[2005/08/11 15:41:08, 10] nsswitch/winbindd.c:client_write(558) client_write: client_write: complete response written. [2005/08/11 15:41:08, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/11 15:41:08, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn ENDGRENT [2005/08/11 15:41:08, 3] nsswitch/winbindd_group.c:winbindd_endgrent(484) [ 9875]: endgrent [2005/08/11 15:41:08, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/11 15:41:49, 6] nsswitch/winbindd.c:new_connection(356) accepted socket 19 [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn INTERFACE_VERSION [2005/08/11 15:41:49, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(261) [19881]: request interface version [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn WINBINDD_PRIV_PIPE_DIR [2005/08/11 15:41:49, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297) [19881]: request location of privileged pipe [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:client_write(569) client_write: need to write 35 extra data bytes. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 35 bytes. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:client_write(558) client_write: client_write: complete response written. [2005/08/11 15:41:49, 6] nsswitch/winbindd.c:new_connection(356) accepted socket 40 [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 0 bytes. Need 1824 more for a full request. [2005/08/11 15:41:49, 5] nsswitch/winbindd.c:winbind_client_read(475) read failed on sock 19, pid 19881: EOF [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn ENDPWENT [2005/08/11 15:41:49, 3] nsswitch/winbindd_user.c:winbindd_endpwent(375) [19881]: endpwent [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 0 bytes. Need 1824 more for a full request. [2005/08/11 15:41:49, 5] nsswitch/winbindd.c:winbind_client_read(475) read failed on sock 40, pid 19881: EOF [2005/08/11 15:41:49, 6] nsswitch/winbindd.c:new_connection(356) accepted socket 19 [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn INTERFACE_VERSION [2005/08/11 15:41:49, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(261) [19884]: request interface version [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn WINBINDD_PRIV_PIPE_DIR [2005/08/11 15:41:49, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297) [19884]: request location of privileged pipe [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:client_write(569) client_write: need to write 35 extra data bytes. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 35 bytes. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:client_write(558) client_write: client_write: complete response written. [2005/08/11 15:41:49, 6] nsswitch/winbindd.c:new_connection(356) accepted socket 40 [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 0 bytes. Need 1824 more for a full request. [2005/08/11 15:41:49, 5] nsswitch/winbindd.c:winbind_client_read(475) read failed on sock 19, pid 19884: EOF [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn ENDPWENT [2005/08/11 15:41:49, 3] nsswitch/winbindd_user.c:winbindd_endpwent(375) [19884]: endpwent [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/11 15:41:49, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 0 bytes. Need 1824 more for a full request. [2005/08/11 15:41:49, 5] nsswitch/winbindd.c:winbind_client_read(475) read failed on sock 40, pid 19884: EOF [2005/08/11 15:41:51, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 324 [2005/08/11 15:41:51, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x144 [2005/08/11 15:41:51, 3] smbd/process.c:process_smb(1091) Transaction 262 of length 328 [2005/08/11 15:41:51, 5] lib/util.c:show_msg(464) [2005/08/11 15:41:51, 5] lib/util.c:show_msg(467) size=324 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=184 smb_uid=100 smb_mid=16578 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 240 (0xF0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 240 (0xF0) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29714 (0x7412) smb_bcc=257 [2005/08/11 15:41:51, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 03 10 00 00 00 F0 00 00 00 61 03 00 ........ .....a.. [020] 00 D8 00 00 00 00 00 45 00 00 00 02 00 20 00 00 .......E ..... .. [030] 00 00 00 00 00 20 00 00 00 5C 00 5C 00 6F 00 64 ..... .. .\.\.o.d [040] 00 69 00 2D 00 6D 00 67 00 74 00 2D 00 63 00 65 .i.-.m.g .t.-.c.e [050] 00 31 00 2E 00 6C 00 61 00 62 00 32 00 30 00 30 .1...l.a .b.2.0.0 [060] 00 33 00 64 00 6F 00 6D 00 61 00 69 00 6E 00 2E .3.d.o.m .a.i.n.. [070] 00 63 00 6F 00 6D 00 00 00 00 00 00 00 00 00 00 .c.o.m.. ........ [080] 00 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 ........ ........ [090] 00 04 00 02 00 1C 00 00 00 08 00 02 00 0C 00 02 ........ ........ [0A0] 00 CE 0E 00 00 03 00 00 00 00 00 00 00 00 00 00 ........ ........ [0B0] 00 0D 00 00 00 00 00 00 00 0D 00 00 00 5C 00 5C ........ .....\.\ [0C0] 00 42 00 58 00 42 00 2D 00 32 00 30 00 30 00 33 .B.X.B.- .2.0.0.3 [0D0] 00 44 00 43 00 00 00 2D 00 0E 00 00 00 00 00 00 .D.C...- ........ [0E0] 00 0E 00 00 00 41 00 64 00 6D 00 69 00 6E 00 69 .....A.d .m.i.n.i [0F0] 00 73 00 74 00 72 00 61 00 74 00 6F 00 72 00 00 .s.t.r.a .t.o.r.. [100] 00 . [2005/08/11 15:41:51, 3] smbd/process.c:switch_message(886) switch message SMBtrans (pid 17717) conn 0x83bbdb8 [2005/08/11 15:41:51, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(158) fetch sid from uid cache 0 -> S-1-5-21-1426079282-3730378279-3702951429-1000 [2005/08/11 15:41:51, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-1426079282-3730378279-3702951429-1001 [2005/08/11 15:41:51, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-1426079282-3730378279-3702951429-1001 [2005/08/11 15:41:51, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 1 -> S-1-5-21-1426079282-3730378279-3702951429-1003 [2005/08/11 15:41:51, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 2 -> S-1-5-21-1426079282-3730378279-3702951429-1005 [2005/08/11 15:41:51, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 3 -> S-1-5-21-1426079282-3730378279-3702951429-1007 [2005/08/11 15:41:51, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 4 -> S-1-5-21-1426079282-3730378279-3702951429-1009 [2005/08/11 15:41:51, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 6 -> S-1-5-21-1426079282-3730378279-3702951429-1013 [2005/08/11 15:41:51, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 10 -> S-1-5-21-1426079282-3730378279-3702951429-1021 [2005/08/11 15:41:51, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 31 -> S-1-5-21-1426079282-3730378279-3702951429-1063 [2005/08/11 15:41:51, 10] auth/auth_util.c:debug_nt_user_token(489) NT user token of user S-1-5-21-1426079282-3730378279-3702951429-1000 contains 12 SIDs SID[ 0]: S-1-5-21-1426079282-3730378279-3702951429-1000 SID[ 1]: S-1-5-21-1426079282-3730378279-3702951429-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1426079282-3730378279-3702951429-1003 SID[ 6]: S-1-5-21-1426079282-3730378279-3702951429-1005 SID[ 7]: S-1-5-21-1426079282-3730378279-3702951429-1007 SID[ 8]: S-1-5-21-1426079282-3730378279-3702951429-1009 SID[ 9]: S-1-5-21-1426079282-3730378279-3702951429-1013 SID[ 10]: S-1-5-21-1426079282-3730378279-3702951429-1021 SID[ 11]: S-1-5-21-1426079282-3730378279-3702951429-1063 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/11 15:41:51, 3] smbd/sec_ctx.c:set_sec_ctx(287) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/11 15:41:51, 5] auth/auth_util.c:debug_nt_user_token(489) NT user token of user S-1-5-21-1426079282-3730378279-3702951429-1000 contains 12 SIDs SID[ 0]: S-1-5-21-1426079282-3730378279-3702951429-1000 SID[ 1]: S-1-5-21-1426079282-3730378279-3702951429-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1426079282-3730378279-3702951429-1003 SID[ 6]: S-1-5-21-1426079282-3730378279-3702951429-1005 SID[ 7]: S-1-5-21-1426079282-3730378279-3702951429-1007 SID[ 8]: S-1-5-21-1426079282-3730378279-3702951429-1009 SID[ 9]: S-1-5-21-1426079282-3730378279-3702951429-1013 SID[ 10]: S-1-5-21-1426079282-3730378279-3702951429-1021 SID[ 11]: S-1-5-21-1426079282-3730378279-3702951429-1063 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/11 15:41:51, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 8 supplementary groups Group[ 0]: 0 Group[ 1]: 1 Group[ 2]: 2 Group[ 3]: 3 Group[ 4]: 4 Group[ 5]: 6 Group[ 6]: 10 Group[ 7]: 31 [2005/08/11 15:41:51, 5] smbd/uid.c:change_to_user(280) change_to_user uid=(0,0) gid=(0,0) [2005/08/11 15:41:51, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=240 params=0 setup=2 [2005/08/11 15:41:51, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2005/08/11 15:41:51, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2005/08/11 15:41:51, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2005/08/11 15:41:51, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168) search for pipe pnum=7412 [2005/08/11 15:41:51, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1171) pipe name spoolss pnum=7412 (pipes_open=1) [2005/08/11 15:41:51, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "spoolss" (pnum 7412) [2005/08/11 15:41:51, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x83c9be8 max_trans_reply: 1024 [2005/08/11 15:41:51, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852) write_to_pipe: 7412 name: spoolss open: Yes len: 240 [2005/08/11 15:41:51, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 240 [2005/08/11 15:41:51, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(775) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 240 [2005/08/11 15:41:51, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(397) fill_rpc_header: data_to_copy = 240, len_needed_to_complete_hdr = 16, receive_len = 0 [2005/08/11 15:41:51, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 16 [2005/08/11 15:41:51, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 224 [2005/08/11 15:41:51, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(775) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 224 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 00 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 00f0 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000361 [2005/08/11 15:41:51, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(485) unmarshall_rpc_header: using little-endian RPC [2005/08/11 15:41:51, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(514) unmarshall_rpc_header: type = 0, flags = 3 [2005/08/11 15:41:51, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 0 [2005/08/11 15:41:51, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 224 [2005/08/11 15:41:51, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(775) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 224, incoming data = 224 [2005/08/11 15:41:51, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(719) process_complete_pdu: processing packet type 0 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 alloc_hint: 000000d8 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0004 context_id: 0000 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0006 opnum : 0045 [2005/08/11 15:41:51, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542) free_pipe_context: destroying talloc pool of size 0 [2005/08/11 15:41:51, 5] rpc_server/srv_pipe.c:api_pipe_request(1497) Requested \PIPE\spoolss [2005/08/11 15:41:51, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531) api_rpcTNP: spoolss op 0x45 - api_rpcTNP: rpc command: SPOOLSS_OPENPRINTEREX [2005/08/11 15:41:51, 6] rpc_server/srv_pipe.c:api_rpcTNP(1556) api_rpc_cmds[1].fn == 0x8140080 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_q_open_printer_ex [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 printername_ptr: 00020000 [2005/08/11 15:41:51, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 uni_max_len: 00000020 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0008 offset : 00000000 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c uni_str_len: 00000020 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 0010 buffer : \.\.o.d.i.-.m.g.t.-.c.e.1...l.a.b.2.0.0.3.d.o.m.a.i.n...c.o.m... [2005/08/11 15:41:51, 6] rpc_parse/parse_prs.c:prs_debug(82) 000050 spoolss_io_printer_default [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0050 datatype_ptr: 00000000 [2005/08/11 15:41:51, 7] rpc_parse/parse_prs.c:prs_debug(82) 000054 smb_io_unistr2 - NULL datatype [2005/08/11 15:41:51, 7] rpc_parse/parse_prs.c:prs_debug(82) 000054 spoolss_io_devmode_cont [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0054 size: 00000000 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0058 devmode_ptr: 00000000 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 005c access_required: 00000000 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0060 user_switch: 00000001 [2005/08/11 15:41:51, 6] rpc_parse/parse_prs.c:prs_debug(82) 000064 spool_io_user_level [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0064 level: 00000001 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0068 ptr: 00020004 [2005/08/11 15:41:51, 7] rpc_parse/parse_prs.c:prs_debug(82) 00006c [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 006c size: 0000001c [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0070 client_name_ptr: 00020008 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0074 user_name_ptr: 0002000c [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0078 build: 00000ece [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) 007c major: 00000003 [2005/08/11 15:41:51, 5] rpc_parse/parse_prs.c:prs_uint32(642) [2005/08/11 15:42:00, 6] nsswitch/winbindd.c:new_connection(356) accepted socket 19 [2005/08/11 15:42:00, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/11 15:42:00, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn INTERFACE_VERSION [2005/08/11 15:42:00, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(261) [19891]: request interface version [2005/08/11 15:42:00, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/11 15:42:00, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/11 15:42:00, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn WINBINDD_PRIV_PIPE_DIR [2005/08/11 15:42:00, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297) [19891]: request location of privileged pipe [2005/08/11 15:42:00, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/11 15:42:00, 10] nsswitch/winbindd.c:client_write(569) client_write: need to write 35 extra data bytes. [2005/08/11 15:42:00, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 35 bytes. [2005/08/11 15:42:00, 10] nsswitch/winbindd.c:client_write(558) client_write: client_write: complete response written. [2005/08/11 15:42:00, 6] nsswitch/winbindd.c:new_connection(356) accepted socket 40 [2005/08/11 15:42:00, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 0 bytes. Need 1824 more for a full request. [2005/08/11 15:42:00, 5] nsswitch/winbindd.c:winbind_client_read(475) read failed on sock 19, pid 19891: EOF [2005/08/11 15:42:00, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/11 15:42:00, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn GETGROUPS [2005/08/11 15:42:00, 3] nsswitch/winbindd_group.c:winbindd_getgroups(1003) [19891]: getgroups admin [2005/08/11 15:42:00, 10] nsswitch/winbindd_cache.c:fetch_cache_seqnum(286) fetch_cache_seqnum: timeout [LAB2003DOMAIN][305 @ 1123774868] [2005/08/11 15:42:00, 10] nsswitch/winbindd_rpc.c:sequence_number(878) rpc: fetch sequence_number for LAB2003DOMAIN [2005/08/11 15:42:00, 10] rpc_client/cli_samr.c:cli_samr_open_domain(186) cli_samr_open_domain with sid S-1-5-21-2613220747-1220561712-2746641428 [2005/08/11 15:42:00, 5] rpc_parse/parse_samr.c:init_samr_q_open_domain(250) samr_init_samr_q_open_domain [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 samr_io_q_open_domain [2005/08/11 15:42:00, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd pol [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 data1: 00000000 [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 data2: ecc45928 [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 data3: a576 [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a data4: 4f46 [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 000c data5: be e3 64 03 1d bd 71 43 [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0014 flags: 02000000 [2005/08/11 15:42:00, 6] rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_dom_sid2 sid [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 num_auths: 00000004 [2005/08/11 15:42:00, 7] rpc_parse/parse_prs.c:prs_debug(82) 00001c smb_io_dom_sid sid [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001c sid_rev_num: 01 [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001d num_auths : 04 [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001e id_auth[0] : 00 [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint8(584) 001f id_auth[1] : 00 [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0020 id_auth[2] : 00 [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0021 id_auth[3] : 00 [2005/08/11 15:42:00, 5] rpc_parse/parse_prs.c:prs_uint8(584)