Attachment 1277 Details for Bug 2804 – log level 10 of the connection

log level 10 of the connection

level10.log (text/plain), 213.48 KB, created by Marcel de Riedmatten on 2005-06-16 13:23:39 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Marcel de Riedmatten

Created: 2005-06-16 13:23:39 UTC

Size: 213.48 KB

patch

obsolete

>[2005/06/16 17:40:05, 5] lib/debug.c:debug_dump_status(366)
>  INFO: Current debug levels:
>    all: True/10
>    tdb: False/0
>    printdrivers: False/0
>    lanman: False/0
>    smb: False/0
>    rpc_parse: False/0
>    rpc_srv: False/0
>    rpc_cli: False/0
>    passdb: False/0
>    sam: False/0
>    auth: False/0
>    winbind: False/0
>    vfs: False/0
>    idmap: False/0
>    quota: False/0
>    acls: False/0
>  doing parameter panic action = /usr/share/samba/panic-action %d
>  doing parameter ldap admin dn = cn=admin,dc=serveur,dc=cavesorsat,dc=ch
>  doing parameter ldap idmap suffix = ou=idmap
>  doing parameter ldap suffix = dc=serveur,dc=cavesorsat,dc=ch
>  doing parameter idmap backend = ldap:ldap://fileserver.cavesorsat.ch
>  doing parameter winbind nested groups = Yes
>  doing parameter winbind separator = /
>  doing parameter idmap uid = 10000-20000
>  doing parameter idmap gid = 10000-20000
>  doing parameter winbind enum users = yes
>  doing parameter winbind enum groups = yes
>  doing parameter template homedir = /home/%U
>  doing parameter template shell = /bin/bash
>[2005/06/16 17:40:05, 2] param/loadparm.c:do_section(3434)
>  Processing section "[homes]"
>[2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327)
>  add_a_service: Creating snum = 0 for homes
>  doing parameter comment = Home Directories
>  doing parameter writeable = Yes
>  doing parameter create mask = 0700
>  doing parameter directory mask = 0700
>  doing parameter browseable = No
>  doing parameter valid users = ORSAT/%S
>  doing parameter root preexec = /etc/samba/mkhomedir.sh  %H %u %g
>  doing parameter include = /etc/samba/shares/toto.conf
>[2005/06/16 17:40:05, 3] param/params.c:pm_process(573)
>  params.c:pm_process() - Processing configuration file "/etc/samba/shares/toto.conf"
>[2005/06/16 17:40:05, 2] param/loadparm.c:do_section(3434)
>  Processing section "[toto]"
>[2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327)
>  add_a_service: Creating snum = 1 for toto
>  doing parameter comment = 
>  doing parameter path = /var/spool/samba/scsi/toto
>  doing parameter writeable = yes
>  doing parameter nt acl support = Yes
>  doing parameter inherit acls = Yes
>  doing parameter force unknown acl user = Yes
>  doing parameter store dos attributes = Yes
>  doing parameter security mask = 0777
>  doing parameter force security mode = 0
>[2005/06/16 17:40:05, 5] lib/debug.c:debug_dump_status(366)
>  doing parameter directory security mask = 0777
>  INFO: Current debug levels:
>    all: True/10
>  doing parameter force directory security mode = 0
>[2005/06/16 17:40:05, 4] param/loadparm.c:lp_load(3946)
>    tdb: False/0
>  pm_process() returned Yes
>    printdrivers: False/0
>    lanman: False/0
>    smb: False/0
>    rpc_parse: False/0
>    rpc_srv: False/0
>    rpc_cli: False/0
>    passdb: False/0
>    sam: False/0
>    auth: False/0
>    winbind: False/0
>    vfs: False/0
>    idmap: False/0
>    quota: False/0
>    acls: False/0
>  doing parameter panic action = /usr/share/samba/panic-action %d
>[2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327)
>  add_a_service: Creating snum = 2 for IPC$
>  doing parameter ldap admin dn = cn=admin,dc=serveur,dc=cavesorsat,dc=ch
>[2005/06/16 17:40:05, 3] param/loadparm.c:lp_add_ipc(2409)
>  adding IPC service
>  doing parameter ldap idmap suffix = ou=idmap
>[2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327)
>  add_a_service: Creating snum = 3 for ADMIN$
>  doing parameter ldap suffix = dc=serveur,dc=cavesorsat,dc=ch
>[2005/06/16 17:40:05, 3] param/loadparm.c:lp_add_ipc(2409)
>  adding IPC service
>[2005/06/16 17:40:05, 10] param/loadparm.c:set_server_role(3864)
>  doing parameter idmap backend = ldap:ldap://fileserver.cavesorsat.ch
>  set_server_role: role = ROLE_DOMAIN_MEMBER
>  doing parameter winbind nested groups = Yes
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  Substituting charset 'UTF-8' for LOCALE
>  doing parameter winbind separator = /
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  doing parameter idmap uid = 10000-20000
>  Substituting charset 'UTF-8' for LOCALE
>  doing parameter idmap gid = 10000-20000
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  Substituting charset 'UTF-8' for LOCALE
>  doing parameter winbind enum users = yes
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  Substituting charset 'UTF-8' for LOCALE
>  doing parameter winbind enum groups = yes
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  Substituting charset 'UTF-8' for LOCALE
>  doing parameter template homedir = /home/%U
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  doing parameter template shell = /bin/bash
>  Substituting charset 'UTF-8' for LOCALE
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>[2005/06/16 17:40:05, 2] param/loadparm.c:do_section(3434)
>  Substituting charset 'UTF-8' for LOCALE
>  Processing section "[homes]"
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  Substituting charset 'UTF-8' for LOCALE
>[2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327)
>  add_a_service: Creating snum = 0 for homes
>  doing parameter comment = Home Directories
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  doing parameter writeable = Yes
>  Substituting charset 'UTF-8' for LOCALE
>  doing parameter create mask = 0700
>  doing parameter directory mask = 0700
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  Substituting charset 'UTF-8' for LOCALE
>  doing parameter browseable = No
>[2005/06/16 17:40:05, 7] param/loadparm.c:lp_servicenumber(4056)
>  lp_servicenumber: couldn't find printers
>  doing parameter valid users = ORSAT/%S
>[2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(114)
>  reloading printcap cache
>  doing parameter root preexec = /etc/samba/mkhomedir.sh  %H %u %g
>  doing parameter include = /etc/samba/shares/toto.conf
>[2005/06/16 17:40:05, 3] param/params.c:pm_process(573)
>  params.c:pm_process() - Processing configuration file "/etc/samba/shares/toto.conf"
>[2005/06/16 17:40:05, 2] param/loadparm.c:do_section(3434)
>  Processing section "[toto]"
>[2005/06/16 17:40:05, 0] printing/pcap.c:pcap_cache_reload(149)
>[2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327)
>  add_a_service: Creating snum = 1 for toto
>  doing parameter comment = 
>  Unable to open printcap file /etc/printcap for read!
>  doing parameter path = /var/spool/samba/scsi/toto
>[2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(213)
>  doing parameter writeable = yes
>  reload status: error
>  doing parameter nt acl support = Yes
>[2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(114)
>  reloading printcap cache
>  doing parameter inherit acls = Yes
>  doing parameter force unknown acl user = Yes
>  doing parameter store dos attributes = Yes
>[2005/06/16 17:40:05, 0] printing/pcap.c:pcap_cache_reload(149)
>  doing parameter security mask = 0777
>  doing parameter force security mode = 0
>  doing parameter directory security mask = 0777
>  Unable to open printcap file /etc/printcap for read!
>  doing parameter force directory security mode = 0
>[2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(213)
>  reload status: error
>[2005/06/16 17:40:05, 4] param/loadparm.c:lp_load(3946)
>[2005/06/16 17:40:05, 7] param/loadparm.c:lp_servicenumber(4056)
>  pm_process() returned Yes
>  lp_servicenumber: couldn't find printers
>[2005/06/16 17:40:05, 7] param/loadparm.c:lp_servicenumber(4056)
>  lp_servicenumber: couldn't find printers
>[2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327)
>  add_a_service: Creating snum = 2 for IPC$
>[2005/06/16 17:40:05, 3] param/loadparm.c:lp_add_ipc(2409)
>  adding IPC service
>[2005/06/16 17:40:05, 8] param/loadparm.c:add_a_service(2327)
>[2005/06/16 17:40:05, 2] lib/interface.c:add_interface(81)
>  add_a_service: Creating snum = 3 for ADMIN$
>  added interface ip=192.168.15.26 bcast=192.168.15.255 nmask=255.255.255.0
>[2005/06/16 17:40:05, 3] param/loadparm.c:lp_add_ipc(2409)
>  adding IPC service
>[2005/06/16 17:40:05, 10] param/loadparm.c:set_server_role(3864)
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  set_server_role: role = ROLE_DOMAIN_MEMBER
>  socket option SO_KEEPALIVE = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_REUSEADDR = 1
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  Substituting charset 'UTF-8' for LOCALE
>  socket option SO_BROADCAST = 0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option TCP_NODELAY = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  socket option IPTOS_LOWDELAY = 0
>  Substituting charset 'UTF-8' for LOCALE
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option IPTOS_THROUGHPUT = 0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  socket option SO_SNDBUF = 16384
>  Substituting charset 'UTF-8' for LOCALE
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_RCVBUF = 87380
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  socket option SO_SNDLOWAT = 1
>  Substituting charset 'UTF-8' for LOCALE
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_RCVLOWAT = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  socket option SO_SNDTIMEO = 0
>  Substituting charset 'UTF-8' for LOCALE
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_RCVTIMEO = 0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  socket option SO_KEEPALIVE = 1
>  Substituting charset 'UTF-8' for LOCALE
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_REUSEADDR = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  socket option SO_BROADCAST = 0
>  Substituting charset 'UTF-8' for LOCALE
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option TCP_NODELAY = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  socket option IPTOS_LOWDELAY = 0
>  Substituting charset 'UTF-8' for LOCALE
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option IPTOS_THROUGHPUT = 0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  socket option SO_SNDBUF = 16384
>  Substituting charset 'UTF-8' for LOCALE
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_RCVBUF = 87380
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>[2005/06/16 17:40:05, 5] lib/charcnv.c:charset_name(81)
>  socket option SO_SNDLOWAT = 1
>  Substituting charset 'UTF-8' for LOCALE
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_RCVLOWAT = 1
>[2005/06/16 17:40:05, 7] param/loadparm.c:lp_servicenumber(4056)
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  lp_servicenumber: couldn't find printers
>  socket option SO_SNDTIMEO = 0
>[2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(114)
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  reloading printcap cache
>  socket option SO_RCVTIMEO = 0
>[2005/06/16 17:40:05, 3] smbd/oplock.c:init_oplocks(1351)
>  open_oplock_ipc: opening loopback UDP socket.
>[2005/06/16 17:40:05, 10] lib/util_sock.c:open_socket_in(717)
>  bind succeeded on port 0
>[2005/06/16 17:40:05, 0] printing/pcap.c:pcap_cache_reload(149)
>[2005/06/16 17:40:05, 3] smbd/oplock.c:init_oplocks(1382)
>  open_oplock ipc: pid = 18495, global_oplock_port = 33026
>[2005/06/16 17:40:05, 4] lib/time.c:get_serverzone(125)
>  Serverzone is -7200
>  Unable to open printcap file /etc/printcap for read!
>[2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(213)
>  reload status: error
>[2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(114)
>  reloading printcap cache
>[2005/06/16 17:40:05, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 68
>[2005/06/16 17:40:05, 0] printing/pcap.c:pcap_cache_reload(149)
>[2005/06/16 17:40:05, 6] smbd/process.c:process_smb(1090)
>  got message type 0x81 of len 0x44
>[2005/06/16 17:40:05, 3] smbd/process.c:process_smb(1091)
>  Transaction 0 of length 72
>  Unable to open printcap file /etc/printcap for read!
>[2005/06/16 17:40:05, 2] smbd/reply.c:reply_special(236)
>[2005/06/16 17:40:05, 3] printing/pcap.c:pcap_cache_reload(213)
>  netbios connect: name1=FILESERVER      name2=RASVOYAGE      
>  reload status: error
>[2005/06/16 17:40:05, 2] smbd/reply.c:reply_special(243)
>[2005/06/16 17:40:05, 7] param/loadparm.c:lp_servicenumber(4056)
>  netbios connect: local=fileserver remote=rasvoyage, name type = 0
>  lp_servicenumber: couldn't find printers
>[2005/06/16 17:40:05, 7] param/loadparm.c:lp_servicenumber(4056)
>  lp_servicenumber: couldn't find printers
>[2005/06/16 17:40:05, 2] lib/interface.c:add_interface(81)
>  added interface ip=192.168.15.26 bcast=192.168.15.255 nmask=255.255.255.0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_KEEPALIVE = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_REUSEADDR = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_BROADCAST = 0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option TCP_NODELAY = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option IPTOS_LOWDELAY = 0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option IPTOS_THROUGHPUT = 0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_SNDBUF = 16384
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_RCVBUF = 87380
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_SNDLOWAT = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_RCVLOWAT = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_SNDTIMEO = 0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_RCVTIMEO = 0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_KEEPALIVE = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_REUSEADDR = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_BROADCAST = 0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option TCP_NODELAY = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option IPTOS_LOWDELAY = 0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option IPTOS_THROUGHPUT = 0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_SNDBUF = 16384
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_RCVBUF = 87380
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_SNDLOWAT = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_RCVLOWAT = 1
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_SNDTIMEO = 0
>[2005/06/16 17:40:05, 5] lib/util_sock.c:print_socket_options(147)
>  socket option SO_RCVTIMEO = 0
>[2005/06/16 17:40:05, 3] smbd/oplock.c:init_oplocks(1351)
>  open_oplock_ipc: opening loopback UDP socket.
>[2005/06/16 17:40:05, 10] lib/util_sock.c:open_socket_in(717)
>  bind succeeded on port 0
>[2005/06/16 17:40:05, 3] smbd/oplock.c:init_oplocks(1382)
>  open_oplock ipc: pid = 8891, global_oplock_port = 33027
>[2005/06/16 17:40:05, 4] lib/time.c:get_serverzone(125)
>  Serverzone is -7200
>[2005/06/16 17:40:05, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 133
>[2005/06/16 17:40:05, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x85
>[2005/06/16 17:40:05, 3] smbd/process.c:process_smb(1091)
>  Transaction 0 of length 137
>[2005/06/16 17:40:05, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:05, 5] lib/util.c:show_msg(474)
>  size=133
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51283
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=0
>  smt_wct=0
>  smb_bcc=98
>[2005/06/16 17:40:05, 10] lib/util.c:dump_data(1995)
>  [000] 02 50 43 20 4E 45 54 57  4F 52 4B 20 50 52 4F 47  .PC NETW ORK PROG
>  [010] 52 41 4D 20 31 2E 30 00  02 4C 41 4E 4D 41 4E 31  RAM 1.0. .LANMAN1
>  [020] 2E 30 00 02 57 69 6E 64  6F 77 73 20 66 6F 72 20  .0..Wind ows for 
>  [030] 57 6F 72 6B 67 72 6F 75  70 73 20 33 2E 31 61 00  Workgrou ps 3.1a.
>  [040] 02 4C 4D 31 2E 32 58 30  30 32 00 02 4C 41 4E 4D  .LM1.2X0 02..LANM
>  [050] 41 4E 32 2E 31 00 02 4E  54 20 4C 4D 20 30 2E 31  AN2.1..N T LM 0.1
>  [060] 32 00                                             2. 
>[2005/06/16 17:40:05, 3] smbd/process.c:switch_message(886)
>  switch message SMBnegprot (pid 8891) conn 0x0
>[2005/06/16 17:40:05, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:05, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:05, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:05, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(461)
>  Requested protocol [PC NETWORK PROGRAM 1.0]
>[2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(461)
>  Requested protocol [LANMAN1.0]
>[2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(461)
>  Requested protocol [Windows for Workgroups 3.1a]
>[2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(461)
>  Requested protocol [LM1.2X002]
>[2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(461)
>  Requested protocol [LANMAN2.1]
>[2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(461)
>  Requested protocol [NT LM 0.12]
>[2005/06/16 17:40:05, 10] lib/util.c:set_remote_arch(1970)
>  set_remote_arch: Client arch is 'Win2K'
>[2005/06/16 17:40:05, 6] param/loadparm.c:lp_file_list_changed(2715)
>  lp_file_list_changed()
>  file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf  last mod_time: Thu Jun 16 16:37:42 2005
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Thu Jun 16 17:39:45 2005
>  
>[2005/06/16 17:40:05, 5] smbd/connection.c:claim_connection(170)
>  claiming  0
>[2005/06/16 17:40:05, 6] param/loadparm.c:lp_file_list_changed(2715)
>  lp_file_list_changed()
>  file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf  last mod_time: Thu Jun 16 16:37:42 2005
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Thu Jun 16 17:39:45 2005
>  
>[2005/06/16 17:40:05, 3] smbd/negprot.c:reply_nt1(333)
>  using SPNEGO
>[2005/06/16 17:40:05, 3] smbd/negprot.c:reply_negprot(555)
>  Selected protocol NT LM 0.12
>[2005/06/16 17:40:05, 5] smbd/negprot.c:reply_negprot(561)
>  negprot index=5
>[2005/06/16 17:40:05, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:05, 5] lib/util.c:show_msg(474)
>  size=178
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=0
>  smt_wct=17
>  smb_vwv[ 0]=    5 (0x5)
>  smb_vwv[ 1]=12803 (0x3203)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=47872 (0xBB00)
>  smb_vwv[ 8]=   34 (0x22)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=32995 (0x80E3)
>  smb_vwv[11]=32896 (0x8080)
>  smb_vwv[12]=46328 (0xB4F8)
>  smb_vwv[13]=35242 (0x89AA)
>  smb_vwv[14]=50546 (0xC572)
>  smb_vwv[15]=34817 (0x8801)
>  smb_vwv[16]=28159 (0x6DFF)
>  smb_bcc=109
>[2005/06/16 17:40:05, 10] lib/util.c:dump_data(1995)
>  [000] 66 69 6C 65 73 65 72 76  65 72 00 00 00 00 00 00  fileserv er......
>  [010] 60 5B 06 06 2B 06 01 05  05 02 A0 51 30 4F A0 24  `[..+... ...Q0O.$
>  [020] 30 22 06 09 2A 86 48 86  F7 12 01 02 02 06 09 2A  0"..*.H. .......*
>  [030] 86 48 82 F7 12 01 02 02  06 0A 2B 06 01 04 01 82  .H...... ..+.....
>  [040] 37 02 02 0A A3 27 30 25  A0 23 1B 21 66 69 6C 65  7....'0% .#.!file
>  [050] 73 65 72 76 65 72 24 40  53 45 52 56 45 55 52 2E  server$@ SERVEUR.
>  [060] 43 41 56 45 53 4F 52 53  41 54 2E 43 48           CAVESORS AT.CH
>[2005/06/16 17:40:05, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,182)
>[2005/06/16 17:40:05, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,182) wrote 182
>[2005/06/16 17:40:05, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 1380
>[2005/06/16 17:40:05, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x564
>[2005/06/16 17:40:05, 3] smbd/process.c:process_smb(1091)
>  Transaction 1 of length 1384
>[2005/06/16 17:40:05, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:05, 5] lib/util.c:show_msg(474)
>  size=1380
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=5056
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]= 1380 (0x564)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]= 1249 (0x4E1)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=32768 (0x8000)
>  smb_bcc=1321
>[2005/06/16 17:40:05, 10] lib/util.c:dump_data(1995)
>  [000] 60 82 04 DD 06 06 2B 06  01 05 05 02 A0 82 04 D1  `.....+. ........
>  [010] 30 82 04 CD A0 24 30 22  06 09 2A 86 48 82 F7 12  0....$0" ..*.H...
>  [020] 01 02 02 06 09 2A 86 48  86 F7 12 01 02 02 06 0A  .....*.H ........
>  [030] 2B 06 01 04 01 82 37 02  02 0A A2 82 04 A3 04 82  +.....7. ........
>  [040] 04 9F 60 82 04 9B 06 09  2A 86 48 86 F7 12 01 02  ..`..... *.H.....
>  [050] 02 01 00 6E 82 04 8A 30  82 04 86 A0 03 02 01 05  ...n...0 ........
>  [060] A1 03 02 01 0E A2 07 03  05 00 20 00 00 00 A3 82  ........ .. .....
>  [070] 03 A5 61 82 03 A1 30 82  03 9D A0 03 02 01 05 A1  ..a...0. ........
>  [080] 17 1B 15 53 45 52 56 45  55 52 2E 43 41 56 45 53  ...SERVE UR.CAVES
>  [090] 4F 52 53 41 54 2E 43 48  A2 18 30 16 A0 03 02 01  ORSAT.CH ..0.....
>  [0A0] 01 A1 0F 30 0D 1B 0B 66  69 6C 65 73 65 72 76 65  ...0...f ileserve
>  [0B0] 72 24 A3 82 03 61 30 82  03 5D A0 03 02 01 17 A2  r$...a0. .]......
>  [0C0] 82 03 54 04 82 03 50 39  46 DD 4C F1 5F 41 E0 BF  ..T...P9 F.L._A..
>  [0D0] BB C1 A4 42 4D 4D BA 33  AC EB 37 3F A7 8F 9D DE  ...BMM.3 ..7?....
>  [0E0] BF 8C E9 0A 92 F9 C7 44  14 30 FB 0C 63 34 CE BE  .......D .0..c4..
>  [0F0] 54 01 B7 20 D6 D7 EE 61  51 A3 FB E7 10 BC 8C 28  T.. ...a Q......(
>  [100] 4D E6 31 50 64 3F 1E E8  D5 60 53 F4 4E D9 31 15  M.1Pd?.. .`S.N.1.
>  [110] 5C BE 0D 33 9A 6E 52 CC  12 99 1B 07 3C 82 43 C8  \..3.nR. ....<.C.
>  [120] B3 7D DA 91 FB 30 9A 31  6E 2B AD 6E 77 94 81 95  .}...0.1 n+.nw...
>  [130] 90 7F 13 C4 93 9E 01 FE  C2 6D 9B DB D3 D0 64 57  ........ .m....dW
>  [140] 8E 68 9A 58 F7 A8 7F 4E  B5 05 EC C0 55 2A 04 61  .h.X...N ....U*.a
>  [150] 34 E5 13 59 61 14 96 32  8D 15 01 08 DC C0 CA 43  4..Ya..2 .......C
>  [160] 1E CE E5 3E EF AB 13 B7  67 A2 B2 30 1D 6A E8 94  ...>.... g..0.j..
>  [170] 14 E1 3E 9A C8 98 2C 82  F5 E5 90 8E EE 30 98 50  ..>...,. .....0.P
>  [180] 6E 9A 3E 56 CA 2E AC 12  4A 51 C8 87 C1 5B 79 1D  n.>V.... JQ...[y.
>  [190] 77 52 3D 79 8F 1F CB 48  88 BC DD 18 8D 3E 48 E2  wR=y...H .....>H.
>  [1A0] F1 8E 37 0D 3F 7C 62 7A  09 69 94 F0 7F 14 87 FE  ..7.?|bz .i......
>  [1B0] F9 ED 04 E0 03 80 05 5F  24 46 0A E0 AE 8B C3 50  ......._ $F.....P
>  [1C0] 9B 69 98 03 1F D8 5F 65  0C AF 81 6B F2 D0 97 E4  .i...._e ...k....
>  [1D0] 0F 2F 5F 3F A5 8D B5 EB  1E 6C 10 CB C6 0A EF 51  ./_?.... .l.....Q
>  [1E0] FF D1 FB B5 CF EB E4 D1  1D D0 87 DE 61 25 EC 92  ........ ....a%..
>  [1F0] B2 A3 46 C0 46 69 02 9B  51 05 CF 19 3E FE 1F 14  ..F.Fi.. Q...>...
>[2005/06/16 17:40:05, 3] smbd/process.c:switch_message(886)
>  switch message SMBsesssetupX (pid 8891) conn 0x0
>[2005/06/16 17:40:05, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:05, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:05, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:05, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
>  wct=12 flg2=0xc807
>[2005/06/16 17:40:05, 2] smbd/sesssetup.c:setup_new_vc_session(608)
>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
>[2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
>  Doing spnego session setup
>[2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
>  NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[]
>[2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
>  Got OID 1 2 840 48018 1 2 2
>[2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
>  Got OID 1 2 840 113554 1 2 2
>[2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
>  Got OID 1 3 6 1 4 1 311 2 2 10
>[2005/06/16 17:40:05, 3] smbd/sesssetup.c:reply_spnego_negotiate(447)
>  Got secblob of size 1183
>[2005/06/16 17:40:05, 10] passdb/secrets.c:secrets_named_mutex(701)
>  secrets_named_mutex: got mutex for replay cache mutex
>[2005/06/16 17:40:05, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
>  ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type
>[2005/06/16 17:40:05, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
>  ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type
>[2005/06/16 17:40:05, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
>  ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type
>[2005/06/16 17:40:06, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(228)
>  ads_secrets_verify_ticket: enc type [23] decrypted message !
>[2005/06/16 17:40:06, 10] passdb/secrets.c:secrets_named_mutex_release(713)
>  secrets_named_mutex: released mutex for replay cache mutex
>[2005/06/16 17:40:06, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(509)
>  Got KRB5 session key of length 16
>[2005/06/16 17:40:06, 5] libads/authdata.c:decode_pac_data(592)
>  dump_pac_data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 pac_io_pac_data pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0000 num_buffers: 00000004
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0004 version: 00000000
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000008 pac_io_pac_info_hdr pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 type: 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c size: 000001b8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0010 offset: 00000048
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0014 offsethi: 00000000
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 pac_io_pac_info_hdr pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0018 type: 0000000a
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          001c size: 0000001e
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0020 offset: 00000200
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0024 offsethi: 00000000
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000028 pac_io_pac_info_hdr pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0028 type: 00000006
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          002c size: 00000014
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0030 offset: 00000220
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0034 offsethi: 00000000
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000038 pac_io_pac_info_hdr pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0038 type: 00000007
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          003c size: 00000014
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0040 offset: 00000238
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0044 offsethi: 00000000
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000048 pac_io_pac_info_hdr_ctr pac data
>[2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(463)
>  PAC_TYPE_LOGON_INFO
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000048 pac_io_pac_logon_info pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0048 unknown: 00081001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              004c unknown: cccccccc
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0050 bufferlen: 000001a8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0054 bufferlenhi: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0058 pointer: 0c3ff710
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00005c smb_io_time logon_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  005c low : 9e78a9b0
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0060 high: 01c57270
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000064 smb_io_time logoff_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0064 low : ffffffff
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0068 high: 7fffffff
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00006c smb_io_time kickoff_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  006c low : ffffffff
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0070 high: 7fffffff
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000074 smb_io_time pass_last_set_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0074 low : 4290b71c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0078 high: 01c56c30
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00007c smb_io_time pass_can_change_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  007c low : 4290b71c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0080 high: 01c56c30
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000084 smb_io_time pass_must_change_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0084 low : ffffffff
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0088 high: 7fffffff
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00008c smb_io_unihdr hdr_user_name
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  008c uni_str_len: 0014
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  008e uni_max_len: 0014
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0090 buffer     : 000fd0b8
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000094 smb_io_unihdr hdr_full_name
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  0094 uni_str_len: 0014
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  0096 uni_max_len: 0014
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0098 buffer     : 000fd0cc
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00009c smb_io_unihdr hdr_logon_script
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  009c uni_str_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  009e uni_max_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  00a0 buffer     : 000fd0e0
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0000a4 smb_io_unihdr hdr_profile_path
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00a4 uni_str_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00a6 uni_max_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  00a8 buffer     : 000fd0e0
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0000ac smb_io_unihdr hdr_home_dir
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00ac uni_str_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00ae uni_max_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  00b0 buffer     : 000fd0e0
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0000b4 smb_io_unihdr hdr_dir_drive
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00b4 uni_str_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00b6 uni_max_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  00b8 buffer     : 000fd0e0
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              00bc logon_count: 0074
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              00be reserved12: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00c0 user_rid: 000004a6
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00c4 group_rid: 00000203
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00c8 group_count: 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00cc group_mem_ptr: 000fd0e0
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00d0 user_flags: 00000020
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00d4 reserved13.0: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00d8 reserved13.1: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00dc reserved13.2: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00e0 reserved13.3: 00000000
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0000e4 smb_io_unihdr hdr_dom_controller
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00e4 uni_str_len: 000e
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00e6 uni_max_len: 0010
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  00e8 buffer     : 000fd0e8
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0000ec smb_io_unihdr hdr_dom_name
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00ec uni_str_len: 000a
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00ee uni_max_len: 000c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  00f0 buffer     : 000fd0f8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00f4 ptr_dom_sid: 000fd104
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00f8 reserved16.0: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00fc reserved16.1: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0100 reserved17: 00000080
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0104 reserved18.0: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0108 reserved18.1: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              010c reserved18.2: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0110 reserved18.3: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0114 reserved18.4: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0118 reserved18.5: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              011c reserved18.6: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0120 sid_count: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0124 ptr_extra_sids: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0128 ptr_res_group_dom_sid: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              012c res_group_count: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0130 ptr_res_groups: 00000000
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000134 smb_io_unistr2 uni_user_name
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0134 uni_max_len: 0000000a
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0138 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  013c uni_str_len: 0000000a
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                  0140 buffer     : R.A.S.V.O.Y.A.G.E.$.
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000154 smb_io_unistr2 uni_full_name
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0154 uni_max_len: 0000000a
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0158 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  015c uni_str_len: 0000000a
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                  0160 buffer     : R.A.S.V.O.Y.A.G.E.$.
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000174 smb_io_unistr2 uni_logon_script
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0174 uni_max_len: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0178 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  017c uni_str_len: 00000000
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000180 smb_io_unistr2 uni_profile_path
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0180 uni_max_len: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0184 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0188 uni_str_len: 00000000
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00018c smb_io_unistr2 uni_home_dir
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  018c uni_max_len: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0190 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0194 uni_str_len: 00000000
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000198 smb_io_unistr2 uni_dir_drive
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0198 uni_max_len: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  019c offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01a0 uni_str_len: 00000000
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0001a4 pac_io_group_membership_array group membership
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01a4 count: 00000001
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  0001a8 pac_io_group_membership group membership
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      01a8 rid: 00000203
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      01ac attrs: 00000007
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0001b0 smb_io_unistr2 uni_dom_controller
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01b0 uni_max_len: 00000008
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01b4 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01b8 uni_str_len: 00000007
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                  01bc buffer     : R.O.M.U.L.U.S.
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0001ca smb_io_unistr2 uni_dom_name
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01cc uni_max_len: 00000006
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01d0 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01d4 uni_str_len: 00000005
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                  01d8 buffer     : O.R.S.A.T.
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0001e2 smb_io_dom_sid2 dom_sid
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01e4 num_auths: 00000004
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  0001e8 smb_io_dom_sid sid
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01e8 sid_rev_num: 01
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01e9 num_auths  : 04
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01ea id_auth[0] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01eb id_auth[1] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01ec id_auth[2] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01ed id_auth[3] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01ee id_auth[4] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01ef id_auth[5] : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
>                      01f0 sub_auths : 00000015 28430925 441d1448 1afd2648 
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000200 pac_io_pac_info_hdr_ctr pac data
>[2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(503)
>  PAC_TYPE_UNKNOWN_10
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000200 pac_io_unknown_type_10 pac data
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000200 smb_io_time unknown_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0200 low : dd55f580
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0204 high: 01c57277
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0208 len: 0014
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16s(772)
>              020a name: R.A.S.V.O.Y.A.G.E.$.
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00021e pac_io_pac_info_hdr_ctr pac data
>[2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(476)
>  PAC_TYPE_SERVER_CHECKSUM
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000220 pac_io_pac_signature_data pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0220 type: ffffff76
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              0224 signature: 83 b8 00 a9 68 ca b0 21 7f 34 e6 5e c4 6d 6b ea 
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000234 pac_io_pac_info_hdr_ctr pac data
>[2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(449)
>  offset in header(x238) and data(x234) do not match
>[2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(489)
>  PAC_TYPE_PRIVSVR_CHECKSUM
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000238 pac_io_pac_signature_data pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0238 type: ffffff76
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              023c signature: 5f 3f 86 14 1e 2a 19 cd 12 7a 04 d7 5a e3 49 09 
>[2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_spnego_kerberos(179)
>  Ticket name is [RASVOYAGE$@SERVEUR.CAVESORSAT.CH]
>[2005/06/16 17:40:06, 10] smbd/sesssetup.c:reply_spnego_kerberos(221)
>  Mapping [SERVEUR.CAVESORSAT.CH] to short name
>[2005/06/16 17:40:06, 10] smbd/sesssetup.c:reply_spnego_kerberos(234)
>  Mapped to [ORSAT]
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293)
>  Finding user ORSAT/RASVOYAGE$
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is orsat/rasvoyage$
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [ORSAT/RASVOYAGE$]!
>[2005/06/16 17:40:06, 6] param/loadparm.c:lp_file_list_changed(2715)
>  lp_file_list_changed()
>  file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf  last mod_time: Thu Jun 16 16:37:42 2005
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Thu Jun 16 17:39:45 2005
>  
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_username(617)
>  pdb_set_username: setting username rasvoyage$, was 
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_fullname(698)
>  pdb_set_full_name: setting full name RASVOYAGE, was 
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_unix_homedir(833)
>  pdb_set_unix_homedir: setting home dir /home/rasvoyage_, was NULL
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_domain(644)
>  pdb_set_domain: setting domain FILESERVER, was 
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544)
>  pdb_set_user_sid: setting user sid S-1-5-21-344095755-2918523801-3831656741-21238
>[2005/06/16 17:40:06, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-344095755-2918523801-3831656741-21238 from rid 21238
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2005/06/16 17:40:06, 3] smbd/uid.c:push_conn_ctx(365)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580)
>  pdb_set_group_sid: setting group sid S-1-5-21-344095755-2918523801-3831656741-21007
>[2005/06/16 17:40:06, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)
>  pdb_set_group_sid_from_rid:
>  	setting group sid S-1-5-21-344095755-2918523801-3831656741-21007 from rid 21007
>[2005/06/16 17:40:06, 10] auth/auth_util.c:get_user_groups(714)
>  get_user_groups: winbind_getgroups(ORSAT/rasvoyage$): result = SUCCESS
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 10119
>  Primary group is 10003 and contains 1 supplementary groups
>  Group[  0]: 10003
>[2005/06/16 17:40:06, 10] passdb/lookup_sid.c:gid_to_sid(359)
>  gid_to_sid: winbindd 10003 -> S-1-5-21-675481893-1142756424-452798024-515
>[2005/06/16 17:40:06, 10] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-344095755-2918523801-3831656741-21238
>  contains 6 SIDs
>  SID[  0]: S-1-5-21-344095755-2918523801-3831656741-21238
>  SID[  1]: S-1-5-21-344095755-2918523801-3831656741-21007
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-675481893-1142756424-452798024-515
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_domain(644)
>  pdb_set_domain: setting domain ORSAT, was FILESERVER
>[2005/06/16 17:40:06, 10] smbd/password.c:register_vuid(158)
>  register_vuid: allocated vuid = 100
>[2005/06/16 17:40:06, 10] smbd/password.c:register_vuid(220)
>  register_vuid: (10119,10003) ORSAT/rasvoyage$ RASVOYAGE$ ORSAT guest=0
>[2005/06/16 17:40:06, 3] smbd/password.c:register_vuid(222)
>  User name: ORSAT/rasvoyage$	Real name: RASVOYAGE
>[2005/06/16 17:40:06, 3] smbd/password.c:register_vuid(241)
>  UNIX uid 10119 is UNIX user ORSAT/rasvoyage$, and will be vuid 100
>[2005/06/16 17:40:06, 7] param/loadparm.c:lp_servicenumber(4056)
>  lp_servicenumber: couldn't find ORSAT/rasvoyage$
>[2005/06/16 17:40:06, 3] smbd/password.c:register_vuid(270)
>  Adding homes service for user 'ORSAT/rasvoyage$' using home directory: '/home/rasvoyage_'
>[2005/06/16 17:40:06, 8] param/loadparm.c:add_a_service(2327)
>  add_a_service: Creating snum = 4 for rasvoyage$
>[2005/06/16 17:40:06, 3] param/loadparm.c:lp_add_home(2368)
>  adding home's share [rasvoyage$] for user 'ORSAT/rasvoyage$' at '/home/rasvoyage_'
>[2005/06/16 17:40:06, 6] param/loadparm.c:lp_file_list_changed(2715)
>  lp_file_list_changed()
>  file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf  last mod_time: Thu Jun 16 16:37:42 2005
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Thu Jun 16 17:39:45 2005
>  
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,262)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,262) wrote 262
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 86
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x56
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 2 of length 90
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=86
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=5120
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   86 (0x56)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=43
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 5C 00 46 00 49  00 4C 00 45 00 53 00 45  .\.\.F.I .L.E.S.E
>  [010] 00 52 00 56 00 45 00 52  00 5C 00 49 00 50 00 43  .R.V.E.R .\.I.P.C
>  [020] 00 24 00 00 00 3F 3F 3F  3F 3F 00                 .$...??? ??.
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBtconX (pid 8891) conn 0x0
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:06, 4] smbd/reply.c:reply_tcon_and_X(407)
>  Client requested device type [?????] for share [IPC$]
>[2005/06/16 17:40:06, 5] smbd/service.c:make_connection(807)
>  making a connection to 'normal' service ipc$
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293)
>  Finding user ORSAT/rasvoyage$
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is orsat/rasvoyage$
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [ORSAT/rasvoyage$]!
>[2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(479)
>  Connect path is '/tmp' for service [IPC$]
>[2005/06/16 17:40:06, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
>  get_share_security: using default secdesc for IPC$
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000002, for NT token with 6 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21238.
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251)
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21238
>  se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21007
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-515
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2
>[2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(309)
>  se_access_check: access (2) granted.
>[2005/06/16 17:40:06, 3] smbd/vfs.c:vfs_init_default(206)
>  Initialising default vfs hooks
>[2005/06/16 17:40:06, 5] smbd/connection.c:claim_connection(170)
>  claiming IPC$ 0
>[2005/06/16 17:40:06, 10] smbd/uid.c:is_share_read_only_for_user(99)
>  is_share_read_only_for_user: share IPC$ is read-only for unix user ORSAT/rasvoyage$
>[2005/06/16 17:40:06, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
>  get_share_security: using default secdesc for IPC$
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000001, for NT token with 6 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21238.
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251)
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21238
>  se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21007
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-515
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1
>[2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(309)
>  se_access_check: access (1) granted.
>[2005/06/16 17:40:06, 10] lib/username.c:user_in_list(529)
>  user_in_list: checking user ORSAT/rasvoyage$ in list
>[2005/06/16 17:40:06, 10] lib/username.c:user_in_list(533)
>  user_in_list: checking user |ORSAT/rasvoyage$| against |ORSAT/Administrateur|
>[2005/06/16 17:40:06, 10] lib/username.c:user_in_list(610)
>  user_in_list: checking if user |ORSAT/rasvoyage$| is in winbind group |ORSAT/Administrateur|
>[2005/06/16 17:40:06, 10] lib/username.c:user_in_list(533)
>  user_in_list: checking user |ORSAT/rasvoyage$| against |@ORSAT/admins du domaine|
>[2005/06/16 17:40:06, 5] lib/username.c:user_in_netgroup_list(315)
>  Unable to get default yp domain
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (10119, 10003) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-344095755-2918523801-3831656741-21238
>  contains 6 SIDs
>  SID[  0]: S-1-5-21-344095755-2918523801-3831656741-21238
>  SID[  1]: S-1-5-21-344095755-2918523801-3831656741-21007
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-675481893-1142756424-452798024-515
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 10119
>  Primary group is 10003 and contains 1 supplementary groups
>  Group[  0]: 10003
>[2005/06/16 17:40:06, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(10119,10119) gid=(0,10003)
>[2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(642)
>  192.168.15.204 (192.168.15.204) connect to service IPC$ initially as user ORSAT/rasvoyage$ (uid=10119, gid=10003) (pid 8891)
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:06, 3] smbd/reply.c:reply_tcon_and_X(455)
>  tconX service=IPC$ 
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=48
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=5120
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_bcc=7
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 49 50 43 00 00 00 00                              IPC.... 
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,52)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,52) wrote 52
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 1408
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x580
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 3 of length 1412
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=1408
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=5184
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]= 1408 (0x580)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]= 1277 (0x4FD)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=32768 (0x8000)
>  smb_bcc=1349
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 60 82 04 F9 06 06 2B 06  01 05 05 02 A0 82 04 ED  `.....+. ........
>  [010] 30 82 04 E9 A0 24 30 22  06 09 2A 86 48 82 F7 12  0....$0" ..*.H...
>  [020] 01 02 02 06 09 2A 86 48  86 F7 12 01 02 02 06 0A  .....*.H ........
>  [030] 2B 06 01 04 01 82 37 02  02 0A A2 82 04 BF 04 82  +.....7. ........
>  [040] 04 BB 60 82 04 B7 06 09  2A 86 48 86 F7 12 01 02  ..`..... *.H.....
>  [050] 02 01 00 6E 82 04 A6 30  82 04 A2 A0 03 02 01 05  ...n...0 ........
>  [060] A1 03 02 01 0E A2 07 03  05 00 20 00 00 00 A3 82  ........ .. .....
>  [070] 03 C7 61 82 03 C3 30 82  03 BF A0 03 02 01 05 A1  ..a...0. ........
>  [080] 17 1B 15 53 45 52 56 45  55 52 2E 43 41 56 45 53  ...SERVE UR.CAVES
>  [090] 4F 52 53 41 54 2E 43 48  A2 18 30 16 A0 03 02 01  ORSAT.CH ..0.....
>  [0A0] 01 A1 0F 30 0D 1B 0B 66  69 6C 65 73 65 72 76 65  ...0...f ileserve
>  [0B0] 72 24 A3 82 03 83 30 82  03 7F A0 03 02 01 17 A2  r$....0. ........
>  [0C0] 82 03 76 04 82 03 72 6F  C2 72 79 E4 F5 BE D0 FA  ..v...ro .ry.....
>  [0D0] E7 66 27 CE 30 50 EF 31  E0 5D 30 9A 8E 35 5E 0B  .f'.0P.1 .]0..5^.
>  [0E0] DB 99 9C E9 D7 16 D6 AE  06 12 DD A4 BB 10 9C 3D  ........ .......=
>  [0F0] 13 F7 71 7A 39 E9 19 A6  98 04 4B 79 32 23 71 EB  ..qz9... ..Ky2#q.
>  [100] 33 E6 2D 7A F7 4F B6 DD  1A 3A 13 BB 82 2F 5F CD  3.-z.O.. .:.../_.
>  [110] 17 DE 33 E8 5A F3 C3 CF  E6 FE 5F BF 43 17 17 A8  ..3.Z... .._.C...
>  [120] E5 79 73 11 9C A3 6D B9  19 EB 85 C9 33 1F 12 BF  .ys...m. ....3...
>  [130] 4C 36 DB 00 B1 95 17 7D  0E 95 B0 66 9A C5 74 93  L6.....} ...f..t.
>  [140] D1 BB 05 47 33 8C F2 22  5E E9 8E 92 D7 36 2D BD  ...G3.." ^....6-.
>  [150] B4 BC 1D 71 D8 D3 F7 D1  16 47 AB C9 F4 53 F6 C5  ...q.... .G...S..
>  [160] 60 2C 4D 34 F9 66 39 7A  58 AE 19 E3 24 18 04 16  `,M4.f9z X...$...
>  [170] 0A 92 7A 1B 50 F8 12 B2  B1 EC 04 AB 5D AB B6 47  ..z.P... ....]..G
>  [180] AB 4B F3 79 44 83 26 5D  04 A3 73 B2 74 50 2E 50  .K.yD.&] ..s.tP.P
>  [190] 23 38 00 E0 82 AE D2 BA  53 DD 10 77 C7 FC D1 46  #8...... S..w...F
>  [1A0] 07 B2 5A 10 8F BB 72 3D  0E F0 2B DC 05 0C 05 B7  ..Z...r= ..+.....
>  [1B0] C0 82 2B BE E4 2A 1F 8D  AE 11 F1 D7 1E 09 F7 0B  ..+..*.. ........
>  [1C0] 15 8D 14 D2 5B 62 51 E6  C2 84 61 FF B0 C4 9A BE  ....[bQ. ..a.....
>  [1D0] 1B 90 38 97 9B 30 E7 B3  56 15 FB 54 58 8B E3 BA  ..8..0.. V..TX...
>  [1E0] 5D 28 01 4A 78 1D E5 2C  0D 39 9B 73 E8 AF 4C E7  ](.Jx.., .9.s..L.
>  [1F0] F5 97 C0 B6 A3 CF 53 30  49 4C 74 C2 39 79 D7 09  ......S0 ILt.9y..
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBsesssetupX (pid 8891) conn 0x0
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
>  wct=12 flg2=0xc807
>[2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
>  Doing spnego session setup
>[2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
>  NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[]
>[2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
>  Got OID 1 2 840 48018 1 2 2
>[2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
>  Got OID 1 2 840 113554 1 2 2
>[2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
>  Got OID 1 3 6 1 4 1 311 2 2 10
>[2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_spnego_negotiate(447)
>  Got secblob of size 1211
>[2005/06/16 17:40:06, 10] passdb/secrets.c:secrets_named_mutex(701)
>  secrets_named_mutex: got mutex for replay cache mutex
>[2005/06/16 17:40:06, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
>  ads_secrets_verify_ticket: enc type [18] failed to decrypt with error Bad encryption type
>[2005/06/16 17:40:06, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
>  ads_secrets_verify_ticket: enc type [17] failed to decrypt with error Bad encryption type
>[2005/06/16 17:40:06, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(235)
>  ads_secrets_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type
>[2005/06/16 17:40:06, 10] libads/kerberos_verify.c:ads_secrets_verify_ticket(228)
>  ads_secrets_verify_ticket: enc type [23] decrypted message !
>[2005/06/16 17:40:06, 10] passdb/secrets.c:secrets_named_mutex_release(713)
>  secrets_named_mutex: released mutex for replay cache mutex
>[2005/06/16 17:40:06, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(509)
>  Got KRB5 session key of length 16
>[2005/06/16 17:40:06, 5] libads/authdata.c:decode_pac_data(592)
>  dump_pac_data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 pac_io_pac_data pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0000 num_buffers: 00000004
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0004 version: 00000000
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000008 pac_io_pac_info_hdr pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 type: 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c size: 000001e8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0010 offset: 00000048
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0014 offsethi: 00000000
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 pac_io_pac_info_hdr pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0018 type: 0000000a
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          001c size: 00000012
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0020 offset: 00000230
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0024 offsethi: 00000000
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000028 pac_io_pac_info_hdr pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0028 type: 00000006
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          002c size: 00000014
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0030 offset: 00000248
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0034 offsethi: 00000000
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000038 pac_io_pac_info_hdr pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0038 type: 00000007
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          003c size: 00000014
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0040 offset: 00000260
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0044 offsethi: 00000000
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000048 pac_io_pac_info_hdr_ctr pac data
>[2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(463)
>  PAC_TYPE_LOGON_INFO
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000048 pac_io_pac_logon_info pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0048 unknown: 00081001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              004c unknown: cccccccc
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0050 bufferlen: 000001d8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0054 bufferlenhi: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0058 pointer: 0c3ff710
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00005c smb_io_time logon_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  005c low : f580f060
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0060 high: 01c57276
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000064 smb_io_time logoff_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0064 low : ffffffff
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0068 high: 7fffffff
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00006c smb_io_time kickoff_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  006c low : ffffffff
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0070 high: 7fffffff
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000074 smb_io_time pass_last_set_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0074 low : 6de497b6
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0078 high: 01c5726c
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00007c smb_io_time pass_can_change_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  007c low : 6de497b6
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0080 high: 01c5726c
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000084 smb_io_time pass_must_change_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0084 low : 571217b6
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0088 high: 01c5b925
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00008c smb_io_unihdr hdr_user_name
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  008c uni_str_len: 0008
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  008e uni_max_len: 0008
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0090 buffer     : 000fd0b8
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000094 smb_io_unihdr hdr_full_name
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  0094 uni_str_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  0096 uni_max_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0098 buffer     : 000fd0c0
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00009c smb_io_unihdr hdr_logon_script
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  009c uni_str_len: 0016
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  009e uni_max_len: 0016
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  00a0 buffer     : 000fd0c0
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0000a4 smb_io_unihdr hdr_profile_path
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00a4 uni_str_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00a6 uni_max_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  00a8 buffer     : 000fd0d8
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0000ac smb_io_unihdr hdr_home_dir
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00ac uni_str_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00ae uni_max_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  00b0 buffer     : 000fd0d8
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0000b4 smb_io_unihdr hdr_dir_drive
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00b4 uni_str_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00b6 uni_max_len: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  00b8 buffer     : 000fd0d8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              00bc logon_count: 0005
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              00be reserved12: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00c0 user_rid: 000004a1
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00c4 group_rid: 00000201
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00c8 group_count: 00000002
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00cc group_mem_ptr: 000fd0d8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00d0 user_flags: 00000020
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00d4 reserved13.0: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00d8 reserved13.1: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00dc reserved13.2: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00e0 reserved13.3: 00000000
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0000e4 smb_io_unihdr hdr_dom_controller
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00e4 uni_str_len: 000e
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00e6 uni_max_len: 0010
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  00e8 buffer     : 000fd0e8
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0000ec smb_io_unihdr hdr_dom_name
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00ec uni_str_len: 000a
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  00ee uni_max_len: 000c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  00f0 buffer     : 000fd0f8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00f4 ptr_dom_sid: 000fd104
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00f8 reserved16.0: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              00fc reserved16.1: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0100 reserved17: 00000010
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0104 reserved18.0: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0108 reserved18.1: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              010c reserved18.2: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0110 reserved18.3: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0114 reserved18.4: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0118 reserved18.5: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              011c reserved18.6: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0120 sid_count: 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0124 ptr_extra_sids: 000bed90
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0128 ptr_res_group_dom_sid: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              012c res_group_count: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0130 ptr_res_groups: 00000000
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000134 smb_io_unistr2 uni_user_name
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0134 uni_max_len: 00000004
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0138 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  013c uni_str_len: 00000004
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                  0140 buffer     : d.e.m.o.
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000148 smb_io_unistr2 uni_full_name
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0148 uni_max_len: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  014c offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0150 uni_str_len: 00000000
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000154 smb_io_unistr2 uni_logon_script
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0154 uni_max_len: 0000000b
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0158 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  015c uni_str_len: 0000000b
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                  0160 buffer     : l.o.g.d.e.m.o...b.a.t.
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000176 smb_io_unistr2 uni_profile_path
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0178 uni_max_len: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  017c offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0180 uni_str_len: 00000000
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000184 smb_io_unistr2 uni_home_dir
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0184 uni_max_len: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0188 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  018c uni_str_len: 00000000
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000190 smb_io_unistr2 uni_dir_drive
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0190 uni_max_len: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0194 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0198 uni_str_len: 00000000
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00019c pac_io_group_membership_array group membership
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  019c count: 00000002
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  0001a0 pac_io_group_membership group membership
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      01a0 rid: 00000201
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      01a4 attrs: 00000007
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  0001a8 pac_io_group_membership group membership
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      01a8 rid: 00000409
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      01ac attrs: 00000007
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0001b0 smb_io_unistr2 uni_dom_controller
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01b0 uni_max_len: 00000008
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01b4 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01b8 uni_str_len: 00000007
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                  01bc buffer     : R.O.M.U.L.U.S.
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0001ca smb_io_unistr2 uni_dom_name
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01cc uni_max_len: 00000006
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01d0 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01d4 uni_str_len: 00000005
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                  01d8 buffer     : O.R.S.A.T.
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              0001e2 smb_io_dom_sid2 dom_sid
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  01e4 num_auths: 00000004
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  0001e8 smb_io_dom_sid sid
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01e8 sid_rev_num: 01
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01e9 num_auths  : 04
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01ea id_auth[0] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01eb id_auth[1] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01ec id_auth[2] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01ed id_auth[3] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01ee id_auth[4] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      01ef id_auth[5] : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
>                      01f0 sub_auths : 00000015 28430925 441d1448 1afd2648 
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000200 pac_io_krb_sid_and_attr_array extra_sids
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0200 count: 00000001
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000204 pac_io_krb_attrs extra_sids
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0204 sid_ptr: 0d836698
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0208 attrs: 20000007
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  00020c pac_io_krb_sids extra_sids
>[2005/06/16 17:40:06, 10] rpc_parse/parse_prs.c:prs_debug(82)
>                      00020c smb_io_dom_sid2 sid
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                          020c num_auths: 00000005
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                              0210 sid_rev_num: 01
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                              0211 num_auths  : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                              0212 id_auth[0] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                              0213 id_auth[1] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                              0214 id_auth[2] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                              0215 id_auth[3] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                              0216 id_auth[4] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                              0217 id_auth[5] : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
>                              0218 sub_auths : 00000015 28430925 441d1448 1afd2648 000003fc 
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00022c pac_io_pac_info_hdr_ctr pac data
>[2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(449)
>  offset in header(x230) and data(x22c) do not match
>[2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(503)
>  PAC_TYPE_UNKNOWN_10
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000230 pac_io_unknown_type_10 pac data
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000230 smb_io_time unknown_time
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0230 low : e3e46d00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0234 high: 01c57277
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0238 len: 0008
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16s(772)
>              023a name: d.e.m.o.
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000242 pac_io_pac_info_hdr_ctr pac data
>[2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(449)
>  offset in header(x248) and data(x244) do not match
>[2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(476)
>  PAC_TYPE_SERVER_CHECKSUM
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000248 pac_io_pac_signature_data pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0248 type: ffffff76
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              024c signature: 04 e1 f2 d5 6c 85 7a 84 77 73 80 af 2c 92 0c be 
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00025c pac_io_pac_info_hdr_ctr pac data
>[2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(449)
>  offset in header(x260) and data(x25c) do not match
>[2005/06/16 17:40:06, 5] libads/authdata.c:pac_io_pac_info_hdr_ctr(489)
>  PAC_TYPE_PRIVSVR_CHECKSUM
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000260 pac_io_pac_signature_data pac data
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0260 type: ffffff76
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              0264 signature: d4 de b9 0f 8f b0 bc c8 eb 3b 26 6e 72 4d 94 ed 
>[2005/06/16 17:40:06, 3] smbd/sesssetup.c:reply_spnego_kerberos(179)
>  Ticket name is [demo@SERVEUR.CAVESORSAT.CH]
>[2005/06/16 17:40:06, 10] smbd/sesssetup.c:reply_spnego_kerberos(221)
>  Mapping [SERVEUR.CAVESORSAT.CH] to short name
>[2005/06/16 17:40:06, 10] smbd/sesssetup.c:reply_spnego_kerberos(234)
>  Mapped to [ORSAT]
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293)
>  Finding user ORSAT/demo
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is orsat/demo
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [ORSAT/demo]!
>[2005/06/16 17:40:06, 6] param/loadparm.c:lp_file_list_changed(2715)
>  lp_file_list_changed()
>  file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf  last mod_time: Thu Jun 16 16:37:42 2005
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Thu Jun 16 17:39:45 2005
>  
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_username(617)
>  pdb_set_username: setting username demo, was 
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_fullname(698)
>  pdb_set_full_name: setting full name demo, was 
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_unix_homedir(833)
>  pdb_set_unix_homedir: setting home dir /home/demo, was NULL
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_domain(644)
>  pdb_set_domain: setting domain FILESERVER, was 
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_user_sid(544)
>  pdb_set_user_sid: setting user sid S-1-5-21-344095755-2918523801-3831656741-21060
>[2005/06/16 17:40:06, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-344095755-2918523801-3831656741-21060 from rid 21060
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2005/06/16 17:40:06, 3] smbd/uid.c:push_conn_ctx(365)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_group_sid(580)
>  pdb_set_group_sid: setting group sid S-1-5-21-344095755-2918523801-3831656741-21001
>[2005/06/16 17:40:06, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)
>  pdb_set_group_sid_from_rid:
>  	setting group sid S-1-5-21-344095755-2918523801-3831656741-21001 from rid 21001
>[2005/06/16 17:40:06, 4] lib/substitute.c:automount_server(335)
>  Home server: fileserver
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_profile_path(752)
>  pdb_set_profile_path: setting profile path \\fileserver\demo\profile, was 
>[2005/06/16 17:40:06, 4] lib/substitute.c:automount_server(335)
>  Home server: fileserver
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_homedir(806)
>  pdb_set_homedir: setting home dir \\fileserver\demo, was 
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(779)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_logon_script(725)
>  pdb_set_logon_script: setting logon script , was 
>[2005/06/16 17:40:06, 10] auth/auth_util.c:get_user_groups(714)
>  get_user_groups: winbind_getgroups(ORSAT/demo): result = SUCCESS
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 10030
>  Primary group is 10000 and contains 3 supplementary groups
>  Group[  0]: 10000
>  Group[  1]: 10030
>  Group[  2]: 10032
>[2005/06/16 17:40:06, 10] passdb/lookup_sid.c:gid_to_sid(359)
>  gid_to_sid: winbindd 10000 -> S-1-5-21-675481893-1142756424-452798024-513
>[2005/06/16 17:40:06, 10] passdb/lookup_sid.c:gid_to_sid(359)
>  gid_to_sid: winbindd 10030 -> S-1-5-21-675481893-1142756424-452798024-1033
>[2005/06/16 17:40:06, 10] passdb/lookup_sid.c:gid_to_sid(359)
>  gid_to_sid: winbindd 10032 -> S-1-5-21-675481893-1142756424-452798024-1020
>[2005/06/16 17:40:06, 10] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-344095755-2918523801-3831656741-21060
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-344095755-2918523801-3831656741-21060
>  SID[  1]: S-1-5-21-344095755-2918523801-3831656741-21001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-675481893-1142756424-452798024-513
>  SID[  6]: S-1-5-21-675481893-1142756424-452798024-1033
>  SID[  7]: S-1-5-21-675481893-1142756424-452798024-1020
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2005/06/16 17:40:06, 10] passdb/pdb_get_set.c:pdb_set_domain(644)
>  pdb_set_domain: setting domain ORSAT, was FILESERVER
>[2005/06/16 17:40:06, 10] smbd/password.c:register_vuid(158)
>  register_vuid: allocated vuid = 101
>[2005/06/16 17:40:06, 10] smbd/password.c:register_vuid(220)
>  register_vuid: (10030,10000) ORSAT/demo demo ORSAT guest=0
>[2005/06/16 17:40:06, 3] smbd/password.c:register_vuid(222)
>  User name: ORSAT/demo	Real name: demo
>[2005/06/16 17:40:06, 3] smbd/password.c:register_vuid(241)
>  UNIX uid 10030 is UNIX user ORSAT/demo, and will be vuid 101
>[2005/06/16 17:40:06, 7] param/loadparm.c:lp_servicenumber(4056)
>  lp_servicenumber: couldn't find ORSAT/demo
>[2005/06/16 17:40:06, 3] smbd/password.c:register_vuid(270)
>  Adding homes service for user 'ORSAT/demo' using home directory: '/home/demo'
>[2005/06/16 17:40:06, 8] param/loadparm.c:add_a_service(2327)
>  add_a_service: Creating snum = 5 for demo
>[2005/06/16 17:40:06, 3] param/loadparm.c:lp_add_home(2368)
>  adding home's share [demo] for user 'ORSAT/demo' at '/home/demo'
>[2005/06/16 17:40:06, 6] param/loadparm.c:lp_file_list_changed(2715)
>  lp_file_list_changed()
>  file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf  last mod_time: Thu Jun 16 16:37:42 2005
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Thu Jun 16 17:39:45 2005
>  
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,262)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,262) wrote 262
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 86
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x56
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 4 of length 90
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=86
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5248
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   86 (0x56)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=43
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 5C 00 46 00 49  00 4C 00 45 00 53 00 45  .\.\.F.I .L.E.S.E
>  [010] 00 52 00 56 00 45 00 52  00 5C 00 49 00 50 00 43  .R.V.E.R .\.I.P.C
>  [020] 00 24 00 00 00 3F 3F 3F  3F 3F 00                 .$...??? ??.
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBtconX (pid 8891) conn 0x0
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:06, 4] smbd/reply.c:reply_tcon_and_X(407)
>  Client requested device type [?????] for share [IPC$]
>[2005/06/16 17:40:06, 5] smbd/service.c:make_connection(807)
>  making a connection to 'normal' service ipc$
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293)
>  Finding user ORSAT/demo
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is orsat/demo
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [ORSAT/demo]!
>[2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(479)
>  Connect path is '/tmp' for service [IPC$]
>[2005/06/16 17:40:06, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
>  get_share_security: using default secdesc for IPC$
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000002, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060.
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251)
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060
>  se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-513
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2
>[2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(309)
>  se_access_check: access (2) granted.
>[2005/06/16 17:40:06, 3] smbd/vfs.c:vfs_init_default(206)
>  Initialising default vfs hooks
>[2005/06/16 17:40:06, 5] smbd/connection.c:claim_connection(170)
>  claiming IPC$ 0
>[2005/06/16 17:40:06, 10] smbd/uid.c:is_share_read_only_for_user(99)
>  is_share_read_only_for_user: share IPC$ is read-only for unix user ORSAT/demo
>[2005/06/16 17:40:06, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
>  get_share_security: using default secdesc for IPC$
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000001, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060.
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251)
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060
>  se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-513
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1
>[2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(309)
>  se_access_check: access (1) granted.
>[2005/06/16 17:40:06, 10] lib/username.c:user_in_list(529)
>  user_in_list: checking user ORSAT/demo in list
>[2005/06/16 17:40:06, 10] lib/username.c:user_in_list(533)
>  user_in_list: checking user |ORSAT/demo| against |ORSAT/Administrateur|
>[2005/06/16 17:40:06, 10] lib/username.c:user_in_list(610)
>  user_in_list: checking if user |ORSAT/demo| is in winbind group |ORSAT/Administrateur|
>[2005/06/16 17:40:06, 10] lib/username.c:user_in_list(533)
>  user_in_list: checking user |ORSAT/demo| against |@ORSAT/admins du domaine|
>[2005/06/16 17:40:06, 5] lib/username.c:user_in_netgroup_list(315)
>  Unable to get default yp domain
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (10030, 10000) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-344095755-2918523801-3831656741-21060
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-344095755-2918523801-3831656741-21060
>  SID[  1]: S-1-5-21-344095755-2918523801-3831656741-21001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-675481893-1142756424-452798024-513
>  SID[  6]: S-1-5-21-675481893-1142756424-452798024-1033
>  SID[  7]: S-1-5-21-675481893-1142756424-452798024-1020
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 10030
>  Primary group is 10000 and contains 3 supplementary groups
>  Group[  0]: 10000
>  Group[  1]: 10030
>  Group[  2]: 10032
>[2005/06/16 17:40:06, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(10030,10030) gid=(0,10000)
>[2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(642)
>  192.168.15.204 (192.168.15.204) connect to service IPC$ initially as user ORSAT/demo (uid=10030, gid=10000) (pid 8891)
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:06, 3] smbd/reply.c:reply_tcon_and_X(455)
>  tconX service=IPC$ 
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=48
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5248
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_bcc=7
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 49 50 43 00 00 00 00                              IPC.... 
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,52)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,52) wrote 52
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 100
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x64
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 5 of length 104
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=100
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1160
>  smb_uid=101
>  smb_mid=5312
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=16384 (0x4000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  256 (0x100)
>  smb_bcc=17
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 73 00 72 00 76  00 73 00 76 00 63 00 00  .\.s.r.v .s.v.c..
>  [010] 00                                                . 
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 8891) conn 0x838a458
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (10030, 10000) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(490)
>  NT user token of user S-1-5-21-344095755-2918523801-3831656741-21060
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-344095755-2918523801-3831656741-21060
>  SID[  1]: S-1-5-21-344095755-2918523801-3831656741-21001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-675481893-1142756424-452798024-513
>  SID[  6]: S-1-5-21-675481893-1142756424-452798024-1033
>  SID[  7]: S-1-5-21-675481893-1142756424-452798024-1020
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 10030
>  Primary group is 10000 and contains 3 supplementary groups
>  Group[  0]: 10000
>  Group[  1]: 10030
>  Group[  2]: 10032
>[2005/06/16 17:40:06, 5] smbd/uid.c:change_to_user(281)
>  change_to_user uid=(10030,10030) gid=(0,10000)
>[2005/06/16 17:40:06, 4] smbd/vfs.c:vfs_ChDir(660)
>  vfs_ChDir to /tmp
>[2005/06/16 17:40:06, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0
>[2005/06/16 17:40:06, 4] smbd/nttrans.c:nt_open_pipe(497)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2005/06/16 17:40:06, 3] smbd/nttrans.c:nt_open_pipe(514)
>  nt_open_pipe: Known pipe srvsvc opening.
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178)
>  Open pipe requested srvsvc (pipes_open=0)
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278)
>  Create pipe requested srvsvc
>[2005/06/16 17:40:06, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77)
>  init_pipe_handles: created handle list for pipe srvsvc
>[2005/06/16 17:40:06, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93)
>  init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370)
>  Created internal pipe srvsvc (pipes_open=0)
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257)
>  Opened pipe srvsvc with handle 77ed (pipes_open=1)
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263)
>  open pipes: name srvsvc pnum=77ed
>[2005/06/16 17:40:06, 5] smbd/nttrans.c:do_ntcreate_pipe_open(562)
>  do_ntcreate_pipe_open: open pipe = \srvsvc
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1160
>  smb_uid=101
>  smb_mid=5312
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=60672 (0xED00)
>  smb_vwv[ 3]=  375 (0x177)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=32768 (0x8000)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=  512 (0x200)
>  smb_vwv[32]=65280 (0xFF00)
>  smb_vwv[33]=    5 (0x5)
>  smb_bcc=0
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,107)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,107) wrote 107
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 156
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x9c
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 6 of length 160
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=156
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1160
>  smb_uid=101
>  smb_mid=5376
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   72 (0x48)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   72 (0x48)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=30701 (0x77ED)
>  smb_bcc=89
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 1A 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 65  .\.P.I.P .E.\...e
>  [010] 00 05 00 0B 03 10 00 00  00 48 00 00 00 01 00 00  ........ .H......
>  [020] 00 B8 10 B8 10 00 00 00  00 01 00 00 00 00 00 01  ........ ........
>  [030] 00 C8 4F 32 4B 70 16 D3  01 12 78 5A 47 BF 6E E1  ..O2Kp.. ..xZG.n.
>  [040] 88 03 00 00 00 04 5D 88  8A EB 1C C9 11 9F E8 08  ......]. ........
>  [050] 00 2B 10 48 60 02 00 00  00                       .+.H`... .
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans (pid 8891) conn 0x838a458
>[2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194)
>  change_to_user: Skipping user change - already user
>[2005/06/16 17:40:06, 3] smbd/ipc.c:reply_trans(539)
>  trans <\PIPE\> data=72 params=0 setup=2
>[2005/06/16 17:40:06, 5] smbd/ipc.c:reply_trans(560)
>  calling named_pipe
>[2005/06/16 17:40:06, 3] smbd/ipc.c:named_pipe(334)
>  named pipe command on <> name
>[2005/06/16 17:40:06, 5] smbd/ipc.c:api_fd_reply(265)
>  api_fd_reply
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
>  search for pipe pnum=77ed
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
>  pipe name srvsvc pnum=77ed (pipes_open=1)
>[2005/06/16 17:40:06, 3] smbd/ipc.c:api_fd_reply(294)
>  Got API command 0x26 on pipe "srvsvc" (pnum 77ed)
>[2005/06/16 17:40:06, 10] smbd/ipc.c:api_fd_reply(299)
>  api_fd_reply: p:0x8387408 max_trans_reply: 1024
>[2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
>  write_to_pipe: 77ed name: srvsvc open: Yes len: 72
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
>  write_to_pipe: data_left = 72
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
>  fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
>  write_to_pipe: data_used = 16
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
>  write_to_pipe: data_left = 56
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 0b
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0048
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000001
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
>  unmarshall_rpc_header: using little-endian RPC
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
>  write_to_pipe: data_used = 0
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
>  write_to_pipe: data_left = 56
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 56, incoming data = 56
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720)
>  process_complete_pdu: processing packet type 11
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(876)
>  api_pipe_bind_req: decode request. 876
>[2005/06/16 17:40:06, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr_rb 
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 smb_io_rpc_hdr_bba 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0000 max_tsize: 10b8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0002 max_rsize: 10b8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 assoc_gid: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0008 num_elements: 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000c context_id  : 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      000e num_syntaxes: 01
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00000f smb_io_rpc_iface 
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000010 smb_io_uuid uuid
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0010 data   : 4b324fc8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0014 data   : 1670
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0016 data   : 01d3
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              0018 data   : 12 78 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              001a data   : 5a 47 bf 6e e1 88 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0020 version: 00000003
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000024 smb_io_rpc_iface 
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000024 smb_io_uuid uuid
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0024 data   : 8a885d04
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0028 data   : 1ceb
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              002a data   : 11c9
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              002c data   : 9f e8 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              002e data   : 08 00 2b 10 48 60 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0034 version: 00000002
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1017)
>  api_pipe_bind_req: make response. 1017
>[2005/06/16 17:40:06, 3] rpc_server/srv_pipe.c:check_bind_req(762)
>  check_bind_req for \PIPE\srvsvc
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr_ba 
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 smb_io_rpc_hdr_bba 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0000 max_tsize: 10b8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0002 max_rsize: 10b8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 assoc_gid: 000053f0
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000008 smb_io_rpc_addr_str 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0008 len: 000d
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>          000a str: \PIPE\ntsvcs.
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000017 smb_io_rpc_results 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>          0018 num_results: 01
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          001c result     : 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          001e reason     : 0000
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000020 smb_io_rpc_iface 
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000020 smb_io_uuid uuid
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0020 data   : 8a885d04
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0024 data   : 1ceb
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0026 data   : 11c9
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              0028 data   : 9f e8 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              002a data   : 08 00 2b 10 48 60 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0030 version: 00000002
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 0c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0044
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000001
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
>  write_to_pipe: data_used = 56
>[2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
>  read_from_pipe: 77ed name: srvsvc len: 1024
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(968)
>  read_from_pipe: srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2005/06/16 17:40:06, 5] smbd/ipc.c:copy_trans_params_and_data(60)
>  copy_trans_params_and_data: params[0..0] data[0..68]
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=124
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1160
>  smb_uid=101
>  smb_mid=5376
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   68 (0x44)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=69
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 00 05 00 0C 03 10 00 00  00 44 00 00 00 01 00 00  ........ .D......
>  [010] 00 B8 10 B8 10 F0 53 00  00 0D 00 5C 50 49 50 45  ......S. ...\PIPE
>  [020] 5C 6E 74 73 76 63 73 00  00 01 00 00 00 00 00 00  \ntsvcs. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..... .....+.H
>  [040] 60 02 00 00 00                                    `.... 
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,128)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,128) wrote 128
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 180
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0xb4
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 7 of length 184
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=180
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1160
>  smb_uid=101
>  smb_mid=5440
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   96 (0x60)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   96 (0x60)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=30701 (0x77ED)
>  smb_bcc=113
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 1A 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 65  .\.P.I.P .E.\...e
>  [010] 00 05 00 00 03 10 00 00  00 60 00 00 00 01 00 00  ........ .`......
>  [020] 00 48 00 00 00 00 00 10  00 A8 DF 04 06 0D 00 00  .H...... ........
>  [030] 00 00 00 00 00 0D 00 00  00 5C 00 5C 00 46 00 69  ........ .\.\.F.i
>  [040] 00 6C 00 65 00 73 00 65  00 72 00 76 00 65 00 72  .l.e.s.e .r.v.e.r
>  [050] 00 00 00 00 00 05 00 00  00 00 00 00 00 05 00 00  ........ ........
>  [060] 00 74 00 6F 00 74 00 6F  00 00 00 00 00 01 00 00  .t.o.t.o ........
>  [070] 00                                                . 
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans (pid 8891) conn 0x838a458
>[2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194)
>  change_to_user: Skipping user change - already user
>[2005/06/16 17:40:06, 3] smbd/ipc.c:reply_trans(539)
>  trans <\PIPE\> data=96 params=0 setup=2
>[2005/06/16 17:40:06, 5] smbd/ipc.c:reply_trans(560)
>  calling named_pipe
>[2005/06/16 17:40:06, 3] smbd/ipc.c:named_pipe(334)
>  named pipe command on <> name
>[2005/06/16 17:40:06, 5] smbd/ipc.c:api_fd_reply(265)
>  api_fd_reply
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
>  search for pipe pnum=77ed
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
>  pipe name srvsvc pnum=77ed (pipes_open=1)
>[2005/06/16 17:40:06, 3] smbd/ipc.c:api_fd_reply(294)
>  Got API command 0x26 on pipe "srvsvc" (pnum 77ed)
>[2005/06/16 17:40:06, 10] smbd/ipc.c:api_fd_reply(299)
>  api_fd_reply: p:0x8387408 max_trans_reply: 1024
>[2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
>  write_to_pipe: 77ed name: srvsvc open: Yes len: 96
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
>  write_to_pipe: data_left = 96
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
>  fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
>  write_to_pipe: data_used = 16
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
>  write_to_pipe: data_left = 80
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0060
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000001
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
>  unmarshall_rpc_header: using little-endian RPC
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
>  write_to_pipe: data_used = 0
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
>  write_to_pipe: data_left = 80
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 80, incoming data = 80
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720)
>  process_complete_pdu: processing packet type 0
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr_req req
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0000 alloc_hint: 00000048
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0004 context_id: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0006 opnum     : 0010
>[2005/06/16 17:40:06, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
>  free_pipe_context: destroying talloc pool of size 0
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
>  Requested \PIPE\srvsvc
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
>  api_rpcTNP: srvsvc op 0x10 - api_rpcTNP: rpc command: SRV_NET_SHARE_GET_INFO
>[2005/06/16 17:40:06, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557)
>  api_rpc_cmds[7].fn == 0x8126c80
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 srv_io_q_net_share_get_info 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0000 ptr_srv_name: 0604dfa8
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000004 smb_io_unistr2 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 uni_max_len: 0000000d
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c uni_str_len: 0000000d
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>          0010 buffer     : \.\.F.i.l.e.s.e.r.v.e.r...
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00002a smb_io_unistr2 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          002c uni_max_len: 00000005
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0030 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0034 uni_str_len: 00000005
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>          0038 buffer     : t.o.t.o...
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0044 info_level: 00000001
>[2005/06/16 17:40:06, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1405)
>  _srv_net_share_get_info: 1405
>[2005/06/16 17:40:06, 5] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_get_info(752)
>  init_srv_r_net_share_get_info: 752
>[2005/06/16 17:40:06, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142)
>  init_srv_share_info1: toto        0 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101)
>  init_srv_share_info1_str
>[2005/06/16 17:40:06, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1411)
>  _srv_net_share_get_info: 1411
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 srv_io_r_net_share_get_info 
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 srv_io_srv_share_info info  
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0000 switch_value : 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 ptr_share_ctr: 00000001
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000008 srv_io_share_info1 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0008 ptr_netname: 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              000c type       : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0010 ptr_remark : 00000001
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000014 srv_io_share_info1_str 
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000014 smb_io_unistr2 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0014 uni_max_len: 00000005
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0018 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  001c uni_str_len: 00000005
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                  0020 buffer     : t.o.t.o...
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00002c smb_io_unistr2 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  002c uni_max_len: 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0030 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0034 uni_str_len: 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                  0038 buffer     : ..
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_werror(702)
>      003c status: WERR_OK
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
>  api_rpcTNP: called srvsvc successfully
>[2005/06/16 17:40:06, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
>  free_pipe_context: destroying talloc pool of size 48
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
>  write_to_pipe: data_used = 80
>[2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
>  read_from_pipe: 77ed name: srvsvc len: 1024
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
>  read_from_pipe: srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 64.
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr hdr
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 02
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0058
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_resp resp
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0010 alloc_hint: 00000040
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0014 context_id: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0016 cancel_ct : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0017 reserved  : 00
>[2005/06/16 17:40:06, 5] smbd/ipc.c:copy_trans_params_and_data(60)
>  copy_trans_params_and_data: params[0..0] data[0..88]
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=144
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1160
>  smb_uid=101
>  smb_mid=5440
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   88 (0x58)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   88 (0x58)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=89
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 00 05 00 02 03 10 00 00  00 58 00 00 00 01 00 00  ........ .X......
>  [010] 00 40 00 00 00 00 00 00  00 01 00 00 00 01 00 00  .@...... ........
>  [020] 00 01 00 00 00 00 00 00  00 01 00 00 00 05 00 00  ........ ........
>  [030] 00 00 00 00 00 05 00 00  00 74 00 6F 00 74 00 6F  ........ .t.o.t.o
>  [040] 00 00 00 00 00 01 00 00  00 00 00 00 00 01 00 00  ........ ........
>  [050] 00 00 00 00 00 00 00 00  00                       ........ .
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,148)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,148) wrote 148
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 8 of length 45
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5504
>  smt_wct=3
>  smb_vwv[ 0]=30701 (0x77ED)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 8891) conn 0x838a458
>[2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194)
>  change_to_user: Skipping user change - already user
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
>  search for pipe pnum=77ed
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
>  pipe name srvsvc pnum=77ed (pipes_open=1)
>[2005/06/16 17:40:06, 5] smbd/pipes.c:reply_pipe_close(260)
>  reply_pipe_close: pnum:77ed
>[2005/06/16 17:40:06, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235)
>  close_policy_by_pipe: deleted handle list for pipe srvsvc
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081)
>  closed pipe name srvsvc pnum=77ed (pipes_open=0)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5504
>  smt_wct=0
>  smb_bcc=0
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,39)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,39) wrote 39
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 100
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x64
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 9 of length 104
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=100
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1160
>  smb_uid=101
>  smb_mid=5568
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=16384 (0x4000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  256 (0x100)
>  smb_bcc=17
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 73 00 72 00 76  00 73 00 76 00 63 00 00  .\.s.r.v .s.v.c..
>  [010] 00                                                . 
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBntcreateX (pid 8891) conn 0x838a458
>[2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194)
>  change_to_user: Skipping user change - already user
>[2005/06/16 17:40:06, 10] smbd/nttrans.c:reply_ntcreate_and_X(607)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0
>[2005/06/16 17:40:06, 4] smbd/nttrans.c:nt_open_pipe(497)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2005/06/16 17:40:06, 3] smbd/nttrans.c:nt_open_pipe(514)
>  nt_open_pipe: Known pipe srvsvc opening.
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178)
>  Open pipe requested srvsvc (pipes_open=0)
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278)
>  Create pipe requested srvsvc
>[2005/06/16 17:40:06, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77)
>  init_pipe_handles: created handle list for pipe srvsvc
>[2005/06/16 17:40:06, 10] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93)
>  init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370)
>  Created internal pipe srvsvc (pipes_open=0)
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257)
>  Opened pipe srvsvc with handle 77ee (pipes_open=1)
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(263)
>  open pipes: name srvsvc pnum=77ee
>[2005/06/16 17:40:06, 5] smbd/nttrans.c:do_ntcreate_pipe_open(562)
>  do_ntcreate_pipe_open: open pipe = \srvsvc
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1160
>  smb_uid=101
>  smb_mid=5568
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=60928 (0xEE00)
>  smb_vwv[ 3]=  375 (0x177)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=32768 (0x8000)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=  512 (0x200)
>  smb_vwv[32]=65280 (0xFF00)
>  smb_vwv[33]=    5 (0x5)
>  smb_bcc=0
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,107)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,107) wrote 107
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 156
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x9c
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 10 of length 160
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=156
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1160
>  smb_uid=101
>  smb_mid=5632
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   72 (0x48)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   72 (0x48)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=30702 (0x77EE)
>  smb_bcc=89
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 1A 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 65  .\.P.I.P .E.\...e
>  [010] 00 05 00 0B 03 10 00 00  00 48 00 00 00 01 00 00  ........ .H......
>  [020] 00 B8 10 B8 10 00 00 00  00 01 00 00 00 00 00 01  ........ ........
>  [030] 00 C8 4F 32 4B 70 16 D3  01 12 78 5A 47 BF 6E E1  ..O2Kp.. ..xZG.n.
>  [040] 88 03 00 00 00 04 5D 88  8A EB 1C C9 11 9F E8 08  ......]. ........
>  [050] 00 2B 10 48 60 02 00 00  00                       .+.H`... .
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans (pid 8891) conn 0x838a458
>[2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194)
>  change_to_user: Skipping user change - already user
>[2005/06/16 17:40:06, 3] smbd/ipc.c:reply_trans(539)
>  trans <\PIPE\> data=72 params=0 setup=2
>[2005/06/16 17:40:06, 5] smbd/ipc.c:reply_trans(560)
>  calling named_pipe
>[2005/06/16 17:40:06, 3] smbd/ipc.c:named_pipe(334)
>  named pipe command on <> name
>[2005/06/16 17:40:06, 5] smbd/ipc.c:api_fd_reply(265)
>  api_fd_reply
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
>  search for pipe pnum=77ee
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
>  pipe name srvsvc pnum=77ee (pipes_open=1)
>[2005/06/16 17:40:06, 3] smbd/ipc.c:api_fd_reply(294)
>  Got API command 0x26 on pipe "srvsvc" (pnum 77ee)
>[2005/06/16 17:40:06, 10] smbd/ipc.c:api_fd_reply(299)
>  api_fd_reply: p:0x8387408 max_trans_reply: 1024
>[2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
>  write_to_pipe: 77ee name: srvsvc open: Yes len: 72
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
>  write_to_pipe: data_left = 72
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
>  fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
>  write_to_pipe: data_used = 16
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
>  write_to_pipe: data_left = 56
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 0b
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0048
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000001
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
>  unmarshall_rpc_header: using little-endian RPC
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
>  write_to_pipe: data_used = 0
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
>  write_to_pipe: data_left = 56
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 56, incoming data = 56
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720)
>  process_complete_pdu: processing packet type 11
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(876)
>  api_pipe_bind_req: decode request. 876
>[2005/06/16 17:40:06, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr_rb 
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 smb_io_rpc_hdr_bba 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0000 max_tsize: 10b8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0002 max_rsize: 10b8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 assoc_gid: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0008 num_elements: 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000c context_id  : 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      000e num_syntaxes: 01
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00000f smb_io_rpc_iface 
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000010 smb_io_uuid uuid
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0010 data   : 4b324fc8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0014 data   : 1670
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0016 data   : 01d3
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              0018 data   : 12 78 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              001a data   : 5a 47 bf 6e e1 88 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0020 version: 00000003
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000024 smb_io_rpc_iface 
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000024 smb_io_uuid uuid
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0024 data   : 8a885d04
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0028 data   : 1ceb
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              002a data   : 11c9
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              002c data   : 9f e8 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              002e data   : 08 00 2b 10 48 60 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0034 version: 00000002
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_pipe_bind_req(1017)
>  api_pipe_bind_req: make response. 1017
>[2005/06/16 17:40:06, 3] rpc_server/srv_pipe.c:check_bind_req(762)
>  check_bind_req for \PIPE\srvsvc
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr_ba 
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 smb_io_rpc_hdr_bba 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0000 max_tsize: 10b8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0002 max_rsize: 10b8
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 assoc_gid: 000053f0
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000008 smb_io_rpc_addr_str 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0008 len: 000d
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>          000a str: \PIPE\ntsvcs.
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000017 smb_io_rpc_results 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>          0018 num_results: 01
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          001c result     : 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          001e reason     : 0000
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000020 smb_io_rpc_iface 
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000020 smb_io_uuid uuid
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0020 data   : 8a885d04
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0024 data   : 1ceb
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0026 data   : 11c9
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              0028 data   : 9f e8 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8s(729)
>              002a data   : 08 00 2b 10 48 60 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0030 version: 00000002
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 0c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0044
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000001
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
>  write_to_pipe: data_used = 56
>[2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
>  read_from_pipe: 77ee name: srvsvc len: 1024
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(968)
>  read_from_pipe: srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2005/06/16 17:40:06, 5] smbd/ipc.c:copy_trans_params_and_data(60)
>  copy_trans_params_and_data: params[0..0] data[0..68]
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=124
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1160
>  smb_uid=101
>  smb_mid=5632
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   68 (0x44)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=69
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 00 05 00 0C 03 10 00 00  00 44 00 00 00 01 00 00  ........ .D......
>  [010] 00 B8 10 B8 10 F0 53 00  00 0D 00 5C 50 49 50 45  ......S. ...\PIPE
>  [020] 5C 6E 74 73 76 63 73 00  00 01 00 00 00 00 00 00  \ntsvcs. ........
>  [030] 00 04 5D 88 8A EB 1C C9  11 9F E8 08 00 2B 10 48  ..]..... .....+.H
>  [040] 60 02 00 00 00                                    `.... 
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,128)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,128) wrote 128
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 180
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0xb4
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 11 of length 184
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=180
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=1160
>  smb_uid=101
>  smb_mid=5696
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   96 (0x60)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   96 (0x60)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=30702 (0x77EE)
>  smb_bcc=113
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 1A 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 65  .\.P.I.P .E.\...e
>  [010] 00 05 00 00 03 10 00 00  00 60 00 00 00 01 00 00  ........ .`......
>  [020] 00 48 00 00 00 00 00 10  00 14 DF 04 06 0D 00 00  .H...... ........
>  [030] 00 00 00 00 00 0D 00 00  00 5C 00 5C 00 46 00 69  ........ .\.\.F.i
>  [040] 00 6C 00 65 00 73 00 65  00 72 00 76 00 65 00 72  .l.e.s.e .r.v.e.r
>  [050] 00 00 00 00 00 05 00 00  00 00 00 00 00 05 00 00  ........ ........
>  [060] 00 74 00 6F 00 74 00 6F  00 00 00 00 00 01 00 00  .t.o.t.o ........
>  [070] 00                                                . 
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBtrans (pid 8891) conn 0x838a458
>[2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194)
>  change_to_user: Skipping user change - already user
>[2005/06/16 17:40:06, 3] smbd/ipc.c:reply_trans(539)
>  trans <\PIPE\> data=96 params=0 setup=2
>[2005/06/16 17:40:06, 5] smbd/ipc.c:reply_trans(560)
>  calling named_pipe
>[2005/06/16 17:40:06, 3] smbd/ipc.c:named_pipe(334)
>  named pipe command on <> name
>[2005/06/16 17:40:06, 5] smbd/ipc.c:api_fd_reply(265)
>  api_fd_reply
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
>  search for pipe pnum=77ee
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
>  pipe name srvsvc pnum=77ee (pipes_open=1)
>[2005/06/16 17:40:06, 3] smbd/ipc.c:api_fd_reply(294)
>  Got API command 0x26 on pipe "srvsvc" (pnum 77ee)
>[2005/06/16 17:40:06, 10] smbd/ipc.c:api_fd_reply(299)
>  api_fd_reply: p:0x8387408 max_trans_reply: 1024
>[2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
>  write_to_pipe: 77ee name: srvsvc open: Yes len: 96
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
>  write_to_pipe: data_left = 96
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 96
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(399)
>  fill_rpc_header: data_to_copy = 96, len_needed_to_complete_hdr = 16, receive_len = 0
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
>  write_to_pipe: data_used = 16
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
>  write_to_pipe: data_left = 80
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 80
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0060
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000001
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(486)
>  unmarshall_rpc_header: using little-endian RPC
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(515)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
>  write_to_pipe: data_used = 0
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
>  write_to_pipe: data_left = 80
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(777)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 80, incoming data = 80
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(720)
>  process_complete_pdu: processing packet type 0
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr_req req
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0000 alloc_hint: 00000048
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0004 context_id: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0006 opnum     : 0010
>[2005/06/16 17:40:06, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
>  free_pipe_context: destroying talloc pool of size 0
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_pipe_request(1497)
>  Requested \PIPE\srvsvc
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
>  api_rpcTNP: srvsvc op 0x10 - api_rpcTNP: rpc command: SRV_NET_SHARE_GET_INFO
>[2005/06/16 17:40:06, 6] rpc_server/srv_pipe.c:api_rpcTNP(1557)
>  api_rpc_cmds[7].fn == 0x8126c80
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 srv_io_q_net_share_get_info 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0000 ptr_srv_name: 0604df14
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000004 smb_io_unistr2 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 uni_max_len: 0000000d
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c uni_str_len: 0000000d
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>          0010 buffer     : \.\.F.i.l.e.s.e.r.v.e.r...
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      00002a smb_io_unistr2 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          002c uni_max_len: 00000005
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0030 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0034 uni_str_len: 00000005
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>          0038 buffer     : t.o.t.o...
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0044 info_level: 00000001
>[2005/06/16 17:40:06, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1405)
>  _srv_net_share_get_info: 1405
>[2005/06/16 17:40:06, 5] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_get_info(752)
>  init_srv_r_net_share_get_info: 752
>[2005/06/16 17:40:06, 5] rpc_parse/parse_srv.c:init_srv_share_info1(142)
>  init_srv_share_info1: toto        0 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_srv.c:init_srv_share_info1_str(101)
>  init_srv_share_info1_str
>[2005/06/16 17:40:06, 5] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1411)
>  _srv_net_share_get_info: 1411
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 srv_io_r_net_share_get_info 
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 srv_io_srv_share_info info  
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0000 switch_value : 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 ptr_share_ctr: 00000001
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000008 srv_io_share_info1 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0008 ptr_netname: 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              000c type       : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0010 ptr_remark : 00000001
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000014 srv_io_share_info1_str 
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              000014 smb_io_unistr2 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0014 uni_max_len: 00000005
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0018 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  001c uni_str_len: 00000005
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                  0020 buffer     : t.o.t.o...
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00002c smb_io_unistr2 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  002c uni_max_len: 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0030 offset     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                  0034 uni_str_len: 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814)
>                  0038 buffer     : ..
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_werror(702)
>      003c status: WERR_OK
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578)
>  api_rpcTNP: called srvsvc successfully
>[2005/06/16 17:40:06, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
>  free_pipe_context: destroying talloc pool of size 48
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
>  write_to_pipe: data_used = 80
>[2005/06/16 17:40:06, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
>  read_from_pipe: 77ee name: srvsvc len: 1024
>[2005/06/16 17:40:06, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
>  read_from_pipe: srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 64.
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr hdr
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0000 major     : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0001 minor     : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0002 pkt_type  : 02
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0003 flags     : 03
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0004 pack_type0: 10
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0005 pack_type1: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0006 pack_type2: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0007 pack_type3: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0008 frag_len  : 0058
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      000a auth_len  : 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      000c call_id   : 00000001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_resp resp
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>      0010 alloc_hint: 00000040
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>      0014 context_id: 0000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0016 cancel_ct : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>      0017 reserved  : 00
>[2005/06/16 17:40:06, 5] smbd/ipc.c:copy_trans_params_and_data(60)
>  copy_trans_params_and_data: params[0..0] data[0..88]
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=144
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=1160
>  smb_uid=101
>  smb_mid=5696
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   88 (0x58)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   88 (0x58)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=89
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 00 05 00 02 03 10 00 00  00 58 00 00 00 01 00 00  ........ .X......
>  [010] 00 40 00 00 00 00 00 00  00 01 00 00 00 01 00 00  .@...... ........
>  [020] 00 01 00 00 00 00 00 00  00 01 00 00 00 05 00 00  ........ ........
>  [030] 00 00 00 00 00 05 00 00  00 74 00 6F 00 74 00 6F  ........ .t.o.t.o
>  [040] 00 00 00 00 00 01 00 00  00 00 00 00 00 01 00 00  ........ ........
>  [050] 00 00 00 00 00 00 00 00  00                       ........ .
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,148)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,148) wrote 148
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 41
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x29
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 12 of length 45
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5760
>  smt_wct=3
>  smb_vwv[ 0]=30702 (0x77EE)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBclose (pid 8891) conn 0x838a458
>[2005/06/16 17:40:06, 4] smbd/uid.c:change_to_user(194)
>  change_to_user: Skipping user change - already user
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
>  search for pipe pnum=77ee
>[2005/06/16 17:40:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1172)
>  pipe name srvsvc pnum=77ee (pipes_open=1)
>[2005/06/16 17:40:06, 5] smbd/pipes.c:reply_pipe_close(260)
>  reply_pipe_close: pnum:77ee
>[2005/06/16 17:40:06, 10] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235)
>  close_policy_by_pipe: deleted handle list for pipe srvsvc
>[2005/06/16 17:40:06, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081)
>  closed pipe name srvsvc pnum=77ee (pipes_open=0)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5760
>  smt_wct=0
>  smb_bcc=0
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,39)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,39) wrote 39
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 86
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x56
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 13 of length 90
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=86
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5824
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   86 (0x56)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=43
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 5C 00 46 00 49  00 4C 00 45 00 53 00 45  .\.\.F.I .L.E.S.E
>  [010] 00 52 00 56 00 45 00 52  00 5C 00 54 00 4F 00 54  .R.V.E.R .\.T.O.T
>  [020] 00 4F 00 00 00 3F 3F 3F  3F 3F 00                 .O...??? ??.
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBtconX (pid 8891) conn 0x0
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:06, 4] smbd/reply.c:reply_tcon_and_X(407)
>  Client requested device type [?????] for share [TOTO]
>[2005/06/16 17:40:06, 5] smbd/service.c:make_connection(807)
>  making a connection to 'normal' service toto
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293)
>  Finding user ORSAT/demo
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is orsat/demo
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [ORSAT/demo]!
>[2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(479)
>  Connect path is '/var/spool/samba/scsi/toto' for service [toto]
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 sec_io_desc get_share_security
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0000 revision : 0001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0002 type     : 8104
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 off_owner_sid: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 off_grp_sid  : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c off_sacl     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0010 off_dacl     : 00000014
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000014 sec_io_acl dacl
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0014 revision: 0002
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0016 size     : 002c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0018 num_aces : 00000001
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00001c sec_io_ace ace_list[00]: 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001c type : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001d flags: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  001e size : 0024
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000020 sec_io_access info 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0020 mask: 001f01ff
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000024 smb_io_dom_sid trustee  
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0024 sid_rev_num: 01
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0025 num_auths  : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0026 id_auth[0] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0027 id_auth[1] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0028 id_auth[2] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0029 id_auth[3] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002a id_auth[4] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002b id_auth[5] : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
>                      002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000002, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060.
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251)
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060
>  se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-513
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 2
>[2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315)
>  se_access_check: access (2) denied.
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 sec_io_desc get_share_security
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0000 revision : 0001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0002 type     : 8104
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 off_owner_sid: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 off_grp_sid  : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c off_sacl     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0010 off_dacl     : 00000014
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000014 sec_io_acl dacl
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0014 revision: 0002
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0016 size     : 002c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0018 num_aces : 00000001
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00001c sec_io_ace ace_list[00]: 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001c type : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001d flags: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  001e size : 0024
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000020 sec_io_access info 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0020 mask: 001f01ff
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000024 smb_io_dom_sid trustee  
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0024 sid_rev_num: 01
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0025 num_auths  : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0026 id_auth[0] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0027 id_auth[1] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0028 id_auth[2] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0029 id_auth[3] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002a id_auth[4] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002b id_auth[5] : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
>                      002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000001, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060.
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251)
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060
>  se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-513
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 1
>[2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315)
>  se_access_check: access (1) denied.
>[2005/06/16 17:40:06, 0] smbd/service.c:make_connection_snum(512)
>  make_connection: connection to toto denied due to security descriptor.
>[2005/06/16 17:40:06, 3] smbd/error.c:error_packet(129)
>  error packet at smbd/reply.c(415) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x75
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5824
>  smt_wct=0
>  smb_bcc=0
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,39)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,39) wrote 39
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 86
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x56
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 14 of length 90
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=86
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5888
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   86 (0x56)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=43
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 5C 00 46 00 49  00 4C 00 45 00 53 00 45  .\.\.F.I .L.E.S.E
>  [010] 00 52 00 56 00 45 00 52  00 5C 00 54 00 4F 00 54  .R.V.E.R .\.T.O.T
>  [020] 00 4F 00 00 00 3F 3F 3F  3F 3F 00                 .O...??? ??.
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBtconX (pid 8891) conn 0x0
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:06, 4] smbd/reply.c:reply_tcon_and_X(407)
>  Client requested device type [?????] for share [TOTO]
>[2005/06/16 17:40:06, 5] smbd/service.c:make_connection(807)
>  making a connection to 'normal' service toto
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293)
>  Finding user ORSAT/demo
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is orsat/demo
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [ORSAT/demo]!
>[2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(479)
>  Connect path is '/var/spool/samba/scsi/toto' for service [toto]
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 sec_io_desc get_share_security
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0000 revision : 0001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0002 type     : 8104
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 off_owner_sid: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 off_grp_sid  : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c off_sacl     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0010 off_dacl     : 00000014
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000014 sec_io_acl dacl
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0014 revision: 0002
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0016 size     : 002c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0018 num_aces : 00000001
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00001c sec_io_ace ace_list[00]: 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001c type : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001d flags: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  001e size : 0024
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000020 sec_io_access info 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0020 mask: 001f01ff
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000024 smb_io_dom_sid trustee  
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0024 sid_rev_num: 01
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0025 num_auths  : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0026 id_auth[0] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0027 id_auth[1] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0028 id_auth[2] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0029 id_auth[3] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002a id_auth[4] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002b id_auth[5] : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
>                      002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000002, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060.
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251)
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060
>  se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-513
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 2
>[2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315)
>  se_access_check: access (2) denied.
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 sec_io_desc get_share_security
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0000 revision : 0001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0002 type     : 8104
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 off_owner_sid: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 off_grp_sid  : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c off_sacl     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0010 off_dacl     : 00000014
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000014 sec_io_acl dacl
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0014 revision: 0002
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0016 size     : 002c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0018 num_aces : 00000001
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00001c sec_io_ace ace_list[00]: 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001c type : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001d flags: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  001e size : 0024
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000020 sec_io_access info 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0020 mask: 001f01ff
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000024 smb_io_dom_sid trustee  
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0024 sid_rev_num: 01
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0025 num_auths  : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0026 id_auth[0] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0027 id_auth[1] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0028 id_auth[2] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0029 id_auth[3] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002a id_auth[4] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002b id_auth[5] : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
>                      002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000001, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060.
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251)
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060
>  se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-513
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 1
>[2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315)
>  se_access_check: access (1) denied.
>[2005/06/16 17:40:06, 0] smbd/service.c:make_connection_snum(512)
>  make_connection: connection to toto denied due to security descriptor.
>[2005/06/16 17:40:06, 3] smbd/error.c:error_packet(129)
>  error packet at smbd/reply.c(415) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x75
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5888
>  smt_wct=0
>  smb_bcc=0
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,39)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,39) wrote 39
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 86
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x56
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 15 of length 90
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=86
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5952
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   86 (0x56)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=43
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 5C 00 46 00 49  00 4C 00 45 00 53 00 45  .\.\.F.I .L.E.S.E
>  [010] 00 52 00 56 00 45 00 52  00 5C 00 54 00 4F 00 54  .R.V.E.R .\.T.O.T
>  [020] 00 4F 00 00 00 3F 3F 3F  3F 3F 00                 .O...??? ??.
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBtconX (pid 8891) conn 0x0
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:06, 4] smbd/reply.c:reply_tcon_and_X(407)
>  Client requested device type [?????] for share [TOTO]
>[2005/06/16 17:40:06, 5] smbd/service.c:make_connection(807)
>  making a connection to 'normal' service toto
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293)
>  Finding user ORSAT/demo
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is orsat/demo
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [ORSAT/demo]!
>[2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(479)
>  Connect path is '/var/spool/samba/scsi/toto' for service [toto]
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 sec_io_desc get_share_security
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0000 revision : 0001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0002 type     : 8104
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 off_owner_sid: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 off_grp_sid  : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c off_sacl     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0010 off_dacl     : 00000014
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000014 sec_io_acl dacl
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0014 revision: 0002
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0016 size     : 002c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0018 num_aces : 00000001
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00001c sec_io_ace ace_list[00]: 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001c type : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001d flags: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  001e size : 0024
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000020 sec_io_access info 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0020 mask: 001f01ff
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000024 smb_io_dom_sid trustee  
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0024 sid_rev_num: 01
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0025 num_auths  : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0026 id_auth[0] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0027 id_auth[1] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0028 id_auth[2] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0029 id_auth[3] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002a id_auth[4] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002b id_auth[5] : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
>                      002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000002, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060.
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251)
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060
>  se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-513
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 2
>[2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315)
>  se_access_check: access (2) denied.
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 sec_io_desc get_share_security
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0000 revision : 0001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0002 type     : 8104
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 off_owner_sid: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 off_grp_sid  : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c off_sacl     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0010 off_dacl     : 00000014
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000014 sec_io_acl dacl
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0014 revision: 0002
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0016 size     : 002c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0018 num_aces : 00000001
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00001c sec_io_ace ace_list[00]: 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001c type : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001d flags: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  001e size : 0024
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000020 sec_io_access info 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0020 mask: 001f01ff
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000024 smb_io_dom_sid trustee  
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0024 sid_rev_num: 01
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0025 num_auths  : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0026 id_auth[0] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0027 id_auth[1] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0028 id_auth[2] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0029 id_auth[3] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002a id_auth[4] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002b id_auth[5] : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
>                      002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000001, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060.
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251)
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060
>  se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-513
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 1
>[2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315)
>  se_access_check: access (1) denied.
>[2005/06/16 17:40:06, 0] smbd/service.c:make_connection_snum(512)
>  make_connection: connection to toto denied due to security descriptor.
>[2005/06/16 17:40:06, 3] smbd/error.c:error_packet(129)
>  error packet at smbd/reply.c(415) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x75
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=5952
>  smt_wct=0
>  smb_bcc=0
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,39)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,39) wrote 39
>[2005/06/16 17:40:06, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 86
>[2005/06/16 17:40:06, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x56
>[2005/06/16 17:40:06, 3] smbd/process.c:process_smb(1091)
>  Transaction 16 of length 90
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=86
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=6016
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   86 (0x56)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=43
>[2005/06/16 17:40:06, 10] lib/util.c:dump_data(1995)
>  [000] 00 5C 00 5C 00 46 00 49  00 4C 00 45 00 53 00 45  .\.\.F.I .L.E.S.E
>  [010] 00 52 00 56 00 45 00 52  00 5C 00 54 00 4F 00 54  .R.V.E.R .\.T.O.T
>  [020] 00 4F 00 00 00 3F 3F 3F  3F 3F 00                 .O...??? ??.
>[2005/06/16 17:40:06, 3] smbd/process.c:switch_message(886)
>  switch message SMBtconX (pid 8891) conn 0x0
>[2005/06/16 17:40:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:06, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:06, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:06, 4] smbd/reply.c:reply_tcon_and_X(407)
>  Client requested device type [?????] for share [TOTO]
>[2005/06/16 17:40:06, 5] smbd/service.c:make_connection(807)
>  making a connection to 'normal' service toto
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam(293)
>  Finding user ORSAT/demo
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is orsat/demo
>[2005/06/16 17:40:06, 5] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [ORSAT/demo]!
>[2005/06/16 17:40:06, 3] smbd/service.c:make_connection_snum(479)
>  Connect path is '/var/spool/samba/scsi/toto' for service [toto]
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 sec_io_desc get_share_security
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0000 revision : 0001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0002 type     : 8104
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 off_owner_sid: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 off_grp_sid  : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c off_sacl     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0010 off_dacl     : 00000014
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000014 sec_io_acl dacl
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0014 revision: 0002
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0016 size     : 002c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0018 num_aces : 00000001
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00001c sec_io_ace ace_list[00]: 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001c type : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001d flags: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  001e size : 0024
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000020 sec_io_access info 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0020 mask: 001f01ff
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000024 smb_io_dom_sid trustee  
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0024 sid_rev_num: 01
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0025 num_auths  : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0026 id_auth[0] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0027 id_auth[1] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0028 id_auth[2] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0029 id_auth[3] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002a id_auth[4] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002b id_auth[5] : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
>                      002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000002, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060.
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251)
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060
>  se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-513
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 2
>[2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315)
>  se_access_check: access (2) denied.
>[2005/06/16 17:40:06, 6] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 sec_io_desc get_share_security
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0000 revision : 0001
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>          0002 type     : 8104
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0004 off_owner_sid: 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0008 off_grp_sid  : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          000c off_sacl     : 00000000
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>          0010 off_dacl     : 00000014
>[2005/06/16 17:40:06, 7] rpc_parse/parse_prs.c:prs_debug(82)
>          000014 sec_io_acl dacl
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0014 revision: 0002
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>              0016 size     : 002c
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>              0018 num_aces : 00000001
>[2005/06/16 17:40:06, 8] rpc_parse/parse_prs.c:prs_debug(82)
>              00001c sec_io_ace ace_list[00]: 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001c type : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                  001d flags: 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint16(613)
>                  001e size : 0024
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000020 sec_io_access info 
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32(642)
>                      0020 mask: 001f01ff
>[2005/06/16 17:40:06, 9] rpc_parse/parse_prs.c:prs_debug(82)
>                  000024 smb_io_dom_sid trustee  
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0024 sid_rev_num: 01
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0025 num_auths  : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0026 id_auth[0] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0027 id_auth[1] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0028 id_auth[2] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      0029 id_auth[3] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002a id_auth[4] : 00
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint8(584)
>                      002b id_auth[5] : 05
>[2005/06/16 17:40:06, 5] rpc_parse/parse_prs.c:prs_uint32s(869)
>                      002c sub_auths : 00000015 28430925 441d1448 1afd2648 000004a1 
>[2005/06/16 17:40:06, 10] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000001, for NT token with 8 entries and first sid S-1-5-21-344095755-2918523801-3831656741-21060.
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(251)
>[2005/06/16 17:40:06, 3] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-344095755-2918523801-3831656741-21060
>  se_access_check: also S-1-5-21-344095755-2918523801-3831656741-21001
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-513
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1033
>  se_access_check: also S-1-5-21-675481893-1142756424-452798024-1020
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-5-21-675481893-1142756424-452798024-1185 mask = 1f01ff, current desired = 1
>[2005/06/16 17:40:06, 5] lib/util_seaccess.c:se_access_check(315)
>  se_access_check: access (1) denied.
>[2005/06/16 17:40:06, 0] smbd/service.c:make_connection_snum(512)
>  make_connection: connection to toto denied due to security descriptor.
>[2005/06/16 17:40:06, 3] smbd/error.c:error_packet(129)
>  error packet at smbd/reply.c(415) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:06, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x75
>  smb_rcls=34
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=6016
>  smt_wct=0
>  smb_bcc=0
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,39)
>[2005/06/16 17:40:06, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,39) wrote 39
>[2005/06/16 17:40:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 35
>[2005/06/16 17:40:47, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x23
>[2005/06/16 17:40:47, 3] smbd/process.c:process_smb(1091)
>  Transaction 17 of length 39
>[2005/06/16 17:40:47, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:47, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=6080
>  smt_wct=0
>  smb_bcc=0
>[2005/06/16 17:40:47, 3] smbd/process.c:switch_message(886)
>  switch message SMBtdis (pid 8891) conn 0x838a458
>[2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:47, 3] smbd/service.c:close_cnum(830)
>  192.168.15.204 (192.168.15.204) closed connection to service IPC$
>[2005/06/16 17:40:47, 3] smbd/connection.c:yield_connection(69)
>  Yielding connection to IPC$
>[2005/06/16 17:40:47, 4] smbd/vfs.c:vfs_ChDir(660)
>  vfs_ChDir to /
>[2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:47, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:47, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=6080
>  smt_wct=0
>  smb_bcc=0
>[2005/06/16 17:40:47, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,39)
>[2005/06/16 17:40:47, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,39) wrote 39
>[2005/06/16 17:40:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 35
>[2005/06/16 17:40:47, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x23
>[2005/06/16 17:40:47, 3] smbd/process.c:process_smb(1091)
>  Transaction 18 of length 39
>[2005/06/16 17:40:47, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:47, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=6144
>  smt_wct=0
>  smb_bcc=0
>[2005/06/16 17:40:47, 3] smbd/process.c:switch_message(886)
>  switch message SMBtdis (pid 8891) conn 0x8388558
>[2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:47, 4] smbd/vfs.c:vfs_ChDir(660)
>  vfs_ChDir to /tmp
>[2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:47, 3] smbd/service.c:close_cnum(830)
>  192.168.15.204 (192.168.15.204) closed connection to service IPC$
>[2005/06/16 17:40:47, 3] smbd/connection.c:yield_connection(69)
>  Yielding connection to IPC$
>[2005/06/16 17:40:47, 4] smbd/vfs.c:vfs_ChDir(660)
>  vfs_ChDir to /
>[2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:47, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:47, 5] lib/util.c:show_msg(474)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=6144
>  smt_wct=0
>  smb_bcc=0
>[2005/06/16 17:40:47, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,39)
>[2005/06/16 17:40:47, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,39) wrote 39
>[2005/06/16 17:40:47, 10] lib/util_sock.c:read_smb_length_return_keepalive(505)
>  got smb length of 39
>[2005/06/16 17:40:47, 6] smbd/process.c:process_smb(1090)
>  got message type 0x0 of len 0x27
>[2005/06/16 17:40:47, 3] smbd/process.c:process_smb(1091)
>  Transaction 19 of length 43
>[2005/06/16 17:40:47, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:47, 5] lib/util.c:show_msg(474)
>  size=39
>  smb_com=0x74
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=6208
>  smt_wct=2
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_bcc=0
>[2005/06/16 17:40:47, 3] smbd/process.c:switch_message(886)
>  switch message SMBulogoffX (pid 8891) conn 0x0
>[2005/06/16 17:40:47, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:40:47, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:40:47, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:40:47, 5] auth/auth_util.c:free_server_info(1406)
>  attempting to free (and zero) a server_info structure
>[2005/06/16 17:40:47, 3] smbd/reply.c:reply_ulogoffX(1264)
>  ulogoffX vuid=100
>[2005/06/16 17:40:47, 5] lib/util.c:show_msg(464)
>[2005/06/16 17:40:47, 5] lib/util.c:show_msg(474)
>  size=39
>  smb_com=0x74
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=6208
>  smt_wct=2
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_bcc=0
>[2005/06/16 17:40:47, 6] lib/util_sock.c:write_socket(449)
>  write_socket(5,43)
>[2005/06/16 17:40:47, 6] lib/util_sock.c:write_socket(452)
>  write_socket(5,43) wrote 43
>[2005/06/16 17:41:47, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:41:47, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:41:47, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:41:47, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:41:47, 6] param/loadparm.c:lp_file_list_changed(2715)
>  lp_file_list_changed()
>  file /etc/samba/shares/toto.conf -> /etc/samba/shares/toto.conf  last mod_time: Thu Jun 16 16:37:42 2005
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Thu Jun 16 17:39:45 2005
>  
>[2005/06/16 17:42:47, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:42:47, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:42:47, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:42:47, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:42:47, 2] smbd/process.c:timeout_processing(1368)
>  Closing idle connection
>[2005/06/16 17:42:47, 5] lib/gencache.c:gencache_shutdown(88)
>  Closing cache file
>[2005/06/16 17:42:47, 5] libsmb/namecache.c:namecache_shutdown(79)
>  namecache_shutdown: netbios namecache closed successfully.
>[2005/06/16 17:42:47, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2005/06/16 17:42:47, 5] auth/auth_util.c:debug_nt_user_token(485)
>  NT user token: (NULL)
>[2005/06/16 17:42:47, 5] auth/auth_util.c:debug_unix_user_token(506)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2005/06/16 17:42:47, 5] smbd/uid.c:change_to_root_user(296)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2005/06/16 17:42:47, 2] smbd/server.c:exit_server(609)
>  Closing connections
>[2005/06/16 17:42:47, 5] auth/auth_util.c:free_server_info(1406)
>  attempting to free (and zero) a server_info structure
>[2005/06/16 17:42:47, 3] smbd/connection.c:yield_connection(69)
>  Yielding connection to 
>[2005/06/16 17:42:47, 5] smbd/oplock.c:receive_local_message(107)
>  receive_local_message: doing select with timeout of 1 ms
>[2005/06/16 17:42:47, 3] smbd/server.c:exit_server(652)
>  Server exit (normal exit)

Actions: View

Attachments on bug 2804: 1277 | 1278 | 1461