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE doing parameter winbind separator = / [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) doing parameter idmap uid = 10000-20000 Substituting charset 'UTF-8' for LOCALE doing parameter idmap gid = 10000-20000 [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE doing parameter winbind enum users = yes [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE doing parameter winbind enum groups = yes [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE doing parameter template homedir = /home/%U [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) doing parameter template shell = /bin/bash Substituting charset 'UTF-8' for LOCALE [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) [2005/06/16 17:40:05, 2] param/loadparm.c:do_section(3434) Substituting charset 'UTF-8' for LOCALE Processing section "[homes]" [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE [2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327) add_a_service: Creating snum = 0 for homes doing parameter comment = Home Directories [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) doing parameter writeable = Yes Substituting charset 'UTF-8' for LOCALE doing parameter create mask = 0700 doing parameter directory mask = 0700 [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) Substituting charset 'UTF-8' for LOCALE doing parameter browseable = No [2005/06/16 17:40:05, 7] param/loadparm.c:lp_servicenumber(4056) lp_servicenumber: couldn't find printers doing parameter valid users = ORSAT/%S [2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(114) reloading printcap cache doing parameter root preexec = /etc/samba/mkhomedir.sh %H %u %g doing parameter include = /etc/samba/shares/toto.conf [2005/06/16 17:40:05, 3] param/params.c:pm_process(573) params.c:pm_process() - Processing configuration file "/etc/samba/shares/toto.conf" [2005/06/16 17:40:05, 2] param/loadparm.c:do_section(3434) Processing section "[toto]" [2005/06/16 17:40:05, 0] printing/pcap.c:pcap_cache_reload(149) [2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327) add_a_service: Creating snum = 1 for toto doing parameter comment = Unable to open printcap file /etc/printcap for read! doing parameter path = /var/spool/samba/scsi/toto [2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(213) doing parameter writeable = yes reload status: error doing parameter nt acl support = Yes [2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(114) reloading printcap cache doing parameter inherit acls = Yes doing parameter force unknown acl user = Yes doing parameter store dos attributes = Yes [2005/06/16 17:40:05, 0] printing/pcap.c:pcap_cache_reload(149) doing parameter security mask = 0777 doing parameter force security mode = 0 doing parameter directory security mask = 0777 Unable to open printcap file /etc/printcap for read! doing parameter force directory security mode = 0 [2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(213) reload status: error [2005/06/16 17:40:05, 4] param/loadparm.c:lp_load(3946) [2005/06/16 17:40:05, 7] param/loadparm.c:lp_servicenumber(4056) pm_process() returned Yes lp_servicenumber: couldn't find printers [2005/06/16 17:40:05, 7] param/loadparm.c:lp_servicenumber(4056) lp_servicenumber: couldn't find printers [2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327) add_a_service: Creating snum = 2 for IPC$ [2005/06/16 17:40:05, 3] param/loadparm.c:lp_add_ipc(2409) adding IPC service [2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327) [2005/06/16 17:40:05, 2] lib/interface.c:add_interface(81) add_a_service: Creating snum = 3 for ADMIN$ added interface ip=192.168.15.26 bcast=192.168.15.255 nmask=255.255.255.0 [2005/06/16 17:40:05, 3] param/loadparm.c:lp_add_ipc(2409) adding IPC service [2005/06/16 17:40:05, 10] param/loadparm.c:set_server_role(3864) [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) set_server_role: role = ROLE_DOMAIN_MEMBER socket option SO_KEEPALIVE = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_REUSEADDR = 1 [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) Substituting charset 'UTF-8' for LOCALE socket option SO_BROADCAST = 0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option TCP_NODELAY = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) socket option IPTOS_LOWDELAY = 0 Substituting charset 'UTF-8' for LOCALE [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_THROUGHPUT = 0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) socket option SO_SNDBUF = 16384 Substituting charset 'UTF-8' for LOCALE [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVBUF = 87380 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) socket option SO_SNDLOWAT = 1 Substituting charset 'UTF-8' for LOCALE [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVLOWAT = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) socket option SO_SNDTIMEO = 0 Substituting charset 'UTF-8' for LOCALE [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVTIMEO = 0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) socket option SO_KEEPALIVE = 1 Substituting charset 'UTF-8' for LOCALE [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_REUSEADDR = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) socket option SO_BROADCAST = 0 Substituting charset 'UTF-8' for LOCALE [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option TCP_NODELAY = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) socket option IPTOS_LOWDELAY = 0 Substituting charset 'UTF-8' for LOCALE [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_THROUGHPUT = 0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) socket option SO_SNDBUF = 16384 Substituting charset 'UTF-8' for LOCALE [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVBUF = 87380 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) [2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81) socket option SO_SNDLOWAT = 1 Substituting charset 'UTF-8' for LOCALE [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVLOWAT = 1 [2005/06/16 17:40:05, 7] param/loadparm.c:lp_servicenumber(4056) [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) lp_servicenumber: couldn't find printers socket option SO_SNDTIMEO = 0 [2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(114) [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) reloading printcap cache socket option SO_RCVTIMEO = 0 [2005/06/16 17:40:05, 3] smbd/oplock.c:init_oplocks(1351) open_oplock_ipc: opening loopback UDP socket. [2005/06/16 17:40:05, 10] lib/util_sock.c:open_socket_in(717) bind succeeded on port 0 [2005/06/16 17:40:05, 0] printing/pcap.c:pcap_cache_reload(149) [2005/06/16 17:40:05, 3] smbd/oplock.c:init_oplocks(1382) open_oplock ipc: pid = 18495, global_oplock_port = 33026 [2005/06/16 17:40:05, 4] lib/time.c:get_serverzone(125) Serverzone is -7200 Unable to open printcap file /etc/printcap for read! [2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(213) reload status: error [2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(114) reloading printcap cache [2005/06/16 17:40:05, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 68 [2005/06/16 17:40:05, 0] printing/pcap.c:pcap_cache_reload(149) [2005/06/16 17:40:05, 6] smbd/process.c:process_smb(1090) got message type 0x81 of len 0x44 [2005/06/16 17:40:05, 3] smbd/process.c:process_smb(1091) Transaction 0 of length 72 Unable to open printcap file /etc/printcap for read! [2005/06/16 17:40:05, 2] smbd/reply.c:reply_special(236) [2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(213) netbios connect: name1=FILESERVER name2=RASVOYAGE reload status: error [2005/06/16 17:40:05, 2] smbd/reply.c:reply_special(243) [2005/06/16 17:40:05, 7] param/loadparm.c:lp_servicenumber(4056) netbios connect: local=fileserver remote=rasvoyage, name type = 0 lp_servicenumber: couldn't find printers [2005/06/16 17:40:05, 7] param/loadparm.c:lp_servicenumber(4056) lp_servicenumber: couldn't find printers [2005/06/16 17:40:05, 2] lib/interface.c:add_interface(81) added interface ip=192.168.15.26 bcast=192.168.15.255 nmask=255.255.255.0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_KEEPALIVE = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_REUSEADDR = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_BROADCAST = 0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option TCP_NODELAY = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_LOWDELAY = 0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_THROUGHPUT = 0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDBUF = 16384 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVBUF = 87380 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDLOWAT = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVLOWAT = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDTIMEO = 0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVTIMEO = 0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_KEEPALIVE = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_REUSEADDR = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_BROADCAST = 0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option TCP_NODELAY = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_LOWDELAY = 0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option IPTOS_THROUGHPUT = 0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDBUF = 16384 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVBUF = 87380 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDLOWAT = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVLOWAT = 1 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_SNDTIMEO = 0 [2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147) socket option SO_RCVTIMEO = 0 [2005/06/16 17:40:05, 3] smbd/oplock.c:init_oplocks(1351) open_oplock_ipc: opening loopback UDP socket. [2005/06/16 17:40:05, 10] lib/util_sock.c:open_socket_in(717) bind succeeded on port 0 [2005/06/16 17:40:05, 3] smbd/oplock.c:init_oplocks(1382) open_oplock ipc: pid = 8891, global_oplock_port = 33027 [2005/06/16 17:40:05, 4] lib/time.c:get_serverzone(125) Serverzone is -7200 [2005/06/16 17:40:05, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 133 [2005/06/16 17:40:05, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x85 [2005/06/16 17:40:05, 3] smbd/process.c:process_smb(1091) Transaction 0 of length 137 [2005/06/16 17:40:05, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:05, 5] lib/util.c:show_msg(474) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2005/06/16 17:40:05, 10] lib/util.c:dump_data(1995) [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [060] 32 00 2. [2005/06/16 17:40:05, 3] smbd/process.c:switch_message(886) switch message SMBnegprot (pid 8891) conn 0x0 [2005/06/16 17:40:05, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:05, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:05, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:05, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [PC NETWORK PROGRAM 1.0] [2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LANMAN1.0] [2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [Windows for Workgroups 3.1a] [2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LM1.2X002] [2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LANMAN2.1] [2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [NT LM 0.12] [2005/06/16 17:40:05, 10] lib/util.c:set_remote_arch(1970) set_remote_arch: Client arch is 'Win2K' [2005/06/16 17:40:05, 6] param/loadparm.c:lp_file_list_changed(2715) lp_file_list_changed() file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf last mod_time: Thu Jun 16 16:37:42 2005 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Jun 16 17:39:45 2005 [2005/06/16 17:40:05, 5] smbd/connection.c:claim_connection(170) claiming 0 [2005/06/16 17:40:05, 6] param/loadparm.c:lp_file_list_changed(2715) lp_file_list_changed() file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf last mod_time: Thu Jun 16 16:37:42 2005 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Jun 16 17:39:45 2005 [2005/06/16 17:40:05, 3] smbd/negprot.c:reply_nt1(333) using SPNEGO [2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(555) Selected protocol NT LM 0.12 [2005/06/16 17:40:05, 5] smbd/negprot.c:reply_negprot(561) negprot index=5 [2005/06/16 17:40:05, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:05, 5] lib/util.c:show_msg(474) size=178 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=47872 (0xBB00) smb_vwv[ 8]= 34 (0x22) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=32995 (0x80E3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=46328 (0xB4F8) smb_vwv[13]=35242 (0x89AA) smb_vwv[14]=50546 (0xC572) smb_vwv[15]=34817 (0x8801) smb_vwv[16]=28159 (0x6DFF) smb_bcc=109 [2005/06/16 17:40:05, 10] lib/util.c:dump_data(1995) [000] 66 69 6C 65 73 65 72 76 65 72 00 00 00 00 00 00 fileserv er...... [010] 60 5B 06 06 2B 06 01 05 05 02 A0 51 30 4F A0 24 `[..+... ...Q0O.$ [020] 30 22 06 09 2A 86 48 86 F7 12 01 02 02 06 09 2A 0"..*.H. .......* [030] 86 48 82 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H...... ..+..... [040] 37 02 02 0A A3 27 30 25 A0 23 1B 21 66 69 6C 65 7....'0% .#.!file [050] 73 65 72 76 65 72 24 40 53 45 52 56 45 55 52 2E server$@ SERVEUR. [060] 43 41 56 45 53 4F 52 53 41 54 2E 43 48 CAVESORS AT.CH [2005/06/16 17:40:05, 6] lib/util_sock.c:write_socket(449) write_socket(5,182) [2005/06/16 17:40:05, 6] lib/util_sock.c:write_socket(452) write_socket(5,182) wrote 182 [2005/06/16 17:40:05, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 1380 [2005/06/16 17:40:05, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x564 [2005/06/16 17:40:05, 3] smbd/process.c:process_smb(1091) Transaction 1 of length 1384 [2005/06/16 17:40:05, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:05, 5] lib/util.c:show_msg(474) size=1380 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=5056 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1380 (0x564) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1249 (0x4E1) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=32768 (0x8000) smb_bcc=1321 [2005/06/16 17:40:05, 10] lib/util.c:dump_data(1995) [000] 60 82 04 DD 06 06 2B 06 01 05 05 02 A0 82 04 D1 `.....+. ........ [010] 30 82 04 CD A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 A3 04 82 +.....7. ........ [040] 04 9F 60 82 04 9B 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... [050] 02 01 00 6E 82 04 8A 30 82 04 86 A0 03 02 01 05 ...n...0 ........ [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 03 A5 61 82 03 A1 30 82 03 9D A0 03 02 01 05 A1 ..a...0. ........ [080] 17 1B 15 53 45 52 56 45 55 52 2E 43 41 56 45 53 ...SERVE UR.CAVES [090] 4F 52 53 41 54 2E 43 48 A2 18 30 16 A0 03 02 01 ORSAT.CH ..0..... [0A0] 01 A1 0F 30 0D 1B 0B 66 69 6C 65 73 65 72 76 65 ...0...f ileserve [0B0] 72 24 A3 82 03 61 30 82 03 5D A0 03 02 01 17 A2 r$...a0. .]...... [0C0] 82 03 54 04 82 03 50 39 46 DD 4C F1 5F 41 E0 BF ..T...P9 F.L._A.. [0D0] BB C1 A4 42 4D 4D BA 33 AC EB 37 3F A7 8F 9D DE ...BMM.3 ..7?.... [0E0] BF 8C E9 0A 92 F9 C7 44 14 30 FB 0C 63 34 CE BE .......D .0..c4.. [0F0] 54 01 B7 20 D6 D7 EE 61 51 A3 FB E7 10 BC 8C 28 T.. ...a Q......( [100] 4D E6 31 50 64 3F 1E E8 D5 60 53 F4 4E D9 31 15 M.1Pd?.. .`S.N.1. [110] 5C BE 0D 33 9A 6E 52 CC 12 99 1B 07 3C 82 43 C8 \..3.nR. ....<.C. [120] B3 7D DA 91 FB 30 9A 31 6E 2B AD 6E 77 94 81 95 .}...0.1 n+.nw... [130] 90 7F 13 C4 93 9E 01 FE C2 6D 9B DB D3 D0 64 57 ........ .m....dW [140] 8E 68 9A 58 F7 A8 7F 4E B5 05 EC C0 55 2A 04 61 .h.X...N ....U*.a [150] 34 E5 13 59 61 14 96 32 8D 15 01 08 DC C0 CA 43 4..Ya..2 .......C [160] 1E CE E5 3E EF AB 13 B7 67 A2 B2 30 1D 6A E8 94 ...>.... g..0.j.. [170] 14 E1 3E 9A C8 98 2C 82 F5 E5 90 8E EE 30 98 50 ..>...,. .....0.P [180] 6E 9A 3E 56 CA 2E AC 12 4A 51 C8 87 C1 5B 79 1D n.>V.... JQ...[y. [190] 77 52 3D 79 8F 1F CB 48 88 BC DD 18 8D 3E 48 E2 wR=y...H .....>H. [1A0] F1 8E 37 0D 3F 7C 62 7A 09 69 94 F0 7F 14 87 FE ..7.?|bz .i...... [1B0] F9 ED 04 E0 03 80 05 5F 24 46 0A E0 AE 8B C3 50 ......._ $F.....P [1C0] 9B 69 98 03 1F D8 5F 65 0C AF 81 6B F2 D0 97 E4 .i...._e ...k.... [1D0] 0F 2F 5F 3F A5 8D B5 EB 1E 6C 10 CB C6 0A EF 51 ./_?.... .l.....Q [1E0] FF D1 FB B5 CF EB E4 D1 1D D0 87 DE 61 25 EC 92 ........ ....a%.. [1F0] B2 A3 46 C0 46 69 02 9B 51 05 CF 19 3E FE 1F 14 ..F.Fi.. Q...>... [2005/06/16 17:40:05, 3] smbd/process.c:switch_message(886) switch message SMBsesssetupX (pid 8891) conn 0x0 [2005/06/16 17:40:05, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:05, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:05, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:05, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655) wct=12 flg2=0xc807 [2005/06/16 17:40:05, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535) Doing spnego session setup [2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566) NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[] [2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_spnego_negotiate(444) Got OID 1 2 840 48018 1 2 2 [2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_spnego_negotiate(444) Got OID 1 2 840 113554 1 2 2 [2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_spnego_negotiate(444) Got OID 1 3 6 1 4 1 311 2 2 10 [2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_spnego_negotiate(447) Got secblob of size 1183 [2005/06/16 17:40:05, 10] passdb/secrets.c:secrets_named_mutex(701) secrets_named_mutex: got mutex for replay cache mutex [2005/06/16 17:40:05, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(235) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2005/06/16 17:40:05, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(235) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2005/06/16 17:40:05, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(235) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2005/06/16 17:40:06, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(228) ads_secrets_verify_ticket: enc type [23] decrypted message ! [2005/06/16 17:40:06, 10] passdb/secrets.c:secrets_named_mutex_release(713) secrets_named_mutex: released mutex for replay cache mutex [2005/06/16 17:40:06, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(509) Got KRB5 session key of length 16 [2005/06/16 17:40:06, 5] libads/authdata.c:decode_pac_data(592) dump_pac_data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 pac_io_pac_data pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 num_buffers: 00000004 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 version: 00000000 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 pac_io_pac_info_hdr pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 type: 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c size: 000001b8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 offset: 00000048 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0014 offsethi: 00000000 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000018 pac_io_pac_info_hdr pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 type: 0000000a [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 001c size: 0000001e [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 offset: 00000200 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0024 offsethi: 00000000 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000028 pac_io_pac_info_hdr pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0028 type: 00000006 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 002c size: 00000014 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 offset: 00000220 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0034 offsethi: 00000000 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000038 pac_io_pac_info_hdr pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0038 type: 00000007 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 003c size: 00000014 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0040 offset: 00000238 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0044 offsethi: 00000000 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000048 pac_io_pac_info_hdr_ctr pac data [2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(463) PAC_TYPE_LOGON_INFO [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000048 pac_io_pac_logon_info pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0048 unknown: 00081001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 004c unknown: cccccccc [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0050 bufferlen: 000001a8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0054 bufferlenhi: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0058 pointer: 0c3ff710 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00005c smb_io_time logon_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 005c low : 9e78a9b0 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0060 high: 01c57270 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000064 smb_io_time logoff_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0064 low : ffffffff [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0068 high: 7fffffff [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_time kickoff_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 006c low : ffffffff [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0070 high: 7fffffff [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000074 smb_io_time pass_last_set_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0074 low : 4290b71c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0078 high: 01c56c30 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00007c smb_io_time pass_can_change_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 007c low : 4290b71c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0080 high: 01c56c30 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000084 smb_io_time pass_must_change_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0084 low : ffffffff [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0088 high: 7fffffff [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00008c smb_io_unihdr hdr_user_name [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 008c uni_str_len: 0014 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 008e uni_max_len: 0014 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0090 buffer : 000fd0b8 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000094 smb_io_unihdr hdr_full_name [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0094 uni_str_len: 0014 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0096 uni_max_len: 0014 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0098 buffer : 000fd0cc [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00009c smb_io_unihdr hdr_logon_script [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 009c uni_str_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 009e uni_max_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00a0 buffer : 000fd0e0 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000a4 smb_io_unihdr hdr_profile_path [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00a4 uni_str_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00a6 uni_max_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00a8 buffer : 000fd0e0 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000ac smb_io_unihdr hdr_home_dir [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00ac uni_str_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00ae uni_max_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00b0 buffer : 000fd0e0 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000b4 smb_io_unihdr hdr_dir_drive [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00b4 uni_str_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00b6 uni_max_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00b8 buffer : 000fd0e0 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00bc logon_count: 0074 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00be reserved12: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00c0 user_rid: 000004a6 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00c4 group_rid: 00000203 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00c8 group_count: 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00cc group_mem_ptr: 000fd0e0 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00d0 user_flags: 00000020 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00d4 reserved13.0: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00d8 reserved13.1: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00dc reserved13.2: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00e0 reserved13.3: 00000000 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000e4 smb_io_unihdr hdr_dom_controller [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00e4 uni_str_len: 000e [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00e6 uni_max_len: 0010 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00e8 buffer : 000fd0e8 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000ec smb_io_unihdr hdr_dom_name [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00ec uni_str_len: 000a [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00ee uni_max_len: 000c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00f0 buffer : 000fd0f8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00f4 ptr_dom_sid: 000fd104 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00f8 reserved16.0: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00fc reserved16.1: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0100 reserved17: 00000080 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0104 reserved18.0: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0108 reserved18.1: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 010c reserved18.2: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0110 reserved18.3: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0114 reserved18.4: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0118 reserved18.5: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 011c reserved18.6: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0120 sid_count: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0124 ptr_extra_sids: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0128 ptr_res_group_dom_sid: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 012c res_group_count: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0130 ptr_res_groups: 00000000 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000134 smb_io_unistr2 uni_user_name [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0134 uni_max_len: 0000000a [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0138 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 013c uni_str_len: 0000000a [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0140 buffer : R.A.S.V.O.Y.A.G.E.$. [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000154 smb_io_unistr2 uni_full_name [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0154 uni_max_len: 0000000a [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0158 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 015c uni_str_len: 0000000a [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0160 buffer : R.A.S.V.O.Y.A.G.E.$. [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000174 smb_io_unistr2 uni_logon_script [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0174 uni_max_len: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0178 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 017c uni_str_len: 00000000 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000180 smb_io_unistr2 uni_profile_path [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0180 uni_max_len: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0184 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0188 uni_str_len: 00000000 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00018c smb_io_unistr2 uni_home_dir [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 018c uni_max_len: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0190 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0194 uni_str_len: 00000000 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000198 smb_io_unistr2 uni_dir_drive [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0198 uni_max_len: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 019c offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01a0 uni_str_len: 00000000 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0001a4 pac_io_group_membership_array group membership [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01a4 count: 00000001 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 0001a8 pac_io_group_membership group membership [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01a8 rid: 00000203 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01ac attrs: 00000007 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0001b0 smb_io_unistr2 uni_dom_controller [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01b0 uni_max_len: 00000008 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01b4 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01b8 uni_str_len: 00000007 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 01bc buffer : R.O.M.U.L.U.S. [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0001ca smb_io_unistr2 uni_dom_name [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01cc uni_max_len: 00000006 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01d0 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01d4 uni_str_len: 00000005 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 01d8 buffer : O.R.S.A.T. [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0001e2 smb_io_dom_sid2 dom_sid [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01e4 num_auths: 00000004 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 0001e8 smb_io_dom_sid sid [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01e8 sid_rev_num: 01 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01e9 num_auths : 04 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01ea id_auth[0] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01eb id_auth[1] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01ec id_auth[2] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01ed id_auth[3] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01ee id_auth[4] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01ef id_auth[5] : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869) 01f0 sub_auths : 00000015 28430925 441d1448 1afd2648 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000200 pac_io_pac_info_hdr_ctr pac data [2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(503) PAC_TYPE_UNKNOWN_10 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000200 pac_io_unknown_type_10 pac data [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000200 smb_io_time unknown_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0200 low : dd55f580 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0204 high: 01c57277 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0208 len: 0014 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16s(772) 020a name: R.A.S.V.O.Y.A.G.E.$. [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 00021e pac_io_pac_info_hdr_ctr pac data [2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(476) PAC_TYPE_SERVER_CHECKSUM [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000220 pac_io_pac_signature_data pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0220 type: ffffff76 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0224 signature: 83 b8 00 a9 68 ca b0 21 7f 34 e6 5e c4 6d 6b ea [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000234 pac_io_pac_info_hdr_ctr pac data [2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(449) offset in header(x238) and data(x234) do not match [2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(489) PAC_TYPE_PRIVSVR_CHECKSUM [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000238 pac_io_pac_signature_data pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0238 type: ffffff76 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 023c signature: 5f 3f 86 14 1e 2a 19 cd 12 7a 04 d7 5a e3 49 09 [2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_spnego_kerberos(179) Ticket name is [RASVOYAGE$@SERVEUR.CAVESORSAT.CH] [2005/06/16 17:40:06, 10] smbd/sesssetup.c:reply_spnego_kerberos(221) Mapping [SERVEUR.CAVESORSAT.CH] to short name [2005/06/16 17:40:06, 10] smbd/sesssetup.c:reply_spnego_kerberos(234) Mapped to [ORSAT] [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293) Finding user ORSAT/RASVOYAGE$ [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is orsat/rasvoyage$ [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [ORSAT/RASVOYAGE$]! [2005/06/16 17:40:06, 6] param/loadparm.c:lp_file_list_changed(2715) lp_file_list_changed() file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf last mod_time: Thu Jun 16 16:37:42 2005 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Jun 16 17:39:45 2005 [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_username(617) pdb_set_username: setting username rasvoyage$, was [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) pdb_set_full_name: setting full name RASVOYAGE, was [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_unix_homedir(833) pdb_set_unix_homedir: setting home dir /home/rasvoyage_, was NULL [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain FILESERVER, was [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) pdb_set_user_sid: setting user sid S-1-5-21-344095755-2918523801-3831656741-21238 [2005/06/16 17:40:06, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-344095755-2918523801-3831656741-21238 from rid 21238 [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2005/06/16 17:40:06, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) pdb_set_group_sid: setting group sid S-1-5-21-344095755-2918523801-3831656741-21007 [2005/06/16 17:40:06, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-344095755-2918523801-3831656741-21007 from rid 21007 [2005/06/16 17:40:06, 10] auth/auth_util.c:get_user_groups(714) get_user_groups: winbind_getgroups(ORSAT/rasvoyage$): result = SUCCESS [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 10119 Primary group is 10003 and contains 1 supplementary groups Group[ 0]: 10003 [2005/06/16 17:40:06, 10] passdb/lookup_sid.c:gid_to_sid(359) gid_to_sid: winbindd 10003 -> S-1-5-21-675481893-1142756424-452798024-515 [2005/06/16 17:40:06, 10] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-344095755-2918523801-3831656741-21238 contains 6 SIDs SID[ 0]: S-1-5-21-344095755-2918523801-3831656741-21238 SID[ 1]: S-1-5-21-344095755-2918523801-3831656741-21007 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-675481893-1142756424-452798024-515 SE_PRIV 0x0 0x0 0x0 0x0 [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain ORSAT, was FILESERVER [2005/06/16 17:40:06, 10] smbd/password.c:register_vuid(158) register_vuid: allocated vuid = 100 [2005/06/16 17:40:06, 10] smbd/password.c:register_vuid(220) register_vuid: (10119,10003) ORSAT/rasvoyage$ RASVOYAGE$ ORSAT guest=0 [2005/06/16 17:40:06, 3] smbd/password.c:register_vuid(222) User name: ORSAT/rasvoyage$ Real name: RASVOYAGE [2005/06/16 17:40:06, 3] smbd/password.c:register_vuid(241) UNIX uid 10119 is UNIX user ORSAT/rasvoyage$, and will be vuid 100 [2005/06/16 17:40:06, 7] param/loadparm.c:lp_servicenumber(4056) lp_servicenumber: couldn't find ORSAT/rasvoyage$ [2005/06/16 17:40:06, 3] smbd/password.c:register_vuid(270) Adding homes service for user 'ORSAT/rasvoyage$' using home directory: '/home/rasvoyage_' [2005/06/16 17:40:06, 8] param/loadparm.c:add_a_service(2327) add_a_service: Creating snum = 4 for rasvoyage$ [2005/06/16 17:40:06, 3] param/loadparm.c:lp_add_home(2368) adding home's share [rasvoyage$] for user 'ORSAT/rasvoyage$' at '/home/rasvoyage_' [2005/06/16 17:40:06, 6] param/loadparm.c:lp_file_list_changed(2715) lp_file_list_changed() file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf last mod_time: Thu Jun 16 16:37:42 2005 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Jun 16 17:39:45 2005 [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,262) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,262) wrote 262 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 86 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x56 [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 2 of length 90 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=86 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=5120 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 86 (0x56) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=43 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 5C 00 46 00 49 00 4C 00 45 00 53 00 45 .\.\.F.I .L.E.S.E [010] 00 52 00 56 00 45 00 52 00 5C 00 49 00 50 00 43 .R.V.E.R .\.I.P.C [020] 00 24 00 00 00 3F 3F 3F 3F 3F 00 .$...??? ??. [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBtconX (pid 8891) conn 0x0 [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:06, 4] smbd/reply.c:reply_tcon_and_X(407) Client requested device type [?????] for share [IPC$] [2005/06/16 17:40:06, 5] smbd/service.c:make_connection(807) making a connection to 'normal' service ipc$ [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293) Finding user ORSAT/rasvoyage$ [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is orsat/rasvoyage$ [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [ORSAT/rasvoyage$]! [2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(479) Connect path is '/tmp' for service [IPC$] [2005/06/16 17:40:06, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 6 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21238. [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21238 se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21007 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-675481893-1142756424-452798024-515 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (2) granted. [2005/06/16 17:40:06, 3] smbd/vfs.c:vfs_init_default(206) Initialising default vfs hooks [2005/06/16 17:40:06, 5] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2005/06/16 17:40:06, 10] smbd/uid.c:is_share_read_only_for_user(99) is_share_read_only_for_user: share IPC$ is read-only for unix user ORSAT/rasvoyage$ [2005/06/16 17:40:06, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 6 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21238. [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21238 se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21007 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-675481893-1142756424-452798024-515 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (1) granted. [2005/06/16 17:40:06, 10] lib/username.c:user_in_list(529) user_in_list: checking user ORSAT/rasvoyage$ in list [2005/06/16 17:40:06, 10] lib/username.c:user_in_list(533) user_in_list: checking user |ORSAT/rasvoyage$| against |ORSAT/Administrateur| [2005/06/16 17:40:06, 10] lib/username.c:user_in_list(610) user_in_list: checking if user |ORSAT/rasvoyage$| is in winbind group |ORSAT/Administrateur| [2005/06/16 17:40:06, 10] lib/username.c:user_in_list(533) user_in_list: checking user |ORSAT/rasvoyage$| against |@ORSAT/admins du domaine| [2005/06/16 17:40:06, 5] lib/username.c:user_in_netgroup_list(315) Unable to get default yp domain [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10119, 10003) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-344095755-2918523801-3831656741-21238 contains 6 SIDs SID[ 0]: S-1-5-21-344095755-2918523801-3831656741-21238 SID[ 1]: S-1-5-21-344095755-2918523801-3831656741-21007 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-675481893-1142756424-452798024-515 SE_PRIV 0x0 0x0 0x0 0x0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 10119 Primary group is 10003 and contains 1 supplementary groups Group[ 0]: 10003 [2005/06/16 17:40:06, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(10119,10119) gid=(0,10003) [2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(642) 192.168.15.204 (192.168.15.204) connect to service IPC$ initially as user ORSAT/rasvoyage$ (uid=10119, gid=10003) (pid 8891) [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:06, 3] smbd/reply.c:reply_tcon_and_X(455) tconX service=IPC$ [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=5120 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 49 50 43 00 00 00 00 IPC.... [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,52) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,52) wrote 52 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 1408 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x580 [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 3 of length 1412 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=1408 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=5184 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1408 (0x580) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1277 (0x4FD) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=32768 (0x8000) smb_bcc=1349 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 60 82 04 F9 06 06 2B 06 01 05 05 02 A0 82 04 ED `.....+. ........ [010] 30 82 04 E9 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BF 04 82 +.....7. ........ [040] 04 BB 60 82 04 B7 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... [050] 02 01 00 6E 82 04 A6 30 82 04 A2 A0 03 02 01 05 ...n...0 ........ [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [070] 03 C7 61 82 03 C3 30 82 03 BF A0 03 02 01 05 A1 ..a...0. ........ [080] 17 1B 15 53 45 52 56 45 55 52 2E 43 41 56 45 53 ...SERVE UR.CAVES [090] 4F 52 53 41 54 2E 43 48 A2 18 30 16 A0 03 02 01 ORSAT.CH ..0..... [0A0] 01 A1 0F 30 0D 1B 0B 66 69 6C 65 73 65 72 76 65 ...0...f ileserve [0B0] 72 24 A3 82 03 83 30 82 03 7F A0 03 02 01 17 A2 r$....0. ........ [0C0] 82 03 76 04 82 03 72 6F C2 72 79 E4 F5 BE D0 FA ..v...ro .ry..... [0D0] E7 66 27 CE 30 50 EF 31 E0 5D 30 9A 8E 35 5E 0B .f'.0P.1 .]0..5^. [0E0] DB 99 9C E9 D7 16 D6 AE 06 12 DD A4 BB 10 9C 3D ........ .......= [0F0] 13 F7 71 7A 39 E9 19 A6 98 04 4B 79 32 23 71 EB ..qz9... ..Ky2#q. [100] 33 E6 2D 7A F7 4F B6 DD 1A 3A 13 BB 82 2F 5F CD 3.-z.O.. .:.../_. [110] 17 DE 33 E8 5A F3 C3 CF E6 FE 5F BF 43 17 17 A8 ..3.Z... .._.C... [120] E5 79 73 11 9C A3 6D B9 19 EB 85 C9 33 1F 12 BF .ys...m. ....3... [130] 4C 36 DB 00 B1 95 17 7D 0E 95 B0 66 9A C5 74 93 L6.....} ...f..t. [140] D1 BB 05 47 33 8C F2 22 5E E9 8E 92 D7 36 2D BD ...G3.." ^....6-. [150] B4 BC 1D 71 D8 D3 F7 D1 16 47 AB C9 F4 53 F6 C5 ...q.... .G...S.. [160] 60 2C 4D 34 F9 66 39 7A 58 AE 19 E3 24 18 04 16 `,M4.f9z X...$... [170] 0A 92 7A 1B 50 F8 12 B2 B1 EC 04 AB 5D AB B6 47 ..z.P... ....]..G [180] AB 4B F3 79 44 83 26 5D 04 A3 73 B2 74 50 2E 50 .K.yD.&] ..s.tP.P [190] 23 38 00 E0 82 AE D2 BA 53 DD 10 77 C7 FC D1 46 #8...... S..w...F [1A0] 07 B2 5A 10 8F BB 72 3D 0E F0 2B DC 05 0C 05 B7 ..Z...r= ..+..... [1B0] C0 82 2B BE E4 2A 1F 8D AE 11 F1 D7 1E 09 F7 0B ..+..*.. ........ [1C0] 15 8D 14 D2 5B 62 51 E6 C2 84 61 FF B0 C4 9A BE ....[bQ. ..a..... [1D0] 1B 90 38 97 9B 30 E7 B3 56 15 FB 54 58 8B E3 BA ..8..0.. V..TX... [1E0] 5D 28 01 4A 78 1D E5 2C 0D 39 9B 73 E8 AF 4C E7 ](.Jx.., .9.s..L. [1F0] F5 97 C0 B6 A3 CF 53 30 49 4C 74 C2 39 79 D7 09 ......S0 ILt.9y.. [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBsesssetupX (pid 8891) conn 0x0 [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655) wct=12 flg2=0xc807 [2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535) Doing spnego session setup [2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566) NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[] [2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_spnego_negotiate(444) Got OID 1 2 840 48018 1 2 2 [2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_spnego_negotiate(444) Got OID 1 2 840 113554 1 2 2 [2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_spnego_negotiate(444) Got OID 1 3 6 1 4 1 311 2 2 10 [2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_spnego_negotiate(447) Got secblob of size 1211 [2005/06/16 17:40:06, 10] passdb/secrets.c:secrets_named_mutex(701) secrets_named_mutex: got mutex for replay cache mutex [2005/06/16 17:40:06, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(235) ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type [2005/06/16 17:40:06, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(235) ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type [2005/06/16 17:40:06, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(235) ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2005/06/16 17:40:06, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(228) ads_secrets_verify_ticket: enc type [23] decrypted message ! [2005/06/16 17:40:06, 10] passdb/secrets.c:secrets_named_mutex_release(713) secrets_named_mutex: released mutex for replay cache mutex [2005/06/16 17:40:06, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(509) Got KRB5 session key of length 16 [2005/06/16 17:40:06, 5] libads/authdata.c:decode_pac_data(592) dump_pac_data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 pac_io_pac_data pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 num_buffers: 00000004 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 version: 00000000 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 pac_io_pac_info_hdr pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 type: 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c size: 000001e8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 offset: 00000048 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0014 offsethi: 00000000 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000018 pac_io_pac_info_hdr pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 type: 0000000a [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 001c size: 00000012 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 offset: 00000230 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0024 offsethi: 00000000 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000028 pac_io_pac_info_hdr pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0028 type: 00000006 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 002c size: 00000014 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 offset: 00000248 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0034 offsethi: 00000000 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000038 pac_io_pac_info_hdr pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0038 type: 00000007 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 003c size: 00000014 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0040 offset: 00000260 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0044 offsethi: 00000000 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000048 pac_io_pac_info_hdr_ctr pac data [2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(463) PAC_TYPE_LOGON_INFO [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000048 pac_io_pac_logon_info pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0048 unknown: 00081001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 004c unknown: cccccccc [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0050 bufferlen: 000001d8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0054 bufferlenhi: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0058 pointer: 0c3ff710 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00005c smb_io_time logon_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 005c low : f580f060 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0060 high: 01c57276 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000064 smb_io_time logoff_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0064 low : ffffffff [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0068 high: 7fffffff [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_time kickoff_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 006c low : ffffffff [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0070 high: 7fffffff [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000074 smb_io_time pass_last_set_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0074 low : 6de497b6 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0078 high: 01c5726c [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00007c smb_io_time pass_can_change_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 007c low : 6de497b6 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0080 high: 01c5726c [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000084 smb_io_time pass_must_change_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0084 low : 571217b6 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0088 high: 01c5b925 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00008c smb_io_unihdr hdr_user_name [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 008c uni_str_len: 0008 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 008e uni_max_len: 0008 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0090 buffer : 000fd0b8 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000094 smb_io_unihdr hdr_full_name [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0094 uni_str_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0096 uni_max_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0098 buffer : 000fd0c0 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00009c smb_io_unihdr hdr_logon_script [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 009c uni_str_len: 0016 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 009e uni_max_len: 0016 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00a0 buffer : 000fd0c0 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000a4 smb_io_unihdr hdr_profile_path [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00a4 uni_str_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00a6 uni_max_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00a8 buffer : 000fd0d8 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000ac smb_io_unihdr hdr_home_dir [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00ac uni_str_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00ae uni_max_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00b0 buffer : 000fd0d8 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000b4 smb_io_unihdr hdr_dir_drive [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00b4 uni_str_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00b6 uni_max_len: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00b8 buffer : 000fd0d8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00bc logon_count: 0005 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00be reserved12: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00c0 user_rid: 000004a1 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00c4 group_rid: 00000201 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00c8 group_count: 00000002 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00cc group_mem_ptr: 000fd0d8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00d0 user_flags: 00000020 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00d4 reserved13.0: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00d8 reserved13.1: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00dc reserved13.2: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00e0 reserved13.3: 00000000 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000e4 smb_io_unihdr hdr_dom_controller [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00e4 uni_str_len: 000e [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00e6 uni_max_len: 0010 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00e8 buffer : 000fd0e8 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000ec smb_io_unihdr hdr_dom_name [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00ec uni_str_len: 000a [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 00ee uni_max_len: 000c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00f0 buffer : 000fd0f8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00f4 ptr_dom_sid: 000fd104 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00f8 reserved16.0: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 00fc reserved16.1: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0100 reserved17: 00000010 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0104 reserved18.0: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0108 reserved18.1: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 010c reserved18.2: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0110 reserved18.3: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0114 reserved18.4: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0118 reserved18.5: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 011c reserved18.6: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0120 sid_count: 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0124 ptr_extra_sids: 000bed90 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0128 ptr_res_group_dom_sid: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 012c res_group_count: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0130 ptr_res_groups: 00000000 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000134 smb_io_unistr2 uni_user_name [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0134 uni_max_len: 00000004 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0138 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 013c uni_str_len: 00000004 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0140 buffer : d.e.m.o. [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000148 smb_io_unistr2 uni_full_name [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0148 uni_max_len: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 014c offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0150 uni_str_len: 00000000 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000154 smb_io_unistr2 uni_logon_script [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0154 uni_max_len: 0000000b [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0158 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 015c uni_str_len: 0000000b [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0160 buffer : l.o.g.d.e.m.o...b.a.t. [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000176 smb_io_unistr2 uni_profile_path [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0178 uni_max_len: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 017c offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0180 uni_str_len: 00000000 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000184 smb_io_unistr2 uni_home_dir [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0184 uni_max_len: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0188 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 018c uni_str_len: 00000000 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000190 smb_io_unistr2 uni_dir_drive [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0190 uni_max_len: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0194 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0198 uni_str_len: 00000000 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00019c pac_io_group_membership_array group membership [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 019c count: 00000002 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 0001a0 pac_io_group_membership group membership [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01a0 rid: 00000201 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01a4 attrs: 00000007 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 0001a8 pac_io_group_membership group membership [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01a8 rid: 00000409 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01ac attrs: 00000007 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0001b0 smb_io_unistr2 uni_dom_controller [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01b0 uni_max_len: 00000008 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01b4 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01b8 uni_str_len: 00000007 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 01bc buffer : R.O.M.U.L.U.S. [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0001ca smb_io_unistr2 uni_dom_name [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01cc uni_max_len: 00000006 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01d0 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01d4 uni_str_len: 00000005 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 01d8 buffer : O.R.S.A.T. [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 0001e2 smb_io_dom_sid2 dom_sid [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 01e4 num_auths: 00000004 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 0001e8 smb_io_dom_sid sid [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01e8 sid_rev_num: 01 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01e9 num_auths : 04 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01ea id_auth[0] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01eb id_auth[1] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01ec id_auth[2] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01ed id_auth[3] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01ee id_auth[4] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 01ef id_auth[5] : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869) 01f0 sub_auths : 00000015 28430925 441d1448 1afd2648 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000200 pac_io_krb_sid_and_attr_array extra_sids [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0200 count: 00000001 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000204 pac_io_krb_attrs extra_sids [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0204 sid_ptr: 0d836698 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0208 attrs: 20000007 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 00020c pac_io_krb_sids extra_sids [2005/06/16 17:40:06, 10] rpc_parse/parse_prs.c:prs_debug(82) 00020c smb_io_dom_sid2 sid [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 020c num_auths: 00000005 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0210 sid_rev_num: 01 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0211 num_auths : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0212 id_auth[0] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0213 id_auth[1] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0214 id_auth[2] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0215 id_auth[3] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0216 id_auth[4] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0217 id_auth[5] : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869) 0218 sub_auths : 00000015 28430925 441d1448 1afd2648 000003fc [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 00022c pac_io_pac_info_hdr_ctr pac data [2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(449) offset in header(x230) and data(x22c) do not match [2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(503) PAC_TYPE_UNKNOWN_10 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000230 pac_io_unknown_type_10 pac data [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000230 smb_io_time unknown_time [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0230 low : e3e46d00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0234 high: 01c57277 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0238 len: 0008 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16s(772) 023a name: d.e.m.o. [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000242 pac_io_pac_info_hdr_ctr pac data [2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(449) offset in header(x248) and data(x244) do not match [2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(476) PAC_TYPE_SERVER_CHECKSUM [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000248 pac_io_pac_signature_data pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0248 type: ffffff76 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 024c signature: 04 e1 f2 d5 6c 85 7a 84 77 73 80 af 2c 92 0c be [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 00025c pac_io_pac_info_hdr_ctr pac data [2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(449) offset in header(x260) and data(x25c) do not match [2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(489) PAC_TYPE_PRIVSVR_CHECKSUM [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000260 pac_io_pac_signature_data pac data [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0260 type: ffffff76 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0264 signature: d4 de b9 0f 8f b0 bc c8 eb 3b 26 6e 72 4d 94 ed [2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_spnego_kerberos(179) Ticket name is [demo@SERVEUR.CAVESORSAT.CH] [2005/06/16 17:40:06, 10] smbd/sesssetup.c:reply_spnego_kerberos(221) Mapping [SERVEUR.CAVESORSAT.CH] to short name [2005/06/16 17:40:06, 10] smbd/sesssetup.c:reply_spnego_kerberos(234) Mapped to [ORSAT] [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293) Finding user ORSAT/demo [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is orsat/demo [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [ORSAT/demo]! [2005/06/16 17:40:06, 6] param/loadparm.c:lp_file_list_changed(2715) lp_file_list_changed() file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf last mod_time: Thu Jun 16 16:37:42 2005 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Jun 16 17:39:45 2005 [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_username(617) pdb_set_username: setting username demo, was [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_fullname(698) pdb_set_full_name: setting full name demo, was [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_unix_homedir(833) pdb_set_unix_homedir: setting home dir /home/demo, was NULL [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain FILESERVER, was [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544) pdb_set_user_sid: setting user sid S-1-5-21-344095755-2918523801-3831656741-21060 [2005/06/16 17:40:06, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-344095755-2918523801-3831656741-21060 from rid 21060 [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2005/06/16 17:40:06, 3] smbd/uid.c:push_conn_ctx(365) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580) pdb_set_group_sid: setting group sid S-1-5-21-344095755-2918523801-3831656741-21001 [2005/06/16 17:40:06, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-344095755-2918523801-3831656741-21001 from rid 21001 [2005/06/16 17:40:06, 4] lib/substitute.c:automount_server(335) Home server: fileserver [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752) pdb_set_profile_path: setting profile path \\fileserver\demo\profile, was [2005/06/16 17:40:06, 4] lib/substitute.c:automount_server(335) Home server: fileserver [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_homedir(806) pdb_set_homedir: setting home dir \\fileserver\demo, was [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779) pdb_set_dir_drive: setting dir drive , was NULL [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725) pdb_set_logon_script: setting logon script , was [2005/06/16 17:40:06, 10] auth/auth_util.c:get_user_groups(714) get_user_groups: winbind_getgroups(ORSAT/demo): result = SUCCESS [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 10030 Primary group is 10000 and contains 3 supplementary groups Group[ 0]: 10000 Group[ 1]: 10030 Group[ 2]: 10032 [2005/06/16 17:40:06, 10] passdb/lookup_sid.c:gid_to_sid(359) gid_to_sid: winbindd 10000 -> S-1-5-21-675481893-1142756424-452798024-513 [2005/06/16 17:40:06, 10] passdb/lookup_sid.c:gid_to_sid(359) gid_to_sid: winbindd 10030 -> S-1-5-21-675481893-1142756424-452798024-1033 [2005/06/16 17:40:06, 10] passdb/lookup_sid.c:gid_to_sid(359) gid_to_sid: winbindd 10032 -> S-1-5-21-675481893-1142756424-452798024-1020 [2005/06/16 17:40:06, 10] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-344095755-2918523801-3831656741-21060 contains 8 SIDs SID[ 0]: S-1-5-21-344095755-2918523801-3831656741-21060 SID[ 1]: S-1-5-21-344095755-2918523801-3831656741-21001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-675481893-1142756424-452798024-513 SID[ 6]: S-1-5-21-675481893-1142756424-452798024-1033 SID[ 7]: S-1-5-21-675481893-1142756424-452798024-1020 SE_PRIV 0x0 0x0 0x0 0x0 [2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_domain(644) pdb_set_domain: setting domain ORSAT, was FILESERVER [2005/06/16 17:40:06, 10] smbd/password.c:register_vuid(158) register_vuid: allocated vuid = 101 [2005/06/16 17:40:06, 10] smbd/password.c:register_vuid(220) register_vuid: (10030,10000) ORSAT/demo demo ORSAT guest=0 [2005/06/16 17:40:06, 3] smbd/password.c:register_vuid(222) User name: ORSAT/demo Real name: demo [2005/06/16 17:40:06, 3] smbd/password.c:register_vuid(241) UNIX uid 10030 is UNIX user ORSAT/demo, and will be vuid 101 [2005/06/16 17:40:06, 7] param/loadparm.c:lp_servicenumber(4056) lp_servicenumber: couldn't find ORSAT/demo [2005/06/16 17:40:06, 3] smbd/password.c:register_vuid(270) Adding homes service for user 'ORSAT/demo' using home directory: '/home/demo' [2005/06/16 17:40:06, 8] param/loadparm.c:add_a_service(2327) add_a_service: Creating snum = 5 for demo [2005/06/16 17:40:06, 3] param/loadparm.c:lp_add_home(2368) adding home's share [demo] for user 'ORSAT/demo' at '/home/demo' [2005/06/16 17:40:06, 6] param/loadparm.c:lp_file_list_changed(2715) lp_file_list_changed() file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf last mod_time: Thu Jun 16 16:37:42 2005 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Jun 16 17:39:45 2005 [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,262) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,262) wrote 262 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 86 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x56 [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 4 of length 90 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=86 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=5248 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 86 (0x56) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=43 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 5C 00 46 00 49 00 4C 00 45 00 53 00 45 .\.\.F.I .L.E.S.E [010] 00 52 00 56 00 45 00 52 00 5C 00 49 00 50 00 43 .R.V.E.R .\.I.P.C [020] 00 24 00 00 00 3F 3F 3F 3F 3F 00 .$...??? ??. [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBtconX (pid 8891) conn 0x0 [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:06, 4] smbd/reply.c:reply_tcon_and_X(407) Client requested device type [?????] for share [IPC$] [2005/06/16 17:40:06, 5] smbd/service.c:make_connection(807) making a connection to 'normal' service ipc$ [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293) Finding user ORSAT/demo [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is orsat/demo [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [ORSAT/demo]! [2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(479) Connect path is '/tmp' for service [IPC$] [2005/06/16 17:40:06, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060. [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060 se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-675481893-1142756424-452798024-513 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (2) granted. [2005/06/16 17:40:06, 3] smbd/vfs.c:vfs_init_default(206) Initialising default vfs hooks [2005/06/16 17:40:06, 5] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2005/06/16 17:40:06, 10] smbd/uid.c:is_share_read_only_for_user(99) is_share_read_only_for_user: share IPC$ is read-only for unix user ORSAT/demo [2005/06/16 17:40:06, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060. [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060 se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-675481893-1142756424-452798024-513 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(309) se_access_check: access (1) granted. [2005/06/16 17:40:06, 10] lib/username.c:user_in_list(529) user_in_list: checking user ORSAT/demo in list [2005/06/16 17:40:06, 10] lib/username.c:user_in_list(533) user_in_list: checking user |ORSAT/demo| against |ORSAT/Administrateur| [2005/06/16 17:40:06, 10] lib/username.c:user_in_list(610) user_in_list: checking if user |ORSAT/demo| is in winbind group |ORSAT/Administrateur| [2005/06/16 17:40:06, 10] lib/username.c:user_in_list(533) user_in_list: checking user |ORSAT/demo| against |@ORSAT/admins du domaine| [2005/06/16 17:40:06, 5] lib/username.c:user_in_netgroup_list(315) Unable to get default yp domain [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10030, 10000) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-344095755-2918523801-3831656741-21060 contains 8 SIDs SID[ 0]: S-1-5-21-344095755-2918523801-3831656741-21060 SID[ 1]: S-1-5-21-344095755-2918523801-3831656741-21001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-675481893-1142756424-452798024-513 SID[ 6]: S-1-5-21-675481893-1142756424-452798024-1033 SID[ 7]: S-1-5-21-675481893-1142756424-452798024-1020 SE_PRIV 0x0 0x0 0x0 0x0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 10030 Primary group is 10000 and contains 3 supplementary groups Group[ 0]: 10000 Group[ 1]: 10030 Group[ 2]: 10032 [2005/06/16 17:40:06, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(10030,10030) gid=(0,10000) [2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(642) 192.168.15.204 (192.168.15.204) connect to service IPC$ initially as user ORSAT/demo (uid=10030, gid=10000) (pid 8891) [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:06, 3] smbd/reply.c:reply_tcon_and_X(455) tconX service=IPC$ [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=5248 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 49 50 43 00 00 00 00 IPC.... [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,52) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,52) wrote 52 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x64 [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 5 of length 104 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1160 smb_uid=101 smb_mid=5312 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]=16384 (0x4000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 8891) conn 0x838a458 [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (10030, 10000) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(490) NT user token of user S-1-5-21-344095755-2918523801-3831656741-21060 contains 8 SIDs SID[ 0]: S-1-5-21-344095755-2918523801-3831656741-21060 SID[ 1]: S-1-5-21-344095755-2918523801-3831656741-21001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-675481893-1142756424-452798024-513 SID[ 6]: S-1-5-21-675481893-1142756424-452798024-1033 SID[ 7]: S-1-5-21-675481893-1142756424-452798024-1020 SE_PRIV 0x0 0x0 0x0 0x0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 10030 Primary group is 10000 and contains 3 supplementary groups Group[ 0]: 10000 Group[ 1]: 10030 Group[ 2]: 10032 [2005/06/16 17:40:06, 5] smbd/uid.c:change_to_user(281) change_to_user uid=(10030,10030) gid=(0,10000) [2005/06/16 17:40:06, 4] smbd/vfs.c:vfs_ChDir(660) vfs_ChDir to /tmp [2005/06/16 17:40:06, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0 [2005/06/16 17:40:06, 4] smbd/nttrans.c:nt_open_pipe(497) nt_open_pipe: Opening pipe \srvsvc. [2005/06/16 17:40:06, 3] smbd/nttrans.c:nt_open_pipe(514) nt_open_pipe: Known pipe srvsvc opening. [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278) Create pipe requested srvsvc [2005/06/16 17:40:06, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2005/06/16 17:40:06, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370) Created internal pipe srvsvc (pipes_open=0) [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257) Opened pipe srvsvc with handle 77ed (pipes_open=1) [2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) open pipes: name srvsvc pnum=77ed [2005/06/16 17:40:06, 5] smbd/nttrans.c:do_ntcreate_pipe_open(562) do_ntcreate_pipe_open: open pipe = \srvsvc [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=1160 smb_uid=101 smb_mid=5312 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=60672 (0xED00) smb_vwv[ 3]= 375 (0x177) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,107) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,107) wrote 107 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 156 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x9c [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 6 of length 160 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=156 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1160 smb_uid=101 smb_mid=5376 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30701 (0x77ED) smb_bcc=89 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 1A 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 65 .\.P.I.P .E.\...e [010] 00 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... [020] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ [030] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 ..O2Kp.. ..xZG.n. [040] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ [050] 00 2B 10 48 60 02 00 00 00 .+.H`... . [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBtrans (pid 8891) conn 0x838a458 [2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2005/06/16 17:40:06, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=72 params=0 setup=2 [2005/06/16 17:40:06, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2005/06/16 17:40:06, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2005/06/16 17:40:06, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168) search for pipe pnum=77ed [2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172) pipe name srvsvc pnum=77ed (pipes_open=1) [2005/06/16 17:40:06, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "srvsvc" (pnum 77ed) [2005/06/16 17:40:06, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x8387408 max_trans_reply: 1024 [2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852) write_to_pipe: 77ed name: srvsvc open: Yes len: 72 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 72 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 16 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 56 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 0b [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0048 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000001 [2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515) unmarshall_rpc_header: type = 11, flags = 3 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 0 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 56 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 56, incoming data = 56 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720) process_complete_pdu: processing packet type 11 [2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(876) api_pipe_bind_req: decode request. 876 [2005/06/16 17:40:06, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887) api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0000 max_tsize: 10b8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0002 max_rsize: 10b8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 assoc_gid: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 num_elements: 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000c context_id : 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 000e num_syntaxes: 01 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_uuid uuid [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 data : 4b324fc8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 data : 1670 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0016 data : 01d3 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0018 data : 12 78 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 001a data : 5a 47 bf 6e e1 88 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 version: 00000003 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_uuid uuid [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0024 data : 8a885d04 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0028 data : 1ceb [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 002a data : 11c9 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 002c data : 9f e8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 002e data : 08 00 2b 10 48 60 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0034 version: 00000002 [2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1017) api_pipe_bind_req: make response. 1017 [2005/06/16 17:40:06, 3] rpc_server/srv_pipe.c:check_bind_req(762) check_bind_req for \PIPE\srvsvc [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0000 max_tsize: 10b8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0002 max_rsize: 10b8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 assoc_gid: 000053f0 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 len: 000d [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 000a str: \PIPE\ntsvcs. [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000017 smb_io_rpc_results [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0018 num_results: 01 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 001c result : 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 001e reason : 0000 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 data : 8a885d04 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0024 data : 1ceb [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0026 data : 11c9 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0028 data : 9f e8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 002a data : 08 00 2b 10 48 60 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 version: 00000002 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 0c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0044 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000001 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 56 [2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909) read_from_pipe: 77ed name: srvsvc len: 1024 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(968) read_from_pipe: srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2005/06/16 17:40:06, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..68] [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=1160 smb_uid=101 smb_mid=5376 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6E 74 73 76 63 73 00 00 01 00 00 00 00 00 00 \ntsvcs. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,128) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,128) wrote 128 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 180 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0xb4 [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 7 of length 184 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1160 smb_uid=101 smb_mid=5440 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30701 (0x77ED) smb_bcc=113 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 1A 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 65 .\.P.I.P .E.\...e [010] 00 05 00 00 03 10 00 00 00 60 00 00 00 01 00 00 ........ .`...... [020] 00 48 00 00 00 00 00 10 00 A8 DF 04 06 0D 00 00 .H...... ........ [030] 00 00 00 00 00 0D 00 00 00 5C 00 5C 00 46 00 69 ........ .\.\.F.i [040] 00 6C 00 65 00 73 00 65 00 72 00 76 00 65 00 72 .l.e.s.e .r.v.e.r [050] 00 00 00 00 00 05 00 00 00 00 00 00 00 05 00 00 ........ ........ [060] 00 74 00 6F 00 74 00 6F 00 00 00 00 00 01 00 00 .t.o.t.o ........ [070] 00 . [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBtrans (pid 8891) conn 0x838a458 [2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2005/06/16 17:40:06, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=96 params=0 setup=2 [2005/06/16 17:40:06, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2005/06/16 17:40:06, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2005/06/16 17:40:06, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168) search for pipe pnum=77ed [2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172) pipe name srvsvc pnum=77ed (pipes_open=1) [2005/06/16 17:40:06, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "srvsvc" (pnum 77ed) [2005/06/16 17:40:06, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x8387408 max_trans_reply: 1024 [2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852) write_to_pipe: 77ed name: srvsvc open: Yes len: 96 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 96 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 16 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 80 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0060 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000001 [2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515) unmarshall_rpc_header: type = 0, flags = 3 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 0 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 80 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 80, incoming data = 80 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720) process_complete_pdu: processing packet type 0 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 alloc_hint: 00000048 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0004 context_id: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0006 opnum : 0010 [2005/06/16 17:40:06, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542) free_pipe_context: destroying talloc pool of size 0 [2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_pipe_request(1497) Requested \PIPE\srvsvc [2005/06/16 17:40:06, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531) api_rpcTNP: srvsvc op 0x10 - api_rpcTNP: rpc command: SRV_NET_SHARE_GET_INFO [2005/06/16 17:40:06, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557) api_rpc_cmds[7].fn == 0x8126c80 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_q_net_share_get_info [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 ptr_srv_name: 0604dfa8 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 uni_max_len: 0000000d [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c uni_str_len: 0000000d [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0010 buffer : \.\.F.i.l.e.s.e.r.v.e.r... [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 00002a smb_io_unistr2 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 002c uni_max_len: 00000005 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0034 uni_str_len: 00000005 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0038 buffer : t.o.t.o... [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0044 info_level: 00000001 [2005/06/16 17:40:06, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1405) _srv_net_share_get_info: 1405 [2005/06/16 17:40:06, 5] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_get_info(752) init_srv_r_net_share_get_info: 752 [2005/06/16 17:40:06, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: toto 0 [2005/06/16 17:40:06, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2005/06/16 17:40:06, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1411) _srv_net_share_get_info: 1411 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_r_net_share_get_info [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_srv_share_info info [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 switch_value : 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 ptr_share_ctr: 00000001 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000008 srv_io_share_info1 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 ptr_netname: 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c type : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 ptr_remark : 00000001 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 srv_io_share_info1_str [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000014 smb_io_unistr2 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0014 uni_max_len: 00000005 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 001c uni_str_len: 00000005 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0020 buffer : t.o.t.o... [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00002c smb_io_unistr2 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 002c uni_max_len: 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0034 uni_str_len: 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0038 buffer : .. [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_werror(702) 003c status: WERR_OK [2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578) api_rpcTNP: called srvsvc successfully [2005/06/16 17:40:06, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542) free_pipe_context: destroying talloc pool of size 48 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 80 [2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909) read_from_pipe: 77ed name: srvsvc len: 1024 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982) read_from_pipe: srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 64. [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 02 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0058 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 00000040 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0016 cancel_ct : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0017 reserved : 00 [2005/06/16 17:40:06, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..88] [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=1160 smb_uid=101 smb_mid=5440 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 88 (0x58) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 88 (0x58) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=89 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 00 05 00 02 03 10 00 00 00 58 00 00 00 01 00 00 ........ .X...... [010] 00 40 00 00 00 00 00 00 00 01 00 00 00 01 00 00 .@...... ........ [020] 00 01 00 00 00 00 00 00 00 01 00 00 00 05 00 00 ........ ........ [030] 00 00 00 00 00 05 00 00 00 74 00 6F 00 74 00 6F ........ .t.o.t.o [040] 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 ........ . [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,148) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,148) wrote 148 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 8 of length 45 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=5504 smt_wct=3 smb_vwv[ 0]=30701 (0x77ED) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 8891) conn 0x838a458 [2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168) search for pipe pnum=77ed [2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172) pipe name srvsvc pnum=77ed (pipes_open=1) [2005/06/16 17:40:06, 5] smbd/pipes.c:reply_pipe_close(260) reply_pipe_close: pnum:77ed [2005/06/16 17:40:06, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081) closed pipe name srvsvc pnum=77ed (pipes_open=0) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=5504 smt_wct=0 smb_bcc=0 [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,39) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,39) wrote 39 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 100 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x64 [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 9 of length 104 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1160 smb_uid=101 smb_mid=5568 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]=16384 (0x4000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 8891) conn 0x838a458 [2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2005/06/16 17:40:06, 10] smbd/nttrans.c:reply_ntcreate_and_X(607) reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0 [2005/06/16 17:40:06, 4] smbd/nttrans.c:nt_open_pipe(497) nt_open_pipe: Opening pipe \srvsvc. [2005/06/16 17:40:06, 3] smbd/nttrans.c:nt_open_pipe(514) nt_open_pipe: Known pipe srvsvc opening. [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278) Create pipe requested srvsvc [2005/06/16 17:40:06, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2005/06/16 17:40:06, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370) Created internal pipe srvsvc (pipes_open=0) [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257) Opened pipe srvsvc with handle 77ee (pipes_open=1) [2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263) open pipes: name srvsvc pnum=77ee [2005/06/16 17:40:06, 5] smbd/nttrans.c:do_ntcreate_pipe_open(562) do_ntcreate_pipe_open: open pipe = \srvsvc [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=1160 smb_uid=101 smb_mid=5568 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=60928 (0xEE00) smb_vwv[ 3]= 375 (0x177) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,107) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,107) wrote 107 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 156 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x9c [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 10 of length 160 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=156 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1160 smb_uid=101 smb_mid=5632 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30702 (0x77EE) smb_bcc=89 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 1A 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 65 .\.P.I.P .E.\...e [010] 00 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 ........ .H...... [020] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 ........ ........ [030] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 ..O2Kp.. ..xZG.n. [040] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ [050] 00 2B 10 48 60 02 00 00 00 .+.H`... . [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBtrans (pid 8891) conn 0x838a458 [2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2005/06/16 17:40:06, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=72 params=0 setup=2 [2005/06/16 17:40:06, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2005/06/16 17:40:06, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2005/06/16 17:40:06, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168) search for pipe pnum=77ee [2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172) pipe name srvsvc pnum=77ee (pipes_open=1) [2005/06/16 17:40:06, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "srvsvc" (pnum 77ee) [2005/06/16 17:40:06, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x8387408 max_trans_reply: 1024 [2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852) write_to_pipe: 77ee name: srvsvc open: Yes len: 72 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 72 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 16 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 56 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 0b [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0048 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000001 [2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515) unmarshall_rpc_header: type = 11, flags = 3 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 0 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 56 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 56, incoming data = 56 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720) process_complete_pdu: processing packet type 11 [2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(876) api_pipe_bind_req: decode request. 876 [2005/06/16 17:40:06, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887) api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0000 max_tsize: 10b8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0002 max_rsize: 10b8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 assoc_gid: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 num_elements: 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000c context_id : 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 000e num_syntaxes: 01 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_uuid uuid [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 data : 4b324fc8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 data : 1670 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0016 data : 01d3 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0018 data : 12 78 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 001a data : 5a 47 bf 6e e1 88 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 version: 00000003 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_uuid uuid [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0024 data : 8a885d04 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0028 data : 1ceb [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 002a data : 11c9 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 002c data : 9f e8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 002e data : 08 00 2b 10 48 60 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0034 version: 00000002 [2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1017) api_pipe_bind_req: make response. 1017 [2005/06/16 17:40:06, 3] rpc_server/srv_pipe.c:check_bind_req(762) check_bind_req for \PIPE\srvsvc [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0000 max_tsize: 10b8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0002 max_rsize: 10b8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 assoc_gid: 000053f0 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 len: 000d [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 000a str: \PIPE\ntsvcs. [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000017 smb_io_rpc_results [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0018 num_results: 01 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 001c result : 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 001e reason : 0000 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 data : 8a885d04 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0024 data : 1ceb [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0026 data : 11c9 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 0028 data : 9f e8 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 002a data : 08 00 2b 10 48 60 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 version: 00000002 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 0c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0044 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000001 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 56 [2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909) read_from_pipe: 77ee name: srvsvc len: 1024 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(968) read_from_pipe: srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2005/06/16 17:40:06, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..68] [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=1160 smb_uid=101 smb_mid=5632 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6E 74 73 76 63 73 00 00 01 00 00 00 00 00 00 \ntsvcs. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,128) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,128) wrote 128 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 180 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0xb4 [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 11 of length 184 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=180 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=1160 smb_uid=101 smb_mid=5696 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 96 (0x60) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 96 (0x60) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30702 (0x77EE) smb_bcc=113 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 1A 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 65 .\.P.I.P .E.\...e [010] 00 05 00 00 03 10 00 00 00 60 00 00 00 01 00 00 ........ .`...... [020] 00 48 00 00 00 00 00 10 00 14 DF 04 06 0D 00 00 .H...... ........ [030] 00 00 00 00 00 0D 00 00 00 5C 00 5C 00 46 00 69 ........ .\.\.F.i [040] 00 6C 00 65 00 73 00 65 00 72 00 76 00 65 00 72 .l.e.s.e .r.v.e.r [050] 00 00 00 00 00 05 00 00 00 00 00 00 00 05 00 00 ........ ........ [060] 00 74 00 6F 00 74 00 6F 00 00 00 00 00 01 00 00 .t.o.t.o ........ [070] 00 . [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBtrans (pid 8891) conn 0x838a458 [2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2005/06/16 17:40:06, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=96 params=0 setup=2 [2005/06/16 17:40:06, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2005/06/16 17:40:06, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2005/06/16 17:40:06, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168) search for pipe pnum=77ee [2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172) pipe name srvsvc pnum=77ee (pipes_open=1) [2005/06/16 17:40:06, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "srvsvc" (pnum 77ee) [2005/06/16 17:40:06, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x8387408 max_trans_reply: 1024 [2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852) write_to_pipe: 77ee name: srvsvc open: Yes len: 96 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 96 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399) fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 16 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 80 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0060 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000001 [2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486) unmarshall_rpc_header: using little-endian RPC [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515) unmarshall_rpc_header: type = 0, flags = 3 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 0 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 80 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 80, incoming data = 80 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720) process_complete_pdu: processing packet type 0 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 alloc_hint: 00000048 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0004 context_id: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0006 opnum : 0010 [2005/06/16 17:40:06, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542) free_pipe_context: destroying talloc pool of size 0 [2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_pipe_request(1497) Requested \PIPE\srvsvc [2005/06/16 17:40:06, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531) api_rpcTNP: srvsvc op 0x10 - api_rpcTNP: rpc command: SRV_NET_SHARE_GET_INFO [2005/06/16 17:40:06, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557) api_rpc_cmds[7].fn == 0x8126c80 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_q_net_share_get_info [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 ptr_srv_name: 0604df14 [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 uni_max_len: 0000000d [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c uni_str_len: 0000000d [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0010 buffer : \.\.F.i.l.e.s.e.r.v.e.r... [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 00002a smb_io_unistr2 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 002c uni_max_len: 00000005 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0034 uni_str_len: 00000005 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0038 buffer : t.o.t.o... [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0044 info_level: 00000001 [2005/06/16 17:40:06, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1405) _srv_net_share_get_info: 1405 [2005/06/16 17:40:06, 5] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_get_info(752) init_srv_r_net_share_get_info: 752 [2005/06/16 17:40:06, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: toto 0 [2005/06/16 17:40:06, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2005/06/16 17:40:06, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1411) _srv_net_share_get_info: 1411 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_r_net_share_get_info [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_srv_share_info info [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 switch_value : 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 ptr_share_ctr: 00000001 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000008 srv_io_share_info1 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 ptr_netname: 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c type : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 ptr_remark : 00000001 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 srv_io_share_info1_str [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 000014 smb_io_unistr2 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0014 uni_max_len: 00000005 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 001c uni_str_len: 00000005 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0020 buffer : t.o.t.o... [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00002c smb_io_unistr2 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 002c uni_max_len: 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 offset : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0034 uni_str_len: 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0038 buffer : .. [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_werror(702) 003c status: WERR_OK [2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578) api_rpcTNP: called srvsvc successfully [2005/06/16 17:40:06, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542) free_pipe_context: destroying talloc pool of size 48 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 80 [2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909) read_from_pipe: 77ee name: srvsvc len: 1024 [2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982) read_from_pipe: srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 64. [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 02 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0058 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 00000040 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0016 cancel_ct : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0017 reserved : 00 [2005/06/16 17:40:06, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..88] [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=1160 smb_uid=101 smb_mid=5696 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 88 (0x58) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 88 (0x58) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=89 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 00 05 00 02 03 10 00 00 00 58 00 00 00 01 00 00 ........ .X...... [010] 00 40 00 00 00 00 00 00 00 01 00 00 00 01 00 00 .@...... ........ [020] 00 01 00 00 00 00 00 00 00 01 00 00 00 05 00 00 ........ ........ [030] 00 00 00 00 00 05 00 00 00 74 00 6F 00 74 00 6F ........ .t.o.t.o [040] 00 00 00 00 00 01 00 00 00 00 00 00 00 01 00 00 ........ ........ [050] 00 00 00 00 00 00 00 00 00 ........ . [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,148) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,148) wrote 148 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 41 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x29 [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 12 of length 45 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=5760 smt_wct=3 smb_vwv[ 0]=30702 (0x77EE) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 8891) conn 0x838a458 [2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194) change_to_user: Skipping user change - already user [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168) search for pipe pnum=77ee [2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172) pipe name srvsvc pnum=77ee (pipes_open=1) [2005/06/16 17:40:06, 5] smbd/pipes.c:reply_pipe_close(260) reply_pipe_close: pnum:77ee [2005/06/16 17:40:06, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081) closed pipe name srvsvc pnum=77ee (pipes_open=0) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=5760 smt_wct=0 smb_bcc=0 [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,39) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,39) wrote 39 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 86 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x56 [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 13 of length 90 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=86 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=5824 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 86 (0x56) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=43 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 5C 00 46 00 49 00 4C 00 45 00 53 00 45 .\.\.F.I .L.E.S.E [010] 00 52 00 56 00 45 00 52 00 5C 00 54 00 4F 00 54 .R.V.E.R .\.T.O.T [020] 00 4F 00 00 00 3F 3F 3F 3F 3F 00 .O...??? ??. [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBtconX (pid 8891) conn 0x0 [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:06, 4] smbd/reply.c:reply_tcon_and_X(407) Client requested device type [?????] for share [TOTO] [2005/06/16 17:40:06, 5] smbd/service.c:make_connection(807) making a connection to 'normal' service toto [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293) Finding user ORSAT/demo [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is orsat/demo [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [ORSAT/demo]! [2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(479) Connect path is '/var/spool/samba/scsi/toto' for service [toto] [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc get_share_security [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0000 revision : 0001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0002 type : 8104 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 off_owner_sid: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 off_grp_sid : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c off_sacl : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 off_dacl : 00000014 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 revision: 0002 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0016 size : 002c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 num_aces : 00000001 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001c type : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001d flags: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 001e size : 0024 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 mask: 001f01ff [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0024 sid_rev_num: 01 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0025 num_auths : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0026 id_auth[0] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0027 id_auth[1] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0028 id_auth[2] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0029 id_auth[3] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002a id_auth[4] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002b id_auth[5] : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869) 002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060. [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060 se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-675481893-1142756424-452798024-513 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 2 [2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315) se_access_check: access (2) denied. [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc get_share_security [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0000 revision : 0001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0002 type : 8104 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 off_owner_sid: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 off_grp_sid : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c off_sacl : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 off_dacl : 00000014 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 revision: 0002 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0016 size : 002c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 num_aces : 00000001 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001c type : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001d flags: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 001e size : 0024 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 mask: 001f01ff [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0024 sid_rev_num: 01 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0025 num_auths : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0026 id_auth[0] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0027 id_auth[1] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0028 id_auth[2] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0029 id_auth[3] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002a id_auth[4] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002b id_auth[5] : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869) 002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060. [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060 se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-675481893-1142756424-452798024-513 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 1 [2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315) se_access_check: access (1) denied. [2005/06/16 17:40:06, 0] smbd/service.c:make_connection_snum(512) make_connection: connection to toto denied due to security descriptor. [2005/06/16 17:40:06, 3] smbd/error.c:error_packet(129) error packet at smbd/reply.c(415) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=35 smb_com=0x75 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=5824 smt_wct=0 smb_bcc=0 [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,39) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,39) wrote 39 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 86 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x56 [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 14 of length 90 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=86 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=5888 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 86 (0x56) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=43 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 5C 00 46 00 49 00 4C 00 45 00 53 00 45 .\.\.F.I .L.E.S.E [010] 00 52 00 56 00 45 00 52 00 5C 00 54 00 4F 00 54 .R.V.E.R .\.T.O.T [020] 00 4F 00 00 00 3F 3F 3F 3F 3F 00 .O...??? ??. [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBtconX (pid 8891) conn 0x0 [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:06, 4] smbd/reply.c:reply_tcon_and_X(407) Client requested device type [?????] for share [TOTO] [2005/06/16 17:40:06, 5] smbd/service.c:make_connection(807) making a connection to 'normal' service toto [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293) Finding user ORSAT/demo [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is orsat/demo [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [ORSAT/demo]! [2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(479) Connect path is '/var/spool/samba/scsi/toto' for service [toto] [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc get_share_security [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0000 revision : 0001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0002 type : 8104 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 off_owner_sid: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 off_grp_sid : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c off_sacl : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 off_dacl : 00000014 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 revision: 0002 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0016 size : 002c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 num_aces : 00000001 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001c type : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001d flags: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 001e size : 0024 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 mask: 001f01ff [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0024 sid_rev_num: 01 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0025 num_auths : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0026 id_auth[0] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0027 id_auth[1] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0028 id_auth[2] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0029 id_auth[3] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002a id_auth[4] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002b id_auth[5] : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869) 002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060. [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060 se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-675481893-1142756424-452798024-513 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 2 [2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315) se_access_check: access (2) denied. [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc get_share_security [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0000 revision : 0001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0002 type : 8104 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 off_owner_sid: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 off_grp_sid : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c off_sacl : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 off_dacl : 00000014 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 revision: 0002 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0016 size : 002c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 num_aces : 00000001 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001c type : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001d flags: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 001e size : 0024 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 mask: 001f01ff [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0024 sid_rev_num: 01 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0025 num_auths : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0026 id_auth[0] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0027 id_auth[1] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0028 id_auth[2] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0029 id_auth[3] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002a id_auth[4] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002b id_auth[5] : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869) 002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060. [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060 se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-675481893-1142756424-452798024-513 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 1 [2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315) se_access_check: access (1) denied. [2005/06/16 17:40:06, 0] smbd/service.c:make_connection_snum(512) make_connection: connection to toto denied due to security descriptor. [2005/06/16 17:40:06, 3] smbd/error.c:error_packet(129) error packet at smbd/reply.c(415) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=35 smb_com=0x75 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=5888 smt_wct=0 smb_bcc=0 [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,39) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,39) wrote 39 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 86 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x56 [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 15 of length 90 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=86 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=5952 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 86 (0x56) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=43 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 5C 00 46 00 49 00 4C 00 45 00 53 00 45 .\.\.F.I .L.E.S.E [010] 00 52 00 56 00 45 00 52 00 5C 00 54 00 4F 00 54 .R.V.E.R .\.T.O.T [020] 00 4F 00 00 00 3F 3F 3F 3F 3F 00 .O...??? ??. [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBtconX (pid 8891) conn 0x0 [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:06, 4] smbd/reply.c:reply_tcon_and_X(407) Client requested device type [?????] for share [TOTO] [2005/06/16 17:40:06, 5] smbd/service.c:make_connection(807) making a connection to 'normal' service toto [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293) Finding user ORSAT/demo [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is orsat/demo [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [ORSAT/demo]! [2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(479) Connect path is '/var/spool/samba/scsi/toto' for service [toto] [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc get_share_security [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0000 revision : 0001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0002 type : 8104 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 off_owner_sid: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 off_grp_sid : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c off_sacl : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 off_dacl : 00000014 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 revision: 0002 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0016 size : 002c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 num_aces : 00000001 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001c type : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001d flags: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 001e size : 0024 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 mask: 001f01ff [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0024 sid_rev_num: 01 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0025 num_auths : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0026 id_auth[0] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0027 id_auth[1] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0028 id_auth[2] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0029 id_auth[3] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002a id_auth[4] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002b id_auth[5] : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869) 002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060. [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060 se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-675481893-1142756424-452798024-513 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 2 [2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315) se_access_check: access (2) denied. [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc get_share_security [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0000 revision : 0001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0002 type : 8104 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 off_owner_sid: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 off_grp_sid : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c off_sacl : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 off_dacl : 00000014 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 revision: 0002 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0016 size : 002c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 num_aces : 00000001 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001c type : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001d flags: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 001e size : 0024 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 mask: 001f01ff [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0024 sid_rev_num: 01 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0025 num_auths : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0026 id_auth[0] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0027 id_auth[1] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0028 id_auth[2] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0029 id_auth[3] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002a id_auth[4] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002b id_auth[5] : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869) 002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060. [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060 se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-675481893-1142756424-452798024-513 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 1 [2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315) se_access_check: access (1) denied. [2005/06/16 17:40:06, 0] smbd/service.c:make_connection_snum(512) make_connection: connection to toto denied due to security descriptor. [2005/06/16 17:40:06, 3] smbd/error.c:error_packet(129) error packet at smbd/reply.c(415) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=35 smb_com=0x75 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=5952 smt_wct=0 smb_bcc=0 [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,39) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,39) wrote 39 [2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 86 [2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x56 [2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091) Transaction 16 of length 90 [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=86 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=6016 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 86 (0x56) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=43 [2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 5C 00 46 00 49 00 4C 00 45 00 53 00 45 .\.\.F.I .L.E.S.E [010] 00 52 00 56 00 45 00 52 00 5C 00 54 00 4F 00 54 .R.V.E.R .\.T.O.T [020] 00 4F 00 00 00 3F 3F 3F 3F 3F 00 .O...??? ??. [2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886) switch message SMBtconX (pid 8891) conn 0x0 [2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:06, 4] smbd/reply.c:reply_tcon_and_X(407) Client requested device type [?????] for share [TOTO] [2005/06/16 17:40:06, 5] smbd/service.c:make_connection(807) making a connection to 'normal' service toto [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293) Finding user ORSAT/demo [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is orsat/demo [2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [ORSAT/demo]! [2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(479) Connect path is '/var/spool/samba/scsi/toto' for service [toto] [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc get_share_security [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0000 revision : 0001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0002 type : 8104 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 off_owner_sid: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 off_grp_sid : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c off_sacl : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 off_dacl : 00000014 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 revision: 0002 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0016 size : 002c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 num_aces : 00000001 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001c type : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001d flags: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 001e size : 0024 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 mask: 001f01ff [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0024 sid_rev_num: 01 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0025 num_auths : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0026 id_auth[0] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0027 id_auth[1] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0028 id_auth[2] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0029 id_auth[3] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002a id_auth[4] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002b id_auth[5] : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869) 002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060. [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060 se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-675481893-1142756424-452798024-513 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 2 [2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315) se_access_check: access (2) denied. [2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 sec_io_desc get_share_security [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0000 revision : 0001 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0002 type : 8104 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 off_owner_sid: 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 off_grp_sid : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c off_sacl : 00000000 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 off_dacl : 00000014 [2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 sec_io_acl dacl [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 revision: 0002 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0016 size : 002c [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 num_aces : 00000001 [2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82) 00001c sec_io_ace ace_list[00]: [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001c type : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001d flags: 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613) 001e size : 0024 [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000020 sec_io_access info [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 mask: 001f01ff [2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_dom_sid trustee [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0024 sid_rev_num: 01 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0025 num_auths : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0026 id_auth[0] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0027 id_auth[1] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0028 id_auth[2] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0029 id_auth[3] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002a id_auth[4] : 00 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584) 002b id_auth[5] : 05 [2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869) 002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 [2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060. [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060 se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-675481893-1142756424-452798024-513 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033 se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 1 [2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315) se_access_check: access (1) denied. [2005/06/16 17:40:06, 0] smbd/service.c:make_connection_snum(512) make_connection: connection to toto denied due to security descriptor. [2005/06/16 17:40:06, 3] smbd/error.c:error_packet(129) error packet at smbd/reply.c(415) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED [2005/06/16 17:40:06, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:06, 5] lib/util.c:show_msg(474) size=35 smb_com=0x75 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=6016 smt_wct=0 smb_bcc=0 [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449) write_socket(5,39) [2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452) write_socket(5,39) wrote 39 [2005/06/16 17:40:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 35 [2005/06/16 17:40:47, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x23 [2005/06/16 17:40:47, 3] smbd/process.c:process_smb(1091) Transaction 17 of length 39 [2005/06/16 17:40:47, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:47, 5] lib/util.c:show_msg(474) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=6080 smt_wct=0 smb_bcc=0 [2005/06/16 17:40:47, 3] smbd/process.c:switch_message(886) switch message SMBtdis (pid 8891) conn 0x838a458 [2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:47, 3] smbd/service.c:close_cnum(830) 192.168.15.204 (192.168.15.204) closed connection to service IPC$ [2005/06/16 17:40:47, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2005/06/16 17:40:47, 4] smbd/vfs.c:vfs_ChDir(660) vfs_ChDir to / [2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:47, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:47, 5] lib/util.c:show_msg(474) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=101 smb_mid=6080 smt_wct=0 smb_bcc=0 [2005/06/16 17:40:47, 6] lib/util_sock.c:write_socket(449) write_socket(5,39) [2005/06/16 17:40:47, 6] lib/util_sock.c:write_socket(452) write_socket(5,39) wrote 39 [2005/06/16 17:40:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 35 [2005/06/16 17:40:47, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x23 [2005/06/16 17:40:47, 3] smbd/process.c:process_smb(1091) Transaction 18 of length 39 [2005/06/16 17:40:47, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:47, 5] lib/util.c:show_msg(474) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=6144 smt_wct=0 smb_bcc=0 [2005/06/16 17:40:47, 3] smbd/process.c:switch_message(886) switch message SMBtdis (pid 8891) conn 0x8388558 [2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:47, 4] smbd/vfs.c:vfs_ChDir(660) vfs_ChDir to /tmp [2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:47, 3] smbd/service.c:close_cnum(830) 192.168.15.204 (192.168.15.204) closed connection to service IPC$ [2005/06/16 17:40:47, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2005/06/16 17:40:47, 4] smbd/vfs.c:vfs_ChDir(660) vfs_ChDir to / [2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:47, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:47, 5] lib/util.c:show_msg(474) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=6144 smt_wct=0 smb_bcc=0 [2005/06/16 17:40:47, 6] lib/util_sock.c:write_socket(449) write_socket(5,39) [2005/06/16 17:40:47, 6] lib/util_sock.c:write_socket(452) write_socket(5,39) wrote 39 [2005/06/16 17:40:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 39 [2005/06/16 17:40:47, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x27 [2005/06/16 17:40:47, 3] smbd/process.c:process_smb(1091) Transaction 19 of length 43 [2005/06/16 17:40:47, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:47, 5] lib/util.c:show_msg(474) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=6208 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2005/06/16 17:40:47, 3] smbd/process.c:switch_message(886) switch message SMBulogoffX (pid 8891) conn 0x0 [2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:40:47, 5] auth/auth_util.c:free_server_info(1406) attempting to free (and zero) a server_info structure [2005/06/16 17:40:47, 3] smbd/reply.c:reply_ulogoffX(1264) ulogoffX vuid=100 [2005/06/16 17:40:47, 5] lib/util.c:show_msg(464) [2005/06/16 17:40:47, 5] lib/util.c:show_msg(474) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=6208 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2005/06/16 17:40:47, 6] lib/util_sock.c:write_socket(449) write_socket(5,43) [2005/06/16 17:40:47, 6] lib/util_sock.c:write_socket(452) write_socket(5,43) wrote 43 [2005/06/16 17:41:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:41:47, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:41:47, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:41:47, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:41:47, 6] param/loadparm.c:lp_file_list_changed(2715) lp_file_list_changed() file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf last mod_time: Thu Jun 16 16:37:42 2005 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Jun 16 17:39:45 2005 [2005/06/16 17:42:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:42:47, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:42:47, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:42:47, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:42:47, 2] smbd/process.c:timeout_processing(1368) Closing idle connection [2005/06/16 17:42:47, 5] lib/gencache.c:gencache_shutdown(88) Closing cache file [2005/06/16 17:42:47, 5] libsmb/namecache.c:namecache_shutdown(79) namecache_shutdown: netbios namecache closed successfully. [2005/06/16 17:42:47, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/16 17:42:47, 5] auth/auth_util.c:debug_nt_user_token(485) NT user token: (NULL) [2005/06/16 17:42:47, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2005/06/16 17:42:47, 5] smbd/uid.c:change_to_root_user(296) change_to_root_user: now uid=(0,0) gid=(0,0) [2005/06/16 17:42:47, 2] smbd/server.c:exit_server(609) Closing connections [2005/06/16 17:42:47, 5] auth/auth_util.c:free_server_info(1406) attempting to free (and zero) a server_info structure [2005/06/16 17:42:47, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2005/06/16 17:42:47, 5] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2005/06/16 17:42:47, 3] smbd/server.c:exit_server(652) Server exit (normal exit)