The Samba-Bugzilla – Attachment 13930 Details for
Bug 13242
Time Machine (MacOS 10.13.3) reports "the selected network backup disk does not support the required capabilities"
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
log.smbd
log.smbd (text/plain), 1.62 MB, created by
groenveld
on 2018-01-25 21:17:16 UTC
(
hide
)
Description:
log.smbd
Filename:
MIME Type:
Creator:
groenveld
Created:
2018-01-25 21:17:16 UTC
Size:
1.62 MB
patch
obsolete
>[2018/01/25 16:06:41.860551, 3, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3868(lp_load_ex) > lp_load_ex: refreshing parameters >[2018/01/25 16:06:41.860594, 5, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1344(free_param_opts) > Freeing parametrics: >[2018/01/25 16:06:41.860685, 3, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:547(init_globals) > Initialising global parameters >[2018/01/25 16:06:41.860852, 3, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2782(lp_do_section) > Processing section "[global]" > doing parameter workgroup = WORKGROUP > doing parameter netbios name = p150em > doing parameter log level = 10 >[2018/01/25 16:06:41.861004, 5, pid=93803, effective(0, 0), real(0, 0)] ../lib/util/debug.c:744(debug_dump_status) > INFO: Current debug levels: > all: 10 > tdb: 10 > printdrivers: 10 > lanman: 10 > smb: 10 > rpc_parse: 10 > rpc_srv: 10 > rpc_cli: 10 > passdb: 10 > sam: 10 > auth: 10 > winbind: 10 > vfs: 10 > idmap: 10 > quota: 10 > acls: 10 > locking: 10 > msdfs: 10 > dmapi: 10 > registry: 10 > scavenger: 10 > dns: 10 > ldb: 10 > tevent: 10 > auth_audit: 10 > auth_json_audit: 10 > kerberos: 10 > drs_repl: 10 > doing parameter passdb backend = tdbsam > doing parameter vfs objects = zfsacl >[2018/01/25 16:06:41.861378, 2, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2799(lp_do_section) > Processing section "[timecapsule]" >[2018/01/25 16:06:41.861437, 8, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1460(add_a_service) > add_a_service: Creating snum = 0 for timecapsule >[2018/01/25 16:06:41.861475, 10, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1501(hash_a_service) > hash_a_service: creating servicehash >[2018/01/25 16:06:41.861508, 10, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1510(hash_a_service) > hash_a_service: hashing index 0 for service name timecapsule > doing parameter path = /foo/timecapsule > doing parameter writable = yes > doing parameter browsable = yes > doing parameter read only = no > doing parameter guest ok = no > doing parameter fruit:time machine = yes >[2018/01/25 16:06:41.861814, 4, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3910(lp_load_ex) > pm_process() returned Yes >[2018/01/25 16:06:41.861845, 7, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4229(lp_servicenumber) > lp_servicenumber: couldn't find homes >[2018/01/25 16:06:41.861896, 8, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1460(add_a_service) > add_a_service: Creating snum = 1 for IPC$ >[2018/01/25 16:06:41.861922, 10, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1510(hash_a_service) > hash_a_service: hashing index 1 for service name IPC$ >[2018/01/25 16:06:41.861964, 3, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1617(lp_add_ipc) > adding IPC service >[2018/01/25 16:06:41.862032, 6, pid=93803, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2332(lp_file_list_changed) > lp_file_list_changed() > file /etc/opt/samba/smb.conf -> /etc/opt/samba/smb.conf last mod_time: Tue Jan 23 12:05:28 2018 > >[2018/01/25 16:06:41.862308, 2, pid=93803, effective(0, 0), real(0, 0)] ../source3/lib/interface.c:345(add_interface) > added interface re0 ip=10.0.0.254 bcast=10.0.0.255 netmask=255.255.255.0 >[2018/01/25 16:06:41.862409, 3, pid=93803, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1808(main) > loaded services >[2018/01/25 16:06:41.862449, 5, pid=93803, effective(0, 0), real(0, 0)] ../source3/lib/util_names.c:152(init_names) > Netbios name list:- > my_netbios_names[0]="P150EM" >[2018/01/25 16:06:41.862615, 1, pid=93803, effective(0, 0), real(0, 0)] ../source3/profile/profile_dummy.c:30(set_profile_level) > INFO: Profiling support unavailable in this build. >[2018/01/25 16:06:41.862698, 3, pid=93803, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1828(main) > Standard input is not a socket, assuming -D option >[2018/01/25 16:06:41.862731, 3, pid=93803, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1840(main) > Becoming a daemon. >[2018/01/25 16:06:41.864097, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:157(msg_dgm_ref_destructor) > msg_dgm_ref_destructor: refs=0x0 >[2018/01/25 16:06:41.864318, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:79(messaging_dgm_ref) > messaging_dgm_ref: messaging_dgm_init returned No error: 0 >[2018/01/25 16:06:41.864372, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:108(messaging_dgm_ref) > messaging_dgm_ref: unique = 6590470569517873504 >[2018/01/25 16:06:41.864559, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) > Attempting to register passdb backend smbpasswd >[2018/01/25 16:06:41.864649, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) > Successfully added passdb backend 'smbpasswd' >[2018/01/25 16:06:41.864690, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) > Attempting to register passdb backend tdbsam >[2018/01/25 16:06:41.864723, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) > Successfully added passdb backend 'tdbsam' >[2018/01/25 16:06:41.864746, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) > Attempting to register passdb backend samba_dsdb >[2018/01/25 16:06:41.864785, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) > Successfully added passdb backend 'samba_dsdb' >[2018/01/25 16:06:41.864809, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) > Attempting to register passdb backend samba4 >[2018/01/25 16:06:41.864841, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) > Successfully added passdb backend 'samba4' >[2018/01/25 16:06:41.864871, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) > Attempting to register passdb backend ldapsam >[2018/01/25 16:06:41.864902, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) > Successfully added passdb backend 'ldapsam' >[2018/01/25 16:06:41.864940, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:79(smb_register_passdb) > Attempting to register passdb backend NDS_ldapsam >[2018/01/25 16:06:41.864972, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:92(smb_register_passdb) > Successfully added passdb backend 'NDS_ldapsam' >[2018/01/25 16:06:41.864997, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:155(make_pdb_method_name) > Attempting to find a passdb backend to match tdbsam (tdbsam) >[2018/01/25 16:06:41.865030, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:176(make_pdb_method_name) > Found pdb backend tdbsam >[2018/01/25 16:06:41.865075, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:187(make_pdb_method_name) > pdb backend tdbsam has a valid init >[2018/01/25 16:06:41.868343, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_version_global.tdb >[2018/01/25 16:06:41.868382, 10, pid=93804, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_version_global.tdb 2:<none> 3:<none> >[2018/01/25 16:06:41.868421, 10, pid=93804, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 736D62587372765F7665 >[2018/01/25 16:06:41.868475, 10, pid=93804, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013505a0 >[2018/01/25 16:06:41.868770, 10, pid=93804, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 736D62587372765F7665 >[2018/01/25 16:06:41.868799, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_version_global.tdb >[2018/01/25 16:06:41.868839, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:250(smbXsrv_version_global_init) > smbXsrv_version_global_init >[2018/01/25 16:06:41.868862, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_version.c:251(smbXsrv_version_global_init) >[2018/01/25 16:06:41.868882, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_version_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_version_globalU(case 0) > info0 : * > info0: struct smbXsrv_version_global0 > db_rec : NULL > num_nodes : 0x00000001 (1) > nodes: ARRAY(1) > nodes: struct smbXsrv_version_node0 > server_id: struct server_id > pid : 0x0000000000016e6c (93804) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0x5b760e10aec77960 (6590470569517873504) > min_version : SMBXSRV_VERSION_0 (0) > max_version : SMBXSRV_VERSION_0 (0) > current_version : SMBXSRV_VERSION_0 (0) >[2018/01/25 16:06:42.018830, 3, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/util_procid.c:54(pid_to_procid) > pid_to_procid: messaging_dgm_get_unique failed: No such file or directory >[2018/01/25 16:06:42.020975, 10, pid=93807, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:157(msg_dgm_ref_destructor) > msg_dgm_ref_destructor: refs=0x0 >[2018/01/25 16:06:42.021389, 10, pid=93807, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:79(messaging_dgm_ref) > messaging_dgm_ref: messaging_dgm_init returned No error: 0 >[2018/01/25 16:06:42.021440, 10, pid=93807, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:108(messaging_dgm_ref) > messaging_dgm_ref: unique = 8629423637712545112 >[2018/01/25 16:06:42.021613, 5, pid=93807, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 794 - private_data=0x801394210 >[2018/01/25 16:06:42.021659, 5, pid=93807, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 795 - private_data=0x801394210 >[2018/01/25 16:06:42.021685, 5, pid=93807, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 796 - private_data=0x801394210 >[2018/01/25 16:06:42.022108, 10, pid=93807, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:1430(messaging_dgm_send) > messaging_dgm_send: Sending message to 93804 >[2018/01/25 16:06:42.028193, 10, pid=93808, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:157(msg_dgm_ref_destructor) > msg_dgm_ref_destructor: refs=0x0 >[2018/01/25 16:06:42.028582, 10, pid=93808, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:79(messaging_dgm_ref) > messaging_dgm_ref: messaging_dgm_init returned No error: 0 >[2018/01/25 16:06:42.028628, 10, pid=93808, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:108(messaging_dgm_ref) > messaging_dgm_ref: unique = 11146294452028437879 >[2018/01/25 16:06:42.028686, 5, pid=93808, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 13 - private_data=0x801394080 >[2018/01/25 16:06:42.028713, 5, pid=93808, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 788 - private_data=0x801394080 >[2018/01/25 16:06:42.028752, 5, pid=93808, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 773 - private_data=0x0 >[2018/01/25 16:06:42.028809, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:593(cleanupd_init) > cleanupd_init: Started cleanupd pid=93808 >[2018/01/25 16:06:42.029016, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 789 - private_data=0x801342a20 >[2018/01/25 16:06:42.029289, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:770(regdb_init) > regdb_init: registry db openend. refcount reset (1) >[2018/01/25 16:06:42.029356, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:70(reghook_cache_init) > reghook_cache_init: new tree with default ops 0x8040ae1c0 for key [] >[2018/01/25 16:06:42.029639, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2018/01/25 16:06:42.029709, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Samba Printer Port] len[2] >[2018/01/25 16:06:42.029742, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2018/01/25 16:06:42.029806, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[DefaultSpoolDirectory] len[70] >[2018/01/25 16:06:42.029839, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2018/01/25 16:06:42.029904, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[DisplayName] len[20] >[2018/01/25 16:06:42.029936, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[1]: name[ErrorControl] len[4] >[2018/01/25 16:06:42.029975, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2018/01/25 16:06:42.030022, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[DisplayName] len[20] >[2018/01/25 16:06:42.030061, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[1]: name[ErrorControl] len[4] >[2018/01/25 16:06:42.030093, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x8021f43e0 for key [\HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] >[2018/01/25 16:06:42.030133, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2018/01/25 16:06:42.030180, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\Print\Printers] to tree >[2018/01/25 16:06:42.030204, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2018/01/25 16:06:42.030236, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x8040ae1c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2018/01/25 16:06:42.030278, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2018/01/25 16:06:42.030316, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] to tree >[2018/01/25 16:06:42.030352, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2018/01/25 16:06:42.030377, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x8040ae1c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2018/01/25 16:06:42.030411, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2018/01/25 16:06:42.030440, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] to tree >[2018/01/25 16:06:42.030463, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2018/01/25 16:06:42.030495, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x8040ae1c0 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\PackageInstallation] >[2018/01/25 16:06:42.030613, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2018/01/25 16:06:42.030643, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\PackageInstallation] to tree >[2018/01/25 16:06:42.030678, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2018/01/25 16:06:42.030705, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x8021f4440 for key [\HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] >[2018/01/25 16:06:42.030739, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2018/01/25 16:06:42.030769, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] to tree >[2018/01/25 16:06:42.030792, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2018/01/25 16:06:42.030826, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x8040ae580 for key [\HKLM\SOFTWARE\Samba\smbconf] >[2018/01/25 16:06:42.030850, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2018/01/25 16:06:42.030877, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree >[2018/01/25 16:06:42.030917, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2018/01/25 16:06:42.030943, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x8021f44a0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] >[2018/01/25 16:06:42.030966, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2018/01/25 16:06:42.031015, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] to tree >[2018/01/25 16:06:42.031040, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2018/01/25 16:06:42.031064, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x8021f4500 for key [\HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] >[2018/01/25 16:06:42.031099, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2018/01/25 16:06:42.031127, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] to tree >[2018/01/25 16:06:42.031160, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2018/01/25 16:06:42.031186, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x8021f4560 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] >[2018/01/25 16:06:42.031209, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2018/01/25 16:06:42.031249, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters] to tree >[2018/01/25 16:06:42.031273, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2018/01/25 16:06:42.031296, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x8021f45c0 for key [\HKPT] >[2018/01/25 16:06:42.031333, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2018/01/25 16:06:42.031359, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKPT] to tree >[2018/01/25 16:06:42.031382, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2018/01/25 16:06:42.031418, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x8021f4620 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] >[2018/01/25 16:06:42.031442, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2018/01/25 16:06:42.031467, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] to tree >[2018/01/25 16:06:42.031505, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2018/01/25 16:06:42.031532, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x8021f4680 for key [\HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] >[2018/01/25 16:06:42.031574, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2018/01/25 16:06:42.031604, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] to tree >[2018/01/25 16:06:42.031630, 8, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2018/01/25 16:06:42.031673, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (1->0) >[2018/01/25 16:06:42.031897, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user nobody >[2018/01/25 16:06:42.031933, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2018/01/25 16:06:42.033524, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2018/01/25 16:06:42.033609, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user P150EM\nobody >[2018/01/25 16:06:42.033636, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is p150em\nobody >[2018/01/25 16:06:42.033759, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:128(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as given is P150EM\nobody >[2018/01/25 16:06:42.033860, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:141(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as uppercase is P150EM\NOBODY >[2018/01/25 16:06:42.033959, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:153(Get_Pwnam_internals) > Checking combinations of 0 uppercase letters in p150em\nobody >[2018/01/25 16:06:42.034000, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals didn't find user [P150EM\nobody]! >[2018/01/25 16:06:42.034024, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user nobody >[2018/01/25 16:06:42.034047, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2018/01/25 16:06:42.034086, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2018/01/25 16:06:42.034136, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:247(create_local_nt_token_from_info3) > Create local NT token for nobody >[2018/01/25 16:06:42.034177, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user nobody >[2018/01/25 16:06:42.034216, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is nobody >[2018/01/25 16:06:42.034241, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals did find user [nobody]! >[2018/01/25 16:06:42.034277, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) > sys_getgrouplist: user [nobody] >[2018/01/25 16:06:42.034713, 5, pid=93804, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:72(gencache_init) > Opening cache file at /var/opt/samba/cache/gencache.tdb >[2018/01/25 16:06:42.034829, 5, pid=93804, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:100(gencache_init) > Opening cache file at /var/opt/samba/lock/gencache_notrans.tdb >[2018/01/25 16:06:42.136946, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 65534 -> sid S-1-22-2-65534 >[2018/01/25 16:06:42.137319, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.137356, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.137389, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.137442, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.137468, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.137541, 3, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:559(finalize_local_nt_token) > Failed to fetch domain sid for WORKGROUP >[2018/01/25 16:06:42.137590, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.137626, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.137651, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.137688, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.137712, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.137734, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.137788, 3, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:591(finalize_local_nt_token) > Failed to fetch domain sid for WORKGROUP >[2018/01/25 16:06:42.137817, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.137842, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.137878, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.137901, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.137923, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.137958, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.138082, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.138197, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-21-3769338274-3953817585-4204003668-501] >[2018/01/25 16:06:42.138251, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-21-3769338274-3953817585-4204003668-514] >[2018/01/25 16:06:42.138282, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-2-65534] >[2018/01/25 16:06:42.138315, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids) > get_privileges_for_sids: sid = S-1-1-0 > Privilege set: 0x0 >[2018/01/25 16:06:42.138382, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-2] >[2018/01/25 16:06:42.138425, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-32-546] >[2018/01/25 16:06:42.138518, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) > Parsing value for key [IDMAP/SID2XID/S-1-5-21-3769338274-3953817585-4204003668-501]: value=[65534:U] >[2018/01/25 16:06:42.138546, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) > Parsing value for key [IDMAP/SID2XID/S-1-5-21-3769338274-3953817585-4204003668-501]: id=[65534], endptr=[:U] >[2018/01/25 16:06:42.138598, 10, pid=93804, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) > Adding cache entry with key=[IDMAP/SID2XID/S-1-5-21-3769338274-3953817585-4204003668-514] and timeout=[Wed Dec 31 19:00:00 1969 EST] (-1516914402 seconds in the past) >[2018/01/25 16:06:42.138716, 10, pid=93804, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:640(gencache_stabilize) > Could not get allrecord lock on gencache_notrans.tdb: Locking error >[2018/01/25 16:06:42.138778, 10, pid=93804, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) > Adding cache entry with key=[IDMAP/SID2XID/S-1-1-0] and timeout=[Wed Dec 31 19:00:00 1969 EST] (-1516914402 seconds in the past) >[2018/01/25 16:06:42.138855, 10, pid=93804, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:640(gencache_stabilize) > Could not get allrecord lock on gencache_notrans.tdb: Locking error >[2018/01/25 16:06:42.138896, 10, pid=93804, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) > Adding cache entry with key=[IDMAP/SID2XID/S-1-5-2] and timeout=[Wed Dec 31 19:00:00 1969 EST] (-1516914402 seconds in the past) >[2018/01/25 16:06:42.138986, 10, pid=93804, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:640(gencache_stabilize) > Could not get allrecord lock on gencache_notrans.tdb: Locking error >[2018/01/25 16:06:42.139026, 10, pid=93804, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) > Adding cache entry with key=[IDMAP/SID2XID/S-1-5-32-546] and timeout=[Wed Dec 31 19:00:00 1969 EST] (-1516914402 seconds in the past) >[2018/01/25 16:06:42.139111, 10, pid=93804, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:640(gencache_stabilize) > Could not get allrecord lock on gencache_notrans.tdb: Locking error >[2018/01/25 16:06:42.139210, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1395(sids_to_unixids) > wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE >[2018/01/25 16:06:42.139256, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.139281, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.139305, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.139346, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.139369, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.139432, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1748(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 514. >[2018/01/25 16:06:42.139502, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2018/01/25 16:06:42.139530, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.139553, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:06:42.139593, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.139616, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.139739, 4, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:558(tdbsam_open) > tdbsam_open: successfully opened /var/opt/samba/private/passdb.tdb >[2018/01/25 16:06:42.139796, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:658(tdbsam_getsampwrid) > pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202. >[2018/01/25 16:06:42.139837, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.139880, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1824(lookup_global_sam_rid) > Can't find a unix id for an unmapped group >[2018/01/25 16:06:42.139904, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1534(pdb_default_sid_to_id) > SID S-1-5-21-3769338274-3953817585-4204003668-514 belongs to our domain, but there is no corresponding object in the database. >[2018/01/25 16:06:42.139936, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.139978, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-21-3769338274-3953817585-4204003668-514 >[2018/01/25 16:06:42.140005, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.140029, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.140068, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.140092, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.140114, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.140171, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1748(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 514. >[2018/01/25 16:06:42.140201, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2018/01/25 16:06:42.140241, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.140265, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:06:42.140288, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.140310, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.140383, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:658(tdbsam_getsampwrid) > pdb_getsampwrid (TDB): error looking up RID 514 by key RID_00000202. >[2018/01/25 16:06:42.140422, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.140476, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1824(lookup_global_sam_rid) > Can't find a unix id for an unmapped group >[2018/01/25 16:06:42.140499, 5, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1534(pdb_default_sid_to_id) > SID S-1-5-21-3769338274-3953817585-4204003668-514 belongs to our domain, but there is no corresponding object in the database. >[2018/01/25 16:06:42.140548, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.140576, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-21-3769338274-3953817585-4204003668-514 >[2018/01/25 16:06:42.140603, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.140645, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.140668, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.140691, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.140731, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.140785, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.140810, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-1-0 >[2018/01/25 16:06:42.140855, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.140879, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.140901, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.140941, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.140964, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.141008, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.141050, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-1-0 >[2018/01/25 16:06:42.141076, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.141099, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.141140, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.141165, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.141189, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.141252, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.141276, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-2 >[2018/01/25 16:06:42.141301, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.141348, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.141371, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.141394, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.141435, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.141478, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.141502, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-2 >[2018/01/25 16:06:42.141547, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.141571, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.141594, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.141634, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.141657, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.141705, 10, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1562(pdb_default_sid_to_id) > Could not find map for sid S-1-5-32-546 >[2018/01/25 16:06:42.141758, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.141783, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2018/01/25 16:06:42.141808, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.141851, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.141874, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.141896, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.141948, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.141996, 10, pid=93804, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1562(pdb_default_sid_to_id) > Could not find map for sid S-1-5-32-546 >[2018/01/25 16:06:42.142028, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.142083, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-32-546 >[2018/01/25 16:06:42.142116, 10, pid=93804, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:611(create_local_token) > Could not convert SID S-1-5-21-3769338274-3953817585-4204003668-514 to gid, ignoring it >[2018/01/25 16:06:42.142153, 10, pid=93804, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:611(create_local_token) > Could not convert SID S-1-1-0 to gid, ignoring it >[2018/01/25 16:06:42.142205, 10, pid=93804, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:611(create_local_token) > Could not convert SID S-1-5-2 to gid, ignoring it >[2018/01/25 16:06:42.142229, 10, pid=93804, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:611(create_local_token) > Could not convert SID S-1-5-32-546 to gid, ignoring it >[2018/01/25 16:06:42.142285, 10, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-3769338274-3953817585-4204003668-501 > SID[ 1]: S-1-5-21-3769338274-3953817585-4204003668-514 > SID[ 2]: S-1-22-2-65534 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-32-546 > SID[ 6]: S-1-22-1-65534 > Privileges (0x 0): > Rights (0x 0): >[2018/01/25 16:06:42.142435, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 65534 > Primary group is 65534 and contains 1 supplementary groups > Group[ 0]: 65534 >[2018/01/25 16:06:42.142508, 1, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/files.c:218(file_init_global) > file_init_global: Information only: requested 467820 open files, 59392 are available. >[2018/01/25 16:06:42.144923, 3, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/svcctl/srv_svcctl_reg.c:565(svcctl_init_winreg) > Initialise the svcctl registry keys if needed. >[2018/01/25 16:06:42.144999, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.145026, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.145049, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.145093, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.145116, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.145206, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.145256, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:887(regdb_open) > regdb_open: registry db opened. refcount reset (1) >[2018/01/25 16:06:42.145686, 4, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:205(make_internal_rpc_pipe_p) > Create pipe requested winreg >[2018/01/25 16:06:42.145762, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:223(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe winreg >[2018/01/25 16:06:42.145794, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:240(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe winreg >[2018/01/25 16:06:42.146056, 4, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:245(make_internal_rpc_pipe_p) > Created internal pipe winreg >[2018/01/25 16:06:42.146306, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > in: struct winreg_OpenHKLM > system_name : NULL > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2018/01/25 16:06:42.146590, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [HKLM] >[2018/01/25 16:06:42.146641, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (1->2) >[2018/01/25 16:06:42.146671, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM] >[2018/01/25 16:06:42.146695, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM] >[2018/01/25 16:06:42.146742, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.146766, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM] >[2018/01/25 16:06:42.146836, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.146943, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > out: struct winreg_OpenHKLM > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-6a5a-e2466c6e0100 > result : WERR_OK >[2018/01/25 16:06:42.147328, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > in: struct winreg_OpenKey > parent_handle : * > parent_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-6a5a-e2466c6e0100 > keyname: struct winreg_String > name_len : 0x0044 (68) > name_size : 0x0044 (68) > name : * > name : 'SYSTEM\CurrentControlSet\Services' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2018/01/25 16:06:42.147795, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.147875, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2018/01/25 16:06:42.147928, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (2->3) >[2018/01/25 16:06:42.147957, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2018/01/25 16:06:42.148002, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2018/01/25 16:06:42.148030, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.148052, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM] >[2018/01/25 16:06:42.148120, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2018/01/25 16:06:42.148149, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (3->4) >[2018/01/25 16:06:42.148175, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.148222, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.148249, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.148271, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.148349, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2018/01/25 16:06:42.148377, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.148427, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.148452, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.148479, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.148525, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.148603, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.148632, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (4->3) >[2018/01/25 16:06:42.148685, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[2] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.148763, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > out: struct winreg_OpenKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-6a5a-e2466c6e0100 > result : WERR_OK >[2018/01/25 16:06:42.148959, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > in: struct winreg_QueryInfoKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-6a5a-e2466c6e0100 > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL >[2018/01/25 16:06:42.149201, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.149315, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services' (ops 0x8040ae1c0) >[2018/01/25 16:06:42.149343, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.149380, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2090(regdb_get_secdesc) > regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.149455, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > out: struct winreg_QueryInfoKey > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL > num_subkeys : * > num_subkeys : 0x00000007 (7) > max_subkeylen : * > max_subkeylen : 0x0000001c (28) > max_classlen : * > max_classlen : 0x00000000 (0) > num_values : * > num_values : 0x00000000 (0) > max_valnamelen : * > max_valnamelen : 0x00000002 (2) > max_valbufsize : * > max_valbufsize : 0x00000000 (0) > secdescsize : * > secdescsize : 0x00000078 (120) > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2018/01/25 16:06:42.149977, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-6a5a-e2466c6e0100 > enum_index : 0x00000000 (0) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2018/01/25 16:06:42.150324, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.150427, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.150453, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x001a (26) > size : 0x001e (30) > name : * > name : 'LanmanServer' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2018/01/25 16:06:42.150773, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-6a5a-e2466c6e0100 > enum_index : 0x00000001 (1) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2018/01/25 16:06:42.151137, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.151217, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.151270, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x0012 (18) > size : 0x001e (30) > name : * > name : 'Eventlog' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2018/01/25 16:06:42.151594, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-6a5a-e2466c6e0100 > enum_index : 0x00000002 (2) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2018/01/25 16:06:42.151937, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.152041, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.152067, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x000c (12) > size : 0x001e (30) > name : * > name : 'Tcpip' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2018/01/25 16:06:42.152390, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-6a5a-e2466c6e0100 > enum_index : 0x00000003 (3) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2018/01/25 16:06:42.152763, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.152840, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.152893, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x0012 (18) > size : 0x001e (30) > name : * > name : 'Netlogon' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2018/01/25 16:06:42.153212, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-6a5a-e2466c6e0100 > enum_index : 0x00000004 (4) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2018/01/25 16:06:42.153567, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.153674, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.153700, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x0010 (16) > size : 0x001e (30) > name : * > name : 'Spooler' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2018/01/25 16:06:42.154021, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-6a5a-e2466c6e0100 > enum_index : 0x00000005 (5) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2018/01/25 16:06:42.154398, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.154475, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.154545, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x001e (30) > size : 0x001e (30) > name : * > name : 'RemoteRegistry' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2018/01/25 16:06:42.154891, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > in: struct winreg_EnumKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-6a5a-e2466c6e0100 > enum_index : 0x00000006 (6) > name : * > name: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x001e (30) > name : * > name : '' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) >[2018/01/25 16:06:42.155241, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.155356, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:422(_winreg_EnumKey) > _winreg_EnumKey: enumerating key [HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.155382, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_EnumKey: struct winreg_EnumKey > out: struct winreg_EnumKey > name : * > name: struct winreg_StringBuf > length : 0x000a (10) > size : 0x001e (30) > name : * > name : 'WINS' > keyclass : * > keyclass: struct winreg_StringBuf > length : 0x0000 (0) > size : 0x0002 (2) > name : * > name : '' > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2018/01/25 16:06:42.155756, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0054 (84) > name_size : 0x0054 (84) > name : * > name : 'SYSTEM\CurrentControlSet\Services\Spooler' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2018/01/25 16:06:42.156330, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.156438, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler' >[2018/01/25 16:06:42.156467, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.156493, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.156550, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2018/01/25 16:06:42.156576, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (3->4) >[2018/01/25 16:06:42.156634, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2018/01/25 16:06:42.156658, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2018/01/25 16:06:42.156683, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.156738, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM] >[2018/01/25 16:06:42.156788, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.156815, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2018/01/25 16:06:42.156873, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.156900, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.156954, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.156982, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.157004, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.157092, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.157123, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.157148, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2018/01/25 16:06:42.157207, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.157236, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.157291, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.157322, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.157345, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.157454, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.157484, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Spooler] >[2018/01/25 16:06:42.157509, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.157569, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2018/01/25 16:06:42.157593, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2018/01/25 16:06:42.157651, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.157676, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2018/01/25 16:06:42.157722, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.157786, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.157863, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-6a5a-e2466c6e0100 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2018/01/25 16:06:42.158124, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2018/01/25 16:06:42.158477, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.158557, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Start] >[2018/01/25 16:06:42.158618, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.158643, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler' (ops 0x8040ae1c0) >[2018/01/25 16:06:42.158702, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2018/01/25 16:06:42.158741, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Start] len[4] >[2018/01/25 16:06:42.158805, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[1]: name[Type] len[4] >[2018/01/25 16:06:42.158833, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[2]: name[ErrorControl] len[4] >[2018/01/25 16:06:42.158915, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[3]: name[ObjectName] len[24] >[2018/01/25 16:06:42.158945, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[4]: name[DisplayName] len[28] >[2018/01/25 16:06:42.158977, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[5]: name[ImagePath] len[54] >[2018/01/25 16:06:42.159058, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[6]: name[Description] len[106] >[2018/01/25 16:06:42.159086, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.159204, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2018/01/25 16:06:42.159546, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.159656, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Type] >[2018/01/25 16:06:42.159685, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.159713, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.159829, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2018/01/25 16:06:42.160165, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.160280, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ErrorControl] >[2018/01/25 16:06:42.160306, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.160372, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.160461, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2018/01/25 16:06:42.161188, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.161264, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ObjectName] >[2018/01/25 16:06:42.161330, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.161357, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.161482, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(28) > [0] : 0x50 (80) > [1] : 0x00 (0) > [2] : 0x72 (114) > [3] : 0x00 (0) > [4] : 0x69 (105) > [5] : 0x00 (0) > [6] : 0x6e (110) > [7] : 0x00 (0) > [8] : 0x74 (116) > [9] : 0x00 (0) > [10] : 0x20 (32) > [11] : 0x00 (0) > [12] : 0x53 (83) > [13] : 0x00 (0) > [14] : 0x70 (112) > [15] : 0x00 (0) > [16] : 0x6f (111) > [17] : 0x00 (0) > [18] : 0x6f (111) > [19] : 0x00 (0) > [20] : 0x6c (108) > [21] : 0x00 (0) > [22] : 0x65 (101) > [23] : 0x00 (0) > [24] : 0x72 (114) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > size : 0x0000001c (28) >[2018/01/25 16:06:42.162274, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.162352, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:DisplayName] >[2018/01/25 16:06:42.162416, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.162444, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.162570, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(54) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x70 (112) > [5] : 0x00 (0) > [6] : 0x74 (116) > [7] : 0x00 (0) > [8] : 0x2f (47) > [9] : 0x00 (0) > [10] : 0x73 (115) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6d (109) > [15] : 0x00 (0) > [16] : 0x62 (98) > [17] : 0x00 (0) > [18] : 0x61 (97) > [19] : 0x00 (0) > [20] : 0x2f (47) > [21] : 0x00 (0) > [22] : 0x6c (108) > [23] : 0x00 (0) > [24] : 0x69 (105) > [25] : 0x00 (0) > [26] : 0x62 (98) > [27] : 0x00 (0) > [28] : 0x2f (47) > [29] : 0x00 (0) > [30] : 0x73 (115) > [31] : 0x00 (0) > [32] : 0x76 (118) > [33] : 0x00 (0) > [34] : 0x63 (99) > [35] : 0x00 (0) > [36] : 0x63 (99) > [37] : 0x00 (0) > [38] : 0x74 (116) > [39] : 0x00 (0) > [40] : 0x6c (108) > [41] : 0x00 (0) > [42] : 0x2f (47) > [43] : 0x00 (0) > [44] : 0x73 (115) > [45] : 0x00 (0) > [46] : 0x6d (109) > [47] : 0x00 (0) > [48] : 0x62 (98) > [49] : 0x00 (0) > [50] : 0x64 (100) > [51] : 0x00 (0) > [52] : 0x00 (0) > [53] : 0x00 (0) > size : 0x00000036 (54) >[2018/01/25 16:06:42.163890, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.163968, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:ImagePath] >[2018/01/25 16:06:42.164054, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.164081, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.164205, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(106) > [0] : 0x49 (73) > [1] : 0x00 (0) > [2] : 0x6e (110) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x72 (114) > [9] : 0x00 (0) > [10] : 0x6e (110) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6c (108) > [15] : 0x00 (0) > [16] : 0x20 (32) > [17] : 0x00 (0) > [18] : 0x73 (115) > [19] : 0x00 (0) > [20] : 0x65 (101) > [21] : 0x00 (0) > [22] : 0x72 (114) > [23] : 0x00 (0) > [24] : 0x76 (118) > [25] : 0x00 (0) > [26] : 0x69 (105) > [27] : 0x00 (0) > [28] : 0x63 (99) > [29] : 0x00 (0) > [30] : 0x65 (101) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x66 (102) > [35] : 0x00 (0) > [36] : 0x6f (111) > [37] : 0x00 (0) > [38] : 0x72 (114) > [39] : 0x00 (0) > [40] : 0x20 (32) > [41] : 0x00 (0) > [42] : 0x73 (115) > [43] : 0x00 (0) > [44] : 0x70 (112) > [45] : 0x00 (0) > [46] : 0x6f (111) > [47] : 0x00 (0) > [48] : 0x6f (111) > [49] : 0x00 (0) > [50] : 0x6c (108) > [51] : 0x00 (0) > [52] : 0x69 (105) > [53] : 0x00 (0) > [54] : 0x6e (110) > [55] : 0x00 (0) > [56] : 0x67 (103) > [57] : 0x00 (0) > [58] : 0x20 (32) > [59] : 0x00 (0) > [60] : 0x66 (102) > [61] : 0x00 (0) > [62] : 0x69 (105) > [63] : 0x00 (0) > [64] : 0x6c (108) > [65] : 0x00 (0) > [66] : 0x65 (101) > [67] : 0x00 (0) > [68] : 0x73 (115) > [69] : 0x00 (0) > [70] : 0x20 (32) > [71] : 0x00 (0) > [72] : 0x74 (116) > [73] : 0x00 (0) > [74] : 0x6f (111) > [75] : 0x00 (0) > [76] : 0x20 (32) > [77] : 0x00 (0) > [78] : 0x70 (112) > [79] : 0x00 (0) > [80] : 0x72 (114) > [81] : 0x00 (0) > [82] : 0x69 (105) > [83] : 0x00 (0) > [84] : 0x6e (110) > [85] : 0x00 (0) > [86] : 0x74 (116) > [87] : 0x00 (0) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x64 (100) > [91] : 0x00 (0) > [92] : 0x65 (101) > [93] : 0x00 (0) > [94] : 0x76 (118) > [95] : 0x00 (0) > [96] : 0x69 (105) > [97] : 0x00 (0) > [98] : 0x63 (99) > [99] : 0x00 (0) > [100] : 0x65 (101) > [101] : 0x00 (0) > [102] : 0x73 (115) > [103] : 0x00 (0) > [104] : 0x00 (0) > [105] : 0x00 (0) > size : 0x0000006a (106) >[2018/01/25 16:06:42.166486, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.166563, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler:Description] >[2018/01/25 16:06:42.166633, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.166661, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.166801, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000003-0000-0000-6a5a-e2466c6e0100 >[2018/01/25 16:06:42.166942, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.167018, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.167140, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2018/01/25 16:06:42.167169, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (4->3) >[2018/01/25 16:06:42.167239, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2018/01/25 16:06:42.167422, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0066 (102) > name_size : 0x0066 (102) > name : * > name : 'SYSTEM\CurrentControlSet\Services\Spooler\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2018/01/25 16:06:42.167989, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.168109, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\Spooler\Security' >[2018/01/25 16:06:42.168179, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.168206, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.168230, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2018/01/25 16:06:42.168299, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (3->4) >[2018/01/25 16:06:42.168328, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2018/01/25 16:06:42.168355, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2018/01/25 16:06:42.168424, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.168448, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM] >[2018/01/25 16:06:42.168496, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.168567, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2018/01/25 16:06:42.168593, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.168663, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.168688, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.168713, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.168778, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.168831, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.168861, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.168887, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2018/01/25 16:06:42.168913, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.168940, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.168964, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.168991, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.169014, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.169091, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.169121, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.169147, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Spooler] >[2018/01/25 16:06:42.169173, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.169199, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2018/01/25 16:06:42.169224, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2018/01/25 16:06:42.169251, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.169275, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler] >[2018/01/25 16:06:42.169323, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.169352, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2018/01/25 16:06:42.169377, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.169406, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2018/01/25 16:06:42.169434, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2018/01/25 16:06:42.169462, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.169485, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2018/01/25 16:06:42.169525, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.169554, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.169633, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000004-0000-0000-6a5a-e2466c6e0100 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2018/01/25 16:06:42.169832, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000004-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2018/01/25 16:06:42.171786, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.171864, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security:Security] >[2018/01/25 16:06:42.171891, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.171916, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security' (ops 0x8040ae1c0) >[2018/01/25 16:06:42.171942, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] >[2018/01/25 16:06:42.171981, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Security] len[120] >[2018/01/25 16:06:42.172010, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.172091, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000004-0000-0000-6a5a-e2466c6e0100 >[2018/01/25 16:06:42.172191, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.172272, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.172351, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2018/01/25 16:06:42.172377, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (4->3) >[2018/01/25 16:06:42.172403, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2018/01/25 16:06:42.172546, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0056 (86) > name_size : 0x0056 (86) > name : * > name : 'SYSTEM\CurrentControlSet\Services\NETLOGON' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2018/01/25 16:06:42.172995, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.173073, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON' >[2018/01/25 16:06:42.173100, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.173126, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.173151, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2018/01/25 16:06:42.173180, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (3->4) >[2018/01/25 16:06:42.173207, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2018/01/25 16:06:42.173232, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2018/01/25 16:06:42.173258, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.173281, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM] >[2018/01/25 16:06:42.173330, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.173357, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2018/01/25 16:06:42.173384, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.173411, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.173435, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.173461, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.173485, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.173535, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.173565, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.173590, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2018/01/25 16:06:42.173616, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.173644, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.173668, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.173695, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.173718, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.173794, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.173823, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [NETLOGON] >[2018/01/25 16:06:42.173849, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.173876, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2018/01/25 16:06:42.173901, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2018/01/25 16:06:42.173929, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.173952, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2018/01/25 16:06:42.174011, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.174042, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.174121, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-6a5a-e2466c6e0100 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2018/01/25 16:06:42.174289, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2018/01/25 16:06:42.174563, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.174641, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Start] >[2018/01/25 16:06:42.174667, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.174692, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON' (ops 0x8040ae1c0) >[2018/01/25 16:06:42.174717, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2018/01/25 16:06:42.174755, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Start] len[4] >[2018/01/25 16:06:42.174784, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[1]: name[Type] len[4] >[2018/01/25 16:06:42.174813, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[2]: name[ErrorControl] len[4] >[2018/01/25 16:06:42.174841, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[3]: name[ObjectName] len[24] >[2018/01/25 16:06:42.174870, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[4]: name[DisplayName] len[20] >[2018/01/25 16:06:42.174898, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[5]: name[ImagePath] len[54] >[2018/01/25 16:06:42.174926, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[6]: name[Description] len[164] >[2018/01/25 16:06:42.174953, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.175034, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2018/01/25 16:06:42.175310, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.175390, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Type] >[2018/01/25 16:06:42.175418, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.175444, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.175524, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2018/01/25 16:06:42.175801, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.175879, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ErrorControl] >[2018/01/25 16:06:42.175906, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.175933, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.176014, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2018/01/25 16:06:42.176584, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.176661, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ObjectName] >[2018/01/25 16:06:42.176688, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.176714, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.176801, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(20) > [0] : 0x4e (78) > [1] : 0x00 (0) > [2] : 0x65 (101) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x20 (32) > [7] : 0x00 (0) > [8] : 0x4c (76) > [9] : 0x00 (0) > [10] : 0x6f (111) > [11] : 0x00 (0) > [12] : 0x67 (103) > [13] : 0x00 (0) > [14] : 0x6f (111) > [15] : 0x00 (0) > [16] : 0x6e (110) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > size : 0x00000014 (20) >[2018/01/25 16:06:42.177310, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.177390, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:DisplayName] >[2018/01/25 16:06:42.177417, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.177444, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.177527, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(54) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x70 (112) > [5] : 0x00 (0) > [6] : 0x74 (116) > [7] : 0x00 (0) > [8] : 0x2f (47) > [9] : 0x00 (0) > [10] : 0x73 (115) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6d (109) > [15] : 0x00 (0) > [16] : 0x62 (98) > [17] : 0x00 (0) > [18] : 0x61 (97) > [19] : 0x00 (0) > [20] : 0x2f (47) > [21] : 0x00 (0) > [22] : 0x6c (108) > [23] : 0x00 (0) > [24] : 0x69 (105) > [25] : 0x00 (0) > [26] : 0x62 (98) > [27] : 0x00 (0) > [28] : 0x2f (47) > [29] : 0x00 (0) > [30] : 0x73 (115) > [31] : 0x00 (0) > [32] : 0x76 (118) > [33] : 0x00 (0) > [34] : 0x63 (99) > [35] : 0x00 (0) > [36] : 0x63 (99) > [37] : 0x00 (0) > [38] : 0x74 (116) > [39] : 0x00 (0) > [40] : 0x6c (108) > [41] : 0x00 (0) > [42] : 0x2f (47) > [43] : 0x00 (0) > [44] : 0x73 (115) > [45] : 0x00 (0) > [46] : 0x6d (109) > [47] : 0x00 (0) > [48] : 0x62 (98) > [49] : 0x00 (0) > [50] : 0x64 (100) > [51] : 0x00 (0) > [52] : 0x00 (0) > [53] : 0x00 (0) > size : 0x00000036 (54) >[2018/01/25 16:06:42.178531, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.178610, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:ImagePath] >[2018/01/25 16:06:42.178636, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.178665, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.178754, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(164) > [0] : 0x46 (70) > [1] : 0x00 (0) > [2] : 0x69 (105) > [3] : 0x00 (0) > [4] : 0x6c (108) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x20 (32) > [9] : 0x00 (0) > [10] : 0x73 (115) > [11] : 0x00 (0) > [12] : 0x65 (101) > [13] : 0x00 (0) > [14] : 0x72 (114) > [15] : 0x00 (0) > [16] : 0x76 (118) > [17] : 0x00 (0) > [18] : 0x69 (105) > [19] : 0x00 (0) > [20] : 0x63 (99) > [21] : 0x00 (0) > [22] : 0x65 (101) > [23] : 0x00 (0) > [24] : 0x20 (32) > [25] : 0x00 (0) > [26] : 0x70 (112) > [27] : 0x00 (0) > [28] : 0x72 (114) > [29] : 0x00 (0) > [30] : 0x6f (111) > [31] : 0x00 (0) > [32] : 0x76 (118) > [33] : 0x00 (0) > [34] : 0x69 (105) > [35] : 0x00 (0) > [36] : 0x64 (100) > [37] : 0x00 (0) > [38] : 0x69 (105) > [39] : 0x00 (0) > [40] : 0x6e (110) > [41] : 0x00 (0) > [42] : 0x67 (103) > [43] : 0x00 (0) > [44] : 0x20 (32) > [45] : 0x00 (0) > [46] : 0x61 (97) > [47] : 0x00 (0) > [48] : 0x63 (99) > [49] : 0x00 (0) > [50] : 0x63 (99) > [51] : 0x00 (0) > [52] : 0x65 (101) > [53] : 0x00 (0) > [54] : 0x73 (115) > [55] : 0x00 (0) > [56] : 0x73 (115) > [57] : 0x00 (0) > [58] : 0x20 (32) > [59] : 0x00 (0) > [60] : 0x74 (116) > [61] : 0x00 (0) > [62] : 0x6f (111) > [63] : 0x00 (0) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x70 (112) > [67] : 0x00 (0) > [68] : 0x6f (111) > [69] : 0x00 (0) > [70] : 0x6c (108) > [71] : 0x00 (0) > [72] : 0x69 (105) > [73] : 0x00 (0) > [74] : 0x63 (99) > [75] : 0x00 (0) > [76] : 0x79 (121) > [77] : 0x00 (0) > [78] : 0x20 (32) > [79] : 0x00 (0) > [80] : 0x61 (97) > [81] : 0x00 (0) > [82] : 0x6e (110) > [83] : 0x00 (0) > [84] : 0x64 (100) > [85] : 0x00 (0) > [86] : 0x20 (32) > [87] : 0x00 (0) > [88] : 0x70 (112) > [89] : 0x00 (0) > [90] : 0x72 (114) > [91] : 0x00 (0) > [92] : 0x6f (111) > [93] : 0x00 (0) > [94] : 0x66 (102) > [95] : 0x00 (0) > [96] : 0x69 (105) > [97] : 0x00 (0) > [98] : 0x6c (108) > [99] : 0x00 (0) > [100] : 0x65 (101) > [101] : 0x00 (0) > [102] : 0x20 (32) > [103] : 0x00 (0) > [104] : 0x64 (100) > [105] : 0x00 (0) > [106] : 0x61 (97) > [107] : 0x00 (0) > [108] : 0x74 (116) > [109] : 0x00 (0) > [110] : 0x61 (97) > [111] : 0x00 (0) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x28 (40) > [115] : 0x00 (0) > [116] : 0x6e (110) > [117] : 0x00 (0) > [118] : 0x6f (111) > [119] : 0x00 (0) > [120] : 0x74 (116) > [121] : 0x00 (0) > [122] : 0x72 (114) > [123] : 0x00 (0) > [124] : 0x65 (101) > [125] : 0x00 (0) > [126] : 0x6d (109) > [127] : 0x00 (0) > [128] : 0x6f (111) > [129] : 0x00 (0) > [130] : 0x74 (116) > [131] : 0x00 (0) > [132] : 0x65 (101) > [133] : 0x00 (0) > [134] : 0x6c (108) > [135] : 0x00 (0) > [136] : 0x79 (121) > [137] : 0x00 (0) > [138] : 0x20 (32) > [139] : 0x00 (0) > [140] : 0x6d (109) > [141] : 0x00 (0) > [142] : 0x61 (97) > [143] : 0x00 (0) > [144] : 0x6e (110) > [145] : 0x00 (0) > [146] : 0x61 (97) > [147] : 0x00 (0) > [148] : 0x67 (103) > [149] : 0x00 (0) > [150] : 0x65 (101) > [151] : 0x00 (0) > [152] : 0x61 (97) > [153] : 0x00 (0) > [154] : 0x62 (98) > [155] : 0x00 (0) > [156] : 0x6c (108) > [157] : 0x00 (0) > [158] : 0x65 (101) > [159] : 0x00 (0) > [160] : 0x29 (41) > [161] : 0x00 (0) > [162] : 0x00 (0) > [163] : 0x00 (0) > size : 0x000000a4 (164) >[2018/01/25 16:06:42.181341, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.181419, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON:Description] >[2018/01/25 16:06:42.181446, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.181473, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.181566, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000005-0000-0000-6a5a-e2466c6e0100 >[2018/01/25 16:06:42.181668, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.181745, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.181822, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2018/01/25 16:06:42.181851, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (4->3) >[2018/01/25 16:06:42.181877, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2018/01/25 16:06:42.182016, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0068 (104) > name_size : 0x0068 (104) > name : * > name : 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2018/01/25 16:06:42.182471, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.182549, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\NETLOGON\Security' >[2018/01/25 16:06:42.182577, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.182602, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.182627, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2018/01/25 16:06:42.182654, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (3->4) >[2018/01/25 16:06:42.182681, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2018/01/25 16:06:42.182706, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2018/01/25 16:06:42.182732, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.182756, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM] >[2018/01/25 16:06:42.182803, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.182830, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2018/01/25 16:06:42.182856, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.182883, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.182907, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.182934, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.182957, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.183007, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.183037, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.183062, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2018/01/25 16:06:42.183088, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.183115, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.183142, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.183169, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.183192, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.183268, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.183299, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.183326, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [NETLOGON] >[2018/01/25 16:06:42.183352, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.183379, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2018/01/25 16:06:42.183406, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2018/01/25 16:06:42.183435, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.183458, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] >[2018/01/25 16:06:42.183510, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.183539, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2018/01/25 16:06:42.183565, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.183592, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2018/01/25 16:06:42.183616, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2018/01/25 16:06:42.183644, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.183668, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2018/01/25 16:06:42.183708, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.183736, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.183815, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000006-0000-0000-6a5a-e2466c6e0100 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2018/01/25 16:06:42.183988, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000006-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2018/01/25 16:06:42.185946, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.186025, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security:Security] >[2018/01/25 16:06:42.186052, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.186077, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security' (ops 0x8040ae1c0) >[2018/01/25 16:06:42.186102, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] >[2018/01/25 16:06:42.186140, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Security] len[120] >[2018/01/25 16:06:42.186174, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.186250, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000006-0000-0000-6a5a-e2466c6e0100 >[2018/01/25 16:06:42.186351, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.186430, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.186506, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2018/01/25 16:06:42.186533, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (4->3) >[2018/01/25 16:06:42.186559, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2018/01/25 16:06:42.186698, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0062 (98) > name_size : 0x0062 (98) > name : * > name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2018/01/25 16:06:42.187155, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.187233, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry' >[2018/01/25 16:06:42.187260, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.187286, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.187313, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2018/01/25 16:06:42.187340, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (3->4) >[2018/01/25 16:06:42.187367, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2018/01/25 16:06:42.187392, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2018/01/25 16:06:42.187418, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.187441, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM] >[2018/01/25 16:06:42.187488, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.187515, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2018/01/25 16:06:42.187541, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.187568, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.187592, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.187619, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.187643, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.187693, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.187725, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.187750, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2018/01/25 16:06:42.187776, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.187804, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.187828, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.187855, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.187878, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.187954, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.187983, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [RemoteRegistry] >[2018/01/25 16:06:42.188010, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.188037, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2018/01/25 16:06:42.188064, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2018/01/25 16:06:42.188092, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.188115, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2018/01/25 16:06:42.188161, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.188191, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.188268, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-6a5a-e2466c6e0100 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2018/01/25 16:06:42.188435, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2018/01/25 16:06:42.188707, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.188785, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Start] >[2018/01/25 16:06:42.188811, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.188836, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry' (ops 0x8040ae1c0) >[2018/01/25 16:06:42.188862, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2018/01/25 16:06:42.188899, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Start] len[4] >[2018/01/25 16:06:42.188928, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[1]: name[Type] len[4] >[2018/01/25 16:06:42.188957, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[2]: name[ErrorControl] len[4] >[2018/01/25 16:06:42.188985, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[3]: name[ObjectName] len[24] >[2018/01/25 16:06:42.189016, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[4]: name[DisplayName] len[48] >[2018/01/25 16:06:42.189052, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[5]: name[ImagePath] len[54] >[2018/01/25 16:06:42.189082, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[6]: name[Description] len[126] >[2018/01/25 16:06:42.189110, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.189191, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2018/01/25 16:06:42.189466, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.189544, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Type] >[2018/01/25 16:06:42.189570, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.189597, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.189676, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2018/01/25 16:06:42.189951, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.190028, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ErrorControl] >[2018/01/25 16:06:42.190055, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.190081, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.190163, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2018/01/25 16:06:42.190724, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.190801, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ObjectName] >[2018/01/25 16:06:42.190828, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.190856, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.190945, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(48) > [0] : 0x52 (82) > [1] : 0x00 (0) > [2] : 0x65 (101) > [3] : 0x00 (0) > [4] : 0x6d (109) > [5] : 0x00 (0) > [6] : 0x6f (111) > [7] : 0x00 (0) > [8] : 0x74 (116) > [9] : 0x00 (0) > [10] : 0x65 (101) > [11] : 0x00 (0) > [12] : 0x20 (32) > [13] : 0x00 (0) > [14] : 0x52 (82) > [15] : 0x00 (0) > [16] : 0x65 (101) > [17] : 0x00 (0) > [18] : 0x67 (103) > [19] : 0x00 (0) > [20] : 0x69 (105) > [21] : 0x00 (0) > [22] : 0x73 (115) > [23] : 0x00 (0) > [24] : 0x74 (116) > [25] : 0x00 (0) > [26] : 0x72 (114) > [27] : 0x00 (0) > [28] : 0x79 (121) > [29] : 0x00 (0) > [30] : 0x20 (32) > [31] : 0x00 (0) > [32] : 0x53 (83) > [33] : 0x00 (0) > [34] : 0x65 (101) > [35] : 0x00 (0) > [36] : 0x72 (114) > [37] : 0x00 (0) > [38] : 0x76 (118) > [39] : 0x00 (0) > [40] : 0x69 (105) > [41] : 0x00 (0) > [42] : 0x63 (99) > [43] : 0x00 (0) > [44] : 0x65 (101) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > size : 0x00000030 (48) >[2018/01/25 16:06:42.191860, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.191938, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:DisplayName] >[2018/01/25 16:06:42.191964, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.191991, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.192073, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(54) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x70 (112) > [5] : 0x00 (0) > [6] : 0x74 (116) > [7] : 0x00 (0) > [8] : 0x2f (47) > [9] : 0x00 (0) > [10] : 0x73 (115) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6d (109) > [15] : 0x00 (0) > [16] : 0x62 (98) > [17] : 0x00 (0) > [18] : 0x61 (97) > [19] : 0x00 (0) > [20] : 0x2f (47) > [21] : 0x00 (0) > [22] : 0x6c (108) > [23] : 0x00 (0) > [24] : 0x69 (105) > [25] : 0x00 (0) > [26] : 0x62 (98) > [27] : 0x00 (0) > [28] : 0x2f (47) > [29] : 0x00 (0) > [30] : 0x73 (115) > [31] : 0x00 (0) > [32] : 0x76 (118) > [33] : 0x00 (0) > [34] : 0x63 (99) > [35] : 0x00 (0) > [36] : 0x63 (99) > [37] : 0x00 (0) > [38] : 0x74 (116) > [39] : 0x00 (0) > [40] : 0x6c (108) > [41] : 0x00 (0) > [42] : 0x2f (47) > [43] : 0x00 (0) > [44] : 0x73 (115) > [45] : 0x00 (0) > [46] : 0x6d (109) > [47] : 0x00 (0) > [48] : 0x62 (98) > [49] : 0x00 (0) > [50] : 0x64 (100) > [51] : 0x00 (0) > [52] : 0x00 (0) > [53] : 0x00 (0) > size : 0x00000036 (54) >[2018/01/25 16:06:42.193071, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.193149, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:ImagePath] >[2018/01/25 16:06:42.193176, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.193202, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.193285, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(126) > [0] : 0x49 (73) > [1] : 0x00 (0) > [2] : 0x6e (110) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x72 (114) > [9] : 0x00 (0) > [10] : 0x6e (110) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6c (108) > [15] : 0x00 (0) > [16] : 0x20 (32) > [17] : 0x00 (0) > [18] : 0x73 (115) > [19] : 0x00 (0) > [20] : 0x65 (101) > [21] : 0x00 (0) > [22] : 0x72 (114) > [23] : 0x00 (0) > [24] : 0x76 (118) > [25] : 0x00 (0) > [26] : 0x69 (105) > [27] : 0x00 (0) > [28] : 0x63 (99) > [29] : 0x00 (0) > [30] : 0x65 (101) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x70 (112) > [35] : 0x00 (0) > [36] : 0x72 (114) > [37] : 0x00 (0) > [38] : 0x6f (111) > [39] : 0x00 (0) > [40] : 0x76 (118) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x64 (100) > [45] : 0x00 (0) > [46] : 0x69 (105) > [47] : 0x00 (0) > [48] : 0x6e (110) > [49] : 0x00 (0) > [50] : 0x67 (103) > [51] : 0x00 (0) > [52] : 0x20 (32) > [53] : 0x00 (0) > [54] : 0x72 (114) > [55] : 0x00 (0) > [56] : 0x65 (101) > [57] : 0x00 (0) > [58] : 0x6d (109) > [59] : 0x00 (0) > [60] : 0x6f (111) > [61] : 0x00 (0) > [62] : 0x74 (116) > [63] : 0x00 (0) > [64] : 0x65 (101) > [65] : 0x00 (0) > [66] : 0x20 (32) > [67] : 0x00 (0) > [68] : 0x61 (97) > [69] : 0x00 (0) > [70] : 0x63 (99) > [71] : 0x00 (0) > [72] : 0x63 (99) > [73] : 0x00 (0) > [74] : 0x65 (101) > [75] : 0x00 (0) > [76] : 0x73 (115) > [77] : 0x00 (0) > [78] : 0x73 (115) > [79] : 0x00 (0) > [80] : 0x20 (32) > [81] : 0x00 (0) > [82] : 0x74 (116) > [83] : 0x00 (0) > [84] : 0x6f (111) > [85] : 0x00 (0) > [86] : 0x20 (32) > [87] : 0x00 (0) > [88] : 0x74 (116) > [89] : 0x00 (0) > [90] : 0x68 (104) > [91] : 0x00 (0) > [92] : 0x65 (101) > [93] : 0x00 (0) > [94] : 0x20 (32) > [95] : 0x00 (0) > [96] : 0x53 (83) > [97] : 0x00 (0) > [98] : 0x61 (97) > [99] : 0x00 (0) > [100] : 0x6d (109) > [101] : 0x00 (0) > [102] : 0x62 (98) > [103] : 0x00 (0) > [104] : 0x61 (97) > [105] : 0x00 (0) > [106] : 0x20 (32) > [107] : 0x00 (0) > [108] : 0x72 (114) > [109] : 0x00 (0) > [110] : 0x65 (101) > [111] : 0x00 (0) > [112] : 0x67 (103) > [113] : 0x00 (0) > [114] : 0x69 (105) > [115] : 0x00 (0) > [116] : 0x73 (115) > [117] : 0x00 (0) > [118] : 0x74 (116) > [119] : 0x00 (0) > [120] : 0x72 (114) > [121] : 0x00 (0) > [122] : 0x79 (121) > [123] : 0x00 (0) > [124] : 0x00 (0) > [125] : 0x00 (0) > size : 0x0000007e (126) >[2018/01/25 16:06:42.195329, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.195407, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry:Description] >[2018/01/25 16:06:42.195433, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.195464, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.195542, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000007-0000-0000-6a5a-e2466c6e0100 >[2018/01/25 16:06:42.195640, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.195718, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.195794, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2018/01/25 16:06:42.195823, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (4->3) >[2018/01/25 16:06:42.195849, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2018/01/25 16:06:42.195987, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0074 (116) > name_size : 0x0074 (116) > name : * > name : 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2018/01/25 16:06:42.196442, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.196520, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' >[2018/01/25 16:06:42.196547, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.196573, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.196598, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2018/01/25 16:06:42.196624, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (3->4) >[2018/01/25 16:06:42.196651, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2018/01/25 16:06:42.196675, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2018/01/25 16:06:42.196701, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.196725, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM] >[2018/01/25 16:06:42.196771, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.196799, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2018/01/25 16:06:42.196825, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.196854, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.196879, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.196906, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.197017, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.197069, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.197100, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.197125, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2018/01/25 16:06:42.197151, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.197178, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.197203, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.197230, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.197254, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.197331, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.197362, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.197388, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [RemoteRegistry] >[2018/01/25 16:06:42.197417, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.197445, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2018/01/25 16:06:42.197470, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2018/01/25 16:06:42.197497, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.197521, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] >[2018/01/25 16:06:42.197568, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.197596, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2018/01/25 16:06:42.197622, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.197649, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2018/01/25 16:06:42.197674, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2018/01/25 16:06:42.197701, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.197724, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2018/01/25 16:06:42.197764, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.197793, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.197871, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000008-0000-0000-6a5a-e2466c6e0100 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2018/01/25 16:06:42.198046, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000008-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2018/01/25 16:06:42.200013, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.200091, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security:Security] >[2018/01/25 16:06:42.200119, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.200144, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security' (ops 0x8040ae1c0) >[2018/01/25 16:06:42.200172, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] >[2018/01/25 16:06:42.200211, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Security] len[120] >[2018/01/25 16:06:42.200240, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.200318, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000008-0000-0000-6a5a-e2466c6e0100 >[2018/01/25 16:06:42.200417, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.200495, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.200573, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2018/01/25 16:06:42.200599, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (4->3) >[2018/01/25 16:06:42.200625, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2018/01/25 16:06:42.200765, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x004e (78) > name_size : 0x004e (78) > name : * > name : 'SYSTEM\CurrentControlSet\Services\WINS' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_ACTION_NONE (0) >[2018/01/25 16:06:42.201218, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.201297, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS' >[2018/01/25 16:06:42.201326, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.201352, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.201377, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2018/01/25 16:06:42.201403, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (3->4) >[2018/01/25 16:06:42.201431, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2018/01/25 16:06:42.201455, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2018/01/25 16:06:42.201482, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.201508, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM] >[2018/01/25 16:06:42.201554, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.201582, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2018/01/25 16:06:42.201608, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.201635, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.201660, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.201686, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.201710, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.201760, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.201790, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.201816, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2018/01/25 16:06:42.201842, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.201869, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.201894, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.201921, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.201945, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.202019, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.202049, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [WINS] >[2018/01/25 16:06:42.202078, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.202105, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2018/01/25 16:06:42.202130, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2018/01/25 16:06:42.202157, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.202181, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2018/01/25 16:06:42.202227, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.202257, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.202337, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-6a5a-e2466c6e0100 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2018/01/25 16:06:42.202504, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x000c (12) > name_size : 0x000c (12) > name : * > name : 'Start' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x02 (2) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2018/01/25 16:06:42.202779, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.202857, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Start] >[2018/01/25 16:06:42.202884, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.202909, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS' (ops 0x8040ae1c0) >[2018/01/25 16:06:42.202935, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2018/01/25 16:06:42.202980, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Start] len[4] >[2018/01/25 16:06:42.203011, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[1]: name[Type] len[4] >[2018/01/25 16:06:42.203043, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[2]: name[ErrorControl] len[4] >[2018/01/25 16:06:42.203071, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[3]: name[ObjectName] len[24] >[2018/01/25 16:06:42.203103, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[4]: name[DisplayName] len[74] >[2018/01/25 16:06:42.203131, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[5]: name[ImagePath] len[54] >[2018/01/25 16:06:42.203159, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[6]: name[Description] len[178] >[2018/01/25 16:06:42.203187, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.203268, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x000a (10) > name_size : 0x000a (10) > name : * > name : 'Type' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2018/01/25 16:06:42.203543, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.203621, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Type] >[2018/01/25 16:06:42.203648, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.203674, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.203753, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x001a (26) > name_size : 0x001a (26) > name : * > name : 'ErrorControl' > type : REG_DWORD (4) > data : * > data: ARRAY(4) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > size : 0x00000004 (4) >[2018/01/25 16:06:42.204029, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.204106, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ErrorControl] >[2018/01/25 16:06:42.204133, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.204160, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.204242, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0016 (22) > name_size : 0x0016 (22) > name : * > name : 'ObjectName' > type : REG_SZ (1) > data : * > data: ARRAY(24) > [0] : 0x4c (76) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x63 (99) > [5] : 0x00 (0) > [6] : 0x61 (97) > [7] : 0x00 (0) > [8] : 0x6c (108) > [9] : 0x00 (0) > [10] : 0x53 (83) > [11] : 0x00 (0) > [12] : 0x79 (121) > [13] : 0x00 (0) > [14] : 0x73 (115) > [15] : 0x00 (0) > [16] : 0x74 (116) > [17] : 0x00 (0) > [18] : 0x65 (101) > [19] : 0x00 (0) > [20] : 0x6d (109) > [21] : 0x00 (0) > [22] : 0x00 (0) > [23] : 0x00 (0) > size : 0x00000018 (24) >[2018/01/25 16:06:42.204808, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.204886, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ObjectName] >[2018/01/25 16:06:42.204913, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.204943, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.205029, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'DisplayName' > type : REG_SZ (1) > data : * > data: ARRAY(74) > [0] : 0x57 (87) > [1] : 0x00 (0) > [2] : 0x69 (105) > [3] : 0x00 (0) > [4] : 0x6e (110) > [5] : 0x00 (0) > [6] : 0x64 (100) > [7] : 0x00 (0) > [8] : 0x6f (111) > [9] : 0x00 (0) > [10] : 0x77 (119) > [11] : 0x00 (0) > [12] : 0x73 (115) > [13] : 0x00 (0) > [14] : 0x20 (32) > [15] : 0x00 (0) > [16] : 0x49 (73) > [17] : 0x00 (0) > [18] : 0x6e (110) > [19] : 0x00 (0) > [20] : 0x74 (116) > [21] : 0x00 (0) > [22] : 0x65 (101) > [23] : 0x00 (0) > [24] : 0x72 (114) > [25] : 0x00 (0) > [26] : 0x6e (110) > [27] : 0x00 (0) > [28] : 0x65 (101) > [29] : 0x00 (0) > [30] : 0x74 (116) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x4e (78) > [35] : 0x00 (0) > [36] : 0x61 (97) > [37] : 0x00 (0) > [38] : 0x6d (109) > [39] : 0x00 (0) > [40] : 0x65 (101) > [41] : 0x00 (0) > [42] : 0x20 (32) > [43] : 0x00 (0) > [44] : 0x53 (83) > [45] : 0x00 (0) > [46] : 0x65 (101) > [47] : 0x00 (0) > [48] : 0x72 (114) > [49] : 0x00 (0) > [50] : 0x76 (118) > [51] : 0x00 (0) > [52] : 0x69 (105) > [53] : 0x00 (0) > [54] : 0x63 (99) > [55] : 0x00 (0) > [56] : 0x65 (101) > [57] : 0x00 (0) > [58] : 0x20 (32) > [59] : 0x00 (0) > [60] : 0x28 (40) > [61] : 0x00 (0) > [62] : 0x57 (87) > [63] : 0x00 (0) > [64] : 0x49 (73) > [65] : 0x00 (0) > [66] : 0x4e (78) > [67] : 0x00 (0) > [68] : 0x53 (83) > [69] : 0x00 (0) > [70] : 0x29 (41) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > size : 0x0000004a (74) >[2018/01/25 16:06:42.206320, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.206398, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:DisplayName] >[2018/01/25 16:06:42.206424, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.206452, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.206535, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0014 (20) > name_size : 0x0014 (20) > name : * > name : 'ImagePath' > type : REG_SZ (1) > data : * > data: ARRAY(54) > [0] : 0x2f (47) > [1] : 0x00 (0) > [2] : 0x6f (111) > [3] : 0x00 (0) > [4] : 0x70 (112) > [5] : 0x00 (0) > [6] : 0x74 (116) > [7] : 0x00 (0) > [8] : 0x2f (47) > [9] : 0x00 (0) > [10] : 0x73 (115) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6d (109) > [15] : 0x00 (0) > [16] : 0x62 (98) > [17] : 0x00 (0) > [18] : 0x61 (97) > [19] : 0x00 (0) > [20] : 0x2f (47) > [21] : 0x00 (0) > [22] : 0x6c (108) > [23] : 0x00 (0) > [24] : 0x69 (105) > [25] : 0x00 (0) > [26] : 0x62 (98) > [27] : 0x00 (0) > [28] : 0x2f (47) > [29] : 0x00 (0) > [30] : 0x73 (115) > [31] : 0x00 (0) > [32] : 0x76 (118) > [33] : 0x00 (0) > [34] : 0x63 (99) > [35] : 0x00 (0) > [36] : 0x63 (99) > [37] : 0x00 (0) > [38] : 0x74 (116) > [39] : 0x00 (0) > [40] : 0x6c (108) > [41] : 0x00 (0) > [42] : 0x2f (47) > [43] : 0x00 (0) > [44] : 0x6e (110) > [45] : 0x00 (0) > [46] : 0x6d (109) > [47] : 0x00 (0) > [48] : 0x62 (98) > [49] : 0x00 (0) > [50] : 0x64 (100) > [51] : 0x00 (0) > [52] : 0x00 (0) > [53] : 0x00 (0) > size : 0x00000036 (54) >[2018/01/25 16:06:42.207535, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.207613, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:ImagePath] >[2018/01/25 16:06:42.207640, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.207672, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.207757, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0018 (24) > name_size : 0x0018 (24) > name : * > name : 'Description' > type : REG_SZ (1) > data : * > data: ARRAY(178) > [0] : 0x49 (73) > [1] : 0x00 (0) > [2] : 0x6e (110) > [3] : 0x00 (0) > [4] : 0x74 (116) > [5] : 0x00 (0) > [6] : 0x65 (101) > [7] : 0x00 (0) > [8] : 0x72 (114) > [9] : 0x00 (0) > [10] : 0x6e (110) > [11] : 0x00 (0) > [12] : 0x61 (97) > [13] : 0x00 (0) > [14] : 0x6c (108) > [15] : 0x00 (0) > [16] : 0x20 (32) > [17] : 0x00 (0) > [18] : 0x73 (115) > [19] : 0x00 (0) > [20] : 0x65 (101) > [21] : 0x00 (0) > [22] : 0x72 (114) > [23] : 0x00 (0) > [24] : 0x76 (118) > [25] : 0x00 (0) > [26] : 0x69 (105) > [27] : 0x00 (0) > [28] : 0x63 (99) > [29] : 0x00 (0) > [30] : 0x65 (101) > [31] : 0x00 (0) > [32] : 0x20 (32) > [33] : 0x00 (0) > [34] : 0x70 (112) > [35] : 0x00 (0) > [36] : 0x72 (114) > [37] : 0x00 (0) > [38] : 0x6f (111) > [39] : 0x00 (0) > [40] : 0x76 (118) > [41] : 0x00 (0) > [42] : 0x69 (105) > [43] : 0x00 (0) > [44] : 0x64 (100) > [45] : 0x00 (0) > [46] : 0x69 (105) > [47] : 0x00 (0) > [48] : 0x6e (110) > [49] : 0x00 (0) > [50] : 0x67 (103) > [51] : 0x00 (0) > [52] : 0x20 (32) > [53] : 0x00 (0) > [54] : 0x61 (97) > [55] : 0x00 (0) > [56] : 0x20 (32) > [57] : 0x00 (0) > [58] : 0x4e (78) > [59] : 0x00 (0) > [60] : 0x65 (101) > [61] : 0x00 (0) > [62] : 0x74 (116) > [63] : 0x00 (0) > [64] : 0x42 (66) > [65] : 0x00 (0) > [66] : 0x49 (73) > [67] : 0x00 (0) > [68] : 0x4f (79) > [69] : 0x00 (0) > [70] : 0x53 (83) > [71] : 0x00 (0) > [72] : 0x20 (32) > [73] : 0x00 (0) > [74] : 0x70 (112) > [75] : 0x00 (0) > [76] : 0x6f (111) > [77] : 0x00 (0) > [78] : 0x69 (105) > [79] : 0x00 (0) > [80] : 0x6e (110) > [81] : 0x00 (0) > [82] : 0x74 (116) > [83] : 0x00 (0) > [84] : 0x2d (45) > [85] : 0x00 (0) > [86] : 0x74 (116) > [87] : 0x00 (0) > [88] : 0x6f (111) > [89] : 0x00 (0) > [90] : 0x2d (45) > [91] : 0x00 (0) > [92] : 0x70 (112) > [93] : 0x00 (0) > [94] : 0x6f (111) > [95] : 0x00 (0) > [96] : 0x69 (105) > [97] : 0x00 (0) > [98] : 0x6e (110) > [99] : 0x00 (0) > [100] : 0x74 (116) > [101] : 0x00 (0) > [102] : 0x20 (32) > [103] : 0x00 (0) > [104] : 0x6e (110) > [105] : 0x00 (0) > [106] : 0x61 (97) > [107] : 0x00 (0) > [108] : 0x6d (109) > [109] : 0x00 (0) > [110] : 0x65 (101) > [111] : 0x00 (0) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x73 (115) > [115] : 0x00 (0) > [116] : 0x65 (101) > [117] : 0x00 (0) > [118] : 0x72 (114) > [119] : 0x00 (0) > [120] : 0x76 (118) > [121] : 0x00 (0) > [122] : 0x65 (101) > [123] : 0x00 (0) > [124] : 0x72 (114) > [125] : 0x00 (0) > [126] : 0x28 (40) > [127] : 0x00 (0) > [128] : 0x6e (110) > [129] : 0x00 (0) > [130] : 0x6f (111) > [131] : 0x00 (0) > [132] : 0x74 (116) > [133] : 0x00 (0) > [134] : 0x20 (32) > [135] : 0x00 (0) > [136] : 0x72 (114) > [137] : 0x00 (0) > [138] : 0x65 (101) > [139] : 0x00 (0) > [140] : 0x6d (109) > [141] : 0x00 (0) > [142] : 0x6f (111) > [143] : 0x00 (0) > [144] : 0x74 (116) > [145] : 0x00 (0) > [146] : 0x65 (101) > [147] : 0x00 (0) > [148] : 0x6c (108) > [149] : 0x00 (0) > [150] : 0x79 (121) > [151] : 0x00 (0) > [152] : 0x20 (32) > [153] : 0x00 (0) > [154] : 0x6d (109) > [155] : 0x00 (0) > [156] : 0x61 (97) > [157] : 0x00 (0) > [158] : 0x6e (110) > [159] : 0x00 (0) > [160] : 0x61 (97) > [161] : 0x00 (0) > [162] : 0x67 (103) > [163] : 0x00 (0) > [164] : 0x65 (101) > [165] : 0x00 (0) > [166] : 0x61 (97) > [167] : 0x00 (0) > [168] : 0x62 (98) > [169] : 0x00 (0) > [170] : 0x6c (108) > [171] : 0x00 (0) > [172] : 0x65 (101) > [173] : 0x00 (0) > [174] : 0x29 (41) > [175] : 0x00 (0) > [176] : 0x00 (0) > [177] : 0x00 (0) > size : 0x000000b2 (178) >[2018/01/25 16:06:42.210569, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.210648, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS:Description] >[2018/01/25 16:06:42.210676, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.210704, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.210783, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000009-0000-0000-6a5a-e2466c6e0100 >[2018/01/25 16:06:42.210882, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.210959, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 09 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.211036, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2018/01/25 16:06:42.211065, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (4->3) >[2018/01/25 16:06:42.211091, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2018/01/25 16:06:42.211229, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > in: struct winreg_CreateKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000001-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0060 (96) > name_size : 0x0060 (96) > name : * > name : 'SYSTEM\CurrentControlSet\Services\WINS\Security' > keyclass: struct winreg_String > name_len : 0x0002 (2) > name_size : 0x0002 (2) > name : * > name : '' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY > secdesc : NULL > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) >[2018/01/25 16:06:42.211687, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.211765, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:785(_winreg_CreateKey) > _winreg_CreateKey called with parent key 'HKLM' and subkey name 'SYSTEM\CurrentControlSet\Services\WINS\Security' >[2018/01/25 16:06:42.211792, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.211818, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.211843, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2018/01/25 16:06:42.211869, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (3->4) >[2018/01/25 16:06:42.211897, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2018/01/25 16:06:42.211922, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2018/01/25 16:06:42.211948, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.211972, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM] >[2018/01/25 16:06:42.212019, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.212046, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2018/01/25 16:06:42.212073, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.212100, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.212125, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.212154, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.212177, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.212227, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.212260, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.212286, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2018/01/25 16:06:42.212314, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.212342, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.212366, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.212393, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.212417, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.212493, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.212523, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 2 >[2018/01/25 16:06:42.212549, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [WINS] >[2018/01/25 16:06:42.212575, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.212602, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2018/01/25 16:06:42.212626, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2018/01/25 16:06:42.212654, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.212677, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS] >[2018/01/25 16:06:42.212723, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.212751, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Security] >[2018/01/25 16:06:42.212777, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.212804, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2018/01/25 16:06:42.212829, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2018/01/25 16:06:42.212856, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.212879, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2018/01/25 16:06:42.212919, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.212947, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[3] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.213025, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CreateKey: struct winreg_CreateKey > out: struct winreg_CreateKey > new_handle : * > new_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000a-0000-0000-6a5a-e2466c6e0100 > action_taken : * > action_taken : REG_OPENED_EXISTING_KEY (2) > result : WERR_OK >[2018/01/25 16:06:42.213197, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > in: struct winreg_SetValue > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000a-0000-0000-6a5a-e2466c6e0100 > name: struct winreg_String > name_len : 0x0012 (18) > name_size : 0x0012 (18) > name : * > name : 'Security' > type : REG_BINARY (3) > data : * > data: ARRAY(120) > [0] : 0x01 (1) > [1] : 0x00 (0) > [2] : 0x04 (4) > [3] : 0x80 (128) > [4] : 0x00 (0) > [5] : 0x00 (0) > [6] : 0x00 (0) > [7] : 0x00 (0) > [8] : 0x00 (0) > [9] : 0x00 (0) > [10] : 0x00 (0) > [11] : 0x00 (0) > [12] : 0x00 (0) > [13] : 0x00 (0) > [14] : 0x00 (0) > [15] : 0x00 (0) > [16] : 0x14 (20) > [17] : 0x00 (0) > [18] : 0x00 (0) > [19] : 0x00 (0) > [20] : 0x02 (2) > [21] : 0x00 (0) > [22] : 0x64 (100) > [23] : 0x00 (0) > [24] : 0x04 (4) > [25] : 0x00 (0) > [26] : 0x00 (0) > [27] : 0x00 (0) > [28] : 0x00 (0) > [29] : 0x00 (0) > [30] : 0x14 (20) > [31] : 0x00 (0) > [32] : 0x8d (141) > [33] : 0x01 (1) > [34] : 0x02 (2) > [35] : 0x00 (0) > [36] : 0x01 (1) > [37] : 0x01 (1) > [38] : 0x00 (0) > [39] : 0x00 (0) > [40] : 0x00 (0) > [41] : 0x00 (0) > [42] : 0x00 (0) > [43] : 0x01 (1) > [44] : 0x00 (0) > [45] : 0x00 (0) > [46] : 0x00 (0) > [47] : 0x00 (0) > [48] : 0x00 (0) > [49] : 0x00 (0) > [50] : 0x18 (24) > [51] : 0x00 (0) > [52] : 0xfd (253) > [53] : 0x01 (1) > [54] : 0x02 (2) > [55] : 0x00 (0) > [56] : 0x01 (1) > [57] : 0x02 (2) > [58] : 0x00 (0) > [59] : 0x00 (0) > [60] : 0x00 (0) > [61] : 0x00 (0) > [62] : 0x00 (0) > [63] : 0x05 (5) > [64] : 0x20 (32) > [65] : 0x00 (0) > [66] : 0x00 (0) > [67] : 0x00 (0) > [68] : 0x23 (35) > [69] : 0x02 (2) > [70] : 0x00 (0) > [71] : 0x00 (0) > [72] : 0x00 (0) > [73] : 0x00 (0) > [74] : 0x18 (24) > [75] : 0x00 (0) > [76] : 0xff (255) > [77] : 0x01 (1) > [78] : 0x0f (15) > [79] : 0x00 (0) > [80] : 0x01 (1) > [81] : 0x02 (2) > [82] : 0x00 (0) > [83] : 0x00 (0) > [84] : 0x00 (0) > [85] : 0x00 (0) > [86] : 0x00 (0) > [87] : 0x05 (5) > [88] : 0x20 (32) > [89] : 0x00 (0) > [90] : 0x00 (0) > [91] : 0x00 (0) > [92] : 0x25 (37) > [93] : 0x02 (2) > [94] : 0x00 (0) > [95] : 0x00 (0) > [96] : 0x00 (0) > [97] : 0x00 (0) > [98] : 0x18 (24) > [99] : 0x00 (0) > [100] : 0xff (255) > [101] : 0x01 (1) > [102] : 0x0f (15) > [103] : 0x00 (0) > [104] : 0x01 (1) > [105] : 0x02 (2) > [106] : 0x00 (0) > [107] : 0x00 (0) > [108] : 0x00 (0) > [109] : 0x00 (0) > [110] : 0x00 (0) > [111] : 0x05 (5) > [112] : 0x20 (32) > [113] : 0x00 (0) > [114] : 0x00 (0) > [115] : 0x00 (0) > [116] : 0x20 (32) > [117] : 0x02 (2) > [118] : 0x00 (0) > [119] : 0x00 (0) > size : 0x00000078 (120) >[2018/01/25 16:06:42.215164, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.215242, 8, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/winreg/srv_winreg_nt.c:815(_winreg_SetValue) > _winreg_SetValue: Setting value for [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security:Security] >[2018/01/25 16:06:42.215269, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log) > tdb(/var/opt/samba/locks/registry.tdb): tdb_transaction_start: nesting 1 >[2018/01/25 16:06:42.215294, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security' (ops 0x8040ae1c0) >[2018/01/25 16:06:42.215322, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] >[2018/01/25 16:06:42.215360, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Security] len[120] >[2018/01/25 16:06:42.215389, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_SetValue: struct winreg_SetValue > out: struct winreg_SetValue > result : WERR_OK >[2018/01/25 16:06:42.215464, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000a-0000-0000-6a5a-e2466c6e0100 >[2018/01/25 16:06:42.215562, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.215640, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0A 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.215716, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2018/01/25 16:06:42.215741, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (4->3) >[2018/01/25 16:06:42.215767, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2018/01/25 16:06:42.215894, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000002-0000-0000-6a5a-e2466c6e0100 >[2018/01/25 16:06:42.215995, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.216072, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.216149, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2018/01/25 16:06:42.216177, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (3->2) >[2018/01/25 16:06:42.216202, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2018/01/25 16:06:42.216329, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (2->1) >[2018/01/25 16:06:42.216384, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (1->0) >[2018/01/25 16:06:42.216432, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:418(close_policy_by_pipe) > Deleted handle list for RPC connection winreg >[2018/01/25 16:06:42.216523, 3, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/rpc_server/eventlog/srv_eventlog_reg.c:59(eventlog_init_winreg) > Initialise the eventlog registry keys if needed. >[2018/01/25 16:06:42.216583, 4, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:205(make_internal_rpc_pipe_p) > Create pipe requested winreg >[2018/01/25 16:06:42.216615, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:223(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe winreg >[2018/01/25 16:06:42.216641, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:240(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe winreg >[2018/01/25 16:06:42.216699, 4, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:245(make_internal_rpc_pipe_p) > Created internal pipe winreg >[2018/01/25 16:06:42.216741, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > in: struct winreg_OpenHKLM > system_name : NULL > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2018/01/25 16:06:42.216915, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [HKLM] >[2018/01/25 16:06:42.216966, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.216996, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.217020, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.217045, 5, pid=93804, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.217068, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.217170, 4, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.217202, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:887(regdb_open) > regdb_open: registry db opened. refcount reset (1) >[2018/01/25 16:06:42.217230, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM] >[2018/01/25 16:06:42.217255, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM] >[2018/01/25 16:06:42.217280, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.217303, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM] >[2018/01/25 16:06:42.217363, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[1] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.217444, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_OpenHKLM: struct winreg_OpenHKLM > out: struct winreg_OpenHKLM > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000b-0000-0000-6a5a-e2466c6e0100 > result : WERR_OK >[2018/01/25 16:06:42.217585, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > in: struct winreg_OpenKey > parent_handle : * > parent_handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000b-0000-0000-6a5a-e2466c6e0100 > keyname: struct winreg_String > name_len : 0x0056 (86) > name_size : 0x0056 (86) > name : * > name : 'SYSTEM\CurrentControlSet\Services\Eventlog' > options : 0x00000000 (0) > 0: REG_OPTION_VOLATILE > 0: REG_OPTION_CREATE_LINK > 0: REG_OPTION_BACKUP_RESTORE > 0: REG_OPTION_OPEN_LINK > access_mask : 0x02000000 (33554432) > 0: KEY_QUERY_VALUE > 0: KEY_SET_VALUE > 0: KEY_CREATE_SUB_KEY > 0: KEY_ENUMERATE_SUB_KEYS > 0: KEY_NOTIFY > 0: KEY_CREATE_LINK > 0: KEY_WOW64_64KEY > 0: KEY_WOW64_32KEY >[2018/01/25 16:06:42.217932, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0B 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.218012, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SYSTEM] >[2018/01/25 16:06:42.218037, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (1->2) >[2018/01/25 16:06:42.218065, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM] >[2018/01/25 16:06:42.218089, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM] >[2018/01/25 16:06:42.218115, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.218141, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM] >[2018/01/25 16:06:42.218190, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [CurrentControlSet] >[2018/01/25 16:06:42.218217, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (2->3) >[2018/01/25 16:06:42.218244, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.218270, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.218297, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.218322, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet] >[2018/01/25 16:06:42.218374, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Services] >[2018/01/25 16:06:42.218402, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (3->4) >[2018/01/25 16:06:42.218428, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.218452, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.218479, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.218502, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services] >[2018/01/25 16:06:42.218579, 7, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Eventlog] >[2018/01/25 16:06:42.218610, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.218638, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2018/01/25 16:06:42.218662, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2018/01/25 16:06:42.218689, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.218712, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2018/01/25 16:06:42.218758, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.218786, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (4->3) >[2018/01/25 16:06:42.218813, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (3->2) >[2018/01/25 16:06:42.218841, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[2] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.218919, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_OpenKey: struct winreg_OpenKey > out: struct winreg_OpenKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000c-0000-0000-6a5a-e2466c6e0100 > result : WERR_OK >[2018/01/25 16:06:42.219055, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > in: struct winreg_QueryInfoKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000c-0000-0000-6a5a-e2466c6e0100 > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL >[2018/01/25 16:06:42.219227, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.219306, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_dispatcher.c:151(fetch_reg_values) > fetch_reg_values called for key 'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog' (ops 0x8040ae1c0) >[2018/01/25 16:06:42.219334, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2018/01/25 16:06:42.219376, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[DisplayName] len[20] >[2018/01/25 16:06:42.219406, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[1]: name[ErrorControl] len[4] >[2018/01/25 16:06:42.219434, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:2090(regdb_get_secdesc) > regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2018/01/25 16:06:42.219478, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_QueryInfoKey: struct winreg_QueryInfoKey > out: struct winreg_QueryInfoKey > classname : * > classname: struct winreg_String > name_len : 0x0000 (0) > name_size : 0x0000 (0) > name : NULL > num_subkeys : * > num_subkeys : 0x00000000 (0) > max_subkeylen : * > max_subkeylen : 0x00000000 (0) > max_classlen : * > max_classlen : 0x00000000 (0) > num_values : * > num_values : 0x00000002 (2) > max_valnamelen : * > max_valnamelen : 0x0000001a (26) > max_valbufsize : * > max_valbufsize : 0x00000014 (20) > secdescsize : * > secdescsize : 0x00000078 (120) > last_changed_time : * > last_changed_time : NTTIME(0) > result : WERR_OK >[2018/01/25 16:06:42.219846, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > in: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000c-0000-0000-6a5a-e2466c6e0100 >[2018/01/25 16:06:42.219947, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.220025, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0C 00 00 00 00 00 00 00 6A 5A E2 46 ........ ....jZ.F > [0010] 6C 6E 01 00 ln.. >[2018/01/25 16:06:42.220102, 6, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2018/01/25 16:06:42.220128, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (2->1) >[2018/01/25 16:06:42.220156, 1, pid=93804, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > winreg_CloseKey: struct winreg_CloseKey > out: struct winreg_CloseKey > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : WERR_OK >[2018/01/25 16:06:42.220291, 10, pid=93804, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (1->0) >[2018/01/25 16:06:42.220336, 10, pid=93804, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:418(close_policy_by_pipe) > Deleted handle list for RPC connection winreg >[2018/01/25 16:06:42.220433, 0, pid=93804, effective(0, 0), real(0, 0)] ../lib/util/become_daemon.c:138(daemon_ready) > daemon_ready: STATUS=daemon 'smbd' finished starting up and ready to serve connections >[2018/01/25 16:06:42.222904, 7, pid=93804, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4229(lp_servicenumber) > lp_servicenumber: couldn't find print$ >[2018/01/25 16:06:42.222935, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/printing/nt_printing.c:92(print_driver_directories_init) > No print$ share has been configured. >[2018/01/25 16:06:42.223030, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 515 - private_data=0x0 >[2018/01/25 16:06:42.223074, 3, pid=93804, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:327(start_background_queue) > start_background_queue: Starting background LPQ thread >[2018/01/25 16:06:42.234570, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) > bind succeeded on port 445 >[2018/01/25 16:06:42.234658, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 0 > TCP_KEEPCNT = 8 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > Could not test socket option IPTOS_LOWDELAY. > Could not test socket option IPTOS_THROUGHPUT. > SO_REUSEPORT = 512 > SO_SNDBUF = 32768 > SO_RCVBUF = 65536 > SO_SNDLOWAT = 2048 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 >[2018/01/25 16:06:42.234872, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 4 > TCP_KEEPCNT = 8 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > Could not test socket option IPTOS_LOWDELAY. > Could not test socket option IPTOS_THROUGHPUT. > SO_REUSEPORT = 512 > SO_SNDBUF = 32768 > SO_RCVBUF = 65536 > SO_SNDLOWAT = 2048 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 >[2018/01/25 16:06:42.235102, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) > bind succeeded on port 139 >[2018/01/25 16:06:42.235136, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 0 > TCP_KEEPCNT = 8 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > Could not test socket option IPTOS_LOWDELAY. > Could not test socket option IPTOS_THROUGHPUT. > SO_REUSEPORT = 512 > SO_SNDBUF = 32768 > SO_RCVBUF = 65536 > SO_SNDLOWAT = 2048 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 >[2018/01/25 16:06:42.235338, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 4 > TCP_KEEPCNT = 8 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > Could not test socket option IPTOS_LOWDELAY. > Could not test socket option IPTOS_THROUGHPUT. > SO_REUSEPORT = 512 > SO_SNDBUF = 32768 > SO_RCVBUF = 65536 > SO_SNDLOWAT = 2048 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 >[2018/01/25 16:06:42.235564, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) > bind succeeded on port 445 >[2018/01/25 16:06:42.235597, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 0 > TCP_KEEPCNT = 8 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_REUSEPORT = 512 > SO_SNDBUF = 32768 > SO_RCVBUF = 65536 > SO_SNDLOWAT = 2048 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 >[2018/01/25 16:06:42.235802, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 4 > TCP_KEEPCNT = 8 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 >[2018/01/25 16:06:42.235872, 5, pid=93809, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:363(start_background_queue) > IPTOS_THROUGHPUT = 0 > SO_REUSEPORT = 512 > SO_SNDBUF = 32768 > start_background_queue: background LPQ thread started > SO_RCVBUF = 65536 > SO_SNDLOWAT = 2048 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 >[2018/01/25 16:06:42.236049, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:410(open_socket_in) > bind succeeded on port 139 >[2018/01/25 16:06:42.236080, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 0 >[2018/01/25 16:06:42.236134, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:157(msg_dgm_ref_destructor) > TCP_KEEPCNT = 8 > msg_dgm_ref_destructor: refs=0x0 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_REUSEPORT = 512 > SO_SNDBUF = 32768 > SO_RCVBUF = 65536 > SO_SNDLOWAT = 2048 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 >[2018/01/25 16:06:42.236304, 5, pid=93804, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 4 > TCP_KEEPCNT = 8 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_REUSEPORT = 512 > SO_SNDBUF = 32768 >[2018/01/25 16:06:42.236440, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:79(messaging_dgm_ref) > SO_RCVBUF = 65536 > SO_SNDLOWAT = 2048 > messaging_dgm_ref: messaging_dgm_init returned No error: 0 > SO_RCVLOWAT = 1 >[2018/01/25 16:06:42.236509, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:108(messaging_dgm_ref) > SO_SNDTIMEO = 0 > messaging_dgm_ref: unique = 942043660711784236 > SO_RCVTIMEO = 0 >[2018/01/25 16:06:42.236566, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 13 - private_data=0x0 >[2018/01/25 16:06:42.236593, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 33 - private_data=0x80135b1a0 >[2018/01/25 16:06:42.236619, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 783 - private_data=0x0 >[2018/01/25 16:06:42.236632, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) >[2018/01/25 16:06:42.236644, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > event_add_idle: idle_evt(print_queue_housekeeping) 0x801350ae0 > Registering messaging pointer for type 1 - private_data=0x0 >[2018/01/25 16:06:42.236681, 5, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) >[2018/01/25 16:06:42.236689, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:688(messaging_register) > Registering messaging pointer for type 33 - private_data=0x819a98660 > Overriding messaging pointer for type 1 - private_data=0x0 >[2018/01/25 16:06:42.236722, 5, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) >[2018/01/25 16:06:42.236730, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 517 - private_data=0x0 > Registering messaging pointer for type 770 - private_data=0x0 >[2018/01/25 16:06:42.236763, 5, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:720(messaging_deregister) >[2018/01/25 16:06:42.236772, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Deregistering messaging pointer for type 515 - private_data=0x0 > Registering messaging pointer for type 790 - private_data=0x0 >[2018/01/25 16:06:42.236802, 5, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) >[2018/01/25 16:06:42.236811, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 515 - private_data=0x0 > Registering messaging pointer for type 791 - private_data=0x0 >[2018/01/25 16:06:42.236850, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 15 - private_data=0x0 >[2018/01/25 16:06:42.236858, 3, pid=93809, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:140(pcap_cache_reload) >[2018/01/25 16:06:42.236877, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > reloading printcap cache > Registering messaging pointer for type 16 - private_data=0x0 >[2018/01/25 16:06:42.236921, 5, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) >[2018/01/25 16:06:42.236921, 5, pid=93809, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:456(cups_pcap_load_async) > Registering messaging pointer for type 799 - private_data=0x0 > cups_pcap_load_async: asynchronously loading cups printers >[2018/01/25 16:06:42.243939, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/avahi_register.c:117(avahi_client_callback) > avahi_client_callback: AVAHI_CLIENT_S_RUNNING >[2018/01/25 16:06:42.244389, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/avahi_register.c:92(avahi_entry_group_callback) > avahi_entry_group_callback: AVAHI_ENTRY_GROUP_UNCOMMITED >[2018/01/25 16:06:42.245542, 1, pid=93804, effective(0, 0), real(0, 0)] ../source3/printing/printer_list.c:234(printer_list_get_last_refresh) > Failed to fetch record! >[2018/01/25 16:06:42.245595, 2, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/server.c:1381(smbd_parent_loop) > waiting for connections >[2018/01/25 16:06:42.245813, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/avahi_register.c:95(avahi_entry_group_callback) > avahi_entry_group_callback: AVAHI_ENTRY_GROUP_REGISTERING >[2018/01/25 16:06:42.245873, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:400(messaging_recv_cb) > messaging_recv_cb: Received message 0x31f len 0 (num_fds:0) from 93807 >[2018/01/25 16:06:42.245995, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:1430(messaging_dgm_send) > messaging_dgm_send: Sending message to 93808 >[2018/01/25 16:06:42.246075, 10, pid=93808, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:400(messaging_recv_cb) >[2018/01/25 16:06:42.246094, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:1430(messaging_dgm_send) > messaging_recv_cb: Received message 0x31f len 0 (num_fds:0) from 93804 > messaging_dgm_send: Sending message to 93807 >[2018/01/25 16:06:42.246197, 10, pid=93807, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:400(messaging_recv_cb) > messaging_recv_cb: Received message 0x31f len 0 (num_fds:0) from 93804 >[2018/01/25 16:06:42.247715, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:473(cups_pcap_load_async) > cups_pcap_load_async: child pid = 93810 >[2018/01/25 16:06:42.247773, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:594(cups_cache_reload) > cups_cache_reload: async read on fd 16 >[2018/01/25 16:06:42.247821, 3, pid=93809, effective(0, 0), real(0, 0)] ../source3/printing/pcap.c:189(pcap_cache_reload) > reload status: ok >[2018/01/25 16:06:42.247847, 5, pid=93809, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:417(start_background_queue) > start_background_queue: background LPQ thread waiting for messages >[2018/01/25 16:06:42.249265, 10, pid=93810, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:157(msg_dgm_ref_destructor) > msg_dgm_ref_destructor: refs=0x0 >[2018/01/25 16:06:42.249624, 10, pid=93810, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:79(messaging_dgm_ref) > messaging_dgm_ref: messaging_dgm_init returned No error: 0 >[2018/01/25 16:06:42.249673, 10, pid=93810, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:108(messaging_dgm_ref) > messaging_dgm_ref: unique = 16574864097466324263 >[2018/01/25 16:06:42.249711, 5, pid=93810, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:325(cups_cache_reload_async) > reloading cups printcap cache >[2018/01/25 16:06:42.251013, 10, pid=93810, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:137(cups_connect) > connecting to cups server localhost:631 >[2018/01/25 16:06:42.253233, 10, pid=93810, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:178(send_pcap_blob) > successfully sent blob of len 12 >[2018/01/25 16:06:42.253255, 5, pid=93809, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:520(cups_async_callback) > cups_async_callback: callback received for printer data. fd = 16 >[2018/01/25 16:06:42.253282, 10, pid=93810, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:157(msg_dgm_ref_destructor) >[2018/01/25 16:06:42.253302, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/printing/print_cups.c:203(recv_pcap_blob) > msg_dgm_ref_destructor: refs=0x0 > successfully recvd blob of len 12 >[2018/01/25 16:06:42.253380, 5, pid=93809, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/printer_list.tdb >[2018/01/25 16:06:42.253418, 10, pid=93809, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/printer_list.tdb 2:<none> 3:<none> >[2018/01/25 16:06:42.256838, 5, pid=93809, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/printer_list.tdb >[2018/01/25 16:06:42.257021, 7, pid=93809, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4229(lp_servicenumber) > lp_servicenumber: couldn't find printers >[2018/01/25 16:06:42.257155, 7, pid=93809, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4229(lp_servicenumber) > lp_servicenumber: couldn't find printers >[2018/01/25 16:06:42.257252, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_init_smbconf.c:41(registry_init_smbconf) > registry_init_smbconf called >[2018/01/25 16:06:42.257399, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:770(regdb_init) > regdb_init: registry db openend. refcount reset (1) >[2018/01/25 16:06:42.257626, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] >[2018/01/25 16:06:42.257685, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[Samba Printer Port] len[2] >[2018/01/25 16:06:42.257717, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] >[2018/01/25 16:06:42.257766, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[DefaultSpoolDirectory] len[70] >[2018/01/25 16:06:42.257798, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2018/01/25 16:06:42.257843, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[DisplayName] len[20] >[2018/01/25 16:06:42.257874, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[1]: name[ErrorControl] len[4] >[2018/01/25 16:06:42.257902, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1907(regdb_fetch_values_internal) > regdb_fetch_values: Looking for values of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] >[2018/01/25 16:06:42.257942, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[0]: name[DisplayName] len[20] >[2018/01/25 16:06:42.257970, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1852(regdb_unpack_values) > regdb_unpack_values: value[1]: name[ErrorControl] len[4] >[2018/01/25 16:06:42.258009, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:94(reghook_cache_add) > reghook_cache_add: Adding ops 0x8040ae580 for key [\HKLM\SOFTWARE\Samba\smbconf] >[2018/01/25 16:06:42.258036, 8, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:215(pathtree_add) > pathtree_add: Enter >[2018/01/25 16:06:42.258069, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:282(pathtree_add) > pathtree_add: Successfully added node [HKLM\SOFTWARE\Samba\smbconf] to tree >[2018/01/25 16:06:42.258094, 8, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:284(pathtree_add) > pathtree_add: Exit >[2018/01/25 16:06:42.258119, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (1->0) >[2018/01/25 16:06:42.258181, 4, pid=93809, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.258212, 4, pid=93809, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.258237, 4, pid=93809, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:42.258261, 5, pid=93809, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:42.258286, 5, pid=93809, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:42.258394, 4, pid=93809, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:42.258424, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:887(regdb_open) > regdb_open: registry db opened. refcount reset (1) >[2018/01/25 16:06:42.258451, 7, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [HKLM] >[2018/01/25 16:06:42.258478, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (1->2) >[2018/01/25 16:06:42.258512, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM] >[2018/01/25 16:06:42.258540, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM] >[2018/01/25 16:06:42.258566, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.258589, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM] >[2018/01/25 16:06:42.258649, 7, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [SOFTWARE] >[2018/01/25 16:06:42.258678, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (2->3) >[2018/01/25 16:06:42.258744, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE] >[2018/01/25 16:06:42.258771, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SOFTWARE] >[2018/01/25 16:06:42.258798, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.258821, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SOFTWARE] >[2018/01/25 16:06:42.258879, 7, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [Samba] >[2018/01/25 16:06:42.258908, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (3->4) >[2018/01/25 16:06:42.258935, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Samba] >[2018/01/25 16:06:42.258959, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SOFTWARE\Samba] >[2018/01/25 16:06:42.258991, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.259015, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae1c0 for key [\HKLM\SOFTWARE\Samba] >[2018/01/25 16:06:42.259138, 7, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [smbconf] >[2018/01/25 16:06:42.259167, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (4->5) >[2018/01/25 16:06:42.259194, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Samba\smbconf] >[2018/01/25 16:06:42.259218, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SOFTWARE\Samba\smbconf] >[2018/01/25 16:06:42.259246, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.259269, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae580 for key [\HKLM\SOFTWARE\Samba\smbconf] >[2018/01/25 16:06:42.259313, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (5->4) >[2018/01/25 16:06:42.259343, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (4->3) >[2018/01/25 16:06:42.259371, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (3->2) >[2018/01/25 16:06:42.259398, 5, pid=93809, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2161(process_registry_service) > process_registry_service: service name printers >[2018/01/25 16:06:42.259433, 7, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [printers] >[2018/01/25 16:06:42.259460, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (2->3) >[2018/01/25 16:06:42.259487, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Samba\smbconf\printers] >[2018/01/25 16:06:42.259511, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SOFTWARE\Samba\smbconf\printers] >[2018/01/25 16:06:42.259538, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.259564, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae580 for key [\HKLM\SOFTWARE\Samba\smbconf\printers] >[2018/01/25 16:06:42.259597, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1741(regdb_fetch_keys_internal) > key [HKLM\SOFTWARE\Samba\smbconf\printers] not found >[2018/01/25 16:06:42.259624, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (3->2) >[2018/01/25 16:06:42.259659, 7, pid=93809, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4229(lp_servicenumber) > lp_servicenumber: couldn't find printers >[2018/01/25 16:06:42.259688, 7, pid=93809, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4229(lp_servicenumber) > lp_servicenumber: couldn't find printers >[2018/01/25 16:06:42.259717, 7, pid=93809, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4229(lp_servicenumber) > lp_servicenumber: couldn't find printers >[2018/01/25 16:06:42.259741, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/smbd/server_reload.c:87(delete_and_reload_printers) > reloading printer services from pcap cache >[2018/01/25 16:06:42.259776, 7, pid=93809, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4229(lp_servicenumber) > lp_servicenumber: couldn't find printers >[2018/01/25 16:06:42.259802, 5, pid=93809, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2161(process_registry_service) > process_registry_service: service name printers >[2018/01/25 16:06:42.259827, 7, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_api.c:143(regkey_open_onelevel) > regkey_open_onelevel: name = [printers] >[2018/01/25 16:06:42.259852, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:859(regdb_open) > regdb_open: incrementing refcount (2->3) >[2018/01/25 16:06:42.259879, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:125(reghook_cache_find) > reghook_cache_find: Searching for keyname [\HKLM\SOFTWARE\Samba\smbconf\printers] >[2018/01/25 16:06:42.259903, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:367(pathtree_find) > pathtree_find: Enter [\HKLM\SOFTWARE\Samba\smbconf\printers] >[2018/01/25 16:06:42.259930, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/adt_tree.c:440(pathtree_find) > pathtree_find: Exit >[2018/01/25 16:06:42.259953, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_cachehook.c:130(reghook_cache_find) > reghook_cache_find: found ops 0x8040ae580 for key [\HKLM\SOFTWARE\Samba\smbconf\printers] >[2018/01/25 16:06:42.259986, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:1741(regdb_fetch_keys_internal) > key [HKLM\SOFTWARE\Samba\smbconf\printers] not found >[2018/01/25 16:06:42.260012, 10, pid=93809, effective(0, 0), real(0, 0), class=registry] ../source3/registry/reg_backend_db.c:904(regdb_close) > regdb_close: decrementing refcount (3->2) >[2018/01/25 16:06:42.260043, 7, pid=93809, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4229(lp_servicenumber) > lp_servicenumber: couldn't find printers >[2018/01/25 16:06:42.260071, 7, pid=93809, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4229(lp_servicenumber) > lp_servicenumber: couldn't find printers >[2018/01/25 16:06:42.260442, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:1430(messaging_dgm_send) > messaging_dgm_send: Sending message to 93804 >[2018/01/25 16:06:42.260528, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:400(messaging_recv_cb) > messaging_recv_cb: Received message 0x207 len 0 (num_fds:0) from 93809 >[2018/01/25 16:06:42.260563, 1, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:874(send_all_fn) > send_all_fn: messaging_send_buf to 4770 failed: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2018/01/25 16:06:42.260617, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:866(send_all_fn) > send_all_fn: Skip ourselves in messaging_send_all >[2018/01/25 16:06:42.260692, 1, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:874(send_all_fn) > send_all_fn: messaging_send_buf to 4769 failed: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2018/01/25 16:06:42.260781, 1, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:874(send_all_fn) > send_all_fn: messaging_send_buf to 93803 failed: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2018/01/25 16:06:42.260847, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:1430(messaging_dgm_send) > messaging_dgm_send: Sending message to 93807 >[2018/01/25 16:06:42.260909, 10, pid=93807, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:400(messaging_recv_cb) >[2018/01/25 16:06:42.260933, 1, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:874(send_all_fn) > messaging_recv_cb: Received message 0x207 len 0 (num_fds:0) from 93809 > send_all_fn: messaging_send_buf to 93796 failed: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2018/01/25 16:06:42.261054, 1, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:874(send_all_fn) > send_all_fn: messaging_send_buf to 4758 failed: NT_STATUS_OBJECT_NAME_NOT_FOUND >[2018/01/25 16:06:42.261121, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:1430(messaging_dgm_send) > messaging_dgm_send: Sending message to 93808 >[2018/01/25 16:06:42.261167, 10, pid=93808, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:400(messaging_recv_cb) > messaging_recv_cb: Received message 0x207 len 0 (num_fds:0) from 93809 >[2018/01/25 16:06:42.261203, 10, pid=93809, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm.c:1430(messaging_dgm_send) > messaging_dgm_send: Sending message to 93797 >[2018/01/25 16:06:42.264827, 6, pid=93809, effective(0, 0), real(0, 0)] ../source3/printing/queue_process.c:264(bq_sig_chld_handler) > Bq child process 93810 terminated with 0 >[2018/01/25 16:06:43.100351, 10, pid=93804, effective(0, 0), real(0, 0)] ../source3/smbd/avahi_register.c:80(avahi_entry_group_callback) > avahi_entry_group_callback: AVAHI_ENTRY_GROUP_ESTABLISHED >[2018/01/25 16:06:55.031544, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:157(msg_dgm_ref_destructor) > msg_dgm_ref_destructor: refs=0x0 >[2018/01/25 16:06:55.031980, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:79(messaging_dgm_ref) > messaging_dgm_ref: messaging_dgm_init returned No error: 0 >[2018/01/25 16:06:55.032032, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages_dgm_ref.c:108(messaging_dgm_ref) > messaging_dgm_ref: unique = 13787159330895500944 >[2018/01/25 16:06:55.034453, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:534(smbXsrv_client_create) >[2018/01/25 16:06:55.034474, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_client.c:542(smbXsrv_client_create) > smbXsrv_client_create: client_guid[00000000-0000-0000-0000-000000000000] stored >[2018/01/25 16:06:55.034508, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &client_blob: struct smbXsrv_clientB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_clientU(case 0) > info0 : * > info0: struct smbXsrv_client > table : * > ev_ctx : * > msg_ctx : * > global : * > global: struct smbXsrv_client_global0 > db_rec : NULL > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > local_address : NULL > remote_address : NULL > remote_name : NULL > initial_connect_time : Thu Jan 25 16:06:55 2018 EST > client_guid : 00000000-0000-0000-0000-000000000000 > stored : 0x00 (0) > sconn : NULL > session_table : NULL > last_session_id : 0x0000000000000000 (0) > tcon_table : NULL > open_table : NULL > connections : NULL > server_multi_channel_enabled: 0x00 (0) >[2018/01/25 16:06:55.035065, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 4 > TCP_KEEPCNT = 8 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_REUSEPORT = 512 > SO_SNDBUF = 33580 > SO_RCVBUF = 65700 > SO_SNDLOWAT = 2048 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 >[2018/01/25 16:06:55.035271, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/util/util_net.c:1055(print_socket_options) > Socket options: > SO_KEEPALIVE = 8 > SO_REUSEADDR = 4 > SO_BROADCAST = 0 > TCP_NODELAY = 4 > TCP_KEEPCNT = 8 > TCP_KEEPIDLE = 7200 > TCP_KEEPINTVL = 75 > IPTOS_LOWDELAY = 0 > IPTOS_THROUGHPUT = 0 > SO_REUSEPORT = 512 > SO_SNDBUF = 33580 > SO_RCVBUF = 65700 > SO_SNDLOWAT = 2048 > SO_RCVLOWAT = 1 > SO_SNDTIMEO = 0 > SO_RCVTIMEO = 0 >[2018/01/25 16:06:55.035521, 3, pid=93847, effective(0, 0), real(0, 0)] ../lib/util/access.c:365(allow_access) > Allowed connection from 10.0.0.2 (10.0.0.2) >[2018/01/25 16:06:55.035549, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:3840(smbd_add_connection) > Connection allowed from ipv4:10.0.0.2:52795 to ipv4:10.0.0.254:445 >[2018/01/25 16:06:55.035654, 6, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2332(lp_file_list_changed) > lp_file_list_changed() > file /etc/opt/samba/smb.conf -> /etc/opt/samba/smb.conf last mod_time: Tue Jan 23 12:05:28 2018 > >[2018/01/25 16:06:55.035758, 3, pid=93847, effective(0, 0), real(0, 0), class=locking] ../source3/smbd/oplock.c:1340(init_oplocks) > init_oplocks: initializing messages. >[2018/01/25 16:06:55.035798, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 774 - private_data=0x8013c1660 >[2018/01/25 16:06:55.035824, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 778 - private_data=0x8013c1660 >[2018/01/25 16:06:55.035849, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 770 - private_data=0x8013c1660 >[2018/01/25 16:06:55.035873, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 787 - private_data=0x8013c1660 >[2018/01/25 16:06:55.035898, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 779 - private_data=0x8013c1660 >[2018/01/25 16:06:55.035928, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 15 - private_data=0x0 >[2018/01/25 16:06:55.035953, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:688(messaging_register) > Overriding messaging pointer for type 15 - private_data=0x0 >[2018/01/25 16:06:55.035977, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:720(messaging_deregister) > Deregistering messaging pointer for type 16 - private_data=0x0 >[2018/01/25 16:06:55.036002, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 16 - private_data=0x8013c1660 >[2018/01/25 16:06:55.036030, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:720(messaging_deregister) > Deregistering messaging pointer for type 33 - private_data=0x80135b1a0 >[2018/01/25 16:06:55.036055, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 33 - private_data=0x8013c1660 >[2018/01/25 16:06:55.036079, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:720(messaging_deregister) > Deregistering messaging pointer for type 790 - private_data=0x0 >[2018/01/25 16:06:55.036103, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 790 - private_data=0x8013c1660 >[2018/01/25 16:06:55.036128, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:720(messaging_deregister) > Deregistering messaging pointer for type 791 - private_data=0x0 >[2018/01/25 16:06:55.036153, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:720(messaging_deregister) > Deregistering messaging pointer for type 1 - private_data=0x0 >[2018/01/25 16:06:55.036176, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 1 - private_data=0x0 >[2018/01/25 16:06:55.036206, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) > event_add_idle: idle_evt(keepalive) 0x801350ae0 >[2018/01/25 16:06:55.036233, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) > event_add_idle: idle_evt(deadtime) 0x801351560 >[2018/01/25 16:06:55.036260, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/util_event.c:99(event_add_idle) > event_add_idle: idle_evt(housekeeping) 0x801350f60 >[2018/01/25 16:06:55.036418, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/util_sock.c:248(read_smb_length_return_keepalive) > got smb length of 69 >[2018/01/25 16:06:55.036479, 6, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1956(process_smb) > got message type 0x0 of len 0x45 >[2018/01/25 16:06:55.036518, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1958(process_smb) > Transaction 0 of length 73 (0 toread) >[2018/01/25 16:06:55.036551, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/util.c:184(show_msg) >[2018/01/25 16:06:55.036572, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/util.c:194(show_msg) > size=69 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=65535 > smb_pid=1 > smb_uid=65535 > smb_mid=0 > smt_wct=0 > smb_bcc=34 >[2018/01/25 16:06:55.036698, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/util/util.c:514(dump_data) > [0000] 02 4E 54 20 4C 4D 20 30 2E 31 32 00 02 53 4D 42 .NT LM 0 .12..SMB > [0010] 20 32 2E 30 30 32 00 02 53 4D 42 20 32 2E 3F 3F 2.002.. SMB 2.?? > [0020] 3F 00 ?. >[2018/01/25 16:06:55.036883, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/process.c:1538(switch_message) > switch message SMBnegprot (pid 93847) conn 0x0 >[2018/01/25 16:06:55.036929, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:55.036957, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:55.036983, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:55.037035, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2018/01/25 16:06:55.037274, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:611(reply_negprot) > Requested protocol [NT LM 0.12] >[2018/01/25 16:06:55.037315, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:611(reply_negprot) > Requested protocol [SMB 2.002] >[2018/01/25 16:06:55.037344, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:611(reply_negprot) > Requested protocol [SMB 2.???] >[2018/01/25 16:06:55.037370, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/util.c:1349(set_remote_arch) > set_remote_arch: Client arch is 'OSX' >[2018/01/25 16:06:55.037425, 6, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2332(lp_file_list_changed) > lp_file_list_changed() > file /etc/opt/samba/smb.conf -> /etc/opt/samba/smb.conf last mod_time: Tue Jan 23 12:05:28 2018 > >[2018/01/25 16:06:55.037518, 6, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2332(lp_file_list_changed) > lp_file_list_changed() > file /etc/opt/samba/smb.conf -> /etc/opt/samba/smb.conf last mod_time: Tue Jan 23 12:05:28 2018 > >[2018/01/25 16:06:55.037592, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3518(smbd_smb2_process_negprot) > smbd_smb2_first_negprot: packet length 102 >[2018/01/25 16:06:55.037652, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 0 (position 0) from bitmap >[2018/01/25 16:06:55.037704, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_NEGPROT] mid = 0 >[2018/01/25 16:06:55.037743, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:55.037769, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:55.037793, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:55.037835, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2018/01/25 16:06:55.037900, 6, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2332(lp_file_list_changed) > lp_file_list_changed() > file /etc/opt/samba/smb.conf -> /etc/opt/samba/smb.conf last mod_time: Tue Jan 23 12:05:28 2018 > >[2018/01/25 16:06:55.037962, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_negprot.c:291(smbd_smb2_request_process_negprot) > Selected protocol SMB2_FF >[2018/01/25 16:06:55.038029, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:524(make_auth3_context_for_ntlm) > Making default auth method list for server role = 'standalone server', encrypt passwords = yes >[2018/01/25 16:06:55.038073, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) > Attempting to register auth backend guest >[2018/01/25 16:06:55.038111, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) > Successfully added auth method 'guest' >[2018/01/25 16:06:55.038137, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) > Attempting to register auth backend sam >[2018/01/25 16:06:55.038162, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) > Successfully added auth method 'sam' >[2018/01/25 16:06:55.038186, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) > Attempting to register auth backend sam_ignoredomain >[2018/01/25 16:06:55.038211, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) > Successfully added auth method 'sam_ignoredomain' >[2018/01/25 16:06:55.038235, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) > Attempting to register auth backend sam_netlogon3 >[2018/01/25 16:06:55.038260, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) > Successfully added auth method 'sam_netlogon3' >[2018/01/25 16:06:55.038283, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) > Attempting to register auth backend winbind >[2018/01/25 16:06:55.038308, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) > Successfully added auth method 'winbind' >[2018/01/25 16:06:55.038341, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) > Attempting to register auth backend unix >[2018/01/25 16:06:55.038373, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) > Successfully added auth method 'unix' >[2018/01/25 16:06:55.038398, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth) > Attempting to register auth backend samba4 >[2018/01/25 16:06:55.038426, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth) > Successfully added auth method 'samba4' >[2018/01/25 16:06:55.038450, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:400(load_auth_module) > load_auth_module: Attempting to find an auth method to match guest >[2018/01/25 16:06:55.038475, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:425(load_auth_module) > load_auth_module: auth method guest has a valid init >[2018/01/25 16:06:55.038500, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:400(load_auth_module) > load_auth_module: Attempting to find an auth method to match sam_ignoredomain >[2018/01/25 16:06:55.038525, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:425(load_auth_module) > load_auth_module: auth method sam_ignoredomain has a valid init >[2018/01/25 16:06:55.040854, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'gssapi_spnego' registered >[2018/01/25 16:06:55.040899, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'gssapi_krb5' registered >[2018/01/25 16:06:55.040928, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'gssapi_krb5_sasl' registered >[2018/01/25 16:06:55.040967, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'spnego' registered >[2018/01/25 16:06:55.041002, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'schannel' registered >[2018/01/25 16:06:55.041041, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'naclrpc_as_system' registered >[2018/01/25 16:06:55.041075, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'sasl-EXTERNAL' registered >[2018/01/25 16:06:55.041110, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'ntlmssp' registered >[2018/01/25 16:06:55.041137, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'ntlmssp_resume_ccache' registered >[2018/01/25 16:06:55.041164, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'http_basic' registered >[2018/01/25 16:06:55.041202, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'http_ntlm' registered >[2018/01/25 16:06:55.041230, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'http_negotiate' registered >[2018/01/25 16:06:55.041264, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'krb5' registered >[2018/01/25 16:06:55.041292, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:977(gensec_register) > GENSEC backend 'fake_gssapi_krb5' registered >[2018/01/25 16:06:55.041489, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:739(gensec_start_mech) > Starting GENSEC mechanism spnego >[2018/01/25 16:06:55.041568, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:739(gensec_start_mech) > Starting GENSEC submechanism ntlmssp >[2018/01/25 16:06:55.041686, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec.c:440(gensec_update_send) > gensec_update_send: spnego[0x81c5d4910]: subreq: 0x8013a7480 >[2018/01/25 16:06:55.041724, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec.c:498(gensec_update_done) > gensec_update_done: spnego[0x81c5d4910]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x8013a7480/../auth/gensec/spnego.c:1601]: state[2] error[0 (0x0)] state[struct gensec_spnego_update_state (0x8013a7610)] timer[0x0] finish[../auth/gensec/spnego.c:2070] >[2018/01/25 16:06:55.041795, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[64] dyn[yes:74] at ../source3/smbd/smb2_negprot.c:617 >[2018/01/25 16:06:55.041889, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/1/1 >[2018/01/25 16:06:55.041953, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:744(reply_negprot) > Selected protocol SMB 2.??? >[2018/01/25 16:06:55.041989, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/negprot.c:746(reply_negprot) > negprot index=2 >[2018/01/25 16:06:55.043308, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:06:55.043354, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 1 (position 1) from bitmap >[2018/01/25 16:06:55.043382, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_NEGPROT] mid = 1 >[2018/01/25 16:06:55.043409, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:55.043434, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:55.043458, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:55.043505, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2018/01/25 16:06:55.043536, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:55.043564, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:06:55.043588, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:06:55.043612, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:06:55.043635, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:06:55.043711, 10, pid=93847, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) > Adding cache entry with key=[RA/4471de5f-bc12-2954-bdc1-50560ac6d03c] and timeout=[Wed Dec 31 19:00:00 1969 EST] (-1516914415 seconds in the past) >[2018/01/25 16:06:55.043879, 10, pid=93847, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:640(gencache_stabilize) > Could not get allrecord lock on gencache_notrans.tdb: Locking error >[2018/01/25 16:06:55.043914, 10, pid=93847, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) > Adding cache entry with key=[RA/4471de5f-bc12-2954-bdc1-50560ac6d03c] and timeout=[Thu Feb 1 16:06:55 2018 EST] (604800 seconds ahead) >[2018/01/25 16:06:55.057374, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:06:55.057443, 6, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2332(lp_file_list_changed) > lp_file_list_changed() > file /etc/opt/samba/smb.conf -> /etc/opt/samba/smb.conf last mod_time: Tue Jan 23 12:05:28 2018 > >[2018/01/25 16:06:55.057514, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_negprot.c:291(smbd_smb2_request_process_negprot) > Selected protocol SMB3_02 >[2018/01/25 16:06:55.057542, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:524(make_auth3_context_for_ntlm) > Making default auth method list for server role = 'standalone server', encrypt passwords = yes >[2018/01/25 16:06:55.057572, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:400(load_auth_module) > load_auth_module: Attempting to find an auth method to match guest >[2018/01/25 16:06:55.057598, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:425(load_auth_module) > load_auth_module: auth method guest has a valid init >[2018/01/25 16:06:55.057623, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:400(load_auth_module) > load_auth_module: Attempting to find an auth method to match sam_ignoredomain >[2018/01/25 16:06:55.057648, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:425(load_auth_module) > load_auth_module: auth method sam_ignoredomain has a valid init >[2018/01/25 16:06:55.057784, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:739(gensec_start_mech) > Starting GENSEC mechanism spnego >[2018/01/25 16:06:55.057832, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:739(gensec_start_mech) > Starting GENSEC submechanism ntlmssp >[2018/01/25 16:06:55.057897, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec.c:440(gensec_update_send) > gensec_update_send: spnego[0x81c5d6790]: subreq: 0x8013a7480 >[2018/01/25 16:06:55.057933, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec.c:498(gensec_update_done) > gensec_update_done: spnego[0x81c5d6790]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x8013a7480/../auth/gensec/spnego.c:1601]: state[2] error[0 (0x0)] state[struct gensec_spnego_update_state (0x8013a7610)] timer[0x0] finish[../auth/gensec/spnego.c:2070] >[2018/01/25 16:06:55.058011, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[64] dyn[yes:74] at ../source3/smbd/smb2_negprot.c:659 >[2018/01/25 16:06:55.058042, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/2/1 >[2018/01/25 16:07:01.755087, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.755171, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 2 (position 2) from bitmap >[2018/01/25 16:07:01.755202, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 2 >[2018/01/25 16:07:01.755231, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.755257, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.755283, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.755335, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2018/01/25 16:07:01.755418, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_session_global.tdb >[2018/01/25 16:07:01.755459, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_session_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.755505, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key D05CB1BA >[2018/01/25 16:07:01.755549, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013519e0 >[2018/01/25 16:07:01.755751, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:944(smbXsrv_session_global_store) >[2018/01/25 16:07:01.755776, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:946(smbXsrv_session_global_store) > smbXsrv_session_global_store: key 'D05CB1BA' stored >[2018/01/25 16:07:01.755804, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_session_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_session_globalU(case 0) > info0 : * > info0: struct smbXsrv_session_global0 > db_rec : * > session_global_id : 0xd05cb1ba (3495735738) > session_wire_id : 0x00000000d05cb1ba (3495735738) > creation_time : Thu Jan 25 16:07:02 2018 EST > expiration_time : Wed Dec 31 19:00:00 1969 EST > auth_time : NTTIME(0) > auth_session_info_seqnum : 0x00000000 (0) > auth_session_info : NULL > connection_dialect : 0x0302 (770) > signing_flags : 0x00 (0) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > encryption_flags : 0x00 (0) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > num_channels : 0x00000001 (1) > channels: ARRAY(1) > channels: struct smbXsrv_channel_global0 > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > local_address : 'ipv4:10.0.0.254:445' > remote_address : 'ipv4:10.0.0.2:52795' > remote_name : '10.0.0.2' > auth_session_info_seqnum : 0x00000000 (0) > connection : * > encryption_cipher : 0x0000 (0) >[2018/01/25 16:07:01.756372, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_session_global.tdb >[2018/01/25 16:07:01.756401, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key D05CB1BA >[2018/01/25 16:07:01.756431, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1319(smbXsrv_session_create) >[2018/01/25 16:07:01.756445, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1327(smbXsrv_session_create) > smbXsrv_session_create: global_id (0xd05cb1ba) stored >[2018/01/25 16:07:01.756469, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &session_blob: struct smbXsrv_sessionB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_sessionU(case 0) > info0 : * > info0: struct smbXsrv_session > table : * > db_rec : NULL > client : * > local_id : 0xd05cb1ba (3495735738) > global : * > global: struct smbXsrv_session_global0 > db_rec : NULL > session_global_id : 0xd05cb1ba (3495735738) > session_wire_id : 0x00000000d05cb1ba (3495735738) > creation_time : Thu Jan 25 16:07:02 2018 EST > expiration_time : Wed Dec 31 19:00:00 1969 EST > auth_time : NTTIME(0) > auth_session_info_seqnum : 0x00000000 (0) > auth_session_info : NULL > connection_dialect : 0x0302 (770) > signing_flags : 0x00 (0) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > encryption_flags : 0x00 (0) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > num_channels : 0x00000001 (1) > channels: ARRAY(1) > channels: struct smbXsrv_channel_global0 > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > local_address : 'ipv4:10.0.0.254:445' > remote_address : 'ipv4:10.0.0.2:52795' > remote_name : '10.0.0.2' > auth_session_info_seqnum : 0x00000000 (0) > connection : * > encryption_cipher : 0x0000 (0) > status : NT_STATUS_MORE_PROCESSING_REQUIRED > idle_time : Thu Jan 25 16:07:02 2018 EST > nonce_high_random : 0x0000000000000000 (0) > nonce_high_max : 0x0000000000000000 (0) > nonce_high : 0x0000000000000000 (0) > nonce_low : 0x0000000000000000 (0) > compat : NULL > tcon_table : * > pending_auth : NULL >[2018/01/25 16:07:01.757278, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:524(make_auth3_context_for_ntlm) > Making default auth method list for server role = 'standalone server', encrypt passwords = yes >[2018/01/25 16:07:01.757310, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:400(load_auth_module) > load_auth_module: Attempting to find an auth method to match guest >[2018/01/25 16:07:01.757340, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:425(load_auth_module) > load_auth_module: auth method guest has a valid init >[2018/01/25 16:07:01.757365, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:400(load_auth_module) > load_auth_module: Attempting to find an auth method to match sam_ignoredomain >[2018/01/25 16:07:01.757390, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:425(load_auth_module) > load_auth_module: auth method sam_ignoredomain has a valid init >[2018/01/25 16:07:01.757563, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:739(gensec_start_mech) > Starting GENSEC mechanism spnego >[2018/01/25 16:07:01.757596, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_session_global.tdb >[2018/01/25 16:07:01.757622, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_session_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.757653, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key D05CB1BA >[2018/01/25 16:07:01.757684, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013c1960 >[2018/01/25 16:07:01.757722, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:944(smbXsrv_session_global_store) >[2018/01/25 16:07:01.757739, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:946(smbXsrv_session_global_store) > smbXsrv_session_global_store: key 'D05CB1BA' stored >[2018/01/25 16:07:01.757764, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_session_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000002 (2) > info : union smbXsrv_session_globalU(case 0) > info0 : * > info0: struct smbXsrv_session_global0 > db_rec : * > session_global_id : 0xd05cb1ba (3495735738) > session_wire_id : 0x00000000d05cb1ba (3495735738) > creation_time : Thu Jan 25 16:07:02 2018 EST > expiration_time : Wed Dec 31 19:00:00 1969 EST > auth_time : NTTIME(0) > auth_session_info_seqnum : 0x00000000 (0) > auth_session_info : NULL > connection_dialect : 0x0302 (770) > signing_flags : 0x00 (0) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > encryption_flags : 0x00 (0) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > num_channels : 0x00000001 (1) > channels: ARRAY(1) > channels: struct smbXsrv_channel_global0 > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > local_address : 'ipv4:10.0.0.254:445' > remote_address : 'ipv4:10.0.0.2:52795' > remote_name : '10.0.0.2' > auth_session_info_seqnum : 0x00000000 (0) > connection : * > encryption_cipher : 0x0000 (0) >[2018/01/25 16:07:01.758317, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_session_global.tdb >[2018/01/25 16:07:01.758346, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key D05CB1BA >[2018/01/25 16:07:01.758373, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1414(smbXsrv_session_update) >[2018/01/25 16:07:01.758388, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1422(smbXsrv_session_update) > smbXsrv_session_update: global_id (0xd05cb1ba) stored >[2018/01/25 16:07:01.758411, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &session_blob: struct smbXsrv_sessionB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_sessionU(case 0) > info0 : * > info0: struct smbXsrv_session > table : * > db_rec : NULL > client : * > local_id : 0xd05cb1ba (3495735738) > global : * > global: struct smbXsrv_session_global0 > db_rec : NULL > session_global_id : 0xd05cb1ba (3495735738) > session_wire_id : 0x00000000d05cb1ba (3495735738) > creation_time : Thu Jan 25 16:07:02 2018 EST > expiration_time : Wed Dec 31 19:00:00 1969 EST > auth_time : NTTIME(0) > auth_session_info_seqnum : 0x00000000 (0) > auth_session_info : NULL > connection_dialect : 0x0302 (770) > signing_flags : 0x00 (0) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > encryption_flags : 0x00 (0) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > num_channels : 0x00000001 (1) > channels: ARRAY(1) > channels: struct smbXsrv_channel_global0 > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > local_address : 'ipv4:10.0.0.254:445' > remote_address : 'ipv4:10.0.0.2:52795' > remote_name : '10.0.0.2' > auth_session_info_seqnum : 0x00000000 (0) > connection : * > encryption_cipher : 0x0000 (0) > status : NT_STATUS_MORE_PROCESSING_REQUIRED > idle_time : Thu Jan 25 16:07:02 2018 EST > nonce_high_random : 0x0000000000000000 (0) > nonce_high_max : 0x0000000000000000 (0) > nonce_high : 0x0000000000000000 (0) > nonce_low : 0x0000000000000000 (0) > compat : NULL > tcon_table : * > pending_auth : * > pending_auth: struct smbXsrv_session_auth0 > prev : * > next : NULL > session : * > connection : * > gensec : * > preauth : NULL > in_flags : 0x00 (0) > in_security_mode : 0x02 (2) > creation_time : Thu Jan 25 16:07:02 2018 EST > idle_time : Thu Jan 25 16:07:02 2018 EST >[2018/01/25 16:07:01.759346, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.759374, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.759398, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.759423, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.759446, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.759561, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec_start.c:739(gensec_start_mech) > Starting GENSEC submechanism ntlmssp >[2018/01/25 16:07:01.759634, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags) > Got NTLMSSP neg_flags=0x62888215 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY > NTLMSSP_NEGOTIATE_TARGET_INFO > NTLMSSP_NEGOTIATE_VERSION > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >[2018/01/25 16:07:01.759796, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > negotiate: struct NEGOTIATE_MESSAGE > Signature : 'NTLMSSP' > MessageType : NtLmNegotiate (1) > NegotiateFlags : 0x62888215 (1653113365) > 1: NTLMSSP_NEGOTIATE_UNICODE > 0: NTLMSSP_NEGOTIATE_OEM > 1: NTLMSSP_REQUEST_TARGET > 1: NTLMSSP_NEGOTIATE_SIGN > 0: NTLMSSP_NEGOTIATE_SEAL > 0: NTLMSSP_NEGOTIATE_DATAGRAM > 0: NTLMSSP_NEGOTIATE_LM_KEY > 0: NTLMSSP_NEGOTIATE_NETWARE > 1: NTLMSSP_NEGOTIATE_NTLM > 0: NTLMSSP_NEGOTIATE_NT_ONLY > 0: NTLMSSP_ANONYMOUS > 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED > 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED > 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL > 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN > 0: NTLMSSP_TARGET_TYPE_DOMAIN > 0: NTLMSSP_TARGET_TYPE_SERVER > 0: NTLMSSP_TARGET_TYPE_SHARE > 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY > 0: NTLMSSP_NEGOTIATE_IDENTIFY > 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY > 1: NTLMSSP_NEGOTIATE_TARGET_INFO > 1: NTLMSSP_NEGOTIATE_VERSION > 1: NTLMSSP_NEGOTIATE_128 > 1: NTLMSSP_NEGOTIATE_KEY_EXCH > 0: NTLMSSP_NEGOTIATE_56 > DomainNameLen : 0x0000 (0) > DomainNameMaxLen : 0x0000 (0) > DomainName : NULL > WorkstationLen : 0x0000 (0) > WorkstationMaxLen : 0x0000 (0) > Workstation : NULL > Version: struct ntlmssp_VERSION > ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6) > ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) > ProductBuild : 0x1db0 (7600) > Reserved: ARRAY(3) > [0] : 0x0f (15) > [1] : 0x00 (0) > [2] : 0x00 (0) > NTLMRevisionCurrent : UNKNOWN_ENUM_VALUE (0) >[2018/01/25 16:07:01.760616, 6, pid=93847, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr_string.c:171(ndr_pull_string) > short string '', sent with NULL termination despite NOTERM flag in IDL >[2018/01/25 16:07:01.760670, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > challenge: struct CHALLENGE_MESSAGE > Signature : 'NTLMSSP' > MessageType : NtLmChallenge (0x2) > TargetNameLen : 0x000c (12) > TargetNameMaxLen : 0x000c (12) > TargetName : * > TargetName : 'P150EM' > NegotiateFlags : 0x628a8215 (1653244437) > 1: NTLMSSP_NEGOTIATE_UNICODE > 0: NTLMSSP_NEGOTIATE_OEM > 1: NTLMSSP_REQUEST_TARGET > 1: NTLMSSP_NEGOTIATE_SIGN > 0: NTLMSSP_NEGOTIATE_SEAL > 0: NTLMSSP_NEGOTIATE_DATAGRAM > 0: NTLMSSP_NEGOTIATE_LM_KEY > 0: NTLMSSP_NEGOTIATE_NETWARE > 1: NTLMSSP_NEGOTIATE_NTLM > 0: NTLMSSP_NEGOTIATE_NT_ONLY > 0: NTLMSSP_ANONYMOUS > 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED > 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED > 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL > 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN > 0: NTLMSSP_TARGET_TYPE_DOMAIN > 1: NTLMSSP_TARGET_TYPE_SERVER > 0: NTLMSSP_TARGET_TYPE_SHARE > 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY > 0: NTLMSSP_NEGOTIATE_IDENTIFY > 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY > 1: NTLMSSP_NEGOTIATE_TARGET_INFO > 1: NTLMSSP_NEGOTIATE_VERSION > 1: NTLMSSP_NEGOTIATE_128 > 1: NTLMSSP_NEGOTIATE_KEY_EXCH > 0: NTLMSSP_NEGOTIATE_56 > ServerChallenge : af38c3f533b96fb9 > Reserved : 0000000000000000 > TargetInfoLen : 0x004c (76) > TargetInfoMaxLen : 0x004c (76) > TargetInfo : * > TargetInfo: struct AV_PAIR_LIST > count : 0x00000006 (6) > pair: ARRAY(6) > pair: struct AV_PAIR > AvId : MsvAvNbDomainName (0x2) > AvLen : 0x000c (12) > Value : union ntlmssp_AvValue(case 0x2) > AvNbDomainName : 'P150EM' > pair: struct AV_PAIR > AvId : MsvAvNbComputerName (0x1) > AvLen : 0x000c (12) > Value : union ntlmssp_AvValue(case 0x1) > AvNbComputerName : 'P150EM' > pair: struct AV_PAIR > AvId : MsvAvDnsDomainName (0x4) > AvLen : 0x0002 (2) > Value : union ntlmssp_AvValue(case 0x4) > AvDnsDomainName : '' > pair: struct AV_PAIR > AvId : MsvAvDnsComputerName (0x3) > AvLen : 0x0012 (18) > Value : union ntlmssp_AvValue(case 0x3) > AvDnsComputerName : 'localhost' > pair: struct AV_PAIR > AvId : MsvAvTimestamp (0x7) > AvLen : 0x0008 (8) > Value : union ntlmssp_AvValue(case 0x7) > AvTimestamp : Thu Jan 25 16:07:02 2018 EST > pair: struct AV_PAIR > AvId : MsvAvEOL (0x0) > AvLen : 0x0000 (0) > Value : union ntlmssp_AvValue(case 0x0) > Version: struct ntlmssp_VERSION > ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6) > ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1) > ProductBuild : 0x0000 (0) > Reserved : 000000 > NTLMRevisionCurrent : NTLMSSP_REVISION_W2K3 (0xF) >[2018/01/25 16:07:01.761731, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec.c:440(gensec_update_send) > gensec_update_send: ntlmssp[0x8013aef60]: subreq: 0x801396700 >[2018/01/25 16:07:01.761758, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec.c:440(gensec_update_send) > gensec_update_send: spnego[0x8013aec60]: subreq: 0x8013a7480 >[2018/01/25 16:07:01.761793, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 > smbd_smb2_request_pending_queue: req->current_idx = 1 > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 24 > req->in.vector[4].iov_len = 74 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 8 > req->out.vector[4].iov_len = 0 >[2018/01/25 16:07:01.761963, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec.c:498(gensec_update_done) > gensec_update_done: ntlmssp[0x8013aef60]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x801396700/../auth/ntlmssp/ntlmssp.c:181]: state[2] error[0 (0x0)] state[struct gensec_ntlmssp_update_state (0x801396890)] timer[0x0] finish[../auth/ntlmssp/ntlmssp.c:215] >[2018/01/25 16:07:01.762026, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec.c:498(gensec_update_done) > gensec_update_done: spnego[0x8013aec60]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x8013a7480/../auth/gensec/spnego.c:1601]: state[2] error[0 (0x0)] state[struct gensec_spnego_update_state (0x8013a7610)] timer[0x0] finish[../auth/gensec/spnego.c:2070] >[2018/01/25 16:07:01.762059, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.762085, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.762109, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.762133, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.762157, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.762203, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.762233, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_MORE_PROCESSING_REQUIRED] body[8] dyn[yes:175] at ../source3/smbd/smb2_sesssetup.c:171 >[2018/01/25 16:07:01.762264, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 1, current possible/max 512/512, total granted/max/low/range 1/8192/3/1 >[2018/01/25 16:07:01.776430, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.776460, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 3 (position 3) from bitmap >[2018/01/25 16:07:01.776486, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_SESSSETUP] mid = 3 >[2018/01/25 16:07:01.776514, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_session_global.tdb >[2018/01/25 16:07:01.776540, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_session_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.776570, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key D05CB1BA >[2018/01/25 16:07:01.776600, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013c1ae0 >[2018/01/25 16:07:01.776639, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:944(smbXsrv_session_global_store) >[2018/01/25 16:07:01.776655, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:946(smbXsrv_session_global_store) > smbXsrv_session_global_store: key 'D05CB1BA' stored >[2018/01/25 16:07:01.776681, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_session_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000003 (3) > info : union smbXsrv_session_globalU(case 0) > info0 : * > info0: struct smbXsrv_session_global0 > db_rec : * > session_global_id : 0xd05cb1ba (3495735738) > session_wire_id : 0x00000000d05cb1ba (3495735738) > creation_time : Thu Jan 25 16:07:02 2018 EST > expiration_time : Wed Dec 31 19:00:00 1969 EST > auth_time : NTTIME(0) > auth_session_info_seqnum : 0x00000000 (0) > auth_session_info : NULL > connection_dialect : 0x0302 (770) > signing_flags : 0x04 (4) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET > encryption_flags : 0x08 (8) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > num_channels : 0x00000001 (1) > channels: ARRAY(1) > channels: struct smbXsrv_channel_global0 > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > local_address : 'ipv4:10.0.0.254:445' > remote_address : 'ipv4:10.0.0.2:52795' > remote_name : '10.0.0.2' > auth_session_info_seqnum : 0x00000000 (0) > connection : * > encryption_cipher : 0x0000 (0) >[2018/01/25 16:07:01.777229, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_session_global.tdb >[2018/01/25 16:07:01.777258, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key D05CB1BA >[2018/01/25 16:07:01.777285, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1414(smbXsrv_session_update) >[2018/01/25 16:07:01.777299, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1422(smbXsrv_session_update) > smbXsrv_session_update: global_id (0xd05cb1ba) stored >[2018/01/25 16:07:01.777327, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &session_blob: struct smbXsrv_sessionB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_sessionU(case 0) > info0 : * > info0: struct smbXsrv_session > table : * > db_rec : NULL > client : * > local_id : 0xd05cb1ba (3495735738) > global : * > global: struct smbXsrv_session_global0 > db_rec : NULL > session_global_id : 0xd05cb1ba (3495735738) > session_wire_id : 0x00000000d05cb1ba (3495735738) > creation_time : Thu Jan 25 16:07:02 2018 EST > expiration_time : Wed Dec 31 19:00:00 1969 EST > auth_time : NTTIME(0) > auth_session_info_seqnum : 0x00000000 (0) > auth_session_info : NULL > connection_dialect : 0x0302 (770) > signing_flags : 0x04 (4) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET > encryption_flags : 0x08 (8) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > num_channels : 0x00000001 (1) > channels: ARRAY(1) > channels: struct smbXsrv_channel_global0 > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > local_address : 'ipv4:10.0.0.254:445' > remote_address : 'ipv4:10.0.0.2:52795' > remote_name : '10.0.0.2' > auth_session_info_seqnum : 0x00000000 (0) > connection : * > encryption_cipher : 0x0000 (0) > status : NT_STATUS_MORE_PROCESSING_REQUIRED > idle_time : Thu Jan 25 16:07:02 2018 EST > nonce_high_random : 0x0000000000000000 (0) > nonce_high_max : 0x0000000000000000 (0) > nonce_high : 0x0000000000000000 (0) > nonce_low : 0x0000000000000000 (0) > compat : NULL > tcon_table : * > pending_auth : * > pending_auth: struct smbXsrv_session_auth0 > prev : * > next : NULL > session : * > connection : * > gensec : * > preauth : NULL > in_flags : 0x00 (0) > in_security_mode : 0x02 (2) > creation_time : Thu Jan 25 16:07:02 2018 EST > idle_time : Thu Jan 25 16:07:02 2018 EST >[2018/01/25 16:07:01.778264, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.778288, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.778313, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.778353, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2018/01/25 16:07:01.778383, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_session_global.tdb >[2018/01/25 16:07:01.778409, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_session_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.778439, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key D05CB1BA >[2018/01/25 16:07:01.778467, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013c1ae0 >[2018/01/25 16:07:01.778503, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:944(smbXsrv_session_global_store) >[2018/01/25 16:07:01.778519, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:946(smbXsrv_session_global_store) > smbXsrv_session_global_store: key 'D05CB1BA' stored >[2018/01/25 16:07:01.778545, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_session_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000004 (4) > info : union smbXsrv_session_globalU(case 0) > info0 : * > info0: struct smbXsrv_session_global0 > db_rec : * > session_global_id : 0xd05cb1ba (3495735738) > session_wire_id : 0x00000000d05cb1ba (3495735738) > creation_time : Thu Jan 25 16:07:02 2018 EST > expiration_time : Wed Dec 31 19:00:00 1969 EST > auth_time : NTTIME(0) > auth_session_info_seqnum : 0x00000000 (0) > auth_session_info : NULL > connection_dialect : 0x0302 (770) > signing_flags : 0x04 (4) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET > encryption_flags : 0x08 (8) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > num_channels : 0x00000001 (1) > channels: ARRAY(1) > channels: struct smbXsrv_channel_global0 > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > local_address : 'ipv4:10.0.0.254:445' > remote_address : 'ipv4:10.0.0.2:52795' > remote_name : '10.0.0.2' > auth_session_info_seqnum : 0x00000000 (0) > connection : * > encryption_cipher : 0x0000 (0) >[2018/01/25 16:07:01.779085, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_session_global.tdb >[2018/01/25 16:07:01.779113, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key D05CB1BA >[2018/01/25 16:07:01.779140, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1414(smbXsrv_session_update) >[2018/01/25 16:07:01.779154, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1422(smbXsrv_session_update) > smbXsrv_session_update: global_id (0xd05cb1ba) stored >[2018/01/25 16:07:01.779177, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &session_blob: struct smbXsrv_sessionB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_sessionU(case 0) > info0 : * > info0: struct smbXsrv_session > table : * > db_rec : NULL > client : * > local_id : 0xd05cb1ba (3495735738) > global : * > global: struct smbXsrv_session_global0 > db_rec : NULL > session_global_id : 0xd05cb1ba (3495735738) > session_wire_id : 0x00000000d05cb1ba (3495735738) > creation_time : Thu Jan 25 16:07:02 2018 EST > expiration_time : Wed Dec 31 19:00:00 1969 EST > auth_time : NTTIME(0) > auth_session_info_seqnum : 0x00000000 (0) > auth_session_info : NULL > connection_dialect : 0x0302 (770) > signing_flags : 0x04 (4) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 1: SMBXSRV_PROCESSED_UNSIGNED_PACKET > encryption_flags : 0x08 (8) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > num_channels : 0x00000001 (1) > channels: ARRAY(1) > channels: struct smbXsrv_channel_global0 > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > local_address : 'ipv4:10.0.0.254:445' > remote_address : 'ipv4:10.0.0.2:52795' > remote_name : '10.0.0.2' > auth_session_info_seqnum : 0x00000000 (0) > connection : * > encryption_cipher : 0x0000 (0) > status : NT_STATUS_MORE_PROCESSING_REQUIRED > idle_time : Thu Jan 25 16:07:02 2018 EST > nonce_high_random : 0x0000000000000000 (0) > nonce_high_max : 0x0000000000000000 (0) > nonce_high : 0x0000000000000000 (0) > nonce_low : 0x0000000000000000 (0) > compat : NULL > tcon_table : * > pending_auth : * > pending_auth: struct smbXsrv_session_auth0 > prev : * > next : NULL > session : * > connection : * > gensec : * > preauth : NULL > in_flags : 0x00 (0) > in_security_mode : 0x02 (2) > creation_time : Thu Jan 25 16:07:02 2018 EST > idle_time : Thu Jan 25 16:07:02 2018 EST >[2018/01/25 16:07:01.780116, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.780142, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.780166, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.780190, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.780213, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.780349, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > authenticate: struct AUTHENTICATE_MESSAGE > Signature : 'NTLMSSP' > MessageType : NtLmAuthenticate (3) > LmChallengeResponseLen : 0x0018 (24) > LmChallengeResponseMaxLen: 0x0018 (24) > LmChallengeResponse : * > LmChallengeResponse : union ntlmssp_LM_RESPONSE_with_len(case 24) > v1: struct LM_RESPONSE > Response : 000000000000000000000000000000000000000000000000 > NtChallengeResponseLen : 0x00bc (188) > NtChallengeResponseMaxLen: 0x00bc (188) > NtChallengeResponse : * > NtChallengeResponse : union ntlmssp_NTLM_RESPONSE_with_len(case 188) > v2: struct NTLMv2_RESPONSE > Response : 41a9ff24268459e4fdb7cb848e37c678 > Challenge: struct NTLMv2_CLIENT_CHALLENGE > RespType : 0x01 (1) > HiRespType : 0x01 (1) > Reserved1 : 0x0000 (0) > Reserved2 : 0x00000000 (0) > TimeStamp : Thu Jan 25 16:07:01 2018 EST > ChallengeFromClient : edbaa023141876fb > Reserved3 : 0x00000000 (0) > AvPairs: struct AV_PAIR_LIST > count : 0x00000009 (9) > pair: ARRAY(9) > pair: struct AV_PAIR > AvId : MsvAvNbComputerName (0x1) > AvLen : 0x000c (12) > Value : union ntlmssp_AvValue(case 0x1) > AvNbComputerName : 'P150EM' > pair: struct AV_PAIR > AvId : MsvAvNbDomainName (0x2) > AvLen : 0x000c (12) > Value : union ntlmssp_AvValue(case 0x2) > AvNbDomainName : 'P150EM' > pair: struct AV_PAIR > AvId : MsvAvDnsComputerName (0x3) > AvLen : 0x0012 (18) > Value : union ntlmssp_AvValue(case 0x3) > AvDnsComputerName : 'localhost' > pair: struct AV_PAIR > AvId : MsvAvDnsDomainName (0x4) > AvLen : 0x0000 (0) > Value : union ntlmssp_AvValue(case 0x4) > AvDnsDomainName : '' > pair: struct AV_PAIR > AvId : MsvAvFlags (0x6) > AvLen : 0x0004 (4) > Value : union ntlmssp_AvValue(case 0x6) > AvFlags : 0x00000002 (2) > 0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT > 1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE > 0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE > pair: struct AV_PAIR > AvId : MsvAvTimestamp (0x7) > AvLen : 0x0008 (8) > Value : union ntlmssp_AvValue(case 0x7) > AvTimestamp : Thu Jan 25 16:07:02 2018 EST > pair: struct AV_PAIR > AvId : MsvAvTargetName (0x9) > AvLen : 0x0022 (34) > Value : union ntlmssp_AvValue(case 0x9) > AvTargetName : 'cifs/p150em.local' > pair: struct AV_PAIR > AvId : MsvChannelBindings (0xA) > AvLen : 0x0010 (16) > Value : union ntlmssp_AvValue(case 0xA) > ChannelBindings : 00000000000000000000000000000000 > pair: struct AV_PAIR > AvId : MsvAvEOL (0x0) > AvLen : 0x0000 (0) > Value : union ntlmssp_AvValue(case 0x0) > DomainNameLen : 0x000c (12) > DomainNameMaxLen : 0x000c (12) > DomainName : * > DomainName : 'P150EM' > UserNameLen : 0x0006 (6) > UserNameMaxLen : 0x0006 (6) > UserName : * > UserName : 'foo' > WorkstationLen : 0x001e (30) > WorkstationMaxLen : 0x001e (30) > Workstation : * > Workstation : 'MACBOOKPRO-39AD' > EncryptedRandomSessionKeyLen: 0x0010 (16) > EncryptedRandomSessionKeyMaxLen: 0x0010 (16) > EncryptedRandomSessionKey: * > EncryptedRandomSessionKey: DATA_BLOB length=16 > [0000] 5B 7D CB 9F 15 E4 58 C5 7A 60 FF 63 DD 2F E7 E6 [}....X. z`.c./.. > NegotiateFlags : 0x62888215 (1653113365) > 1: NTLMSSP_NEGOTIATE_UNICODE > 0: NTLMSSP_NEGOTIATE_OEM > 1: NTLMSSP_REQUEST_TARGET > 1: NTLMSSP_NEGOTIATE_SIGN > 0: NTLMSSP_NEGOTIATE_SEAL > 0: NTLMSSP_NEGOTIATE_DATAGRAM > 0: NTLMSSP_NEGOTIATE_LM_KEY > 0: NTLMSSP_NEGOTIATE_NETWARE > 1: NTLMSSP_NEGOTIATE_NTLM > 0: NTLMSSP_NEGOTIATE_NT_ONLY > 0: NTLMSSP_ANONYMOUS > 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED > 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED > 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL > 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN > 0: NTLMSSP_TARGET_TYPE_DOMAIN > 0: NTLMSSP_TARGET_TYPE_SERVER > 0: NTLMSSP_TARGET_TYPE_SHARE > 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY > 0: NTLMSSP_NEGOTIATE_IDENTIFY > 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY > 1: NTLMSSP_NEGOTIATE_TARGET_INFO > 1: NTLMSSP_NEGOTIATE_VERSION > 1: NTLMSSP_NEGOTIATE_128 > 1: NTLMSSP_NEGOTIATE_KEY_EXCH > 0: NTLMSSP_NEGOTIATE_56 > Version: struct ntlmssp_VERSION > ProductMajorVersion : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (6) > ProductMinorVersion : NTLMSSP_WINDOWS_MINOR_VERSION_1 (1) > ProductBuild : 0x1db0 (7600) > Reserved: ARRAY(3) > [0] : 0x0f (15) > [1] : 0x00 (0) > [2] : 0x00 (0) > NTLMRevisionCurrent : UNKNOWN_ENUM_VALUE (0) >[2018/01/25 16:07:01.782191, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/ntlmssp/ntlmssp_server.c:552(ntlmssp_server_preauth) > Got user=[foo] domain=[P150EM] workstation=[MACBOOKPRO-39AD] len1=24 len2=188 >[2018/01/25 16:07:01.782255, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/ntlmssp/ntlmssp_server.c:583(ntlmssp_server_preauth) >[2018/01/25 16:07:01.782272, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &v2_resp: struct NTLMv2_RESPONSE > Response : 41a9ff24268459e4fdb7cb848e37c678 > Challenge: struct NTLMv2_CLIENT_CHALLENGE > RespType : 0x01 (1) > HiRespType : 0x01 (1) > Reserved1 : 0x0000 (0) > Reserved2 : 0x00000000 (0) > TimeStamp : Thu Jan 25 16:07:01 2018 EST > ChallengeFromClient : edbaa023141876fb > Reserved3 : 0x00000000 (0) > AvPairs: struct AV_PAIR_LIST > count : 0x00000009 (9) > pair: ARRAY(9) > pair: struct AV_PAIR > AvId : MsvAvNbComputerName (0x1) > AvLen : 0x000c (12) > Value : union ntlmssp_AvValue(case 0x1) > AvNbComputerName : 'P150EM' > pair: struct AV_PAIR > AvId : MsvAvNbDomainName (0x2) > AvLen : 0x000c (12) > Value : union ntlmssp_AvValue(case 0x2) > AvNbDomainName : 'P150EM' > pair: struct AV_PAIR > AvId : MsvAvDnsComputerName (0x3) > AvLen : 0x0012 (18) > Value : union ntlmssp_AvValue(case 0x3) > AvDnsComputerName : 'localhost' > pair: struct AV_PAIR > AvId : MsvAvDnsDomainName (0x4) > AvLen : 0x0000 (0) > Value : union ntlmssp_AvValue(case 0x4) > AvDnsDomainName : '' > pair: struct AV_PAIR > AvId : MsvAvFlags (0x6) > AvLen : 0x0004 (4) > Value : union ntlmssp_AvValue(case 0x6) > AvFlags : 0x00000002 (2) > 0: NTLMSSP_AVFLAG_CONSTRAINTED_ACCOUNT > 1: NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE > 0: NTLMSSP_AVFLAG_TARGET_SPN_FROM_UNTRUSTED_SOURCE > pair: struct AV_PAIR > AvId : MsvAvTimestamp (0x7) > AvLen : 0x0008 (8) > Value : union ntlmssp_AvValue(case 0x7) > AvTimestamp : Thu Jan 25 16:07:02 2018 EST > pair: struct AV_PAIR > AvId : MsvAvTargetName (0x9) > AvLen : 0x0022 (34) > Value : union ntlmssp_AvValue(case 0x9) > AvTargetName : 'cifs/p150em.local' > pair: struct AV_PAIR > AvId : MsvChannelBindings (0xA) > AvLen : 0x0010 (16) > Value : union ntlmssp_AvValue(case 0xA) > ChannelBindings : 00000000000000000000000000000000 > pair: struct AV_PAIR > AvId : MsvAvEOL (0x0) > AvLen : 0x0000 (0) > Value : union ntlmssp_AvValue(case 0x0) >[2018/01/25 16:07:01.783166, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3868(lp_load_ex) > lp_load_ex: refreshing parameters >[2018/01/25 16:07:01.783196, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1344(free_param_opts) > Freeing parametrics: >[2018/01/25 16:07:01.783336, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:547(init_globals) > Initialising global parameters >[2018/01/25 16:07:01.783526, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2782(lp_do_section) > Processing section "[global]" > doing parameter workgroup = WORKGROUP > doing parameter netbios name = p150em > doing parameter log level = 10 >[2018/01/25 16:07:01.783673, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/util/debug.c:744(debug_dump_status) > INFO: Current debug levels: > all: 10 > tdb: 10 > printdrivers: 10 > lanman: 10 > smb: 10 > rpc_parse: 10 > rpc_srv: 10 > rpc_cli: 10 > passdb: 10 > sam: 10 > auth: 10 > winbind: 10 > vfs: 10 > idmap: 10 > quota: 10 > acls: 10 > locking: 10 > msdfs: 10 > dmapi: 10 > registry: 10 > scavenger: 10 > dns: 10 > ldb: 10 > tevent: 10 > auth_audit: 10 > auth_json_audit: 10 > kerberos: 10 > drs_repl: 10 > doing parameter passdb backend = tdbsam > doing parameter vfs objects = zfsacl >[2018/01/25 16:07:01.784053, 2, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2799(lp_do_section) > Processing section "[timecapsule]" >[2018/01/25 16:07:01.784083, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1344(free_param_opts) > Freeing parametrics: > doing parameter path = /foo/timecapsule > doing parameter writable = yes > doing parameter browsable = yes > doing parameter read only = no > doing parameter guest ok = no > doing parameter fruit:time machine = yes >[2018/01/25 16:07:01.784353, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:3910(lp_load_ex) > pm_process() returned Yes >[2018/01/25 16:07:01.784386, 7, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4229(lp_servicenumber) > lp_servicenumber: couldn't find homes >[2018/01/25 16:07:01.784418, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:1617(lp_add_ipc) > adding IPC service >[2018/01/25 16:07:01.784556, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:121(make_user_info_map) > Mapping user [P150EM]\[foo] from workstation [MACBOOKPRO-39AD] >[2018/01/25 16:07:01.784599, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:64(make_user_info) > attempting to make a user_info for foo (foo) >[2018/01/25 16:07:01.784627, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:72(make_user_info) > making strings for foo's user_info struct >[2018/01/25 16:07:01.784654, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:125(make_user_info) > making blobs for foo's user_info struct >[2018/01/25 16:07:01.784679, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/user_info.c:176(make_user_info) > made a user_info for foo (foo) >[2018/01/25 16:07:01.784703, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:189(auth_check_ntlm_password) > check_ntlm_password: Checking password for unmapped user [P150EM]\[foo]@[MACBOOKPRO-39AD] with the new password interface >[2018/01/25 16:07:01.784728, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:192(auth_check_ntlm_password) > check_ntlm_password: mapped user is: [P150EM]\[foo]@[MACBOOKPRO-39AD] >[2018/01/25 16:07:01.784752, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:202(auth_check_ntlm_password) > check_ntlm_password: auth_context challenge created by random >[2018/01/25 16:07:01.784776, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:204(auth_check_ntlm_password) > challenge is: >[2018/01/25 16:07:01.784799, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/util/util.c:514(dump_data) > [0000] AF 38 C3 F5 33 B9 6F B9 .8..3.o. >[2018/01/25 16:07:01.784843, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_builtin.c:41(check_guest_security) > Check auth for: [foo] >[2018/01/25 16:07:01.784867, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:237(auth_check_ntlm_password) > auth_check_ntlm_password: guest had nothing to say >[2018/01/25 16:07:01.784903, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.784930, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.784954, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.784978, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.785001, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.785095, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:570(pdb_set_username) > pdb_set_username: setting username foo, was >[2018/01/25 16:07:01.785128, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:593(pdb_set_domain) > pdb_set_domain: setting domain P150EM, was >[2018/01/25 16:07:01.785153, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:616(pdb_set_nt_username) > pdb_set_nt_username: setting nt username , was >[2018/01/25 16:07:01.785179, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:639(pdb_set_fullname) > pdb_set_full_name: setting full name foo, was >[2018/01/25 16:07:01.785206, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server) > Home server: p150em >[2018/01/25 16:07:01.785243, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:732(pdb_set_homedir) > pdb_set_homedir: setting home dir \\p150em\foo, was >[2018/01/25 16:07:01.785270, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:708(pdb_set_dir_drive) > pdb_set_dir_drive: setting dir drive , was NULL >[2018/01/25 16:07:01.785295, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:662(pdb_set_logon_script) > pdb_set_logon_script: setting logon script , was >[2018/01/25 16:07:01.785323, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server) > Home server: p150em >[2018/01/25 16:07:01.785350, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:685(pdb_set_profile_path) > pdb_set_profile_path: setting profile path \\p150em\foo\profile, was >[2018/01/25 16:07:01.785376, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:775(pdb_set_workstations) > pdb_set_workstations: setting workstations , was >[2018/01/25 16:07:01.785410, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.785436, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.785460, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.785486, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.785509, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.785558, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) > account_policy_get: name: password history, val: 0 >[2018/01/25 16:07:01.785588, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.785617, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:495(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.785646, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-3769338274-3953817585-4204003668-1000 from rid 1000 >[2018/01/25 16:07:01.785695, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.785721, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.785745, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.785768, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.785791, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.785834, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) > account_policy_get: name: maximum password age, val: -1 >[2018/01/25 16:07:01.785864, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.785892, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user foo >[2018/01/25 16:07:01.785916, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is foo >[2018/01/25 16:07:01.786109, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals did find user [foo]! >[2018/01/25 16:07:01.786167, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 1002 -> sid S-1-22-2-1002 >[2018/01/25 16:07:01.786208, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1680(get_primary_group_sid) > Forcing Primary Group to 'Domain Users' for foo >[2018/01/25 16:07:01.786236, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.786264, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.786288, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.786313, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.786336, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.786382, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) > account_policy_get: name: password history, val: 0 >[2018/01/25 16:07:01.786411, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.786445, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:570(pdb_set_username) > pdb_set_username: setting username foo, was >[2018/01/25 16:07:01.786471, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:593(pdb_set_domain) > pdb_set_domain: setting domain P150EM, was >[2018/01/25 16:07:01.786496, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:616(pdb_set_nt_username) > pdb_set_nt_username: setting nt username , was >[2018/01/25 16:07:01.786523, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:639(pdb_set_fullname) > pdb_set_full_name: setting full name foo, was >[2018/01/25 16:07:01.786549, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server) > Home server: p150em >[2018/01/25 16:07:01.786579, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:732(pdb_set_homedir) > pdb_set_homedir: setting home dir \\p150em\foo, was >[2018/01/25 16:07:01.786605, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:708(pdb_set_dir_drive) > pdb_set_dir_drive: setting dir drive , was NULL >[2018/01/25 16:07:01.786631, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:662(pdb_set_logon_script) > pdb_set_logon_script: setting logon script , was >[2018/01/25 16:07:01.786657, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server) > Home server: p150em >[2018/01/25 16:07:01.786686, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:685(pdb_set_profile_path) > pdb_set_profile_path: setting profile path \\p150em\foo\profile, was >[2018/01/25 16:07:01.786713, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:775(pdb_set_workstations) > pdb_set_workstations: setting workstations , was >[2018/01/25 16:07:01.786739, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.786764, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.786788, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.786812, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.786834, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.786878, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) > account_policy_get: name: password history, val: 0 >[2018/01/25 16:07:01.786908, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.786933, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:495(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.786960, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-3769338274-3953817585-4204003668-1000 from rid 1000 >[2018/01/25 16:07:01.787001, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:557(pdb_set_group_sid) > pdb_set_group_sid: setting group sid S-1-5-21-3769338274-3953817585-4204003668-513 >[2018/01/25 16:07:01.787035, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.787075, 4, pid=93847, effective(0, 0), real(0, 0)] ../libcli/auth/ntlm_check.c:364(ntlm_password_check) > ntlm_password_check: Checking NTLMv2 password with domain [P150EM] >[2018/01/25 16:07:01.787173, 4, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/check_samsec.c:183(sam_account_ok) > sam_account_ok: Checking SMB password for user foo >[2018/01/25 16:07:01.787207, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/check_samsec.c:165(logon_hours_ok) > logon_hours_ok: user foo allowed to logon at this time (Thu Jan 25 21:07:01 2018 > ) >[2018/01/25 16:07:01.787241, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.787265, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.787289, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.787315, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.787338, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.787383, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) > account_policy_get: name: maximum password age, val: -1 >[2018/01/25 16:07:01.787413, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.787443, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.787467, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.787491, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.787515, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.787537, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.787577, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user foo >[2018/01/25 16:07:01.787603, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is foo >[2018/01/25 16:07:01.787629, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals did find user [foo]! >[2018/01/25 16:07:01.787665, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.787694, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.787718, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.787741, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.787764, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.787808, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) > account_policy_get: name: minimum password age, val: 0 >[2018/01/25 16:07:01.787837, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.787862, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.787886, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.787910, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.787934, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.787956, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.787998, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) > account_policy_get: name: maximum password age, val: -1 >[2018/01/25 16:07:01.788027, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.788056, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user foo >[2018/01/25 16:07:01.788081, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is foo >[2018/01/25 16:07:01.788106, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals did find user [foo]! >[2018/01/25 16:07:01.788133, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) > sys_getgrouplist: user [foo] >[2018/01/25 16:07:01.788411, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 1002 -> sid S-1-22-2-1002 >[2018/01/25 16:07:01.788446, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/server_info_sam.c:122(make_server_info_sam) > make_server_info_sam: made server info for user foo -> foo >[2018/01/25 16:07:01.788480, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.788513, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:256(auth_check_ntlm_password) > auth_check_ntlm_password: sam_ignoredomain authentication for user [foo] succeeded >[2018/01/25 16:07:01.788542, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.788567, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.788590, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.788614, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.788636, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.788687, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.788713, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:283(auth_check_ntlm_password) > check_ntlm_password: PAM Account for user [foo] succeeded >[2018/01/25 16:07:01.788765, 3, pid=93847, effective(0, 0), real(0, 0)] ../auth/auth_log.c:760(log_authentication_event_human_readable) > Auth: [SMB2,(null)] user [P150EM]\[foo] at [Thu, 25 Jan 2018 16:07:01.788748 EST] with [NTLMv2] status [NT_STATUS_OK] workstation [MACBOOKPRO-39AD] remote host [ipv4:10.0.0.2:52795] became [P150EM]\[foo] [S-1-5-21-3769338274-3953817585-4204003668-1000]. local host [ipv4:10.0.0.254:445] >[2018/01/25 16:07:01.788807, 3, pid=93847, effective(0, 0), real(0, 0)] ../auth/auth_log.c:591(log_no_json) > log_no_json: JSON auth logs not available unless compiled with jansson >[2018/01/25 16:07:01.788834, 2, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:314(auth_check_ntlm_password) > check_ntlm_password: authentication for user [foo] -> [foo] -> [foo] succeeded >[2018/01/25 16:07:01.788862, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:227(auth3_check_password) > Got NT session key of length 16 >[2018/01/25 16:07:01.788886, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/auth_ntlmssp.c:234(auth3_check_password) > Got LM session key of length 8 >[2018/01/25 16:07:01.788911, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/ntlmssp/ntlmssp_server.c:978(ntlmssp_server_postauth) > ntlmssp_server_auth: Using unmodified nt session key. >[2018/01/25 16:07:01.788968, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/ntlmssp/ntlmssp_sign.c:512(ntlmssp_sign_reset) > NTLMSSP Sign/Seal - Initialising with flags: >[2018/01/25 16:07:01.788994, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags) > Got NTLMSSP neg_flags=0x62088215 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY > NTLMSSP_NEGOTIATE_VERSION > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >[2018/01/25 16:07:01.789120, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec.c:440(gensec_update_send) > gensec_update_send: ntlmssp[0x8013aef60]: subreq: 0x801396380 >[2018/01/25 16:07:01.789147, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec.c:440(gensec_update_send) > gensec_update_send: spnego[0x8013aec60]: subreq: 0x8013a7480 >[2018/01/25 16:07:01.789178, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 > smbd_smb2_request_pending_queue: req->current_idx = 1 > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 24 > req->in.vector[4].iov_len = 400 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 8 > req->out.vector[4].iov_len = 0 >[2018/01/25 16:07:01.789332, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec.c:498(gensec_update_done) > gensec_update_done: ntlmssp[0x8013aef60]: NT_STATUS_OK tevent_req[0x801396380/../auth/ntlmssp/ntlmssp.c:181]: state[2] error[0 (0x0)] state[struct gensec_ntlmssp_update_state (0x801396510)] timer[0x0] finish[../auth/ntlmssp/ntlmssp.c:244] >[2018/01/25 16:07:01.789373, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/ntlmssp/ntlmssp_sign.c:258(ntlmssp_check_packet) > ntlmssp_check_packet: NTLMSSP signature OK ! >[2018/01/25 16:07:01.789414, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/ntlmssp/ntlmssp_sign.c:512(ntlmssp_sign_reset) > NTLMSSP Sign/Seal - Initialising with flags: >[2018/01/25 16:07:01.789440, 3, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/ntlmssp/ntlmssp_util.c:72(debug_ntlmssp_flags) > Got NTLMSSP neg_flags=0x62088215 > NTLMSSP_NEGOTIATE_UNICODE > NTLMSSP_REQUEST_TARGET > NTLMSSP_NEGOTIATE_SIGN > NTLMSSP_NEGOTIATE_NTLM > NTLMSSP_NEGOTIATE_ALWAYS_SIGN > NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY > NTLMSSP_NEGOTIATE_VERSION > NTLMSSP_NEGOTIATE_128 > NTLMSSP_NEGOTIATE_KEY_EXCH >[2018/01/25 16:07:01.789572, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../auth/gensec/gensec.c:498(gensec_update_done) > gensec_update_done: spnego[0x8013aec60]: NT_STATUS_OK tevent_req[0x8013a7480/../auth/gensec/spnego.c:1601]: state[2] error[0 (0x0)] state[struct gensec_spnego_update_state (0x8013a7610)] timer[0x0] finish[../auth/gensec/spnego.c:2070] >[2018/01/25 16:07:01.789602, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.789627, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.789651, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.789675, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.789698, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.789742, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.789776, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:247(create_local_nt_token_from_info3) > Create local NT token for foo >[2018/01/25 16:07:01.789829, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) > Parsing value for key [IDMAP/SID2XID/S-1-5-21-3769338274-3953817585-4204003668-1000]: value=[1002:U] >[2018/01/25 16:07:01.789856, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) > Parsing value for key [IDMAP/SID2XID/S-1-5-21-3769338274-3953817585-4204003668-1000]: id=[1002], endptr=[:U] >[2018/01/25 16:07:01.789882, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1503(sid_to_uid) > sid S-1-5-21-3769338274-3953817585-4204003668-1000 -> uid 1002 >[2018/01/25 16:07:01.789999, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/system_smbd.c:176(sys_getgrouplist) > sys_getgrouplist: user [foo] >[2018/01/25 16:07:01.790257, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 1002 -> sid S-1-22-2-1002 >[2018/01/25 16:07:01.790305, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.790334, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.790358, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.790382, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.790405, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.790456, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:559(finalize_local_nt_token) > Failed to fetch domain sid for WORKGROUP >[2018/01/25 16:07:01.790486, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.790601, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.790629, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.790654, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.790677, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.790700, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.790745, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:591(finalize_local_nt_token) > Failed to fetch domain sid for WORKGROUP >[2018/01/25 16:07:01.790774, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.790800, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.790824, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.790848, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.790872, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.790895, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.790997, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.791031, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-21-3769338274-3953817585-4204003668-1000] >[2018/01/25 16:07:01.791064, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-21-3769338274-3953817585-4204003668-513] >[2018/01/25 16:07:01.791095, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-22-2-1002] >[2018/01/25 16:07:01.791126, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:176(get_privileges_for_sids) > get_privileges_for_sids: sid = S-1-1-0 > Privilege set: 0x0 >[2018/01/25 16:07:01.791165, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-2] >[2018/01/25 16:07:01.791195, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/privileges.c:98(get_privileges) > get_privileges: No privileges assigned to SID [S-1-5-11] >[2018/01/25 16:07:01.791231, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) > Parsing value for key [IDMAP/SID2XID/S-1-5-21-3769338274-3953817585-4204003668-1000]: value=[1002:U] >[2018/01/25 16:07:01.791257, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) > Parsing value for key [IDMAP/SID2XID/S-1-5-21-3769338274-3953817585-4204003668-1000]: id=[1002], endptr=[:U] >[2018/01/25 16:07:01.791292, 10, pid=93847, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) > Adding cache entry with key=[IDMAP/SID2XID/S-1-5-21-3769338274-3953817585-4204003668-513] and timeout=[Wed Dec 31 19:00:00 1969 EST] (-1516914421 seconds in the past) >[2018/01/25 16:07:01.791350, 10, pid=93847, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) > Adding cache entry with key=[IDMAP/SID2XID/S-1-1-0] and timeout=[Wed Dec 31 19:00:00 1969 EST] (-1516914421 seconds in the past) >[2018/01/25 16:07:01.791400, 10, pid=93847, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) > Adding cache entry with key=[IDMAP/SID2XID/S-1-5-2] and timeout=[Wed Dec 31 19:00:00 1969 EST] (-1516914421 seconds in the past) >[2018/01/25 16:07:01.791449, 10, pid=93847, effective(0, 0), real(0, 0), class=tdb] ../source3/lib/gencache.c:301(gencache_set_data_blob) > Adding cache entry with key=[IDMAP/SID2XID/S-1-5-11] and timeout=[Wed Dec 31 19:00:00 1969 EST] (-1516914421 seconds in the past) >[2018/01/25 16:07:01.791528, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1395(sids_to_unixids) > wbcSidsToUnixIds returned WBC_ERR_WINBIND_NOT_AVAILABLE >[2018/01/25 16:07:01.791558, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.791584, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.791608, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.791631, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.791657, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.791701, 5, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1748(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 513. >[2018/01/25 16:07:01.791729, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.791755, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.791778, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.791802, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.791824, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.791871, 5, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:658(tdbsam_getsampwrid) > pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. >[2018/01/25 16:07:01.791910, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.791936, 5, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1824(lookup_global_sam_rid) > Can't find a unix id for an unmapped group >[2018/01/25 16:07:01.791959, 5, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1534(pdb_default_sid_to_id) > SID S-1-5-21-3769338274-3953817585-4204003668-513 belongs to our domain, but there is no corresponding object in the database. >[2018/01/25 16:07:01.791991, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.792016, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-21-3769338274-3953817585-4204003668-513 >[2018/01/25 16:07:01.792043, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.792068, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.792091, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.792115, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.792138, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.792177, 5, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1748(lookup_global_sam_rid) > lookup_global_sam_rid: looking up RID 513. >[2018/01/25 16:07:01.792204, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.792229, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.792252, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.792275, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.792298, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.792344, 5, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_tdb.c:658(tdbsam_getsampwrid) > pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. >[2018/01/25 16:07:01.792382, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.792408, 5, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1824(lookup_global_sam_rid) > Can't find a unix id for an unmapped group >[2018/01/25 16:07:01.792432, 5, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_interface.c:1534(pdb_default_sid_to_id) > SID S-1-5-21-3769338274-3953817585-4204003668-513 belongs to our domain, but there is no corresponding object in the database. >[2018/01/25 16:07:01.792463, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.792491, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-21-3769338274-3953817585-4204003668-513 >[2018/01/25 16:07:01.792518, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.792542, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.792565, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.792589, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.792611, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.792656, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.792683, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-1-0 >[2018/01/25 16:07:01.792709, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.792733, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.792756, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.792780, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.792802, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.792845, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.792869, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-1-0 >[2018/01/25 16:07:01.792894, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.792919, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.792942, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.792966, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.792988, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.793032, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.793058, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-2 >[2018/01/25 16:07:01.793084, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.793108, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.793131, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.793155, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.793178, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.793221, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.793248, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-2 >[2018/01/25 16:07:01.793274, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.793298, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.793324, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.793348, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.793371, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.793414, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.793439, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-11 >[2018/01/25 16:07:01.793464, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.793489, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(0) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.793512, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.793536, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.793558, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.793601, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.793626, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1209(legacy_sid_to_unixid) > LEGACY: mapping failed for sid S-1-5-11 >[2018/01/25 16:07:01.793651, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:611(create_local_token) > Could not convert SID S-1-5-21-3769338274-3953817585-4204003668-513 to gid, ignoring it >[2018/01/25 16:07:01.793679, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:611(create_local_token) > Could not convert SID S-1-1-0 to gid, ignoring it >[2018/01/25 16:07:01.793704, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:611(create_local_token) > Could not convert SID S-1-5-2 to gid, ignoring it >[2018/01/25 16:07:01.793729, 10, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth_util.c:611(create_local_token) > Could not convert SID S-1-5-11 to gid, ignoring it >[2018/01/25 16:07:01.793757, 10, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-3769338274-3953817585-4204003668-1000 > SID[ 1]: S-1-5-21-3769338274-3953817585-4204003668-513 > SID[ 2]: S-1-22-2-1002 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-11 > SID[ 6]: S-1-22-1-1002 > Privileges (0x 0): > Rights (0x 0): >[2018/01/25 16:07:01.793889, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 1002 > Primary group is 1002 and contains 1 supplementary groups > Group[ 0]: 1002 >[2018/01/25 16:07:01.793952, 4, pid=93847, effective(0, 0), real(0, 0)] ../auth/auth_log.c:860(log_successful_authz_event_human_readable) > Successful AuthZ: [SMB2,NTLMSSP] user [P150EM]\[foo] [S-1-5-21-3769338274-3953817585-4204003668-1000] at [Thu, 25 Jan 2018 16:07:01.793941 EST] Remote host [ipv4:10.0.0.2:52795] local host [ipv4:10.0.0.254:445] >[2018/01/25 16:07:01.794082, 7, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4229(lp_servicenumber) > lp_servicenumber: couldn't find foo >[2018/01/25 16:07:01.794111, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user foo >[2018/01/25 16:07:01.794137, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is foo >[2018/01/25 16:07:01.794163, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals did find user [foo]! >[2018/01/25 16:07:01.794187, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/password.c:144(register_homes_share) > Adding homes service for user 'foo' using home directory: '/home/foo' >[2018/01/25 16:07:01.794229, 7, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:4229(lp_servicenumber) > lp_servicenumber: couldn't find homes >[2018/01/25 16:07:01.794293, 6, pid=93847, effective(0, 0), real(0, 0)] ../source3/param/loadparm.c:2332(lp_file_list_changed) > lp_file_list_changed() > file /etc/opt/samba/smb.conf -> /etc/opt/samba/smb.conf last mod_time: Tue Jan 23 12:05:28 2018 > >[2018/01/25 16:07:01.794390, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_session_global.tdb >[2018/01/25 16:07:01.794419, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_session_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.794449, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key D05CB1BA >[2018/01/25 16:07:01.794479, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013c1960 >[2018/01/25 16:07:01.794548, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:944(smbXsrv_session_global_store) >[2018/01/25 16:07:01.794565, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:946(smbXsrv_session_global_store) > smbXsrv_session_global_store: key 'D05CB1BA' stored >[2018/01/25 16:07:01.794591, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_session_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000005 (5) > info : union smbXsrv_session_globalU(case 0) > info0 : * > info0: struct smbXsrv_session_global0 > db_rec : * > session_global_id : 0xd05cb1ba (3495735738) > session_wire_id : 0x00000000d05cb1ba (3495735738) > creation_time : Thu Jan 25 16:07:02 2018 EST > expiration_time : Wed Dec 31 19:00:00 1969 EST > auth_time : Thu Jan 25 16:07:02 2018 EST > auth_session_info_seqnum : 0x00000001 (1) > auth_session_info : * > auth_session_info: struct auth_session_info > security_token : * > security_token: struct security_token > num_sids : 0x00000007 (7) > sids: ARRAY(7) > sids : S-1-5-21-3769338274-3953817585-4204003668-1000 > sids : S-1-5-21-3769338274-3953817585-4204003668-513 > sids : S-1-22-2-1002 > sids : S-1-1-0 > sids : S-1-5-2 > sids : S-1-5-11 > sids : S-1-22-1-1002 > privilege_mask : 0x0000000000000000 (0) > 0: SEC_PRIV_MACHINE_ACCOUNT_BIT > 0: SEC_PRIV_PRINT_OPERATOR_BIT > 0: SEC_PRIV_ADD_USERS_BIT > 0: SEC_PRIV_DISK_OPERATOR_BIT > 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT > 0: SEC_PRIV_BACKUP_BIT > 0: SEC_PRIV_RESTORE_BIT > 0: SEC_PRIV_TAKE_OWNERSHIP_BIT > 0: SEC_PRIV_INCREASE_QUOTA_BIT > 0: SEC_PRIV_SECURITY_BIT > 0: SEC_PRIV_LOAD_DRIVER_BIT > 0: SEC_PRIV_SYSTEM_PROFILE_BIT > 0: SEC_PRIV_SYSTEMTIME_BIT > 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT > 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT > 0: SEC_PRIV_CREATE_PAGEFILE_BIT > 0: SEC_PRIV_SHUTDOWN_BIT > 0: SEC_PRIV_DEBUG_BIT > 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT > 0: SEC_PRIV_CHANGE_NOTIFY_BIT > 0: SEC_PRIV_UNDOCK_BIT > 0: SEC_PRIV_ENABLE_DELEGATION_BIT > 0: SEC_PRIV_MANAGE_VOLUME_BIT > 0: SEC_PRIV_IMPERSONATE_BIT > 0: SEC_PRIV_CREATE_GLOBAL_BIT > rights_mask : 0x00000000 (0) > 0: LSA_POLICY_MODE_INTERACTIVE > 0: LSA_POLICY_MODE_NETWORK > 0: LSA_POLICY_MODE_BATCH > 0: LSA_POLICY_MODE_SERVICE > 0: LSA_POLICY_MODE_PROXY > 0: LSA_POLICY_MODE_DENY_INTERACTIVE > 0: LSA_POLICY_MODE_DENY_NETWORK > 0: LSA_POLICY_MODE_DENY_BATCH > 0: LSA_POLICY_MODE_DENY_SERVICE > 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE > 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE > 0x00: LSA_POLICY_MODE_ALL (0) > 0x00: LSA_POLICY_MODE_ALL_NT4 (0) > unix_token : * > unix_token: struct security_unix_token > uid : 0x00000000000003ea (1002) > gid : 0x00000000000003ea (1002) > ngroups : 0x00000001 (1) > groups: ARRAY(1) > groups : 0x00000000000003ea (1002) > info : * > info: struct auth_user_info > account_name : * > account_name : 'foo' > user_principal_name : NULL > user_principal_constructed: 0x00 (0) > domain_name : * > domain_name : 'P150EM' > dns_domain_name : NULL > full_name : * > full_name : 'foo' > logon_script : * > logon_script : '' > profile_path : * > profile_path : '\\p150em\foo\profile' > home_directory : * > home_directory : '\\p150em\foo' > home_drive : * > home_drive : '' > logon_server : * > logon_server : 'P150EM' > last_logon : NTTIME(0) > last_logoff : Mon Jan 18 22:14:07 2038 EST > acct_expiry : Mon Jan 18 22:14:07 2038 EST > last_password_change : Sun Jan 21 21:37:28 2018 EST > allow_password_change : Sun Jan 21 21:37:28 2018 EST > force_password_change : Mon Jan 18 22:14:07 2038 EST > logon_count : 0x0000 (0) > bad_password_count : 0x0000 (0) > acct_flags : 0x00000010 (16) > authenticated : 0x01 (1) > unix_info : * > unix_info: struct auth_user_info_unix > unix_name : * > unix_name : 'foo' > sanitized_username : * > sanitized_username : 'foo' > torture : NULL > credentials : NULL > connection_dialect : 0x0302 (770) > signing_flags : 0x01 (1) > 1: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > encryption_flags : 0x08 (8) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > num_channels : 0x00000001 (1) > channels: ARRAY(1) > channels: struct smbXsrv_channel_global0 > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > local_address : 'ipv4:10.0.0.254:445' > remote_address : 'ipv4:10.0.0.2:52795' > remote_name : '10.0.0.2' > auth_session_info_seqnum : 0x00000001 (1) > connection : * > encryption_cipher : 0x0001 (1) >[2018/01/25 16:07:01.796715, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_session_global.tdb >[2018/01/25 16:07:01.796744, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key D05CB1BA >[2018/01/25 16:07:01.796772, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1414(smbXsrv_session_update) >[2018/01/25 16:07:01.796786, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1422(smbXsrv_session_update) > smbXsrv_session_update: global_id (0xd05cb1ba) stored >[2018/01/25 16:07:01.796809, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &session_blob: struct smbXsrv_sessionB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_sessionU(case 0) > info0 : * > info0: struct smbXsrv_session > table : * > db_rec : NULL > client : * > local_id : 0xd05cb1ba (3495735738) > global : * > global: struct smbXsrv_session_global0 > db_rec : NULL > session_global_id : 0xd05cb1ba (3495735738) > session_wire_id : 0x00000000d05cb1ba (3495735738) > creation_time : Thu Jan 25 16:07:02 2018 EST > expiration_time : Wed Dec 31 19:00:00 1969 EST > auth_time : Thu Jan 25 16:07:02 2018 EST > auth_session_info_seqnum : 0x00000001 (1) > auth_session_info : * > auth_session_info: struct auth_session_info > security_token : * > security_token: struct security_token > num_sids : 0x00000007 (7) > sids: ARRAY(7) > sids : S-1-5-21-3769338274-3953817585-4204003668-1000 > sids : S-1-5-21-3769338274-3953817585-4204003668-513 > sids : S-1-22-2-1002 > sids : S-1-1-0 > sids : S-1-5-2 > sids : S-1-5-11 > sids : S-1-22-1-1002 > privilege_mask : 0x0000000000000000 (0) > 0: SEC_PRIV_MACHINE_ACCOUNT_BIT > 0: SEC_PRIV_PRINT_OPERATOR_BIT > 0: SEC_PRIV_ADD_USERS_BIT > 0: SEC_PRIV_DISK_OPERATOR_BIT > 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT > 0: SEC_PRIV_BACKUP_BIT > 0: SEC_PRIV_RESTORE_BIT > 0: SEC_PRIV_TAKE_OWNERSHIP_BIT > 0: SEC_PRIV_INCREASE_QUOTA_BIT > 0: SEC_PRIV_SECURITY_BIT > 0: SEC_PRIV_LOAD_DRIVER_BIT > 0: SEC_PRIV_SYSTEM_PROFILE_BIT > 0: SEC_PRIV_SYSTEMTIME_BIT > 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT > 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT > 0: SEC_PRIV_CREATE_PAGEFILE_BIT > 0: SEC_PRIV_SHUTDOWN_BIT > 0: SEC_PRIV_DEBUG_BIT > 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT > 0: SEC_PRIV_CHANGE_NOTIFY_BIT > 0: SEC_PRIV_UNDOCK_BIT > 0: SEC_PRIV_ENABLE_DELEGATION_BIT > 0: SEC_PRIV_MANAGE_VOLUME_BIT > 0: SEC_PRIV_IMPERSONATE_BIT > 0: SEC_PRIV_CREATE_GLOBAL_BIT > rights_mask : 0x00000000 (0) > 0: LSA_POLICY_MODE_INTERACTIVE > 0: LSA_POLICY_MODE_NETWORK > 0: LSA_POLICY_MODE_BATCH > 0: LSA_POLICY_MODE_SERVICE > 0: LSA_POLICY_MODE_PROXY > 0: LSA_POLICY_MODE_DENY_INTERACTIVE > 0: LSA_POLICY_MODE_DENY_NETWORK > 0: LSA_POLICY_MODE_DENY_BATCH > 0: LSA_POLICY_MODE_DENY_SERVICE > 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE > 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE > 0x00: LSA_POLICY_MODE_ALL (0) > 0x00: LSA_POLICY_MODE_ALL_NT4 (0) > unix_token : * > unix_token: struct security_unix_token > uid : 0x00000000000003ea (1002) > gid : 0x00000000000003ea (1002) > ngroups : 0x00000001 (1) > groups: ARRAY(1) > groups : 0x00000000000003ea (1002) > info : * > info: struct auth_user_info > account_name : * > account_name : 'foo' > user_principal_name : NULL > user_principal_constructed: 0x00 (0) > domain_name : * > domain_name : 'P150EM' > dns_domain_name : NULL > full_name : * > full_name : 'foo' > logon_script : * > logon_script : '' > profile_path : * > profile_path : '\\p150em\foo\profile' > home_directory : * > home_directory : '\\p150em\foo' > home_drive : * > home_drive : '' > logon_server : * > logon_server : 'P150EM' > last_logon : NTTIME(0) > last_logoff : Mon Jan 18 22:14:07 2038 EST > acct_expiry : Mon Jan 18 22:14:07 2038 EST > last_password_change : Sun Jan 21 21:37:28 2018 EST > allow_password_change : Sun Jan 21 21:37:28 2018 EST > force_password_change : Mon Jan 18 22:14:07 2038 EST > logon_count : 0x0000 (0) > bad_password_count : 0x0000 (0) > acct_flags : 0x00000010 (16) > authenticated : 0x01 (1) > unix_info : * > unix_info: struct auth_user_info_unix > unix_name : * > unix_name : 'foo' > sanitized_username : * > sanitized_username : 'foo' > torture : NULL > credentials : NULL > connection_dialect : 0x0302 (770) > signing_flags : 0x01 (1) > 1: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > encryption_flags : 0x08 (8) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > num_channels : 0x00000001 (1) > channels: ARRAY(1) > channels: struct smbXsrv_channel_global0 > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > local_address : 'ipv4:10.0.0.254:445' > remote_address : 'ipv4:10.0.0.2:52795' > remote_name : '10.0.0.2' > auth_session_info_seqnum : 0x00000001 (1) > connection : * > encryption_cipher : 0x0001 (1) > status : NT_STATUS_OK > idle_time : Thu Jan 25 16:07:02 2018 EST > nonce_high_random : 0xbcbc67fcb5712506 (-4846884763883985658) > nonce_high_max : 0x0000000000ffffff (16777215) > nonce_high : 0x0000000000000000 (0) > nonce_low : 0x0000000000000000 (0) > compat : * > tcon_table : * > pending_auth : NULL >[2018/01/25 16:07:01.799241, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[8] dyn[yes:29] at ../source3/smbd/smb2_sesssetup.c:171 >[2018/01/25 16:07:01.799270, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 512/512, total granted/max/low/range 33/8192/4/33 >[2018/01/25 16:07:01.799335, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.825635, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.825666, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 4 (position 4) from bitmap >[2018/01/25 16:07:01.825692, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 4 >[2018/01/25 16:07:01.825729, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_session_global.tdb >[2018/01/25 16:07:01.825757, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_session_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.825787, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key D05CB1BA >[2018/01/25 16:07:01.825816, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013a7460 >[2018/01/25 16:07:01.825865, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:944(smbXsrv_session_global_store) >[2018/01/25 16:07:01.825882, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:946(smbXsrv_session_global_store) > smbXsrv_session_global_store: key 'D05CB1BA' stored >[2018/01/25 16:07:01.825908, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_session_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000006 (6) > info : union smbXsrv_session_globalU(case 0) > info0 : * > info0: struct smbXsrv_session_global0 > db_rec : * > session_global_id : 0xd05cb1ba (3495735738) > session_wire_id : 0x00000000d05cb1ba (3495735738) > creation_time : Thu Jan 25 16:07:02 2018 EST > expiration_time : Wed Dec 31 19:00:00 1969 EST > auth_time : Thu Jan 25 16:07:02 2018 EST > auth_session_info_seqnum : 0x00000001 (1) > auth_session_info : * > auth_session_info: struct auth_session_info > security_token : * > security_token: struct security_token > num_sids : 0x00000007 (7) > sids: ARRAY(7) > sids : S-1-5-21-3769338274-3953817585-4204003668-1000 > sids : S-1-5-21-3769338274-3953817585-4204003668-513 > sids : S-1-22-2-1002 > sids : S-1-1-0 > sids : S-1-5-2 > sids : S-1-5-11 > sids : S-1-22-1-1002 > privilege_mask : 0x0000000000000000 (0) > 0: SEC_PRIV_MACHINE_ACCOUNT_BIT > 0: SEC_PRIV_PRINT_OPERATOR_BIT > 0: SEC_PRIV_ADD_USERS_BIT > 0: SEC_PRIV_DISK_OPERATOR_BIT > 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT > 0: SEC_PRIV_BACKUP_BIT > 0: SEC_PRIV_RESTORE_BIT > 0: SEC_PRIV_TAKE_OWNERSHIP_BIT > 0: SEC_PRIV_INCREASE_QUOTA_BIT > 0: SEC_PRIV_SECURITY_BIT > 0: SEC_PRIV_LOAD_DRIVER_BIT > 0: SEC_PRIV_SYSTEM_PROFILE_BIT > 0: SEC_PRIV_SYSTEMTIME_BIT > 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT > 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT > 0: SEC_PRIV_CREATE_PAGEFILE_BIT > 0: SEC_PRIV_SHUTDOWN_BIT > 0: SEC_PRIV_DEBUG_BIT > 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT > 0: SEC_PRIV_CHANGE_NOTIFY_BIT > 0: SEC_PRIV_UNDOCK_BIT > 0: SEC_PRIV_ENABLE_DELEGATION_BIT > 0: SEC_PRIV_MANAGE_VOLUME_BIT > 0: SEC_PRIV_IMPERSONATE_BIT > 0: SEC_PRIV_CREATE_GLOBAL_BIT > rights_mask : 0x00000000 (0) > 0: LSA_POLICY_MODE_INTERACTIVE > 0: LSA_POLICY_MODE_NETWORK > 0: LSA_POLICY_MODE_BATCH > 0: LSA_POLICY_MODE_SERVICE > 0: LSA_POLICY_MODE_PROXY > 0: LSA_POLICY_MODE_DENY_INTERACTIVE > 0: LSA_POLICY_MODE_DENY_NETWORK > 0: LSA_POLICY_MODE_DENY_BATCH > 0: LSA_POLICY_MODE_DENY_SERVICE > 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE > 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE > 0x00: LSA_POLICY_MODE_ALL (0) > 0x00: LSA_POLICY_MODE_ALL_NT4 (0) > unix_token : * > unix_token: struct security_unix_token > uid : 0x00000000000003ea (1002) > gid : 0x00000000000003ea (1002) > ngroups : 0x00000001 (1) > groups: ARRAY(1) > groups : 0x00000000000003ea (1002) > info : * > info: struct auth_user_info > account_name : * > account_name : 'foo' > user_principal_name : NULL > user_principal_constructed: 0x00 (0) > domain_name : * > domain_name : 'P150EM' > dns_domain_name : NULL > full_name : * > full_name : 'foo' > logon_script : * > logon_script : '' > profile_path : * > profile_path : '\\p150em\foo\profile' > home_directory : * > home_directory : '\\p150em\foo' > home_drive : * > home_drive : '' > logon_server : * > logon_server : 'P150EM' > last_logon : NTTIME(0) > last_logoff : Mon Jan 18 22:14:07 2038 EST > acct_expiry : Mon Jan 18 22:14:07 2038 EST > last_password_change : Sun Jan 21 21:37:28 2018 EST > allow_password_change : Sun Jan 21 21:37:28 2018 EST > force_password_change : Mon Jan 18 22:14:07 2038 EST > logon_count : 0x0000 (0) > bad_password_count : 0x0000 (0) > acct_flags : 0x00000010 (16) > authenticated : 0x01 (1) > unix_info : * > unix_info: struct auth_user_info_unix > unix_name : * > unix_name : 'foo' > sanitized_username : * > sanitized_username : 'foo' > torture : NULL > credentials : NULL > connection_dialect : 0x0302 (770) > signing_flags : 0x03 (3) > 1: SMBXSRV_SIGNING_REQUIRED > 1: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > encryption_flags : 0x08 (8) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > num_channels : 0x00000001 (1) > channels: ARRAY(1) > channels: struct smbXsrv_channel_global0 > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > local_address : 'ipv4:10.0.0.254:445' > remote_address : 'ipv4:10.0.0.2:52795' > remote_name : '10.0.0.2' > auth_session_info_seqnum : 0x00000001 (1) > connection : * > encryption_cipher : 0x0001 (1) >[2018/01/25 16:07:01.828001, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_session_global.tdb >[2018/01/25 16:07:01.828030, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key D05CB1BA >[2018/01/25 16:07:01.828057, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1414(smbXsrv_session_update) >[2018/01/25 16:07:01.828071, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_session.c:1422(smbXsrv_session_update) > smbXsrv_session_update: global_id (0xd05cb1ba) stored >[2018/01/25 16:07:01.828095, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &session_blob: struct smbXsrv_sessionB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_sessionU(case 0) > info0 : * > info0: struct smbXsrv_session > table : * > db_rec : NULL > client : * > local_id : 0xd05cb1ba (3495735738) > global : * > global: struct smbXsrv_session_global0 > db_rec : NULL > session_global_id : 0xd05cb1ba (3495735738) > session_wire_id : 0x00000000d05cb1ba (3495735738) > creation_time : Thu Jan 25 16:07:02 2018 EST > expiration_time : Wed Dec 31 19:00:00 1969 EST > auth_time : Thu Jan 25 16:07:02 2018 EST > auth_session_info_seqnum : 0x00000001 (1) > auth_session_info : * > auth_session_info: struct auth_session_info > security_token : * > security_token: struct security_token > num_sids : 0x00000007 (7) > sids: ARRAY(7) > sids : S-1-5-21-3769338274-3953817585-4204003668-1000 > sids : S-1-5-21-3769338274-3953817585-4204003668-513 > sids : S-1-22-2-1002 > sids : S-1-1-0 > sids : S-1-5-2 > sids : S-1-5-11 > sids : S-1-22-1-1002 > privilege_mask : 0x0000000000000000 (0) > 0: SEC_PRIV_MACHINE_ACCOUNT_BIT > 0: SEC_PRIV_PRINT_OPERATOR_BIT > 0: SEC_PRIV_ADD_USERS_BIT > 0: SEC_PRIV_DISK_OPERATOR_BIT > 0: SEC_PRIV_REMOTE_SHUTDOWN_BIT > 0: SEC_PRIV_BACKUP_BIT > 0: SEC_PRIV_RESTORE_BIT > 0: SEC_PRIV_TAKE_OWNERSHIP_BIT > 0: SEC_PRIV_INCREASE_QUOTA_BIT > 0: SEC_PRIV_SECURITY_BIT > 0: SEC_PRIV_LOAD_DRIVER_BIT > 0: SEC_PRIV_SYSTEM_PROFILE_BIT > 0: SEC_PRIV_SYSTEMTIME_BIT > 0: SEC_PRIV_PROFILE_SINGLE_PROCESS_BIT > 0: SEC_PRIV_INCREASE_BASE_PRIORITY_BIT > 0: SEC_PRIV_CREATE_PAGEFILE_BIT > 0: SEC_PRIV_SHUTDOWN_BIT > 0: SEC_PRIV_DEBUG_BIT > 0: SEC_PRIV_SYSTEM_ENVIRONMENT_BIT > 0: SEC_PRIV_CHANGE_NOTIFY_BIT > 0: SEC_PRIV_UNDOCK_BIT > 0: SEC_PRIV_ENABLE_DELEGATION_BIT > 0: SEC_PRIV_MANAGE_VOLUME_BIT > 0: SEC_PRIV_IMPERSONATE_BIT > 0: SEC_PRIV_CREATE_GLOBAL_BIT > rights_mask : 0x00000000 (0) > 0: LSA_POLICY_MODE_INTERACTIVE > 0: LSA_POLICY_MODE_NETWORK > 0: LSA_POLICY_MODE_BATCH > 0: LSA_POLICY_MODE_SERVICE > 0: LSA_POLICY_MODE_PROXY > 0: LSA_POLICY_MODE_DENY_INTERACTIVE > 0: LSA_POLICY_MODE_DENY_NETWORK > 0: LSA_POLICY_MODE_DENY_BATCH > 0: LSA_POLICY_MODE_DENY_SERVICE > 0: LSA_POLICY_MODE_REMOTE_INTERACTIVE > 0: LSA_POLICY_MODE_DENY_REMOTE_INTERACTIVE > 0x00: LSA_POLICY_MODE_ALL (0) > 0x00: LSA_POLICY_MODE_ALL_NT4 (0) > unix_token : * > unix_token: struct security_unix_token > uid : 0x00000000000003ea (1002) > gid : 0x00000000000003ea (1002) > ngroups : 0x00000001 (1) > groups: ARRAY(1) > groups : 0x00000000000003ea (1002) > info : * > info: struct auth_user_info > account_name : * > account_name : 'foo' > user_principal_name : NULL > user_principal_constructed: 0x00 (0) > domain_name : * > domain_name : 'P150EM' > dns_domain_name : NULL > full_name : * > full_name : 'foo' > logon_script : * > logon_script : '' > profile_path : * > profile_path : '\\p150em\foo\profile' > home_directory : * > home_directory : '\\p150em\foo' > home_drive : * > home_drive : '' > logon_server : * > logon_server : 'P150EM' > last_logon : NTTIME(0) > last_logoff : Mon Jan 18 22:14:07 2038 EST > acct_expiry : Mon Jan 18 22:14:07 2038 EST > last_password_change : Sun Jan 21 21:37:28 2018 EST > allow_password_change : Sun Jan 21 21:37:28 2018 EST > force_password_change : Mon Jan 18 22:14:07 2038 EST > logon_count : 0x0000 (0) > bad_password_count : 0x0000 (0) > acct_flags : 0x00000010 (16) > authenticated : 0x01 (1) > unix_info : * > unix_info: struct auth_user_info_unix > unix_name : * > unix_name : 'foo' > sanitized_username : * > sanitized_username : 'foo' > torture : NULL > credentials : NULL > connection_dialect : 0x0302 (770) > signing_flags : 0x03 (3) > 1: SMBXSRV_SIGNING_REQUIRED > 1: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > encryption_flags : 0x08 (8) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > num_channels : 0x00000001 (1) > channels: ARRAY(1) > channels: struct smbXsrv_channel_global0 > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > local_address : 'ipv4:10.0.0.254:445' > remote_address : 'ipv4:10.0.0.2:52795' > remote_name : '10.0.0.2' > auth_session_info_seqnum : 0x00000001 (1) > connection : * > encryption_cipher : 0x0001 (1) > status : NT_STATUS_OK > idle_time : Thu Jan 25 16:07:02 2018 EST > nonce_high_random : 0xbcbc67fcb5712506 (-4846884763883985658) > nonce_high_max : 0x0000000000ffffff (16777215) > nonce_high : 0x0000000000000000 (0) > nonce_low : 0x0000000000000000 (0) > compat : * > tcon_table : * > pending_auth : NULL >[2018/01/25 16:07:01.830526, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.830551, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.830575, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.830616, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2018/01/25 16:07:01.830671, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) > smbd_smb2_tree_connect: path[\\P150EM._smb._tcp.local.\TIMECAPSULE] share[TIMECAPSULE] >[2018/01/25 16:07:01.830727, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.830756, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_tcon_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.830785, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key B755D5A9 >[2018/01/25 16:07:01.830821, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x801351020 >[2018/01/25 16:07:01.830946, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:710(smbXsrv_tcon_global_store) >[2018/01/25 16:07:01.830964, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:712(smbXsrv_tcon_global_store) > smbXsrv_tcon_global_store: key 'B755D5A9' stored >[2018/01/25 16:07:01.830990, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_tcon_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_tcon_globalU(case 0) > info0 : * > info0: struct smbXsrv_tcon_global0 > db_rec : * > tcon_global_id : 0xb755d5a9 (3075855785) > tcon_wire_id : 0xb755d5a9 (3075855785) > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > creation_time : Thu Jan 25 16:07:02 2018 EST > share_name : NULL > encryption_flags : 0x00 (0) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > session_global_id : 0x00000000 (0) > signing_flags : 0x00 (0) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET >[2018/01/25 16:07:01.831370, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key B755D5A9 >[2018/01/25 16:07:01.831398, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.831425, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:832(smbXsrv_tcon_create) >[2018/01/25 16:07:01.831439, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:840(smbXsrv_tcon_create) > smbXsrv_tcon_create: global_id (0xb755d5a9) stored >[2018/01/25 16:07:01.831462, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &tcon_blob: struct smbXsrv_tconB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_tconU(case 0) > info0 : * > info0: struct smbXsrv_tcon > table : * > db_rec : NULL > local_id : 0xb755d5a9 (3075855785) > global : * > global: struct smbXsrv_tcon_global0 > db_rec : NULL > tcon_global_id : 0xb755d5a9 (3075855785) > tcon_wire_id : 0xb755d5a9 (3075855785) > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > creation_time : Thu Jan 25 16:07:02 2018 EST > share_name : NULL > encryption_flags : 0x00 (0) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > session_global_id : 0x00000000 (0) > signing_flags : 0x00 (0) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > status : NT_STATUS_INTERNAL_ERROR > idle_time : Thu Jan 25 16:07:02 2018 EST > compat : NULL >[2018/01/25 16:07:01.832064, 3, pid=93847, effective(0, 0), real(0, 0)] ../lib/util/access.c:365(allow_access) > Allowed connection from 10.0.0.2 (10.0.0.2) >[2018/01/25 16:07:01.832102, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:219(user_ok_token) > user_ok_token: share timecapsule is ok for unix user foo >[2018/01/25 16:07:01.832199, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:69(set_conn_connectpath) > set_conn_connectpath: service timecapsule, connectpath = /foo/timecapsule >[2018/01/25 16:07:01.832245, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:595(make_connection_snum) > Connect path is '/foo/timecapsule' for service [timecapsule] >[2018/01/25 16:07:01.832281, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:219(user_ok_token) > user_ok_token: share timecapsule is ok for unix user foo >[2018/01/25 16:07:01.832308, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:266(is_share_read_only_for_token) > is_share_read_only_for_user: share timecapsule is read-write for unix user foo >[2018/01/25 16:07:01.832363, 10, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) > se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff >[2018/01/25 16:07:01.832400, 3, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:113(vfs_init_default) > Initialising default vfs hooks >[2018/01/25 16:07:01.832445, 10, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) > vfs_find_backend_entry called for /[Default VFS]/ >[2018/01/25 16:07:01.832471, 5, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) > Successfully added vfs backend '/[Default VFS]/' >[2018/01/25 16:07:01.832496, 10, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) > vfs_find_backend_entry called for posixacl >[2018/01/25 16:07:01.832521, 5, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) > Successfully added vfs backend 'posixacl' >[2018/01/25 16:07:01.832553, 10, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) > vfs_find_backend_entry called for dfs_samba4 >[2018/01/25 16:07:01.832579, 5, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) > Successfully added vfs backend 'dfs_samba4' >[2018/01/25 16:07:01.832613, 10, pid=93847, effective(0, 0), real(0, 0), class=dfs_samba4] ../source3/modules/vfs_dfs_samba4.c:155(vfs_dfs_samba4_init) > vfs_dfs_samba4: Debug class number of 'fileid': 28 >[2018/01/25 16:07:01.832639, 3, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:139(vfs_init_custom) > Initialising custom vfs hooks from [/[Default VFS]/] >[2018/01/25 16:07:01.832665, 10, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) > vfs_find_backend_entry called for /[Default VFS]/ > Successfully loaded vfs module [/[Default VFS]/] with the new modules system >[2018/01/25 16:07:01.832701, 3, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:139(vfs_init_custom) > Initialising custom vfs hooks from [zfsacl] >[2018/01/25 16:07:01.832726, 10, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) > vfs_find_backend_entry called for zfsacl >[2018/01/25 16:07:01.832750, 5, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:179(vfs_init_custom) > vfs module [zfsacl] not loaded - trying to load... >[2018/01/25 16:07:01.832777, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/util/modules.c:160(load_module_absolute_path) > load_module_absolute_path: Loading module '/opt/samba/lib/vfs/zfsacl.so' >[2018/01/25 16:07:01.834260, 3, pid=93847, effective(0, 0), real(0, 0)] ../lib/util/modules.c:167(load_module_absolute_path) > load_module_absolute_path: Module '/opt/samba/lib/vfs/zfsacl.so' loaded >[2018/01/25 16:07:01.834297, 10, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) > vfs_find_backend_entry called for zfsacl >[2018/01/25 16:07:01.834326, 5, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:103(smb_register_vfs) > Successfully added vfs backend 'zfsacl' >[2018/01/25 16:07:01.834351, 10, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) > vfs_find_backend_entry called for zfsacl > Successfully loaded vfs module [zfsacl] with the new modules system >[2018/01/25 16:07:01.834448, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/notify_msg.c:81(notify_init) > notify_init: notifyd=93807 >[2018/01/25 16:07:01.834480, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 784 - private_data=0x8049a4720 >[2018/01/25 16:07:01.834508, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 793 - private_data=0x8013c1660 >[2018/01/25 16:07:01.834534, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/messages.c:673(messaging_register) > Registering messaging pointer for type 799 - private_data=0x8013c1660 >[2018/01/25 16:07:01.834606, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:69(set_conn_connectpath) > set_conn_connectpath: service timecapsule, connectpath = /foo/timecapsule >[2018/01/25 16:07:01.834647, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:219(user_ok_token) > user_ok_token: share timecapsule is ok for unix user foo >[2018/01/25 16:07:01.834674, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:266(is_share_read_only_for_token) > is_share_read_only_for_user: share timecapsule is read-write for unix user foo >[2018/01/25 16:07:01.834713, 10, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) > se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff >[2018/01/25 16:07:01.834799, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (1002, 1002) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.834832, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-3769338274-3953817585-4204003668-1000 > SID[ 1]: S-1-5-21-3769338274-3953817585-4204003668-513 > SID[ 2]: S-1-22-2-1002 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-11 > SID[ 6]: S-1-22-1-1002 > Privileges (0x 0): > Rights (0x 0): >[2018/01/25 16:07:01.834967, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 1002 > Primary group is 1002 and contains 1 supplementary groups > Group[ 0]: 1002 >[2018/01/25 16:07:01.835021, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) > Impersonated user: uid=(0,1002), gid=(0,1002) >[2018/01/25 16:07:01.835050, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.835074, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.835097, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.835139, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2018/01/25 16:07:01.835183, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:69(set_conn_connectpath) > set_conn_connectpath: service timecapsule, connectpath = /foo/timecapsule >[2018/01/25 16:07:01.835281, 10, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/modules/vfs_default.c:178(vfswrap_fs_capabilities) > vfswrap_fs_capabilities: timestamp resolution of sec available on share timecapsule, directory /foo/timecapsule >[2018/01/25 16:07:01.835323, 2, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:841(make_connection_snum) > macbookpro-39ad (ipv4:10.0.0.2:52795) connect to service timecapsule initially as user foo (uid=1002, gid=1002) (pid 93847) >[2018/01/25 16:07:01.835362, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.835388, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_tcon_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.835417, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key B755D5A9 >[2018/01/25 16:07:01.835447, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013aee60 >[2018/01/25 16:07:01.835481, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:710(smbXsrv_tcon_global_store) >[2018/01/25 16:07:01.835497, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:712(smbXsrv_tcon_global_store) > smbXsrv_tcon_global_store: key 'B755D5A9' stored >[2018/01/25 16:07:01.835522, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_tcon_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000002 (2) > info : union smbXsrv_tcon_globalU(case 0) > info0 : * > info0: struct smbXsrv_tcon_global0 > db_rec : * > tcon_global_id : 0xb755d5a9 (3075855785) > tcon_wire_id : 0xb755d5a9 (3075855785) > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > creation_time : Thu Jan 25 16:07:02 2018 EST > share_name : 'timecapsule' > encryption_flags : 0x00 (0) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > session_global_id : 0xd05cb1ba (3495735738) > signing_flags : 0x00 (0) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET >[2018/01/25 16:07:01.835896, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key B755D5A9 >[2018/01/25 16:07:01.835923, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.835950, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:877(smbXsrv_tcon_update) >[2018/01/25 16:07:01.835964, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:885(smbXsrv_tcon_update) > smbXsrv_tcon_update: global_id (0xb755d5a9) stored >[2018/01/25 16:07:01.835987, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &tcon_blob: struct smbXsrv_tconB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_tconU(case 0) > info0 : * > info0: struct smbXsrv_tcon > table : * > db_rec : NULL > local_id : 0xb755d5a9 (3075855785) > global : * > global: struct smbXsrv_tcon_global0 > db_rec : NULL > tcon_global_id : 0xb755d5a9 (3075855785) > tcon_wire_id : 0xb755d5a9 (3075855785) > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > creation_time : Thu Jan 25 16:07:02 2018 EST > share_name : 'timecapsule' > encryption_flags : 0x00 (0) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > session_global_id : 0xd05cb1ba (3495735738) > signing_flags : 0x00 (0) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > status : NT_STATUS_OK > idle_time : Thu Jan 25 16:07:02 2018 EST > compat : * >[2018/01/25 16:07:01.836497, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[16] dyn[no:0] at ../source3/smbd/smb2_tcon.c:170 >[2018/01/25 16:07:01.836526, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 480/512, total granted/max/low/range 33/8192/5/33 >[2018/01/25 16:07:01.836559, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.903796, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.903827, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 5 (position 5) from bitmap >[2018/01/25 16:07:01.903853, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_TCON] mid = 5 >[2018/01/25 16:07:01.903885, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.903911, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.903934, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.903975, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2018/01/25 16:07:01.904005, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_tcon.c:211(smbd_smb2_tree_connect) > smbd_smb2_tree_connect: path[\\P150EM._smb._tcp.local.\IPC$] share[IPC$] >[2018/01/25 16:07:01.904054, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.904082, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_tcon_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.904111, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key C5D4DFE8 >[2018/01/25 16:07:01.904141, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013510e0 >[2018/01/25 16:07:01.904181, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:710(smbXsrv_tcon_global_store) >[2018/01/25 16:07:01.904197, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:712(smbXsrv_tcon_global_store) > smbXsrv_tcon_global_store: key 'C5D4DFE8' stored >[2018/01/25 16:07:01.904223, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_tcon_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_tcon_globalU(case 0) > info0 : * > info0: struct smbXsrv_tcon_global0 > db_rec : * > tcon_global_id : 0xc5d4dfe8 (3319062504) > tcon_wire_id : 0xc5d4dfe8 (3319062504) > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > creation_time : Thu Jan 25 16:07:02 2018 EST > share_name : NULL > encryption_flags : 0x00 (0) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > session_global_id : 0x00000000 (0) > signing_flags : 0x00 (0) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET >[2018/01/25 16:07:01.904593, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key C5D4DFE8 >[2018/01/25 16:07:01.904621, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.904648, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:832(smbXsrv_tcon_create) >[2018/01/25 16:07:01.904661, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:840(smbXsrv_tcon_create) > smbXsrv_tcon_create: global_id (0xc5d4dfe8) stored >[2018/01/25 16:07:01.904684, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &tcon_blob: struct smbXsrv_tconB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_tconU(case 0) > info0 : * > info0: struct smbXsrv_tcon > table : * > db_rec : NULL > local_id : 0xc5d4dfe8 (3319062504) > global : * > global: struct smbXsrv_tcon_global0 > db_rec : NULL > tcon_global_id : 0xc5d4dfe8 (3319062504) > tcon_wire_id : 0xc5d4dfe8 (3319062504) > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > creation_time : Thu Jan 25 16:07:02 2018 EST > share_name : NULL > encryption_flags : 0x00 (0) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > session_global_id : 0x00000000 (0) > signing_flags : 0x00 (0) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > status : NT_STATUS_INTERNAL_ERROR > idle_time : Thu Jan 25 16:07:02 2018 EST > compat : NULL >[2018/01/25 16:07:01.905190, 3, pid=93847, effective(0, 0), real(0, 0)] ../lib/util/access.c:365(allow_access) > Allowed connection from 10.0.0.2 (10.0.0.2) >[2018/01/25 16:07:01.905219, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:219(user_ok_token) > user_ok_token: share IPC$ is ok for unix user foo >[2018/01/25 16:07:01.905292, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:69(set_conn_connectpath) > set_conn_connectpath: service IPC$, connectpath = /tmp >[2018/01/25 16:07:01.905328, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:595(make_connection_snum) > Connect path is '/tmp' for service [IPC$] >[2018/01/25 16:07:01.905354, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:219(user_ok_token) > user_ok_token: share IPC$ is ok for unix user foo >[2018/01/25 16:07:01.905380, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:266(is_share_read_only_for_token) > is_share_read_only_for_user: share IPC$ is read-only for unix user foo >[2018/01/25 16:07:01.905418, 10, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) > se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff >[2018/01/25 16:07:01.905446, 3, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:113(vfs_init_default) > Initialising default vfs hooks >[2018/01/25 16:07:01.905470, 3, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:139(vfs_init_custom) > Initialising custom vfs hooks from [/[Default VFS]/] >[2018/01/25 16:07:01.905496, 10, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) > vfs_find_backend_entry called for /[Default VFS]/ > Successfully loaded vfs module [/[Default VFS]/] with the new modules system >[2018/01/25 16:07:01.905535, 3, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:139(vfs_init_custom) > Initialising custom vfs hooks from [zfsacl] >[2018/01/25 16:07:01.905560, 10, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:64(vfs_find_backend_entry) > vfs_find_backend_entry called for zfsacl > Successfully loaded vfs module [zfsacl] with the new modules system >[2018/01/25 16:07:01.905611, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:69(set_conn_connectpath) > set_conn_connectpath: service IPC$, connectpath = /tmp >[2018/01/25 16:07:01.905643, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:219(user_ok_token) > user_ok_token: share IPC$ is ok for unix user foo >[2018/01/25 16:07:01.905669, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:266(is_share_read_only_for_token) > is_share_read_only_for_user: share IPC$ is read-only for unix user foo >[2018/01/25 16:07:01.905704, 10, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/access_check.c:337(se_file_access_check) > se_file_access_check: MAX desired = 0x2000000 mapped to 0x1f01ff >[2018/01/25 16:07:01.905777, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (1002, 1002) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.905807, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-3769338274-3953817585-4204003668-1000 > SID[ 1]: S-1-5-21-3769338274-3953817585-4204003668-513 > SID[ 2]: S-1-22-2-1002 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-11 > SID[ 6]: S-1-22-1-1002 > Privileges (0x 0): > Rights (0x 0): >[2018/01/25 16:07:01.905938, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 1002 > Primary group is 1002 and contains 1 supplementary groups > Group[ 0]: 1002 >[2018/01/25 16:07:01.905991, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) > Impersonated user: uid=(0,1002), gid=(0,1002) >[2018/01/25 16:07:01.906020, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.906044, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.906068, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.906109, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2018/01/25 16:07:01.906145, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:69(set_conn_connectpath) > set_conn_connectpath: service IPC$, connectpath = /tmp >[2018/01/25 16:07:01.906194, 10, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/modules/vfs_default.c:178(vfswrap_fs_capabilities) > vfswrap_fs_capabilities: timestamp resolution of sec available on share IPC$, directory /tmp >[2018/01/25 16:07:01.906223, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:841(make_connection_snum) > macbookpro-39ad (ipv4:10.0.0.2:52795) connect to service IPC$ initially as user foo (uid=1002, gid=1002) (pid 93847) >[2018/01/25 16:07:01.906260, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.906286, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_tcon_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.906317, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key C5D4DFE8 >[2018/01/25 16:07:01.906345, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013aed60 >[2018/01/25 16:07:01.906378, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:710(smbXsrv_tcon_global_store) >[2018/01/25 16:07:01.906393, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:712(smbXsrv_tcon_global_store) > smbXsrv_tcon_global_store: key 'C5D4DFE8' stored >[2018/01/25 16:07:01.906419, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_tcon_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000002 (2) > info : union smbXsrv_tcon_globalU(case 0) > info0 : * > info0: struct smbXsrv_tcon_global0 > db_rec : * > tcon_global_id : 0xc5d4dfe8 (3319062504) > tcon_wire_id : 0xc5d4dfe8 (3319062504) > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > creation_time : Thu Jan 25 16:07:02 2018 EST > share_name : 'IPC$' > encryption_flags : 0x00 (0) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > session_global_id : 0xd05cb1ba (3495735738) > signing_flags : 0x00 (0) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET >[2018/01/25 16:07:01.906787, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key C5D4DFE8 >[2018/01/25 16:07:01.906814, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.906840, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:877(smbXsrv_tcon_update) >[2018/01/25 16:07:01.906854, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:885(smbXsrv_tcon_update) > smbXsrv_tcon_update: global_id (0xc5d4dfe8) stored >[2018/01/25 16:07:01.906877, 1, pid=93847, effective(0, 0), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &tcon_blob: struct smbXsrv_tconB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_tconU(case 0) > info0 : * > info0: struct smbXsrv_tcon > table : * > db_rec : NULL > local_id : 0xc5d4dfe8 (3319062504) > global : * > global: struct smbXsrv_tcon_global0 > db_rec : NULL > tcon_global_id : 0xc5d4dfe8 (3319062504) > tcon_wire_id : 0xc5d4dfe8 (3319062504) > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > creation_time : Thu Jan 25 16:07:02 2018 EST > share_name : 'IPC$' > encryption_flags : 0x00 (0) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 0: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > session_global_id : 0xd05cb1ba (3495735738) > signing_flags : 0x00 (0) > 0: SMBXSRV_SIGNING_REQUIRED > 0: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > status : NT_STATUS_OK > idle_time : Thu Jan 25 16:07:02 2018 EST > compat : * >[2018/01/25 16:07:01.907377, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[16] dyn[no:0] at ../source3/smbd/smb2_tcon.c:170 >[2018/01/25 16:07:01.907404, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 1, charge 1, granted 1, current possible/max 480/512, total granted/max/low/range 33/8192/6/33 >[2018/01/25 16:07:01.907436, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.908735, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.908781, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 6 (position 6) from bitmap >[2018/01/25 16:07:01.908806, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CREATE] mid = 6 >[2018/01/25 16:07:01.908852, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (1002, 1002) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.908881, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-3769338274-3953817585-4204003668-1000 > SID[ 1]: S-1-5-21-3769338274-3953817585-4204003668-513 > SID[ 2]: S-1-22-2-1002 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-11 > SID[ 6]: S-1-22-1-1002 > Privileges (0x 0): > Rights (0x 0): >[2018/01/25 16:07:01.909010, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 1002 > Primary group is 1002 and contains 1 supplementary groups > Group[ 0]: 1002 >[2018/01/25 16:07:01.909063, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) > Impersonated user: uid=(0,1002), gid=(0,1002) >[2018/01/25 16:07:01.909105, 4, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:888(vfs_ChDir) > vfs_ChDir to /tmp >[2018/01/25 16:07:01.909237, 4, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:946(vfs_ChDir) > vfs_ChDir got /tmp >[2018/01/25 16:07:01.909269, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.909295, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_tcon_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.909327, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key C5D4DFE8 >[2018/01/25 16:07:01.909356, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013aec60 >[2018/01/25 16:07:01.909390, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:710(smbXsrv_tcon_global_store) >[2018/01/25 16:07:01.909405, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:712(smbXsrv_tcon_global_store) > smbXsrv_tcon_global_store: key 'C5D4DFE8' stored >[2018/01/25 16:07:01.909430, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_tcon_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000003 (3) > info : union smbXsrv_tcon_globalU(case 0) > info0 : * > info0: struct smbXsrv_tcon_global0 > db_rec : * > tcon_global_id : 0xc5d4dfe8 (3319062504) > tcon_wire_id : 0xc5d4dfe8 (3319062504) > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > creation_time : Thu Jan 25 16:07:02 2018 EST > share_name : 'IPC$' > encryption_flags : 0x08 (8) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > session_global_id : 0xd05cb1ba (3495735738) > signing_flags : 0x02 (2) > 0: SMBXSRV_SIGNING_REQUIRED > 1: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET >[2018/01/25 16:07:01.909800, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key C5D4DFE8 >[2018/01/25 16:07:01.909827, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.909853, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:877(smbXsrv_tcon_update) >[2018/01/25 16:07:01.909867, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:885(smbXsrv_tcon_update) > smbXsrv_tcon_update: global_id (0xc5d4dfe8) stored >[2018/01/25 16:07:01.909891, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &tcon_blob: struct smbXsrv_tconB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_tconU(case 0) > info0 : * > info0: struct smbXsrv_tcon > table : * > db_rec : NULL > local_id : 0xc5d4dfe8 (3319062504) > global : * > global: struct smbXsrv_tcon_global0 > db_rec : NULL > tcon_global_id : 0xc5d4dfe8 (3319062504) > tcon_wire_id : 0xc5d4dfe8 (3319062504) > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > creation_time : Thu Jan 25 16:07:02 2018 EST > share_name : 'IPC$' > encryption_flags : 0x08 (8) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > session_global_id : 0xd05cb1ba (3495735738) > signing_flags : 0x02 (2) > 0: SMBXSRV_SIGNING_REQUIRED > 1: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > status : NT_STATUS_OK > idle_time : Thu Jan 25 16:07:02 2018 EST > compat : * >[2018/01/25 16:07:01.910410, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:649(smbd_smb2_create_send) > smbd_smb2_create_send: name [lsarpc] >[2018/01/25 16:07:01.910478, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.910506, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.910535, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 8BD87AD1 >[2018/01/25 16:07:01.910564, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x801351920 >[2018/01/25 16:07:01.910589, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:625(smbXsrv_open_global_verify_record) > smbXsrv_open_global_verify_record: empty value >[2018/01/25 16:07:01.910736, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:744(smbXsrv_open_global_store) > smbXsrv_open_global_store: key '8BD87AD1' stored >[2018/01/25 16:07:01.910767, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_open_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_open_globalU(case 0) > info0 : * > info0: struct smbXsrv_open_global0 > db_rec : * > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0x8bd87ad1 (2346220241) > open_persistent_id : 0x000000008bd87ad1 (2346220241) > open_volatile_id : 0x000000006a401a90 (1782586000) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) >[2018/01/25 16:07:01.911142, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 8BD87AD1 >[2018/01/25 16:07:01.911170, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.911196, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:911(smbXsrv_open_create) > smbXsrv_open_create: global_id (0x8bd87ad1) stored >[2018/01/25 16:07:01.911220, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &open_blob: struct smbXsrv_openB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_openU(case 0) > info0 : * > info0: struct smbXsrv_open > table : * > db_rec : NULL > local_id : 0x6a401a90 (1782586000) > global : * > global: struct smbXsrv_open_global0 > db_rec : NULL > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0x8bd87ad1 (2346220241) > open_persistent_id : 0x000000008bd87ad1 (2346220241) > open_volatile_id : 0x000000006a401a90 (1782586000) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) > status : NT_STATUS_OK > idle_time : Thu Jan 25 16:07:02 2018 EST > compat : NULL > flags : 0x00 (0) > 0: SMBXSRV_OPEN_NEED_REPLAY_CACHE > 0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE > create_action : 0x00000000 (0) > request_count : 0x0000000000000000 (0) > pre_request_count : 0x0000000000000000 (0) >[2018/01/25 16:07:01.911825, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:128(file_new) > allocated file structure fnum 1782586000 (1 used) >[2018/01/25 16:07:01.911871, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:754(file_name_hash) > file_name_hash: /tmp/lsarpc hash 0xa9e2e929 >[2018/01/25 16:07:01.911922, 4, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_ncacn_np.c:89(make_internal_rpc_pipe_socketpair) > Create of internal pipe lsarpc requested >[2018/01/25 16:07:01.912095, 8, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:667(dos_mode) > dos_mode: lsarpc >[2018/01/25 16:07:01.912192, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1504(smbd_smb2_create_finish) > smbd_smb2_create_finish: lsarpc - fnum 1782586000 >[2018/01/25 16:07:01.912237, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[88] dyn[yes:0] at ../source3/smbd/smb2_create.c:364 >[2018/01/25 16:07:01.912266, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 480/512, total granted/max/low/range 65/8192/7/65 >[2018/01/25 16:07:01.912300, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.913746, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.913776, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 7 (position 7) from bitmap >[2018/01/25 16:07:01.913802, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 7 >[2018/01/25 16:07:01.913836, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.913873, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1983(smbd_smb2_request_verify_creditcharge) > mid 7, CreditCharge: 1, NeededCharge: 1 >[2018/01/25 16:07:01.913907, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) > smbd_smb2_ioctl: ctl_code[0x0011c017] lsarpc, fnum 1782586000 >[2018/01/25 16:07:01.913949, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:61(smb2_ioctl_named_pipe) > smbd_smb2_ioctl_send: np_write_send of size 72 >[2018/01/25 16:07:01.913983, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:172(np_write_send) > np_write_send: len: 72 > smbd_smb2_request_pending_queue: req->current_idx = 1 > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 72 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 8 > req->out.vector[4].iov_len = 0 >[2018/01/25 16:07:01.914183, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:119(smbd_smb2_ioctl_pipe_write_done) > smbd_smb2_ioctl_pipe_write_done: received 72 >[2018/01/25 16:07:01.914265, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:140(smbd_smb2_ioctl_pipe_write_done) > smbd_smb2_ioctl_pipe_write_done: issuing np_read_send of size 65536 >[2018/01/25 16:07:01.914399, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:439(named_pipe_packet_process) > PDU is in Little Endian format! >[2018/01/25 16:07:01.914446, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1763(process_complete_pdu) > Processing packet type 11 >[2018/01/25 16:07:01.914495, 3, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:748(api_pipe_bind_req) > api_pipe_bind_req: lsarpc -> lsarpc rpc service >[2018/01/25 16:07:01.914528, 5, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:781(api_pipe_bind_req) > api_pipe_bind_req: make response. 781 >[2018/01/25 16:07:01.914552, 3, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:356(check_bind_req) > check_bind_req for lsarpc context_id=0 >[2018/01/25 16:07:01.914580, 3, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:399(check_bind_req) > check_bind_req: lsarpc -> lsarpc rpc service >[2018/01/25 16:07:01.914605, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:223(init_pipe_handles) > init_pipe_handle_list: created handle list for pipe lsarpc >[2018/01/25 16:07:01.914632, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:240(init_pipe_handles) > init_pipe_handle_list: pipe_handles ref count = 1 for pipe lsarpc >[2018/01/25 16:07:01.914671, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(1002, 1002) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.914700, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(3495735738) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.914724, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.914748, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.914772, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.914817, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:524(make_auth3_context_for_ntlm) > Making default auth method list for server role = 'standalone server', encrypt passwords = yes >[2018/01/25 16:07:01.914851, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:400(load_auth_module) > load_auth_module: Attempting to find an auth method to match guest >[2018/01/25 16:07:01.914876, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:425(load_auth_module) > load_auth_module: auth method guest has a valid init >[2018/01/25 16:07:01.914902, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:400(load_auth_module) > load_auth_module: Attempting to find an auth method to match sam_ignoredomain >[2018/01/25 16:07:01.915005, 5, pid=93847, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:425(load_auth_module) > load_auth_module: auth method sam_ignoredomain has a valid init >[2018/01/25 16:07:01.915039, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (1002, 1002) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.915077, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../auth/auth_log.c:860(log_successful_authz_event_human_readable) > Successful AuthZ: [lsarpc,ncacn_np] user [P150EM]\[foo] [S-1-5-21-3769338274-3953817585-4204003668-1000] at [Thu, 25 Jan 2018 16:07:01.915066 EST] Remote host [ipv4:10.0.0.2:52795] local host [NULL] >[2018/01/25 16:07:01.915141, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_BIND_ACK (12) > pfc_flags : 0x03 (3) > 1: DCERPC_PFC_FLAG_FIRST > 1: DCERPC_PFC_FLAG_LAST > 0: DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING > 0: DCERPC_PFC_FLAG_CONC_MPX > 0: DCERPC_PFC_FLAG_DID_NOT_EXECUTE > 0: DCERPC_PFC_FLAG_MAYBE > 0: DCERPC_PFC_FLAG_OBJECT_UUID > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0044 (68) > auth_length : 0x0000 (0) > call_id : 0x00000001 (1) > u : union dcerpc_payload(case 12) > bind_ack: struct dcerpc_bind_ack > max_xmit_frag : 0x10b8 (4280) > max_recv_frag : 0x10b8 (4280) > assoc_group_id : 0x000053f0 (21488) > secondary_address_size : 0x000d (13) > secondary_address : '\PIPE\lsarpc' > _pad1 : DATA_BLOB length=0 > num_results : 0x01 (1) > ctx_list: ARRAY(1) > ctx_list: struct dcerpc_ack_ctx > result : DCERPC_BIND_ACK_RESULT_ACCEPTANCE (0) > reason : union dcerpc_bind_ack_reason(case 0) > value : DCERPC_BIND_ACK_REASON_NOT_SPECIFIED (0) > syntax: struct ndr_syntax_id > uuid : 8a885d04-1ceb-11c9-9fe8-08002b104860 > if_version : 0x00000002 (2) > auth_info : DATA_BLOB length=0 >[2018/01/25 16:07:01.915683, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:507(named_pipe_packet_process) > Sending 1 fragments in a total of 0 bytes >[2018/01/25 16:07:01.915708, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:512(named_pipe_packet_process) > Sending PDU number: 0, PDU Length: 68 >[2018/01/25 16:07:01.915771, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1580(smbd_smb2_request_pending_timer) > smbd_smb2_request_pending_queue: opcode[SMB2_OP_IOCTL] mid 7 going async >[2018/01/25 16:07:01.915803, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 448/512, total granted/max/low/range 97/8192/8/97 >[2018/01/25 16:07:01.915831, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1678(smbd_smb2_request_pending_timer) > state->vector[0/5].iov_len = 4 > state->vector[1/5].iov_len = 0 > state->vector[2/5].iov_len = 64 > state->vector[3/5].iov_len = 8 > state->vector[4/5].iov_len = 1 >[2018/01/25 16:07:01.915899, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.915966, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:417(np_read_recv) > Received 68 bytes. There is no more data outstanding >[2018/01/25 16:07:01.915995, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:169(smbd_smb2_ioctl_pipe_read_done) > smbd_smb2_ioctl_pipe_read_done: np_read_recv nread = 68 is_data_outstanding = 0, status = NT_STATUS_OK >[2018/01/25 16:07:01.916031, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) > smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 68 status NT_STATUS_OK >[2018/01/25 16:07:01.916059, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[48] dyn[yes:68] at ../source3/smbd/smb2_ioctl.c:358 >[2018/01/25 16:07:01.916086, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 0, current possible/max 415/512, total granted/max/low/range 97/8192/8/97 >[2018/01/25 16:07:01.916120, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.917469, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.917510, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 8 (position 8) from bitmap >[2018/01/25 16:07:01.917535, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 8 >[2018/01/25 16:07:01.917570, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.917598, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1983(smbd_smb2_request_verify_creditcharge) > mid 8, CreditCharge: 1, NeededCharge: 1 >[2018/01/25 16:07:01.917624, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) > smbd_smb2_ioctl: ctl_code[0x0011c017] lsarpc, fnum 1782586000 >[2018/01/25 16:07:01.917651, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:61(smb2_ioctl_named_pipe) > smbd_smb2_ioctl_send: np_write_send of size 100 >[2018/01/25 16:07:01.917675, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:172(np_write_send) > np_write_send: len: 100 > smbd_smb2_request_pending_queue: req->current_idx = 1 > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 100 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 8 > req->out.vector[4].iov_len = 0 >[2018/01/25 16:07:01.917839, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:119(smbd_smb2_ioctl_pipe_write_done) > smbd_smb2_ioctl_pipe_write_done: received 100 >[2018/01/25 16:07:01.917875, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:140(smbd_smb2_ioctl_pipe_write_done) > smbd_smb2_ioctl_pipe_write_done: issuing np_read_send of size 65536 >[2018/01/25 16:07:01.917947, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:439(named_pipe_packet_process) > PDU is in Little Endian format! >[2018/01/25 16:07:01.917975, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1763(process_complete_pdu) > Processing packet type 0 >[2018/01/25 16:07:01.918000, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1632(dcesrv_auth_request) > Checking request auth. >[2018/01/25 16:07:01.918048, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(1002, 1002) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.918078, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (1002, 1002) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.918104, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-3769338274-3953817585-4204003668-1000 > SID[ 1]: S-1-5-21-3769338274-3953817585-4204003668-513 > SID[ 2]: S-1-22-2-1002 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-11 > SID[ 6]: S-1-22-1-1002 > Privileges (0x 0): > Rights (0x 0): >[2018/01/25 16:07:01.918234, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 1002 > Primary group is 1002 and contains 1 supplementary groups > Group[ 0]: 1002 >[2018/01/25 16:07:01.918294, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:452(smbd_become_authenticated_pipe_user) > Impersonated user: uid=(0,1002), gid=(0,1002) >[2018/01/25 16:07:01.918323, 5, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1482(api_pipe_request) > Requested lsarpc rpc service >[2018/01/25 16:07:01.918347, 4, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1507(api_rpcTNP) > api_rpcTNP: lsarpc op 0x2d - api_rpcTNP: rpc command: LSA_GETUSERNAME >[2018/01/25 16:07:01.918378, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1547(api_rpcTNP) > api_rpc_cmds[45].fn == 0x801ec15e4 >[2018/01/25 16:07:01.919904, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > lsa_GetUserName: struct lsa_GetUserName > in: struct lsa_GetUserName > system_name : * > system_name : 'P150EM._smb._tcp.local.' > account_name : * > account_name : NULL > authority_name : * > authority_name : NULL >[2018/01/25 16:07:01.920058, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > lsa_GetUserName: struct lsa_GetUserName > out: struct lsa_GetUserName > account_name : * > account_name : * > account_name: struct lsa_String > length : 0x0006 (6) > size : 0x0006 (6) > string : * > string : 'foo' > authority_name : * > authority_name : * > authority_name: struct lsa_String > length : 0x000c (12) > size : 0x000c (12) > string : * > string : 'P150EM' > result : NT_STATUS_OK >[2018/01/25 16:07:01.920372, 5, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1574(api_rpcTNP) > api_rpcTNP: called lsarpc successfully >[2018/01/25 16:07:01.920411, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (1002, 1002) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.920453, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > 1: DCERPC_PFC_FLAG_FIRST > 1: DCERPC_PFC_FLAG_LAST > 0: DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING > 0: DCERPC_PFC_FLAG_CONC_MPX > 0: DCERPC_PFC_FLAG_DID_NOT_EXECUTE > 0: DCERPC_PFC_FLAG_MAYBE > 0: DCERPC_PFC_FLAG_OBJECT_UUID > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0064 (100) > auth_length : 0x0000 (0) > call_id : 0x00000000 (0) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x0000004c (76) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > reserved : 0x00 (0) > stub_and_verifier : DATA_BLOB length=76 > [0000] 08 00 02 00 06 00 06 00 0C 00 02 00 03 00 00 00 ........ ........ > [0010] 00 00 00 00 03 00 00 00 66 00 6F 00 6F 00 00 00 ........ f.o.o... > [0020] 10 00 02 00 14 00 02 00 0C 00 0C 00 18 00 02 00 ........ ........ > [0030] 06 00 00 00 00 00 00 00 06 00 00 00 50 00 31 00 ........ ....P.1. > [0040] 35 00 30 00 45 00 4D 00 00 00 00 00 5.0.E.M. .... >[2018/01/25 16:07:01.921098, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:507(named_pipe_packet_process) > Sending 1 fragments in a total of 76 bytes >[2018/01/25 16:07:01.921123, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:512(named_pipe_packet_process) > Sending PDU number: 0, PDU Length: 100 >[2018/01/25 16:07:01.921188, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1580(smbd_smb2_request_pending_timer) > smbd_smb2_request_pending_queue: opcode[SMB2_OP_IOCTL] mid 8 going async >[2018/01/25 16:07:01.921219, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 416/512, total granted/max/low/range 129/8192/9/129 >[2018/01/25 16:07:01.921246, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1678(smbd_smb2_request_pending_timer) > state->vector[0/5].iov_len = 4 > state->vector[1/5].iov_len = 0 > state->vector[2/5].iov_len = 64 > state->vector[3/5].iov_len = 8 > state->vector[4/5].iov_len = 1 >[2018/01/25 16:07:01.921316, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.921383, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:417(np_read_recv) > Received 100 bytes. There is no more data outstanding >[2018/01/25 16:07:01.921413, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:169(smbd_smb2_ioctl_pipe_read_done) > smbd_smb2_ioctl_pipe_read_done: np_read_recv nread = 100 is_data_outstanding = 0, status = NT_STATUS_OK >[2018/01/25 16:07:01.921440, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) > smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 100 status NT_STATUS_OK >[2018/01/25 16:07:01.921465, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[48] dyn[yes:100] at ../source3/smbd/smb2_ioctl.c:358 >[2018/01/25 16:07:01.921491, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 0, current possible/max 383/512, total granted/max/low/range 129/8192/9/129 >[2018/01/25 16:07:01.921524, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.923148, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.923194, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 9 (position 9) from bitmap >[2018/01/25 16:07:01.923220, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 9 >[2018/01/25 16:07:01.923254, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.923282, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1983(smbd_smb2_request_verify_creditcharge) > mid 9, CreditCharge: 1, NeededCharge: 1 >[2018/01/25 16:07:01.923308, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) > smbd_smb2_ioctl: ctl_code[0x0011c017] lsarpc, fnum 1782586000 >[2018/01/25 16:07:01.923338, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:61(smb2_ioctl_named_pipe) > smbd_smb2_ioctl_send: np_write_send of size 124 >[2018/01/25 16:07:01.923362, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:172(np_write_send) > np_write_send: len: 124 > smbd_smb2_request_pending_queue: req->current_idx = 1 > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 124 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 8 > req->out.vector[4].iov_len = 0 >[2018/01/25 16:07:01.923519, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:119(smbd_smb2_ioctl_pipe_write_done) > smbd_smb2_ioctl_pipe_write_done: received 124 >[2018/01/25 16:07:01.923554, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:140(smbd_smb2_ioctl_pipe_write_done) > smbd_smb2_ioctl_pipe_write_done: issuing np_read_send of size 65536 >[2018/01/25 16:07:01.923626, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:439(named_pipe_packet_process) > PDU is in Little Endian format! >[2018/01/25 16:07:01.923655, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1763(process_complete_pdu) > Processing packet type 0 >[2018/01/25 16:07:01.923680, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1632(dcesrv_auth_request) > Checking request auth. >[2018/01/25 16:07:01.923712, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(1002, 1002) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.923740, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (1002, 1002) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.923766, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-3769338274-3953817585-4204003668-1000 > SID[ 1]: S-1-5-21-3769338274-3953817585-4204003668-513 > SID[ 2]: S-1-22-2-1002 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-11 > SID[ 6]: S-1-22-1-1002 > Privileges (0x 0): > Rights (0x 0): >[2018/01/25 16:07:01.923897, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 1002 > Primary group is 1002 and contains 1 supplementary groups > Group[ 0]: 1002 >[2018/01/25 16:07:01.923954, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:452(smbd_become_authenticated_pipe_user) > Impersonated user: uid=(0,1002), gid=(0,1002) >[2018/01/25 16:07:01.923980, 5, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1482(api_pipe_request) > Requested lsarpc rpc service >[2018/01/25 16:07:01.924004, 4, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1507(api_rpcTNP) > api_rpcTNP: lsarpc op 0x2c - api_rpcTNP: rpc command: LSA_OPENPOLICY2 >[2018/01/25 16:07:01.924034, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1547(api_rpcTNP) > api_rpc_cmds[44].fn == 0x801ec12de >[2018/01/25 16:07:01.924086, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > lsa_OpenPolicy2: struct lsa_OpenPolicy2 > in: struct lsa_OpenPolicy2 > system_name : * > system_name : 'P150EM._smb._tcp.local.' > attr : * > attr: struct lsa_ObjectAttribute > len : 0x00000018 (24) > root_dir : NULL > object_name : NULL > attributes : 0x00000000 (0) > sec_desc : NULL > sec_qos : * > sec_qos: struct lsa_QosInfo > len : 0x0000000c (12) > impersonation_level : 0x0002 (2) > context_mode : 0x01 (1) > effective_only : 0x00 (0) > access_mask : 0x00000800 (2048) > 0: LSA_POLICY_VIEW_LOCAL_INFORMATION > 0: LSA_POLICY_VIEW_AUDIT_INFORMATION > 0: LSA_POLICY_GET_PRIVATE_INFORMATION > 0: LSA_POLICY_TRUST_ADMIN > 0: LSA_POLICY_CREATE_ACCOUNT > 0: LSA_POLICY_CREATE_SECRET > 0: LSA_POLICY_CREATE_PRIVILEGE > 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS > 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS > 0: LSA_POLICY_AUDIT_LOG_ADMIN > 0: LSA_POLICY_SERVER_ADMIN > 1: LSA_POLICY_LOOKUP_NAMES > 0: LSA_POLICY_NOTIFICATION >[2018/01/25 16:07:01.924540, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/srv_access_check.c:117(access_check_object) > _lsa_OpenPolicy2: access GRANTED (requested: 0x00000800, granted: 0x00000800) >[2018/01/25 16:07:01.924579, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:304(create_rpc_handle_internal) > Opened policy hnd[1] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 6A 5A F5 46 ........ ....jZ.F > [0010] 97 6E 01 00 .n.. >[2018/01/25 16:07:01.924658, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > lsa_OpenPolicy2: struct lsa_OpenPolicy2 > out: struct lsa_OpenPolicy2 > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000d-0000-0000-6a5a-f546976e0100 > result : NT_STATUS_OK >[2018/01/25 16:07:01.924777, 5, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1574(api_rpcTNP) > api_rpcTNP: called lsarpc successfully >[2018/01/25 16:07:01.924814, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (1002, 1002) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.924846, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > 1: DCERPC_PFC_FLAG_FIRST > 1: DCERPC_PFC_FLAG_LAST > 0: DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING > 0: DCERPC_PFC_FLAG_CONC_MPX > 0: DCERPC_PFC_FLAG_DID_NOT_EXECUTE > 0: DCERPC_PFC_FLAG_MAYBE > 0: DCERPC_PFC_FLAG_OBJECT_UUID > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0030 (48) > auth_length : 0x0000 (0) > call_id : 0x00000002 (2) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000018 (24) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > reserved : 0x00 (0) > stub_and_verifier : DATA_BLOB length=24 > [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 6A 5A F5 46 ........ ....jZ.F > [0010] 97 6E 01 00 00 00 00 00 .n...... >[2018/01/25 16:07:01.925304, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:507(named_pipe_packet_process) > Sending 1 fragments in a total of 24 bytes >[2018/01/25 16:07:01.925331, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:512(named_pipe_packet_process) > Sending PDU number: 0, PDU Length: 48 >[2018/01/25 16:07:01.925387, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1580(smbd_smb2_request_pending_timer) > smbd_smb2_request_pending_queue: opcode[SMB2_OP_IOCTL] mid 9 going async >[2018/01/25 16:07:01.925416, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 384/512, total granted/max/low/range 161/8192/10/161 >[2018/01/25 16:07:01.925444, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1678(smbd_smb2_request_pending_timer) > state->vector[0/5].iov_len = 4 > state->vector[1/5].iov_len = 0 > state->vector[2/5].iov_len = 64 > state->vector[3/5].iov_len = 8 > state->vector[4/5].iov_len = 1 >[2018/01/25 16:07:01.925511, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.925575, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:417(np_read_recv) > Received 48 bytes. There is no more data outstanding >[2018/01/25 16:07:01.925605, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:169(smbd_smb2_ioctl_pipe_read_done) > smbd_smb2_ioctl_pipe_read_done: np_read_recv nread = 48 is_data_outstanding = 0, status = NT_STATUS_OK >[2018/01/25 16:07:01.925631, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) > smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 48 status NT_STATUS_OK >[2018/01/25 16:07:01.925656, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[48] dyn[yes:48] at ../source3/smbd/smb2_ioctl.c:358 >[2018/01/25 16:07:01.925682, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 0, current possible/max 351/512, total granted/max/low/range 161/8192/10/161 >[2018/01/25 16:07:01.925715, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.927232, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.927277, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 10 (position 10) from bitmap >[2018/01/25 16:07:01.927303, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 10 >[2018/01/25 16:07:01.927340, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.927367, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1983(smbd_smb2_request_verify_creditcharge) > mid 10, CreditCharge: 1, NeededCharge: 1 >[2018/01/25 16:07:01.927393, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) > smbd_smb2_ioctl: ctl_code[0x0011c017] lsarpc, fnum 1782586000 >[2018/01/25 16:07:01.927420, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:61(smb2_ioctl_named_pipe) > smbd_smb2_ioctl_send: np_write_send of size 108 >[2018/01/25 16:07:01.927444, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:172(np_write_send) > np_write_send: len: 108 > smbd_smb2_request_pending_queue: req->current_idx = 1 > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 108 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 8 > req->out.vector[4].iov_len = 0 >[2018/01/25 16:07:01.927598, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:119(smbd_smb2_ioctl_pipe_write_done) > smbd_smb2_ioctl_pipe_write_done: received 108 >[2018/01/25 16:07:01.927632, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:140(smbd_smb2_ioctl_pipe_write_done) > smbd_smb2_ioctl_pipe_write_done: issuing np_read_send of size 65536 >[2018/01/25 16:07:01.927702, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:439(named_pipe_packet_process) > PDU is in Little Endian format! >[2018/01/25 16:07:01.927733, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1763(process_complete_pdu) > Processing packet type 0 >[2018/01/25 16:07:01.927758, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1632(dcesrv_auth_request) > Checking request auth. >[2018/01/25 16:07:01.927790, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(1002, 1002) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.927818, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (1002, 1002) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.927844, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-3769338274-3953817585-4204003668-1000 > SID[ 1]: S-1-5-21-3769338274-3953817585-4204003668-513 > SID[ 2]: S-1-22-2-1002 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-11 > SID[ 6]: S-1-22-1-1002 > Privileges (0x 0): > Rights (0x 0): >[2018/01/25 16:07:01.927974, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 1002 > Primary group is 1002 and contains 1 supplementary groups > Group[ 0]: 1002 >[2018/01/25 16:07:01.928030, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:452(smbd_become_authenticated_pipe_user) > Impersonated user: uid=(0,1002), gid=(0,1002) >[2018/01/25 16:07:01.928057, 5, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1482(api_pipe_request) > Requested lsarpc rpc service >[2018/01/25 16:07:01.928081, 4, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1507(api_rpcTNP) > api_rpcTNP: lsarpc op 0xe - api_rpcTNP: rpc command: LSA_LOOKUPNAMES >[2018/01/25 16:07:01.928120, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1547(api_rpcTNP) > api_rpc_cmds[14].fn == 0x801ebbcfb >[2018/01/25 16:07:01.928232, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > lsa_LookupNames: struct lsa_LookupNames > in: struct lsa_LookupNames > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000d-0000-0000-6a5a-f546976e0100 > num_names : 0x00000001 (1) > names: ARRAY(1) > names: struct lsa_String > length : 0x0014 (20) > size : 0x0014 (20) > string : * > string : 'P150EM\foo' > sids : * > sids: struct lsa_TransSidArray > count : 0x00000000 (0) > sids : NULL > level : LSA_LOOKUP_NAMES_ALL (1) > count : * > count : 0x00000000 (0) >[2018/01/25 16:07:01.928554, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 6A 5A F5 46 ........ ....jZ.F > [0010] 97 6E 01 00 .n.. >[2018/01/25 16:07:01.928635, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(1002, 1002) : sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.928662, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(3495735738) : conn_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.928686, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.928713, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.928736, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.928779, 5, pid=93847, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/lsa/srv_lsa_nt.c:163(lookup_lsa_rids) > lookup_lsa_rids: looking up name P150EM\foo >[2018/01/25 16:07:01.928817, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:113(lookup_name) > lookup_name: P150EM\foo => domain=[P150EM], name=[foo] >[2018/01/25 16:07:01.928842, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:114(lookup_name) > lookup_name: flags = 0x073 >[2018/01/25 16:07:01.928878, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.928905, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(3495735738) : conn_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.928929, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.928953, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.928976, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.929033, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:570(pdb_set_username) > pdb_set_username: setting username foo, was >[2018/01/25 16:07:01.929060, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:593(pdb_set_domain) > pdb_set_domain: setting domain P150EM, was >[2018/01/25 16:07:01.929085, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:616(pdb_set_nt_username) > pdb_set_nt_username: setting nt username , was >[2018/01/25 16:07:01.929109, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:639(pdb_set_fullname) > pdb_set_full_name: setting full name foo, was >[2018/01/25 16:07:01.929136, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server) > Home server: p150em >[2018/01/25 16:07:01.929167, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:732(pdb_set_homedir) > pdb_set_homedir: setting home dir \\p150em\foo, was >[2018/01/25 16:07:01.929194, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:708(pdb_set_dir_drive) > pdb_set_dir_drive: setting dir drive , was NULL >[2018/01/25 16:07:01.929220, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:662(pdb_set_logon_script) > pdb_set_logon_script: setting logon script , was >[2018/01/25 16:07:01.929245, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server) > Home server: p150em >[2018/01/25 16:07:01.929274, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:685(pdb_set_profile_path) > pdb_set_profile_path: setting profile path \\p150em\foo\profile, was >[2018/01/25 16:07:01.929301, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:775(pdb_set_workstations) > pdb_set_workstations: setting workstations , was >[2018/01/25 16:07:01.929331, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 4 >[2018/01/25 16:07:01.929356, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(3495735738) : conn_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.929380, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 4 >[2018/01/25 16:07:01.929404, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.929427, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.929471, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) > account_policy_get: name: password history, val: 0 >[2018/01/25 16:07:01.929501, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.929527, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:495(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.929557, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-3769338274-3953817585-4204003668-1000 from rid 1000 >[2018/01/25 16:07:01.929599, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 4 >[2018/01/25 16:07:01.929624, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(3495735738) : conn_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.929648, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 4 >[2018/01/25 16:07:01.929671, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.929694, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.929737, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) > account_policy_get: name: maximum password age, val: -1 >[2018/01/25 16:07:01.929767, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.929794, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:181(Get_Pwnam_alloc) > Finding user foo >[2018/01/25 16:07:01.929818, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:120(Get_Pwnam_internals) > Trying _Get_Pwnam(), username as lowercase is foo >[2018/01/25 16:07:01.929845, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/username.c:159(Get_Pwnam_internals) > Get_Pwnam_internals did find user [foo]! >[2018/01/25 16:07:01.929880, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 1002 -> sid S-1-22-2-1002 >[2018/01/25 16:07:01.929916, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/lookup_sid.c:1680(get_primary_group_sid) > Forcing Primary Group to 'Domain Users' for foo >[2018/01/25 16:07:01.929944, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 4 >[2018/01/25 16:07:01.929969, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(3495735738) : conn_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.929993, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 4 >[2018/01/25 16:07:01.930016, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.930039, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.930083, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) > account_policy_get: name: password history, val: 0 >[2018/01/25 16:07:01.930112, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.930152, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:570(pdb_set_username) > pdb_set_username: setting username foo, was >[2018/01/25 16:07:01.930182, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:593(pdb_set_domain) > pdb_set_domain: setting domain P150EM, was >[2018/01/25 16:07:01.930207, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:616(pdb_set_nt_username) > pdb_set_nt_username: setting nt username , was >[2018/01/25 16:07:01.930231, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:639(pdb_set_fullname) > pdb_set_full_name: setting full name foo, was >[2018/01/25 16:07:01.930258, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server) > Home server: p150em >[2018/01/25 16:07:01.930287, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:732(pdb_set_homedir) > pdb_set_homedir: setting home dir \\p150em\foo, was >[2018/01/25 16:07:01.930315, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:708(pdb_set_dir_drive) > pdb_set_dir_drive: setting dir drive , was NULL >[2018/01/25 16:07:01.930341, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:662(pdb_set_logon_script) > pdb_set_logon_script: setting logon script , was >[2018/01/25 16:07:01.930367, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/lib/substitute.c:435(automount_server) > Home server: p150em >[2018/01/25 16:07:01.930398, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:685(pdb_set_profile_path) > pdb_set_profile_path: setting profile path \\p150em\foo\profile, was >[2018/01/25 16:07:01.930426, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:775(pdb_set_workstations) > pdb_set_workstations: setting workstations , was >[2018/01/25 16:07:01.930452, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 4 >[2018/01/25 16:07:01.930478, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:491(push_conn_ctx) > push_conn_ctx(3495735738) : conn_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.930501, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 4 >[2018/01/25 16:07:01.930525, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.930548, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.930592, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/passdb/account_pol.c:362(account_policy_get) > account_policy_get: name: password history, val: 0 >[2018/01/25 16:07:01.930621, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 3 >[2018/01/25 16:07:01.930646, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:495(pdb_set_user_sid) > pdb_set_user_sid: setting user sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.930673, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_compat.c:73(pdb_set_user_sid_from_rid) > pdb_set_user_sid_from_rid: > setting user sid S-1-5-21-3769338274-3953817585-4204003668-1000 from rid 1000 >[2018/01/25 16:07:01.930712, 10, pid=93847, effective(0, 0), real(0, 0), class=passdb] ../source3/passdb/pdb_get_set.c:557(pdb_set_group_sid) > pdb_set_group_sid: setting group sid S-1-5-21-3769338274-3953817585-4204003668-513 >[2018/01/25 16:07:01.930752, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 >[2018/01/25 16:07:01.930801, 5, pid=93847, effective(0, 0), real(0, 0), class=rpc_srv] ../source3/rpc_server/lsa/srv_lsa_nt.c:176(lookup_lsa_rids) > init_lsa_rids: P150EM\foo found >[2018/01/25 16:07:01.930842, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (1002, 1002) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.930868, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > lsa_LookupNames: struct lsa_LookupNames > out: struct lsa_LookupNames > domains : * > domains : * > domains: struct lsa_RefDomainList > count : 0x00000001 (1) > domains : * > domains: ARRAY(1) > domains: struct lsa_DomainInfo > name: struct lsa_StringLarge > length : 0x000c (12) > size : 0x000e (14) > string : * > string : 'P150EM' > sid : * > sid : S-1-5-21-3769338274-3953817585-4204003668 > max_size : 0x00000020 (32) > sids : * > sids: struct lsa_TransSidArray > count : 0x00000001 (1) > sids : * > sids: ARRAY(1) > sids: struct lsa_TranslatedSid > sid_type : SID_NAME_USER (1) > rid : 0x000003e8 (1000) > sid_index : 0x00000000 (0) > count : * > count : 0x00000001 (1) > result : NT_STATUS_OK >[2018/01/25 16:07:01.931349, 5, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1574(api_rpcTNP) > api_rpcTNP: called lsarpc successfully >[2018/01/25 16:07:01.931389, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (1002, 1002) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.931422, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > 1: DCERPC_PFC_FLAG_FIRST > 1: DCERPC_PFC_FLAG_LAST > 0: DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING > 0: DCERPC_PFC_FLAG_CONC_MPX > 0: DCERPC_PFC_FLAG_DID_NOT_EXECUTE > 0: DCERPC_PFC_FLAG_MAYBE > 0: DCERPC_PFC_FLAG_OBJECT_UUID > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x008c (140) > auth_length : 0x0000 (0) > call_id : 0x00000003 (3) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000074 (116) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > reserved : 0x00 (0) > stub_and_verifier : DATA_BLOB length=116 > [0000] 04 00 02 00 01 00 00 00 08 00 02 00 20 00 00 00 ........ .... ... > [0010] 01 00 00 00 0C 00 0E 00 0C 00 02 00 10 00 02 00 ........ ........ > [0020] 07 00 00 00 00 00 00 00 06 00 00 00 50 00 31 00 ........ ....P.1. > [0030] 35 00 30 00 45 00 4D 00 04 00 00 00 01 04 00 00 5.0.E.M. ........ > [0040] 00 00 00 05 15 00 00 00 A2 89 AB E0 F1 77 AA EB ........ .....w.. > [0050] 54 01 94 FA 01 00 00 00 14 00 02 00 01 00 00 00 T....... ........ > [0060] 01 00 00 00 E8 03 00 00 00 00 00 00 01 00 00 00 ........ ........ > [0070] 00 00 00 00 .... >[2018/01/25 16:07:01.932207, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:507(named_pipe_packet_process) > Sending 1 fragments in a total of 116 bytes >[2018/01/25 16:07:01.932232, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:512(named_pipe_packet_process) > Sending PDU number: 0, PDU Length: 140 >[2018/01/25 16:07:01.932289, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1580(smbd_smb2_request_pending_timer) > smbd_smb2_request_pending_queue: opcode[SMB2_OP_IOCTL] mid 10 going async >[2018/01/25 16:07:01.932320, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 352/512, total granted/max/low/range 193/8192/11/193 >[2018/01/25 16:07:01.932348, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1678(smbd_smb2_request_pending_timer) > state->vector[0/5].iov_len = 4 > state->vector[1/5].iov_len = 0 > state->vector[2/5].iov_len = 64 > state->vector[3/5].iov_len = 8 > state->vector[4/5].iov_len = 1 >[2018/01/25 16:07:01.932416, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.932482, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:417(np_read_recv) > Received 140 bytes. There is no more data outstanding >[2018/01/25 16:07:01.932511, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:169(smbd_smb2_ioctl_pipe_read_done) > smbd_smb2_ioctl_pipe_read_done: np_read_recv nread = 140 is_data_outstanding = 0, status = NT_STATUS_OK >[2018/01/25 16:07:01.932541, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) > smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 140 status NT_STATUS_OK >[2018/01/25 16:07:01.932567, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[48] dyn[yes:140] at ../source3/smbd/smb2_ioctl.c:358 >[2018/01/25 16:07:01.932594, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 0, current possible/max 319/512, total granted/max/low/range 193/8192/11/193 >[2018/01/25 16:07:01.932628, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.933867, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.933913, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 11 (position 11) from bitmap >[2018/01/25 16:07:01.933939, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 11 >[2018/01/25 16:07:01.933972, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.934000, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1983(smbd_smb2_request_verify_creditcharge) > mid 11, CreditCharge: 1, NeededCharge: 1 >[2018/01/25 16:07:01.934026, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) > smbd_smb2_ioctl: ctl_code[0x0011c017] lsarpc, fnum 1782586000 >[2018/01/25 16:07:01.934054, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:61(smb2_ioctl_named_pipe) > smbd_smb2_ioctl_send: np_write_send of size 44 >[2018/01/25 16:07:01.934077, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:172(np_write_send) > np_write_send: len: 44 > smbd_smb2_request_pending_queue: req->current_idx = 1 > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 44 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 8 > req->out.vector[4].iov_len = 0 >[2018/01/25 16:07:01.934232, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:119(smbd_smb2_ioctl_pipe_write_done) > smbd_smb2_ioctl_pipe_write_done: received 44 >[2018/01/25 16:07:01.934266, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:140(smbd_smb2_ioctl_pipe_write_done) > smbd_smb2_ioctl_pipe_write_done: issuing np_read_send of size 65536 >[2018/01/25 16:07:01.934339, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:439(named_pipe_packet_process) > PDU is in Little Endian format! >[2018/01/25 16:07:01.934367, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1763(process_complete_pdu) > Processing packet type 0 >[2018/01/25 16:07:01.934392, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1632(dcesrv_auth_request) > Checking request auth. >[2018/01/25 16:07:01.934423, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:216(push_sec_ctx) > push_sec_ctx(1002, 1002) : sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.934451, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (1002, 1002) - sec_ctx_stack_ndx = 1 >[2018/01/25 16:07:01.934477, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-3769338274-3953817585-4204003668-1000 > SID[ 1]: S-1-5-21-3769338274-3953817585-4204003668-513 > SID[ 2]: S-1-22-2-1002 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-11 > SID[ 6]: S-1-22-1-1002 > Privileges (0x 0): > Rights (0x 0): >[2018/01/25 16:07:01.934609, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 1002 > Primary group is 1002 and contains 1 supplementary groups > Group[ 0]: 1002 >[2018/01/25 16:07:01.934669, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:452(smbd_become_authenticated_pipe_user) > Impersonated user: uid=(0,1002), gid=(0,1002) >[2018/01/25 16:07:01.934696, 5, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1482(api_pipe_request) > Requested lsarpc rpc service >[2018/01/25 16:07:01.934719, 4, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1507(api_rpcTNP) > api_rpcTNP: lsarpc op 0x0 - api_rpcTNP: rpc command: LSA_CLOSE >[2018/01/25 16:07:01.934749, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1547(api_rpcTNP) > api_rpc_cmds[0].fn == 0x801eb94c2 >[2018/01/25 16:07:01.934797, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > lsa_Close: struct lsa_Close > in: struct lsa_Close > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 0000000d-0000-0000-6a5a-f546976e0100 >[2018/01/25 16:07:01.934902, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 6A 5A F5 46 ........ ....jZ.F > [0010] 97 6E 01 00 .n.. >[2018/01/25 16:07:01.934982, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:339(find_policy_by_hnd_internal) > Found policy hnd[0] [0000] 00 00 00 00 0D 00 00 00 00 00 00 00 6A 5A F5 46 ........ ....jZ.F > [0010] 97 6E 01 00 .n.. >[2018/01/25 16:07:01.935059, 6, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:388(close_policy_hnd) > Closed policy >[2018/01/25 16:07:01.935085, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:471(ndr_print_function_debug) > lsa_Close: struct lsa_Close > out: struct lsa_Close > handle : * > handle: struct policy_handle > handle_type : 0x00000000 (0) > uuid : 00000000-0000-0000-0000-000000000000 > result : NT_STATUS_OK >[2018/01/25 16:07:01.935198, 5, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe.c:1574(api_rpcTNP) > api_rpcTNP: called lsarpc successfully >[2018/01/25 16:07:01.935235, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx) > pop_sec_ctx (1002, 1002) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.935268, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &r: struct ncacn_packet > rpc_vers : 0x05 (5) > rpc_vers_minor : 0x00 (0) > ptype : DCERPC_PKT_RESPONSE (2) > pfc_flags : 0x03 (3) > 1: DCERPC_PFC_FLAG_FIRST > 1: DCERPC_PFC_FLAG_LAST > 0: DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING > 0: DCERPC_PFC_FLAG_CONC_MPX > 0: DCERPC_PFC_FLAG_DID_NOT_EXECUTE > 0: DCERPC_PFC_FLAG_MAYBE > 0: DCERPC_PFC_FLAG_OBJECT_UUID > drep: ARRAY(4) > [0] : 0x10 (16) > [1] : 0x00 (0) > [2] : 0x00 (0) > [3] : 0x00 (0) > frag_length : 0x0030 (48) > auth_length : 0x0000 (0) > call_id : 0x00000004 (4) > u : union dcerpc_payload(case 2) > response: struct dcerpc_response > alloc_hint : 0x00000018 (24) > context_id : 0x0000 (0) > cancel_count : 0x00 (0) > reserved : 0x00 (0) > stub_and_verifier : DATA_BLOB length=24 > [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0010] 00 00 00 00 00 00 00 00 ........ >[2018/01/25 16:07:01.935733, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:507(named_pipe_packet_process) > Sending 1 fragments in a total of 24 bytes >[2018/01/25 16:07:01.935757, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/rpc_server/rpc_server.c:512(named_pipe_packet_process) > Sending PDU number: 0, PDU Length: 48 >[2018/01/25 16:07:01.935811, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1580(smbd_smb2_request_pending_timer) > smbd_smb2_request_pending_queue: opcode[SMB2_OP_IOCTL] mid 11 going async >[2018/01/25 16:07:01.935840, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 320/512, total granted/max/low/range 225/8192/12/225 >[2018/01/25 16:07:01.935867, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1678(smbd_smb2_request_pending_timer) > state->vector[0/5].iov_len = 4 > state->vector[1/5].iov_len = 0 > state->vector[2/5].iov_len = 64 > state->vector[3/5].iov_len = 8 > state->vector[4/5].iov_len = 1 >[2018/01/25 16:07:01.935935, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.935999, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/srv_pipe_hnd.c:417(np_read_recv) > Received 48 bytes. There is no more data outstanding >[2018/01/25 16:07:01.936028, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl_named_pipe.c:169(smbd_smb2_ioctl_pipe_read_done) > smbd_smb2_ioctl_pipe_read_done: np_read_recv nread = 48 is_data_outstanding = 0, status = NT_STATUS_OK >[2018/01/25 16:07:01.936054, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) > smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 48 status NT_STATUS_OK >[2018/01/25 16:07:01.936080, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[48] dyn[yes:48] at ../source3/smbd/smb2_ioctl.c:358 >[2018/01/25 16:07:01.936106, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 0, current possible/max 287/512, total granted/max/low/range 225/8192/12/225 >[2018/01/25 16:07:01.936138, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.937644, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.937691, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 12 (position 12) from bitmap >[2018/01/25 16:07:01.937716, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CLOSE] mid = 12 >[2018/01/25 16:07:01.937748, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.937786, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_close.c:227(smbd_smb2_close) > smbd_smb2_close: lsarpc - fnum 1782586000 >[2018/01/25 16:07:01.937831, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.937858, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.937888, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 8BD87AD1 >[2018/01/25 16:07:01.937915, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013c20e0 >[2018/01/25 16:07:01.937948, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 8BD87AD1 >[2018/01/25 16:07:01.937974, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.938019, 10, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_srv] ../source3/rpc_server/rpc_handles.c:418(close_policy_by_pipe) > Deleted handle list for RPC connection lsarpc >[2018/01/25 16:07:01.938060, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:563(file_free) > freed files structure 1782586000 (0 used) >[2018/01/25 16:07:01.938105, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[60] dyn[no:0] at ../source3/smbd/smb2_close.c:144 >[2018/01/25 16:07:01.938134, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 288/512, total granted/max/low/range 257/8192/13/257 >[2018/01/25 16:07:01.938167, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.938212, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.938240, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 13 (position 13) from bitmap >[2018/01/25 16:07:01.938265, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 13 >[2018/01/25 16:07:01.938300, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (1002, 1002) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.938330, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-3769338274-3953817585-4204003668-1000 > SID[ 1]: S-1-5-21-3769338274-3953817585-4204003668-513 > SID[ 2]: S-1-22-2-1002 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-11 > SID[ 6]: S-1-22-1-1002 > Privileges (0x 0): > Rights (0x 0): >[2018/01/25 16:07:01.938461, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 1002 > Primary group is 1002 and contains 1 supplementary groups > Group[ 0]: 1002 >[2018/01/25 16:07:01.938517, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) > Impersonated user: uid=(0,1002), gid=(0,1002) >[2018/01/25 16:07:01.938545, 4, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:888(vfs_ChDir) > vfs_ChDir to /foo/timecapsule >[2018/01/25 16:07:01.938602, 4, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:946(vfs_ChDir) > vfs_ChDir got /foo/timecapsule >[2018/01/25 16:07:01.938631, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.938657, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_tcon_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.938686, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key B755D5A9 >[2018/01/25 16:07:01.938715, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x80135ba60 >[2018/01/25 16:07:01.938750, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:710(smbXsrv_tcon_global_store) >[2018/01/25 16:07:01.938765, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:712(smbXsrv_tcon_global_store) > smbXsrv_tcon_global_store: key 'B755D5A9' stored >[2018/01/25 16:07:01.938791, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_tcon_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000003 (3) > info : union smbXsrv_tcon_globalU(case 0) > info0 : * > info0: struct smbXsrv_tcon_global0 > db_rec : * > tcon_global_id : 0xb755d5a9 (3075855785) > tcon_wire_id : 0xb755d5a9 (3075855785) > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > creation_time : Thu Jan 25 16:07:02 2018 EST > share_name : 'timecapsule' > encryption_flags : 0x08 (8) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > session_global_id : 0xd05cb1ba (3495735738) > signing_flags : 0x02 (2) > 0: SMBXSRV_SIGNING_REQUIRED > 1: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET >[2018/01/25 16:07:01.939163, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key B755D5A9 >[2018/01/25 16:07:01.939190, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.939217, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:877(smbXsrv_tcon_update) >[2018/01/25 16:07:01.939230, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_tcon.c:885(smbXsrv_tcon_update) > smbXsrv_tcon_update: global_id (0xb755d5a9) stored >[2018/01/25 16:07:01.939254, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &tcon_blob: struct smbXsrv_tconB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_tconU(case 0) > info0 : * > info0: struct smbXsrv_tcon > table : * > db_rec : NULL > local_id : 0xb755d5a9 (3075855785) > global : * > global: struct smbXsrv_tcon_global0 > db_rec : NULL > tcon_global_id : 0xb755d5a9 (3075855785) > tcon_wire_id : 0xb755d5a9 (3075855785) > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > creation_time : Thu Jan 25 16:07:02 2018 EST > share_name : 'timecapsule' > encryption_flags : 0x08 (8) > 0: SMBXSRV_ENCRYPTION_REQUIRED > 0: SMBXSRV_ENCRYPTION_DESIRED > 0: SMBXSRV_PROCESSED_ENCRYPTED_PACKET > 1: SMBXSRV_PROCESSED_UNENCRYPTED_PACKET > session_global_id : 0xd05cb1ba (3495735738) > signing_flags : 0x02 (2) > 0: SMBXSRV_SIGNING_REQUIRED > 1: SMBXSRV_PROCESSED_SIGNED_PACKET > 0: SMBXSRV_PROCESSED_UNSIGNED_PACKET > status : NT_STATUS_OK > idle_time : Thu Jan 25 16:07:02 2018 EST > compat : * >[2018/01/25 16:07:01.939747, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1983(smbd_smb2_request_verify_creditcharge) > mid 13, CreditCharge: 1, NeededCharge: 1 >[2018/01/25 16:07:01.939773, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) > smbd_smb2_ioctl: ctl_code[0x00140204] <no handle>, fnum [fsp is NULL] >[2018/01/25 16:07:01.939814, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl.c:291(smbd_smb2_request_ioctl_done) > smbd_smb2_request_ioctl_done: smbd_smb2_ioctl_recv returned 24 status NT_STATUS_OK >[2018/01/25 16:07:01.939842, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[48] dyn[yes:24] at ../source3/smbd/smb2_ioctl.c:358 >[2018/01/25 16:07:01.939872, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 256/512, total granted/max/low/range 289/8192/14/289 >[2018/01/25 16:07:01.939905, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.939950, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.939978, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 14 (position 14) from bitmap >[2018/01/25 16:07:01.940003, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_TDIS] mid = 14 >[2018/01/25 16:07:01.940037, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (1002, 1002) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.940064, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-3769338274-3953817585-4204003668-1000 > SID[ 1]: S-1-5-21-3769338274-3953817585-4204003668-513 > SID[ 2]: S-1-22-2-1002 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-11 > SID[ 6]: S-1-22-1-1002 > Privileges (0x 0): > Rights (0x 0): >[2018/01/25 16:07:01.940194, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 1002 > Primary group is 1002 and contains 1 supplementary groups > Group[ 0]: 1002 >[2018/01/25 16:07:01.940250, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) > Impersonated user: uid=(0,1002), gid=(0,1002) >[2018/01/25 16:07:01.940278, 4, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:888(vfs_ChDir) > vfs_ChDir to /tmp >[2018/01/25 16:07:01.940325, 4, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:946(vfs_ChDir) > vfs_ChDir got /tmp >[2018/01/25 16:07:01.940354, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.940378, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.940401, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.940444, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) > smbd_smb2_request_pending_queue: req->current_idx = 1 > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 4 > req->in.vector[4].iov_len = 0 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 8 > req->out.vector[4].iov_len = 0 >[2018/01/25 16:07:01.940592, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.940618, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.940641, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.940683, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2018/01/25 16:07:01.940710, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.940735, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_tcon_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.940764, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key C5D4DFE8 >[2018/01/25 16:07:01.940792, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013aec60 >[2018/01/25 16:07:01.940827, 10, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key C5D4DFE8 >[2018/01/25 16:07:01.940854, 5, pid=93847, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_tcon_global.tdb >[2018/01/25 16:07:01.940892, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.940918, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.940941, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.940979, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2018/01/25 16:07:01.941004, 3, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/service.c:1120(close_cnum) > macbookpro-39ad (ipv4:10.0.0.2:52795) closed connection to service IPC$ >[2018/01/25 16:07:01.941045, 4, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:888(vfs_ChDir) > vfs_ChDir to / >[2018/01/25 16:07:01.941085, 4, pid=93847, effective(0, 0), real(0, 0), class=vfs] ../source3/smbd/vfs.c:946(vfs_ChDir) > vfs_ChDir got / >[2018/01/25 16:07:01.941113, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.941138, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug) > Security token: (NULL) >[2018/01/25 16:07:01.941160, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 0 > Primary group is 0 and contains 0 supplementary groups >[2018/01/25 16:07:01.941199, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/uid.c:425(smbd_change_to_root_user) > change_to_root_user: now uid=(0,0) gid=(0,0) >[2018/01/25 16:07:01.941239, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[4] dyn[no:0] at ../source3/smbd/smb2_tcon.c:524 >[2018/01/25 16:07:01.941267, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 224/512, total granted/max/low/range 321/8192/15/321 >[2018/01/25 16:07:01.941299, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.941347, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 13 vectors >[2018/01/25 16:07:01.941375, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 15 (position 15) from bitmap >[2018/01/25 16:07:01.941399, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 16 (position 16) from bitmap >[2018/01/25 16:07:01.941424, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 17 (position 17) from bitmap >[2018/01/25 16:07:01.941449, 10, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CREATE] mid = 15 >[2018/01/25 16:07:01.941484, 4, pid=93847, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:320(set_sec_ctx_internal) > setting sec ctx (1002, 1002) - sec_ctx_stack_ndx = 0 >[2018/01/25 16:07:01.941511, 5, pid=93847, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:63(security_token_debug) > Security token SIDs (7): > SID[ 0]: S-1-5-21-3769338274-3953817585-4204003668-1000 > SID[ 1]: S-1-5-21-3769338274-3953817585-4204003668-513 > SID[ 2]: S-1-22-2-1002 > SID[ 3]: S-1-1-0 > SID[ 4]: S-1-5-2 > SID[ 5]: S-1-5-11 > SID[ 6]: S-1-22-1-1002 > Privileges (0x 0): > Rights (0x 0): >[2018/01/25 16:07:01.941645, 5, pid=93847, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:651(debug_unix_user_token) > UNIX token of user 1002 > Primary group is 1002 and contains 1 supplementary groups > Group[ 0]: 1002 >[2018/01/25 16:07:01.941697, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:363(change_to_user_internal) > Impersonated user: uid=(0,1002), gid=(0,1002) >[2018/01/25 16:07:01.941725, 4, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:888(vfs_ChDir) > vfs_ChDir to /foo/timecapsule >[2018/01/25 16:07:01.941773, 4, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:946(vfs_ChDir) > vfs_ChDir got /foo/timecapsule >[2018/01/25 16:07:01.941805, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:649(smbd_smb2_create_send) > smbd_smb2_create_send: name [] >[2018/01/25 16:07:01.941842, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:747(smbd_smb2_create_send) > smbd_smb2_create_send: open execution phase >[2018/01/25 16:07:01.941887, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:461(unix_convert) > unix_convert called on file "" >[2018/01/25 16:07:01.941917, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:495(unix_convert) > conversion finished "" -> . >[2018/01/25 16:07:01.941949, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1283(check_reduced_name) > check_reduced_name: check_reduced_name [.] [/foo/timecapsule] >[2018/01/25 16:07:01.941993, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1347(check_reduced_name) > check_reduced_name realpath [.] -> [/foo/timecapsule] >[2018/01/25 16:07:01.942021, 5, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1458(check_reduced_name) > check_reduced_name: . reduced to /foo/timecapsule >[2018/01/25 16:07:01.942055, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5542(create_file_default) > create_file: access_mask = 0x100080 file_attributes = 0x10, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = . >[2018/01/25 16:07:01.942098, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5017(create_file_unixpath) > create_file_unixpath: access_mask = 0x100080 file_attributes = 0x10, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x0x0, sd = 0x0x0, fname = . >[2018/01/25 16:07:01.942138, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:3945(open_directory) > open_directory: opening directory ., access_mask = 0x100080, share_access = 0x7 create_options = 0x1, create_disposition = 0x1, file_attributes = 0x10 >[2018/01/25 16:07:01.942407, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.942446, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.942494, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.942535, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.942562, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.942586, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.942610, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.942637, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.942662, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.942686, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.942709, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.942734, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.942759, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.942786, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.942809, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.942832, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.942856, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.942881, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.942905, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.942929, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.942953, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.942981, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:183(smbd_check_access_rights) > smbd_check_access_rights: file . requesting 0x100080 returning 0x100000 (NT_STATUS_OK) >[2018/01/25 16:07:01.943026, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.943053, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.943082, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 755F9C6C >[2018/01/25 16:07:01.943109, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x801351020 >[2018/01/25 16:07:01.943134, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:625(smbXsrv_open_global_verify_record) > smbXsrv_open_global_verify_record: empty value >[2018/01/25 16:07:01.943175, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:744(smbXsrv_open_global_store) > smbXsrv_open_global_store: key '755F9C6C' stored >[2018/01/25 16:07:01.943204, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_open_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_open_globalU(case 0) > info0 : * > info0: struct smbXsrv_open_global0 > db_rec : * > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0x755f9c6c (1969200236) > open_persistent_id : 0x00000000755f9c6c (1969200236) > open_volatile_id : 0x000000002d10e19d (756081053) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) >[2018/01/25 16:07:01.943584, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 755F9C6C >[2018/01/25 16:07:01.943610, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.943640, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:911(smbXsrv_open_create) > smbXsrv_open_create: global_id (0x755f9c6c) stored >[2018/01/25 16:07:01.943664, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &open_blob: struct smbXsrv_openB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_openU(case 0) > info0 : * > info0: struct smbXsrv_open > table : * > db_rec : NULL > local_id : 0x2d10e19d (756081053) > global : * > global: struct smbXsrv_open_global0 > db_rec : NULL > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0x755f9c6c (1969200236) > open_persistent_id : 0x00000000755f9c6c (1969200236) > open_volatile_id : 0x000000002d10e19d (756081053) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) > status : NT_STATUS_OK > idle_time : Thu Jan 25 16:07:02 2018 EST > compat : NULL > flags : 0x00 (0) > 0: SMBXSRV_OPEN_NEED_REPLAY_CACHE > 0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE > create_action : 0x00000000 (0) > request_count : 0x0000000000000000 (0) > pre_request_count : 0x0000000000000000 (0) >[2018/01/25 16:07:01.944244, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:128(file_new) > allocated file structure fnum 756081053 (1 used) >[2018/01/25 16:07:01.944274, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:754(file_name_hash) > file_name_hash: /foo/timecapsule/. hash 0xbc0a1ea5 >[2018/01/25 16:07:01.944300, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:4153(open_directory) > Not opening Directory . >[2018/01/25 16:07:01.944341, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.944368, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/locking.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.944400, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.944441, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x81c5d4820 >[2018/01/25 16:07:01.944492, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:368(unparse_share_modes) > unparse_share_modes: >[2018/01/25 16:07:01.944523, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > d: struct share_mode_data > sequence_number : 0xa10ef6fb055044b4 (-6841259225942833996) > servicepath : * > servicepath : '/foo/timecapsule' > base_name : * > base_name : '.' > stream_name : NULL > num_share_modes : 0x00000001 (1) > share_modes: ARRAY(1) > share_modes: struct share_mode_entry > pid: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > op_mid : 0x000000000000000f (15) > op_type : 0x0000 (0) > lease_idx : 0xffffffff (4294967295) > access_mask : 0x00100080 (1048704) > share_access : 0x00000007 (7) > private_options : 0x00000000 (0) > time : Thu Jan 25 16:07:01 2018 EST.943018 > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) > share_file_id : 0x00000000a63dc768 (2789066600) > uid : 0x000003ea (1002) > flags : 0x0000 (0) > name_hash : 0xbc0a1ea5 (3154779813) > stale : 0x00 (0) > lease : NULL > num_leases : 0x00000000 (0) > leases: ARRAY(0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Wed Dec 31 19:00:00 1969 EST.0 > changed_write_time : Wed Dec 31 19:00:00 1969 EST.0 > fresh : 0x01 (1) > modified : 0x01 (1) > record : * > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) >[2018/01/25 16:07:01.945232, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:157(share_mode_memcache_delete) > deleting entry for file . seq 0x11605484847766717620 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.945493, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.945529, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.945557, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:171(share_mode_memcache_store) > stored entry for file . seq 0x11605484847766717621 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.945590, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5351(create_file_unixpath) > create_file_unixpath: info=1 >[2018/01/25 16:07:01.945614, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5630(create_file_default) > create_file: info=1 >[2018/01/25 16:07:01.945638, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1278(smbd_smb2_create_after_exec) > smbd_smb2_create_send: response construction phase >[2018/01/25 16:07:01.945708, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.945740, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.945773, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.945807, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.945834, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.945858, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.945883, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.945909, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.945933, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.945956, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.945979, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.946003, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.946028, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.946051, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.946074, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.946097, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.946121, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.946146, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.946170, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.946194, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.946221, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.946250, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/access_check.c:188(se_access_check) > se_access_check: MAX desired = 0x2000000, granted = 0x1e01ff, remaining = 0x1e01ff >[2018/01/25 16:07:01.946328, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.946360, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.946393, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.946425, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.946452, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.946479, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.946504, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.946530, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.946553, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.946576, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.946599, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.946623, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.946648, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.946672, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.946695, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.946717, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.946741, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.946766, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.946790, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.946814, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.946840, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.946869, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:183(smbd_check_access_rights) > smbd_check_access_rights: file . requesting 0x40 returning 0x40 (NT_STATUS_OK) >[2018/01/25 16:07:01.946900, 8, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:667(dos_mode) > dos_mode: . >[2018/01/25 16:07:01.946937, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" >[2018/01/25 16:07:01.946965, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode returning (0x10): "d" >[2018/01/25 16:07:01.946991, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1504(smbd_smb2_create_finish) > smbd_smb2_create_finish: . - fnum 756081053 >[2018/01/25 16:07:01.947023, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[88] dyn[yes:32] at ../source3/smbd/smb2_create.c:364 >[2018/01/25 16:07:01.947058, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3011(smbd_smb2_request_dispatch_immediate) > smbd_smb2_request_dispatch_immediate: idx[5] of 13 vectors > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 32 > req->in.vector[5].iov_len = 0 > req->in.vector[6].iov_len = 64 > req->in.vector[7].iov_len = 40 > req->in.vector[8].iov_len = 0 > req->in.vector[9].iov_len = 0 > req->in.vector[10].iov_len = 64 > req->in.vector[11].iov_len = 24 > req->in.vector[12].iov_len = 0 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 88 > req->out.vector[4].iov_len = 32 > req->out.vector[5].iov_len = 0 > req->out.vector[6].iov_len = 64 > req->out.vector[7].iov_len = 8 > req->out.vector[8].iov_len = 0 > req->out.vector[9].iov_len = 0 > req->out.vector[10].iov_len = 64 > req->out.vector[11].iov_len = 8 > req->out.vector[12].iov_len = 0 >[2018/01/25 16:07:01.947341, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_GETINFO] mid = 16 >[2018/01/25 16:07:01.947374, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.947414, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1983(smbd_smb2_request_verify_creditcharge) > mid 16, CreditCharge: 1, NeededCharge: 1 >[2018/01/25 16:07:01.947441, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_getinfo.c:272(smbd_smb2_getinfo_send) > smbd_smb2_getinfo_send: . - fnum 756081053 >[2018/01/25 16:07:01.947496, 3, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/trans2.c:3450(smbd_do_qfsinfo) > smbd_do_qfsinfo: level = 1003 >[2018/01/25 16:07:01.947671, 10, pid=93847, effective(1002, 1002), real(0, 0), class=quota] ../source3/lib/sysquotas.c:466(sys_get_quota) > sys_get_quota() uid(0, 1002), fs((null)) >[2018/01/25 16:07:01.947702, 10, pid=93847, effective(1002, 1002), real(0, 0), class=quota] ../source3/lib/sysquotas_4B.c:133(sys_quotactl_4B) > getting quota for user ID 1002 on . >[2018/01/25 16:07:01.947730, 3, pid=93847, effective(1002, 1002), real(0, 0), class=quota] ../source3/lib/sysquotas.c:488(sys_get_quota) > sys_get_vfs_quota() failed for mntpath[.] bdev[(null)] qtype[1] id[-1]: Operation not supported >[2018/01/25 16:07:01.947761, 10, pid=93847, effective(1002, 1002), real(0, 0), class=quota] ../source3/lib/sysquotas.c:466(sys_get_quota) > sys_get_quota() uid(0, 1002), fs((null)) >[2018/01/25 16:07:01.947786, 10, pid=93847, effective(1002, 1002), real(0, 0), class=quota] ../source3/lib/sysquotas_4B.c:133(sys_quotactl_4B) > getting quota for group ID 1002 on . >[2018/01/25 16:07:01.947812, 3, pid=93847, effective(1002, 1002), real(0, 0), class=quota] ../source3/lib/sysquotas.c:488(sys_get_quota) > sys_get_vfs_quota() failed for mntpath[.] bdev[(null)] qtype[3] id[-1]: Operation not supported >[2018/01/25 16:07:01.947839, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/trans2.c:3661(smbd_do_qfsinfo) > smbd_do_qfsinfo : SMB_QUERY_FS_SIZE_INFO bsize=1024, cSectorUnit=2, cBytesSector=512, cUnitTotal=1903885840, cUnitAvail=1903885736 >[2018/01/25 16:07:01.947878, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[5] status[NT_STATUS_OK] body[8] dyn[yes:24] at ../source3/smbd/smb2_getinfo.c:201 >[2018/01/25 16:07:01.947911, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.947941, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3011(smbd_smb2_request_dispatch_immediate) > smbd_smb2_request_dispatch_immediate: idx[9] of 13 vectors > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 32 > req->in.vector[5].iov_len = 0 > req->in.vector[6].iov_len = 64 > req->in.vector[7].iov_len = 40 > req->in.vector[8].iov_len = 0 > req->in.vector[9].iov_len = 0 > req->in.vector[10].iov_len = 64 > req->in.vector[11].iov_len = 24 > req->in.vector[12].iov_len = 0 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 88 > req->out.vector[4].iov_len = 32 > req->out.vector[5].iov_len = 0 > req->out.vector[6].iov_len = 64 > req->out.vector[7].iov_len = 8 > req->out.vector[8].iov_len = 24 > req->out.vector[9].iov_len = 0 > req->out.vector[10].iov_len = 64 > req->out.vector[11].iov_len = 8 > req->out.vector[12].iov_len = 0 >[2018/01/25 16:07:01.948224, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CLOSE] mid = 17 >[2018/01/25 16:07:01.948255, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.948283, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_close.c:227(smbd_smb2_close) > smbd_smb2_close: . - fnum 756081053 >[2018/01/25 16:07:01.948320, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.948348, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/locking.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.948379, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.948408, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x81c5d5e20 >[2018/01/25 16:07:01.948437, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:285(share_mode_memcache_fetch) > fetched entry for file . seq 0x11605484847766717621 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.948465, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/locking.c:1226(find_delete_on_close_token) > find_delete_on_close_token: name_hash = 0xbc0a1ea5 >[2018/01/25 16:07:01.948499, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:368(unparse_share_modes) > unparse_share_modes: >[2018/01/25 16:07:01.948523, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > d: struct share_mode_data > sequence_number : 0xa10ef6fb055044b5 (-6841259225942833995) > servicepath : * > servicepath : '/foo/timecapsule' > base_name : * > base_name : '.' > stream_name : NULL > num_share_modes : 0x00000000 (0) > share_modes: ARRAY(0) > num_leases : 0x00000000 (0) > leases: ARRAY(0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Wed Dec 31 19:00:00 1969 EST.0 > changed_write_time : Wed Dec 31 19:00:00 1969 EST.0 > fresh : 0x00 (0) > modified : 0x01 (1) > record : * > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) >[2018/01/25 16:07:01.948815, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:157(share_mode_memcache_delete) > deleting entry for file . seq 0x11605484847766717621 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.948842, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:380(unparse_share_modes) > No used share mode found >[2018/01/25 16:07:01.948868, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.948897, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.948934, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.948961, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.948992, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 755F9C6C >[2018/01/25 16:07:01.949019, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013c1f60 >[2018/01/25 16:07:01.949051, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 755F9C6C >[2018/01/25 16:07:01.949076, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.949107, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:563(file_free) > freed files structure 756081053 (0 used) >[2018/01/25 16:07:01.949135, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[9] status[NT_STATUS_OK] body[60] dyn[no:0] at ../source3/smbd/smb2_close.c:144 >[2018/01/25 16:07:01.949166, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.949192, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 194/512, total granted/max/low/range 351/8192/18/351 >[2018/01/25 16:07:01.949220, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 161/512, total granted/max/low/range 384/8192/18/384 >[2018/01/25 16:07:01.949245, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 128/512, total granted/max/low/range 417/8192/18/417 >[2018/01/25 16:07:01.949275, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.950612, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 13 vectors >[2018/01/25 16:07:01.950643, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 18 (position 18) from bitmap >[2018/01/25 16:07:01.950668, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 19 (position 19) from bitmap >[2018/01/25 16:07:01.950692, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 20 (position 20) from bitmap >[2018/01/25 16:07:01.950718, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CREATE] mid = 18 >[2018/01/25 16:07:01.950751, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.950783, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:649(smbd_smb2_create_send) > smbd_smb2_create_send: name [] >[2018/01/25 16:07:01.950811, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:747(smbd_smb2_create_send) > smbd_smb2_create_send: open execution phase >[2018/01/25 16:07:01.950838, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:461(unix_convert) > unix_convert called on file "" >[2018/01/25 16:07:01.950868, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:495(unix_convert) > conversion finished "" -> . >[2018/01/25 16:07:01.950893, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1283(check_reduced_name) > check_reduced_name: check_reduced_name [.] [/foo/timecapsule] >[2018/01/25 16:07:01.950924, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1347(check_reduced_name) > check_reduced_name realpath [.] -> [/foo/timecapsule] >[2018/01/25 16:07:01.950950, 5, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1458(check_reduced_name) > check_reduced_name: . reduced to /foo/timecapsule >[2018/01/25 16:07:01.951067, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5542(create_file_default) > create_file: access_mask = 0x100080 file_attributes = 0x10, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = . >[2018/01/25 16:07:01.951097, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5017(create_file_unixpath) > create_file_unixpath: access_mask = 0x100080 file_attributes = 0x10, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x0x0, sd = 0x0x0, fname = . >[2018/01/25 16:07:01.951125, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:3945(open_directory) > open_directory: opening directory ., access_mask = 0x100080, share_access = 0x7 create_options = 0x1, create_disposition = 0x1, file_attributes = 0x10 >[2018/01/25 16:07:01.951386, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.951421, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.951454, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.951491, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.951518, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.951542, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.951567, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.951593, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.951617, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.951640, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.951663, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.951688, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.951713, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.951737, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.951760, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.951783, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.951807, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.951832, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.951855, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.951879, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.951905, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.951932, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:183(smbd_check_access_rights) > smbd_check_access_rights: file . requesting 0x100080 returning 0x100000 (NT_STATUS_OK) >[2018/01/25 16:07:01.951968, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.951996, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.952025, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key D3551AD4 >[2018/01/25 16:07:01.952052, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013517a0 >[2018/01/25 16:07:01.952077, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:625(smbXsrv_open_global_verify_record) > smbXsrv_open_global_verify_record: empty value >[2018/01/25 16:07:01.952119, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:744(smbXsrv_open_global_store) > smbXsrv_open_global_store: key 'D3551AD4' stored >[2018/01/25 16:07:01.952148, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_open_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_open_globalU(case 0) > info0 : * > info0: struct smbXsrv_open_global0 > db_rec : * > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0xd3551ad4 (3545570004) > open_persistent_id : 0x00000000d3551ad4 (3545570004) > open_volatile_id : 0x00000000495d5bfb (1230855163) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) >[2018/01/25 16:07:01.952533, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key D3551AD4 >[2018/01/25 16:07:01.952559, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.952585, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:911(smbXsrv_open_create) > smbXsrv_open_create: global_id (0xd3551ad4) stored >[2018/01/25 16:07:01.952609, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &open_blob: struct smbXsrv_openB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_openU(case 0) > info0 : * > info0: struct smbXsrv_open > table : * > db_rec : NULL > local_id : 0x495d5bfb (1230855163) > global : * > global: struct smbXsrv_open_global0 > db_rec : NULL > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0xd3551ad4 (3545570004) > open_persistent_id : 0x00000000d3551ad4 (3545570004) > open_volatile_id : 0x00000000495d5bfb (1230855163) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) > status : NT_STATUS_OK > idle_time : Thu Jan 25 16:07:02 2018 EST > compat : NULL > flags : 0x00 (0) > 0: SMBXSRV_OPEN_NEED_REPLAY_CACHE > 0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE > create_action : 0x00000000 (0) > request_count : 0x0000000000000000 (0) > pre_request_count : 0x0000000000000000 (0) >[2018/01/25 16:07:01.953193, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:128(file_new) > allocated file structure fnum 1230855163 (1 used) >[2018/01/25 16:07:01.953223, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:754(file_name_hash) > file_name_hash: /foo/timecapsule/. hash 0xbc0a1ea5 >[2018/01/25 16:07:01.953247, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:4153(open_directory) > Not opening Directory . >[2018/01/25 16:07:01.953278, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.953304, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/locking.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.953337, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.953364, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x81c5d6d50 >[2018/01/25 16:07:01.953395, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:368(unparse_share_modes) > unparse_share_modes: >[2018/01/25 16:07:01.953419, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > d: struct share_mode_data > sequence_number : 0x359d37e73b658e9d (3863305521627238045) > servicepath : * > servicepath : '/foo/timecapsule' > base_name : * > base_name : '.' > stream_name : NULL > num_share_modes : 0x00000001 (1) > share_modes: ARRAY(1) > share_modes: struct share_mode_entry > pid: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > op_mid : 0x0000000000000012 (18) > op_type : 0x0000 (0) > lease_idx : 0xffffffff (4294967295) > access_mask : 0x00100080 (1048704) > share_access : 0x00000007 (7) > private_options : 0x00000000 (0) > time : Thu Jan 25 16:07:01 2018 EST.951961 > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) > share_file_id : 0x0000000067c35bde (1740856286) > uid : 0x000003ea (1002) > flags : 0x0000 (0) > name_hash : 0xbc0a1ea5 (3154779813) > stale : 0x00 (0) > lease : NULL > num_leases : 0x00000000 (0) > leases: ARRAY(0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Wed Dec 31 19:00:00 1969 EST.0 > changed_write_time : Wed Dec 31 19:00:00 1969 EST.0 > fresh : 0x01 (1) > modified : 0x01 (1) > record : * > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) >[2018/01/25 16:07:01.954022, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:157(share_mode_memcache_delete) > deleting entry for file . seq 0x3863305521627238045 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.954061, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.954092, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.954118, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:171(share_mode_memcache_store) > stored entry for file . seq 0x3863305521627238046 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.954147, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5351(create_file_unixpath) > create_file_unixpath: info=1 >[2018/01/25 16:07:01.954171, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5630(create_file_default) > create_file: info=1 >[2018/01/25 16:07:01.954194, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1278(smbd_smb2_create_after_exec) > smbd_smb2_create_send: response construction phase >[2018/01/25 16:07:01.954271, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.954303, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.954338, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.954370, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.954397, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.954422, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.954446, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.954473, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.954496, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.954519, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.954542, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.954566, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.954592, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.954615, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.954638, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.954661, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.954685, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.954710, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.954734, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.954758, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.954784, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.954813, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/access_check.c:188(se_access_check) > se_access_check: MAX desired = 0x2000000, granted = 0x1e01ff, remaining = 0x1e01ff >[2018/01/25 16:07:01.954899, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.954932, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.954963, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.954995, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.955022, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.955047, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.955071, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.955097, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.955121, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.955144, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.955167, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.955191, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.955217, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.955241, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.955264, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.955287, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.955313, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.955338, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.955362, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.955386, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.955413, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.955441, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:183(smbd_check_access_rights) > smbd_check_access_rights: file . requesting 0x40 returning 0x40 (NT_STATUS_OK) >[2018/01/25 16:07:01.955473, 8, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:667(dos_mode) > dos_mode: . >[2018/01/25 16:07:01.955500, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" >[2018/01/25 16:07:01.955526, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode returning (0x10): "d" >[2018/01/25 16:07:01.955552, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1504(smbd_smb2_create_finish) > smbd_smb2_create_finish: . - fnum 1230855163 >[2018/01/25 16:07:01.955584, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[88] dyn[yes:32] at ../source3/smbd/smb2_create.c:364 >[2018/01/25 16:07:01.955619, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3011(smbd_smb2_request_dispatch_immediate) > smbd_smb2_request_dispatch_immediate: idx[5] of 13 vectors > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 32 > req->in.vector[5].iov_len = 0 > req->in.vector[6].iov_len = 64 > req->in.vector[7].iov_len = 40 > req->in.vector[8].iov_len = 0 > req->in.vector[9].iov_len = 0 > req->in.vector[10].iov_len = 64 > req->in.vector[11].iov_len = 24 > req->in.vector[12].iov_len = 0 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 88 > req->out.vector[4].iov_len = 32 > req->out.vector[5].iov_len = 0 > req->out.vector[6].iov_len = 64 > req->out.vector[7].iov_len = 8 > req->out.vector[8].iov_len = 0 > req->out.vector[9].iov_len = 0 > req->out.vector[10].iov_len = 64 > req->out.vector[11].iov_len = 8 > req->out.vector[12].iov_len = 0 >[2018/01/25 16:07:01.955902, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_GETINFO] mid = 19 >[2018/01/25 16:07:01.955934, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.955961, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1983(smbd_smb2_request_verify_creditcharge) > mid 19, CreditCharge: 1, NeededCharge: 1 >[2018/01/25 16:07:01.955987, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_getinfo.c:272(smbd_smb2_getinfo_send) > smbd_smb2_getinfo_send: . - fnum 1230855163 >[2018/01/25 16:07:01.956017, 3, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/trans2.c:3450(smbd_do_qfsinfo) > smbd_do_qfsinfo: level = 1005 >[2018/01/25 16:07:01.956071, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[5] status[NT_STATUS_OK] body[8] dyn[yes:20] at ../source3/smbd/smb2_getinfo.c:201 >[2018/01/25 16:07:01.956108, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.956138, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3011(smbd_smb2_request_dispatch_immediate) > smbd_smb2_request_dispatch_immediate: idx[9] of 13 vectors > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 32 > req->in.vector[5].iov_len = 0 > req->in.vector[6].iov_len = 64 > req->in.vector[7].iov_len = 40 > req->in.vector[8].iov_len = 0 > req->in.vector[9].iov_len = 0 > req->in.vector[10].iov_len = 64 > req->in.vector[11].iov_len = 24 > req->in.vector[12].iov_len = 0 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 88 > req->out.vector[4].iov_len = 32 > req->out.vector[5].iov_len = 0 > req->out.vector[6].iov_len = 64 > req->out.vector[7].iov_len = 8 > req->out.vector[8].iov_len = 24 > req->out.vector[9].iov_len = 0 > req->out.vector[10].iov_len = 64 > req->out.vector[11].iov_len = 8 > req->out.vector[12].iov_len = 0 >[2018/01/25 16:07:01.956424, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CLOSE] mid = 20 >[2018/01/25 16:07:01.956454, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.956482, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_close.c:227(smbd_smb2_close) > smbd_smb2_close: . - fnum 1230855163 >[2018/01/25 16:07:01.956510, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.956536, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/locking.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.956567, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.956594, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x81c5dae20 >[2018/01/25 16:07:01.956622, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:285(share_mode_memcache_fetch) > fetched entry for file . seq 0x3863305521627238046 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.956649, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/locking.c:1226(find_delete_on_close_token) > find_delete_on_close_token: name_hash = 0xbc0a1ea5 >[2018/01/25 16:07:01.956674, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:368(unparse_share_modes) > unparse_share_modes: >[2018/01/25 16:07:01.956698, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > d: struct share_mode_data > sequence_number : 0x359d37e73b658e9e (3863305521627238046) > servicepath : * > servicepath : '/foo/timecapsule' > base_name : * > base_name : '.' > stream_name : NULL > num_share_modes : 0x00000000 (0) > share_modes: ARRAY(0) > num_leases : 0x00000000 (0) > leases: ARRAY(0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Wed Dec 31 19:00:00 1969 EST.0 > changed_write_time : Wed Dec 31 19:00:00 1969 EST.0 > fresh : 0x00 (0) > modified : 0x01 (1) > record : * > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) >[2018/01/25 16:07:01.956987, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:157(share_mode_memcache_delete) > deleting entry for file . seq 0x3863305521627238046 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.957014, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:380(unparse_share_modes) > No used share mode found >[2018/01/25 16:07:01.957040, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.957069, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.957098, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.957124, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.957152, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key D3551AD4 >[2018/01/25 16:07:01.957179, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013c1f60 >[2018/01/25 16:07:01.957213, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key D3551AD4 >[2018/01/25 16:07:01.957239, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.957269, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:563(file_free) > freed files structure 1230855163 (0 used) >[2018/01/25 16:07:01.957298, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[9] status[NT_STATUS_OK] body[60] dyn[no:0] at ../source3/smbd/smb2_close.c:144 >[2018/01/25 16:07:01.957331, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.957357, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 98/512, total granted/max/low/range 447/8192/21/447 >[2018/01/25 16:07:01.957385, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 33, current possible/max 65/512, total granted/max/low/range 480/8192/21/480 >[2018/01/25 16:07:01.957411, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 32, current possible/max 32/512, total granted/max/low/range 512/8192/21/512 >[2018/01/25 16:07:01.957441, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.959125, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 13 vectors >[2018/01/25 16:07:01.959167, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 21 (position 21) from bitmap >[2018/01/25 16:07:01.959192, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 22 (position 22) from bitmap >[2018/01/25 16:07:01.959216, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 23 (position 23) from bitmap >[2018/01/25 16:07:01.959242, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CREATE] mid = 21 >[2018/01/25 16:07:01.959276, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.959312, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:649(smbd_smb2_create_send) > smbd_smb2_create_send: name [] >[2018/01/25 16:07:01.959341, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:747(smbd_smb2_create_send) > smbd_smb2_create_send: open execution phase >[2018/01/25 16:07:01.959368, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:461(unix_convert) > unix_convert called on file "" >[2018/01/25 16:07:01.959398, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:495(unix_convert) > conversion finished "" -> . >[2018/01/25 16:07:01.959423, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1283(check_reduced_name) > check_reduced_name: check_reduced_name [.] [/foo/timecapsule] >[2018/01/25 16:07:01.959454, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1347(check_reduced_name) > check_reduced_name realpath [.] -> [/foo/timecapsule] >[2018/01/25 16:07:01.959479, 5, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1458(check_reduced_name) > check_reduced_name: . reduced to /foo/timecapsule >[2018/01/25 16:07:01.959506, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5542(create_file_default) > create_file: access_mask = 0x100080 file_attributes = 0x10, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = . >[2018/01/25 16:07:01.959535, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5017(create_file_unixpath) > create_file_unixpath: access_mask = 0x100080 file_attributes = 0x10, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x0x0, sd = 0x0x0, fname = . >[2018/01/25 16:07:01.959563, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:3945(open_directory) > open_directory: opening directory ., access_mask = 0x100080, share_access = 0x7 create_options = 0x1, create_disposition = 0x1, file_attributes = 0x10 >[2018/01/25 16:07:01.959645, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.959677, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.959710, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.959743, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.959770, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.959794, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.959821, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.959848, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.959871, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.959894, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.959918, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.959942, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.959967, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.959991, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.960014, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.960037, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.960061, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.960086, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.960109, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.960133, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.960158, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.960185, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:183(smbd_check_access_rights) > smbd_check_access_rights: file . requesting 0x100080 returning 0x100000 (NT_STATUS_OK) >[2018/01/25 16:07:01.960219, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.960245, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.960274, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 88495B16 >[2018/01/25 16:07:01.960300, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013517a0 >[2018/01/25 16:07:01.960328, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:625(smbXsrv_open_global_verify_record) > smbXsrv_open_global_verify_record: empty value >[2018/01/25 16:07:01.960369, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:744(smbXsrv_open_global_store) > smbXsrv_open_global_store: key '88495B16' stored >[2018/01/25 16:07:01.960398, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_open_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_open_globalU(case 0) > info0 : * > info0: struct smbXsrv_open_global0 > db_rec : * > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0x88495b16 (2286508822) > open_persistent_id : 0x0000000088495b16 (2286508822) > open_volatile_id : 0x00000000eac4b88d (3938760845) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) >[2018/01/25 16:07:01.960781, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 88495B16 >[2018/01/25 16:07:01.960807, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.960833, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:911(smbXsrv_open_create) > smbXsrv_open_create: global_id (0x88495b16) stored >[2018/01/25 16:07:01.960857, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &open_blob: struct smbXsrv_openB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_openU(case 0) > info0 : * > info0: struct smbXsrv_open > table : * > db_rec : NULL > local_id : 0xeac4b88d (3938760845) > global : * > global: struct smbXsrv_open_global0 > db_rec : NULL > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0x88495b16 (2286508822) > open_persistent_id : 0x0000000088495b16 (2286508822) > open_volatile_id : 0x00000000eac4b88d (3938760845) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) > status : NT_STATUS_OK > idle_time : Thu Jan 25 16:07:02 2018 EST > compat : NULL > flags : 0x00 (0) > 0: SMBXSRV_OPEN_NEED_REPLAY_CACHE > 0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE > create_action : 0x00000000 (0) > request_count : 0x0000000000000000 (0) > pre_request_count : 0x0000000000000000 (0) >[2018/01/25 16:07:01.961442, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:128(file_new) > allocated file structure fnum 3938760845 (1 used) >[2018/01/25 16:07:01.961471, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:754(file_name_hash) > file_name_hash: /foo/timecapsule/. hash 0xbc0a1ea5 >[2018/01/25 16:07:01.961500, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:4153(open_directory) > Not opening Directory . >[2018/01/25 16:07:01.961530, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.961556, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/locking.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.961586, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.961613, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x81c5dbd50 >[2018/01/25 16:07:01.961644, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:368(unparse_share_modes) > unparse_share_modes: >[2018/01/25 16:07:01.961668, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > d: struct share_mode_data > sequence_number : 0x18fad7e4f2686896 (1799988379407378582) > servicepath : * > servicepath : '/foo/timecapsule' > base_name : * > base_name : '.' > stream_name : NULL > num_share_modes : 0x00000001 (1) > share_modes: ARRAY(1) > share_modes: struct share_mode_entry > pid: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > op_mid : 0x0000000000000015 (21) > op_type : 0x0000 (0) > lease_idx : 0xffffffff (4294967295) > access_mask : 0x00100080 (1048704) > share_access : 0x00000007 (7) > private_options : 0x00000000 (0) > time : Thu Jan 25 16:07:01 2018 EST.960213 > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) > share_file_id : 0x000000005b04cb4a (1527040842) > uid : 0x000003ea (1002) > flags : 0x0000 (0) > name_hash : 0xbc0a1ea5 (3154779813) > stale : 0x00 (0) > lease : NULL > num_leases : 0x00000000 (0) > leases: ARRAY(0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Wed Dec 31 19:00:00 1969 EST.0 > changed_write_time : Wed Dec 31 19:00:00 1969 EST.0 > fresh : 0x01 (1) > modified : 0x01 (1) > record : * > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) >[2018/01/25 16:07:01.962269, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:157(share_mode_memcache_delete) > deleting entry for file . seq 0x1799988379407378582 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.962309, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.962343, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.962369, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:171(share_mode_memcache_store) > stored entry for file . seq 0x1799988379407378583 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.962397, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5351(create_file_unixpath) > create_file_unixpath: info=1 >[2018/01/25 16:07:01.962421, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5630(create_file_default) > create_file: info=1 >[2018/01/25 16:07:01.962444, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1278(smbd_smb2_create_after_exec) > smbd_smb2_create_send: response construction phase >[2018/01/25 16:07:01.962517, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.962549, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.962581, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.962614, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.962640, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.962665, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.962689, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.962715, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.962739, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.962762, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.962785, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.962809, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.962834, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.962858, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.962881, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.962903, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.962927, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.962953, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.962976, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.963001, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.963027, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.963055, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/access_check.c:188(se_access_check) > se_access_check: MAX desired = 0x2000000, granted = 0x1e01ff, remaining = 0x1e01ff >[2018/01/25 16:07:01.963134, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.963166, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.963198, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.963233, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.963260, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.963284, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.963309, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.963338, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.963361, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.963384, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.963408, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.963432, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.963457, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.963480, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.963504, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.963527, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.963551, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.963576, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.963599, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.963624, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.963650, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.963678, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:183(smbd_check_access_rights) > smbd_check_access_rights: file . requesting 0x40 returning 0x40 (NT_STATUS_OK) >[2018/01/25 16:07:01.963709, 8, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:667(dos_mode) > dos_mode: . >[2018/01/25 16:07:01.963736, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" >[2018/01/25 16:07:01.963762, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode returning (0x10): "d" >[2018/01/25 16:07:01.963787, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1504(smbd_smb2_create_finish) > smbd_smb2_create_finish: . - fnum 3938760845 >[2018/01/25 16:07:01.963819, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[88] dyn[yes:32] at ../source3/smbd/smb2_create.c:364 >[2018/01/25 16:07:01.963853, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3011(smbd_smb2_request_dispatch_immediate) > smbd_smb2_request_dispatch_immediate: idx[5] of 13 vectors > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 80 > req->in.vector[5].iov_len = 0 > req->in.vector[6].iov_len = 64 > req->in.vector[7].iov_len = 40 > req->in.vector[8].iov_len = 0 > req->in.vector[9].iov_len = 0 > req->in.vector[10].iov_len = 64 > req->in.vector[11].iov_len = 24 > req->in.vector[12].iov_len = 0 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 88 > req->out.vector[4].iov_len = 32 > req->out.vector[5].iov_len = 0 > req->out.vector[6].iov_len = 64 > req->out.vector[7].iov_len = 8 > req->out.vector[8].iov_len = 0 > req->out.vector[9].iov_len = 0 > req->out.vector[10].iov_len = 64 > req->out.vector[11].iov_len = 8 > req->out.vector[12].iov_len = 0 >[2018/01/25 16:07:01.964137, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_GETINFO] mid = 22 >[2018/01/25 16:07:01.964169, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.964196, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1983(smbd_smb2_request_verify_creditcharge) > mid 22, CreditCharge: 1, NeededCharge: 1 >[2018/01/25 16:07:01.964222, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_getinfo.c:272(smbd_smb2_getinfo_send) > smbd_smb2_getinfo_send: . - fnum 3938760845 >[2018/01/25 16:07:01.964261, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:285(share_mode_memcache_fetch) > fetched entry for file . seq 0x1799988379407378583 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.964291, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/locking.c:1226(find_delete_on_close_token) > find_delete_on_close_token: name_hash = 0xbc0a1ea5 >[2018/01/25 16:07:01.964329, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/trans2.c:4875(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: . (fnum 3938760845) level=65298 max_data=1124 >[2018/01/25 16:07:01.964364, 8, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:667(dos_mode) > dos_mode: . >[2018/01/25 16:07:01.964389, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" >[2018/01/25 16:07:01.964415, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode returning (0x10): "d" >[2018/01/25 16:07:01.964455, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/trans2.c:5259(smbd_do_qfilepathinfo) > smbd_do_qfilepathinfo: SMB2_FILE_ALL_INFORMATION >[2018/01/25 16:07:01.964498, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[5] status[NT_STATUS_OK] body[8] dyn[yes:102] at ../source3/smbd/smb2_getinfo.c:201 >[2018/01/25 16:07:01.964534, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.964564, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3011(smbd_smb2_request_dispatch_immediate) > smbd_smb2_request_dispatch_immediate: idx[9] of 13 vectors > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 80 > req->in.vector[5].iov_len = 0 > req->in.vector[6].iov_len = 64 > req->in.vector[7].iov_len = 40 > req->in.vector[8].iov_len = 0 > req->in.vector[9].iov_len = 0 > req->in.vector[10].iov_len = 64 > req->in.vector[11].iov_len = 24 > req->in.vector[12].iov_len = 0 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 88 > req->out.vector[4].iov_len = 32 > req->out.vector[5].iov_len = 0 > req->out.vector[6].iov_len = 64 > req->out.vector[7].iov_len = 8 > req->out.vector[8].iov_len = 104 > req->out.vector[9].iov_len = 0 > req->out.vector[10].iov_len = 64 > req->out.vector[11].iov_len = 8 > req->out.vector[12].iov_len = 0 >[2018/01/25 16:07:01.964849, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CLOSE] mid = 23 >[2018/01/25 16:07:01.964879, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.964907, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_close.c:227(smbd_smb2_close) > smbd_smb2_close: . - fnum 3938760845 >[2018/01/25 16:07:01.964935, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.964961, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/locking.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.964992, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.965019, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x81c5d5e20 >[2018/01/25 16:07:01.965045, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:235(share_mode_memcache_fetch) > failed to find entry for key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.965081, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:348(parse_share_modes) > parse_share_modes: >[2018/01/25 16:07:01.965107, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > d: struct share_mode_data > sequence_number : 0x18fad7e4f2686897 (1799988379407378583) > servicepath : * > servicepath : '/foo/timecapsule' > base_name : * > base_name : '.' > stream_name : NULL > num_share_modes : 0x00000001 (1) > share_modes: ARRAY(1) > share_modes: struct share_mode_entry > pid: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > op_mid : 0x0000000000000015 (21) > op_type : 0x0000 (0) > lease_idx : 0xffffffff (4294967295) > access_mask : 0x00100080 (1048704) > share_access : 0x00000007 (7) > private_options : 0x00000000 (0) > time : Thu Jan 25 16:07:01 2018 EST.960213 > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) > share_file_id : 0x000000005b04cb4a (1527040842) > uid : 0x000003ea (1002) > flags : 0x0000 (0) > name_hash : 0xbc0a1ea5 (3154779813) > stale : 0x00 (0) > lease : NULL > num_leases : 0x00000000 (0) > leases: ARRAY(0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Wed Dec 31 19:00:00 1969 EST.0 > changed_write_time : Wed Dec 31 19:00:00 1969 EST.0 > fresh : 0x00 (0) > modified : 0x00 (0) > record : NULL > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) >[2018/01/25 16:07:01.965725, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/locking.c:1226(find_delete_on_close_token) > find_delete_on_close_token: name_hash = 0xbc0a1ea5 >[2018/01/25 16:07:01.965752, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:368(unparse_share_modes) > unparse_share_modes: >[2018/01/25 16:07:01.965776, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > d: struct share_mode_data > sequence_number : 0x18fad7e4f2686897 (1799988379407378583) > servicepath : * > servicepath : '/foo/timecapsule' > base_name : * > base_name : '.' > stream_name : NULL > num_share_modes : 0x00000000 (0) > share_modes: ARRAY(0) > num_leases : 0x00000000 (0) > leases: ARRAY(0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Wed Dec 31 19:00:00 1969 EST.0 > changed_write_time : Wed Dec 31 19:00:00 1969 EST.0 > fresh : 0x00 (0) > modified : 0x01 (1) > record : * > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) >[2018/01/25 16:07:01.966063, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:157(share_mode_memcache_delete) > deleting entry for file . seq 0x1799988379407378583 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.966089, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:380(unparse_share_modes) > No used share mode found >[2018/01/25 16:07:01.966115, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.966144, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.966173, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.966199, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.966228, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 88495B16 >[2018/01/25 16:07:01.966254, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013c1f60 >[2018/01/25 16:07:01.966288, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 88495B16 >[2018/01/25 16:07:01.966315, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.966346, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:563(file_free) > freed files structure 3938760845 (0 used) >[2018/01/25 16:07:01.966379, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[9] status[NT_STATUS_OK] body[60] dyn[no:0] at ../source3/smbd/smb2_close.c:144 >[2018/01/25 16:07:01.966412, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.966438, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 3, current possible/max 3/512, total granted/max/low/range 512/8192/24/512 >[2018/01/25 16:07:01.966466, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 0, current possible/max 0/512, total granted/max/low/range 512/8192/24/512 >[2018/01/25 16:07:01.966492, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 0, current possible/max 0/512, total granted/max/low/range 512/8192/24/512 >[2018/01/25 16:07:01.966521, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.974081, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 13 vectors >[2018/01/25 16:07:01.974113, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 24 (position 24) from bitmap >[2018/01/25 16:07:01.974138, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 25 (position 25) from bitmap >[2018/01/25 16:07:01.974163, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 26 (position 26) from bitmap >[2018/01/25 16:07:01.974190, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CREATE] mid = 24 >[2018/01/25 16:07:01.974224, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.974253, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:649(smbd_smb2_create_send) > smbd_smb2_create_send: name [] >[2018/01/25 16:07:01.974281, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:747(smbd_smb2_create_send) > smbd_smb2_create_send: open execution phase >[2018/01/25 16:07:01.974308, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:461(unix_convert) > unix_convert called on file "" >[2018/01/25 16:07:01.974340, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:495(unix_convert) > conversion finished "" -> . >[2018/01/25 16:07:01.974366, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1283(check_reduced_name) > check_reduced_name: check_reduced_name [.] [/foo/timecapsule] >[2018/01/25 16:07:01.974398, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1347(check_reduced_name) > check_reduced_name realpath [.] -> [/foo/timecapsule] >[2018/01/25 16:07:01.974424, 5, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1458(check_reduced_name) > check_reduced_name: . reduced to /foo/timecapsule >[2018/01/25 16:07:01.974450, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5542(create_file_default) > create_file: access_mask = 0x89 file_attributes = 0x10, share_access = 0x1, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = . >[2018/01/25 16:07:01.974479, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5017(create_file_unixpath) > create_file_unixpath: access_mask = 0x89 file_attributes = 0x10, share_access = 0x1, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x0x0, sd = 0x0x0, fname = . >[2018/01/25 16:07:01.974507, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:3945(open_directory) > open_directory: opening directory ., access_mask = 0x89, share_access = 0x1 create_options = 0x1, create_disposition = 0x1, file_attributes = 0x10 >[2018/01/25 16:07:01.974588, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.974621, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.974656, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.974690, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.974716, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.974740, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.974765, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.974791, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.974815, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.974841, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.974864, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.974889, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.974914, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.974937, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.974960, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.974983, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.975007, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.975032, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.975056, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.975079, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.975104, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.975131, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:183(smbd_check_access_rights) > smbd_check_access_rights: file . requesting 0x89 returning 0x9 (NT_STATUS_OK) >[2018/01/25 16:07:01.975166, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.975193, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.975222, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key AE4154E9 >[2018/01/25 16:07:01.975249, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013517a0 >[2018/01/25 16:07:01.975274, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:625(smbXsrv_open_global_verify_record) > smbXsrv_open_global_verify_record: empty value >[2018/01/25 16:07:01.975318, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:744(smbXsrv_open_global_store) > smbXsrv_open_global_store: key 'AE4154E9' stored >[2018/01/25 16:07:01.975347, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_open_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_open_globalU(case 0) > info0 : * > info0: struct smbXsrv_open_global0 > db_rec : * > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0xae4154e9 (2923517161) > open_persistent_id : 0x00000000ae4154e9 (2923517161) > open_volatile_id : 0x0000000016f6d70f (385275663) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) >[2018/01/25 16:07:01.975731, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key AE4154E9 >[2018/01/25 16:07:01.975757, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.975784, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:911(smbXsrv_open_create) > smbXsrv_open_create: global_id (0xae4154e9) stored >[2018/01/25 16:07:01.975808, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &open_blob: struct smbXsrv_openB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_openU(case 0) > info0 : * > info0: struct smbXsrv_open > table : * > db_rec : NULL > local_id : 0x16f6d70f (385275663) > global : * > global: struct smbXsrv_open_global0 > db_rec : NULL > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0xae4154e9 (2923517161) > open_persistent_id : 0x00000000ae4154e9 (2923517161) > open_volatile_id : 0x0000000016f6d70f (385275663) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) > status : NT_STATUS_OK > idle_time : Thu Jan 25 16:07:02 2018 EST > compat : NULL > flags : 0x00 (0) > 0: SMBXSRV_OPEN_NEED_REPLAY_CACHE > 0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE > create_action : 0x00000000 (0) > request_count : 0x0000000000000000 (0) > pre_request_count : 0x0000000000000000 (0) >[2018/01/25 16:07:01.976392, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:128(file_new) > allocated file structure fnum 385275663 (1 used) >[2018/01/25 16:07:01.976421, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:754(file_name_hash) > file_name_hash: /foo/timecapsule/. hash 0xbc0a1ea5 >[2018/01/25 16:07:01.976478, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1283(check_reduced_name) > check_reduced_name: check_reduced_name [.] [/foo/timecapsule] >[2018/01/25 16:07:01.976512, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1347(check_reduced_name) > check_reduced_name realpath [.] -> [/foo/timecapsule] >[2018/01/25 16:07:01.976537, 5, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1458(check_reduced_name) > check_reduced_name: . reduced to /foo/timecapsule >[2018/01/25 16:07:01.976571, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:767(fd_open) > fd_open: name ., flags = 0400000 mode = 00, fd = 34. >[2018/01/25 16:07:01.976602, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.976627, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/locking.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.976659, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.976687, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013517a0 >[2018/01/25 16:07:01.976719, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:368(unparse_share_modes) > unparse_share_modes: >[2018/01/25 16:07:01.976744, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > d: struct share_mode_data > sequence_number : 0xe2b29f10c6769a2f (-2111450380885386705) > servicepath : * > servicepath : '/foo/timecapsule' > base_name : * > base_name : '.' > stream_name : NULL > num_share_modes : 0x00000001 (1) > share_modes: ARRAY(1) > share_modes: struct share_mode_entry > pid: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > op_mid : 0x0000000000000018 (24) > op_type : 0x0000 (0) > lease_idx : 0xffffffff (4294967295) > access_mask : 0x00000089 (137) > share_access : 0x00000001 (1) > private_options : 0x00000000 (0) > time : Thu Jan 25 16:07:01 2018 EST.975160 > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) > share_file_id : 0x000000008d182400 (2367169536) > uid : 0x000003ea (1002) > flags : 0x0000 (0) > name_hash : 0xbc0a1ea5 (3154779813) > stale : 0x00 (0) > lease : NULL > num_leases : 0x00000000 (0) > leases: ARRAY(0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Wed Dec 31 19:00:00 1969 EST.0 > changed_write_time : Wed Dec 31 19:00:00 1969 EST.0 > fresh : 0x01 (1) > modified : 0x01 (1) > record : * > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) >[2018/01/25 16:07:01.977351, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:157(share_mode_memcache_delete) > deleting entry for file . seq 0x16335293692824164911 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.977394, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.977426, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.977453, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:171(share_mode_memcache_store) > stored entry for file . seq 0x16335293692824164912 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.977481, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5351(create_file_unixpath) > create_file_unixpath: info=1 >[2018/01/25 16:07:01.977505, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5630(create_file_default) > create_file: info=1 >[2018/01/25 16:07:01.977529, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1278(smbd_smb2_create_after_exec) > smbd_smb2_create_send: response construction phase >[2018/01/25 16:07:01.977554, 8, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:667(dos_mode) > dos_mode: . >[2018/01/25 16:07:01.977580, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" >[2018/01/25 16:07:01.977606, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode returning (0x10): "d" >[2018/01/25 16:07:01.977631, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1504(smbd_smb2_create_finish) > smbd_smb2_create_finish: . - fnum 385275663 >[2018/01/25 16:07:01.977662, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[88] dyn[yes:0] at ../source3/smbd/smb2_create.c:364 >[2018/01/25 16:07:01.977698, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3011(smbd_smb2_request_dispatch_immediate) > smbd_smb2_request_dispatch_immediate: idx[5] of 13 vectors > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 8 > req->in.vector[5].iov_len = 0 > req->in.vector[6].iov_len = 64 > req->in.vector[7].iov_len = 56 > req->in.vector[8].iov_len = 0 > req->in.vector[9].iov_len = 0 > req->in.vector[10].iov_len = 64 > req->in.vector[11].iov_len = 24 > req->in.vector[12].iov_len = 0 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 88 > req->out.vector[4].iov_len = 0 > req->out.vector[5].iov_len = 0 > req->out.vector[6].iov_len = 64 > req->out.vector[7].iov_len = 8 > req->out.vector[8].iov_len = 0 > req->out.vector[9].iov_len = 0 > req->out.vector[10].iov_len = 64 > req->out.vector[11].iov_len = 8 > req->out.vector[12].iov_len = 0 >[2018/01/25 16:07:01.977976, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_IOCTL] mid = 25 >[2018/01/25 16:07:01.978008, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.978035, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1983(smbd_smb2_request_verify_creditcharge) > mid 25, CreditCharge: 1, NeededCharge: 1 >[2018/01/25 16:07:01.978061, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_ioctl.c:394(smbd_smb2_ioctl_send) > smbd_smb2_ioctl: ctl_code[0x00140078] ., fnum 385275663 >[2018/01/25 16:07:01.978108, 3, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3152(smbd_smb2_request_error_ex) > smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[5] status[NT_STATUS_INTERNAL_ERROR] || at ../source3/smbd/smb2_server.c:1410 >[2018/01/25 16:07:01.978140, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[5] status[NT_STATUS_INTERNAL_ERROR] body[8] dyn[yes:1] at ../source3/smbd/smb2_server.c:3200 >[2018/01/25 16:07:01.978177, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.978207, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3011(smbd_smb2_request_dispatch_immediate) > smbd_smb2_request_dispatch_immediate: idx[9] of 13 vectors > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 8 > req->in.vector[5].iov_len = 0 > req->in.vector[6].iov_len = 64 > req->in.vector[7].iov_len = 56 > req->in.vector[8].iov_len = 0 > req->in.vector[9].iov_len = 0 > req->in.vector[10].iov_len = 64 > req->in.vector[11].iov_len = 24 > req->in.vector[12].iov_len = 0 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 88 > req->out.vector[4].iov_len = 0 > req->out.vector[5].iov_len = 0 > req->out.vector[6].iov_len = 64 > req->out.vector[7].iov_len = 8 > req->out.vector[8].iov_len = 8 > req->out.vector[9].iov_len = 0 > req->out.vector[10].iov_len = 64 > req->out.vector[11].iov_len = 8 > req->out.vector[12].iov_len = 0 >[2018/01/25 16:07:01.978490, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CLOSE] mid = 26 >[2018/01/25 16:07:01.978520, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.978547, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_close.c:227(smbd_smb2_close) > smbd_smb2_close: . - fnum 385275663 >[2018/01/25 16:07:01.978575, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.978601, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/locking.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.978631, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.978659, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x81c5d5e20 >[2018/01/25 16:07:01.978687, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:285(share_mode_memcache_fetch) > fetched entry for file . seq 0x16335293692824164912 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.978714, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/locking.c:1226(find_delete_on_close_token) > find_delete_on_close_token: name_hash = 0xbc0a1ea5 >[2018/01/25 16:07:01.978739, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:368(unparse_share_modes) > unparse_share_modes: >[2018/01/25 16:07:01.978763, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > d: struct share_mode_data > sequence_number : 0xe2b29f10c6769a30 (-2111450380885386704) > servicepath : * > servicepath : '/foo/timecapsule' > base_name : * > base_name : '.' > stream_name : NULL > num_share_modes : 0x00000000 (0) > share_modes: ARRAY(0) > num_leases : 0x00000000 (0) > leases: ARRAY(0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Wed Dec 31 19:00:00 1969 EST.0 > changed_write_time : Wed Dec 31 19:00:00 1969 EST.0 > fresh : 0x00 (0) > modified : 0x01 (1) > record : * > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) >[2018/01/25 16:07:01.979054, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:157(share_mode_memcache_delete) > deleting entry for file . seq 0x16335293692824164912 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.979080, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:380(unparse_share_modes) > No used share mode found >[2018/01/25 16:07:01.979106, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.979135, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.979176, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/posix.c:499(delete_lock_ref_count) > delete_lock_ref_count for file . >[2018/01/25 16:07:01.979217, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.979244, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.979272, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key AE4154E9 >[2018/01/25 16:07:01.979299, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013c1f60 >[2018/01/25 16:07:01.979333, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key AE4154E9 >[2018/01/25 16:07:01.979359, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.979391, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:563(file_free) > freed files structure 385275663 (0 used) >[2018/01/25 16:07:01.979420, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[9] status[NT_STATUS_OK] body[60] dyn[no:0] at ../source3/smbd/smb2_close.c:144 >[2018/01/25 16:07:01.979450, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.979476, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 3, current possible/max 3/512, total granted/max/low/range 512/8192/27/512 >[2018/01/25 16:07:01.979503, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 0, current possible/max 0/512, total granted/max/low/range 512/8192/27/512 >[2018/01/25 16:07:01.979529, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 0, current possible/max 0/512, total granted/max/low/range 512/8192/27/512 >[2018/01/25 16:07:01.979559, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.980910, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 13 vectors >[2018/01/25 16:07:01.980953, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 27 (position 27) from bitmap >[2018/01/25 16:07:01.980978, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 28 (position 28) from bitmap >[2018/01/25 16:07:01.981002, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 29 (position 29) from bitmap >[2018/01/25 16:07:01.981028, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CREATE] mid = 27 >[2018/01/25 16:07:01.981061, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.981095, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:649(smbd_smb2_create_send) > smbd_smb2_create_send: name [] >[2018/01/25 16:07:01.981124, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:747(smbd_smb2_create_send) > smbd_smb2_create_send: open execution phase >[2018/01/25 16:07:01.981150, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:461(unix_convert) > unix_convert called on file "" >[2018/01/25 16:07:01.981179, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:495(unix_convert) > conversion finished "" -> . >[2018/01/25 16:07:01.981205, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1283(check_reduced_name) > check_reduced_name: check_reduced_name [.] [/foo/timecapsule] >[2018/01/25 16:07:01.981235, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1347(check_reduced_name) > check_reduced_name realpath [.] -> [/foo/timecapsule] >[2018/01/25 16:07:01.981260, 5, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1458(check_reduced_name) > check_reduced_name: . reduced to /foo/timecapsule >[2018/01/25 16:07:01.981287, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5542(create_file_default) > create_file: access_mask = 0x100080 file_attributes = 0x10, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = . >[2018/01/25 16:07:01.981318, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5017(create_file_unixpath) > create_file_unixpath: access_mask = 0x100080 file_attributes = 0x10, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x0x0, sd = 0x0x0, fname = . >[2018/01/25 16:07:01.981346, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:3945(open_directory) > open_directory: opening directory ., access_mask = 0x100080, share_access = 0x7 create_options = 0x1, create_disposition = 0x1, file_attributes = 0x10 >[2018/01/25 16:07:01.981430, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.981462, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.981495, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.981529, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.981555, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.981579, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.981603, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.981630, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.981653, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.981676, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.981699, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.981723, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.981748, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.981772, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.981795, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.981818, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.981842, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.981867, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.981891, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.981915, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.981939, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.981969, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:183(smbd_check_access_rights) > smbd_check_access_rights: file . requesting 0x100080 returning 0x100000 (NT_STATUS_OK) >[2018/01/25 16:07:01.982004, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.982032, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.982061, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 9E158F0A >[2018/01/25 16:07:01.982088, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013517a0 >[2018/01/25 16:07:01.982113, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:625(smbXsrv_open_global_verify_record) > smbXsrv_open_global_verify_record: empty value >[2018/01/25 16:07:01.982154, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:744(smbXsrv_open_global_store) > smbXsrv_open_global_store: key '9E158F0A' stored >[2018/01/25 16:07:01.982183, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_open_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_open_globalU(case 0) > info0 : * > info0: struct smbXsrv_open_global0 > db_rec : * > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0x9e158f0a (2652213002) > open_persistent_id : 0x000000009e158f0a (2652213002) > open_volatile_id : 0x0000000048089364 (1208521572) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) >[2018/01/25 16:07:01.982562, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 9E158F0A >[2018/01/25 16:07:01.982587, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.982613, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:911(smbXsrv_open_create) > smbXsrv_open_create: global_id (0x9e158f0a) stored >[2018/01/25 16:07:01.982637, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &open_blob: struct smbXsrv_openB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_openU(case 0) > info0 : * > info0: struct smbXsrv_open > table : * > db_rec : NULL > local_id : 0x48089364 (1208521572) > global : * > global: struct smbXsrv_open_global0 > db_rec : NULL > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0x9e158f0a (2652213002) > open_persistent_id : 0x000000009e158f0a (2652213002) > open_volatile_id : 0x0000000048089364 (1208521572) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) > status : NT_STATUS_OK > idle_time : Thu Jan 25 16:07:02 2018 EST > compat : NULL > flags : 0x00 (0) > 0: SMBXSRV_OPEN_NEED_REPLAY_CACHE > 0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE > create_action : 0x00000000 (0) > request_count : 0x0000000000000000 (0) > pre_request_count : 0x0000000000000000 (0) >[2018/01/25 16:07:01.983220, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:128(file_new) > allocated file structure fnum 1208521572 (1 used) >[2018/01/25 16:07:01.983250, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:754(file_name_hash) > file_name_hash: /foo/timecapsule/. hash 0xbc0a1ea5 >[2018/01/25 16:07:01.983274, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:4153(open_directory) > Not opening Directory . >[2018/01/25 16:07:01.983304, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.983336, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/locking.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.983367, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.983394, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x81c5d6d50 >[2018/01/25 16:07:01.983424, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:368(unparse_share_modes) > unparse_share_modes: >[2018/01/25 16:07:01.983449, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > d: struct share_mode_data > sequence_number : 0x22c0365756f3c905 (2504061141566867717) > servicepath : * > servicepath : '/foo/timecapsule' > base_name : * > base_name : '.' > stream_name : NULL > num_share_modes : 0x00000001 (1) > share_modes: ARRAY(1) > share_modes: struct share_mode_entry > pid: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > op_mid : 0x000000000000001b (27) > op_type : 0x0000 (0) > lease_idx : 0xffffffff (4294967295) > access_mask : 0x00100080 (1048704) > share_access : 0x00000007 (7) > private_options : 0x00000000 (0) > time : Thu Jan 25 16:07:01 2018 EST.981998 > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) > share_file_id : 0x000000000fae5ec9 (263085769) > uid : 0x000003ea (1002) > flags : 0x0000 (0) > name_hash : 0xbc0a1ea5 (3154779813) > stale : 0x00 (0) > lease : NULL > num_leases : 0x00000000 (0) > leases: ARRAY(0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Wed Dec 31 19:00:00 1969 EST.0 > changed_write_time : Wed Dec 31 19:00:00 1969 EST.0 > fresh : 0x01 (1) > modified : 0x01 (1) > record : * > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) >[2018/01/25 16:07:01.984053, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:157(share_mode_memcache_delete) > deleting entry for file . seq 0x2504061141566867717 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.984091, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.984122, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.984148, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:171(share_mode_memcache_store) > stored entry for file . seq 0x2504061141566867718 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.984176, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5351(create_file_unixpath) > create_file_unixpath: info=1 >[2018/01/25 16:07:01.984200, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5630(create_file_default) > create_file: info=1 >[2018/01/25 16:07:01.984224, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1278(smbd_smb2_create_after_exec) > smbd_smb2_create_send: response construction phase >[2018/01/25 16:07:01.984302, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.984336, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.984368, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.984401, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.984428, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.984452, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.984476, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.984503, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.984526, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.984667, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.984692, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.984716, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.984742, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.984766, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.984789, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.984817, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.984841, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.984867, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.984891, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.984945, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.984974, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.985002, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/access_check.c:188(se_access_check) > se_access_check: MAX desired = 0x2000000, granted = 0x1e01ff, remaining = 0x1e01ff >[2018/01/25 16:07:01.985097, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.985144, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.985187, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.985220, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.985246, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.985271, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.985300, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.985329, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.985353, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.985376, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.985399, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.985423, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.985449, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.985473, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.985495, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.985519, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.985543, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.985571, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.985595, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.985620, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.985646, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.985675, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:183(smbd_check_access_rights) > smbd_check_access_rights: file . requesting 0x40 returning 0x40 (NT_STATUS_OK) >[2018/01/25 16:07:01.985706, 8, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:667(dos_mode) > dos_mode: . >[2018/01/25 16:07:01.985734, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" >[2018/01/25 16:07:01.985760, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode returning (0x10): "d" >[2018/01/25 16:07:01.985786, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1504(smbd_smb2_create_finish) > smbd_smb2_create_finish: . - fnum 1208521572 >[2018/01/25 16:07:01.985818, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[88] dyn[yes:32] at ../source3/smbd/smb2_create.c:364 >[2018/01/25 16:07:01.985853, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3011(smbd_smb2_request_dispatch_immediate) > smbd_smb2_request_dispatch_immediate: idx[5] of 13 vectors > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 32 > req->in.vector[5].iov_len = 0 > req->in.vector[6].iov_len = 64 > req->in.vector[7].iov_len = 40 > req->in.vector[8].iov_len = 0 > req->in.vector[9].iov_len = 0 > req->in.vector[10].iov_len = 64 > req->in.vector[11].iov_len = 24 > req->in.vector[12].iov_len = 0 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 88 > req->out.vector[4].iov_len = 32 > req->out.vector[5].iov_len = 0 > req->out.vector[6].iov_len = 64 > req->out.vector[7].iov_len = 8 > req->out.vector[8].iov_len = 0 > req->out.vector[9].iov_len = 0 > req->out.vector[10].iov_len = 64 > req->out.vector[11].iov_len = 8 > req->out.vector[12].iov_len = 0 >[2018/01/25 16:07:01.986135, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_GETINFO] mid = 28 >[2018/01/25 16:07:01.986168, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.986195, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:1983(smbd_smb2_request_verify_creditcharge) > mid 28, CreditCharge: 1, NeededCharge: 1 >[2018/01/25 16:07:01.986221, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_getinfo.c:272(smbd_smb2_getinfo_send) > smbd_smb2_getinfo_send: . - fnum 1208521572 >[2018/01/25 16:07:01.986252, 3, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/trans2.c:3450(smbd_do_qfsinfo) > smbd_do_qfsinfo: level = 1003 >[2018/01/25 16:07:01.986296, 10, pid=93847, effective(1002, 1002), real(0, 0), class=quota] ../source3/lib/sysquotas.c:466(sys_get_quota) > sys_get_quota() uid(0, 1002), fs((null)) >[2018/01/25 16:07:01.986327, 10, pid=93847, effective(1002, 1002), real(0, 0), class=quota] ../source3/lib/sysquotas_4B.c:133(sys_quotactl_4B) > getting quota for user ID 1002 on . >[2018/01/25 16:07:01.986358, 3, pid=93847, effective(1002, 1002), real(0, 0), class=quota] ../source3/lib/sysquotas.c:488(sys_get_quota) > sys_get_vfs_quota() failed for mntpath[.] bdev[(null)] qtype[1] id[-1]: Operation not supported >[2018/01/25 16:07:01.986389, 10, pid=93847, effective(1002, 1002), real(0, 0), class=quota] ../source3/lib/sysquotas.c:466(sys_get_quota) > sys_get_quota() uid(0, 1002), fs((null)) >[2018/01/25 16:07:01.986414, 10, pid=93847, effective(1002, 1002), real(0, 0), class=quota] ../source3/lib/sysquotas_4B.c:133(sys_quotactl_4B) > getting quota for group ID 1002 on . >[2018/01/25 16:07:01.986440, 3, pid=93847, effective(1002, 1002), real(0, 0), class=quota] ../source3/lib/sysquotas.c:488(sys_get_quota) > sys_get_vfs_quota() failed for mntpath[.] bdev[(null)] qtype[3] id[-1]: Operation not supported >[2018/01/25 16:07:01.986467, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/trans2.c:3661(smbd_do_qfsinfo) > smbd_do_qfsinfo : SMB_QUERY_FS_SIZE_INFO bsize=1024, cSectorUnit=2, cBytesSector=512, cUnitTotal=1903885840, cUnitAvail=1903885736 >[2018/01/25 16:07:01.986498, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[5] status[NT_STATUS_OK] body[8] dyn[yes:24] at ../source3/smbd/smb2_getinfo.c:201 >[2018/01/25 16:07:01.986531, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.986561, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3011(smbd_smb2_request_dispatch_immediate) > smbd_smb2_request_dispatch_immediate: idx[9] of 13 vectors > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 32 > req->in.vector[5].iov_len = 0 > req->in.vector[6].iov_len = 64 > req->in.vector[7].iov_len = 40 > req->in.vector[8].iov_len = 0 > req->in.vector[9].iov_len = 0 > req->in.vector[10].iov_len = 64 > req->in.vector[11].iov_len = 24 > req->in.vector[12].iov_len = 0 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 88 > req->out.vector[4].iov_len = 32 > req->out.vector[5].iov_len = 0 > req->out.vector[6].iov_len = 64 > req->out.vector[7].iov_len = 8 > req->out.vector[8].iov_len = 24 > req->out.vector[9].iov_len = 0 > req->out.vector[10].iov_len = 64 > req->out.vector[11].iov_len = 8 > req->out.vector[12].iov_len = 0 >[2018/01/25 16:07:01.986838, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CLOSE] mid = 29 >[2018/01/25 16:07:01.986868, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.986895, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_close.c:227(smbd_smb2_close) > smbd_smb2_close: . - fnum 1208521572 >[2018/01/25 16:07:01.986923, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.986949, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/locking.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.986980, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.987007, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x81c5dae20 >[2018/01/25 16:07:01.987035, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:285(share_mode_memcache_fetch) > fetched entry for file . seq 0x2504061141566867718 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.987062, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/locking.c:1226(find_delete_on_close_token) > find_delete_on_close_token: name_hash = 0xbc0a1ea5 >[2018/01/25 16:07:01.987090, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:368(unparse_share_modes) > unparse_share_modes: >[2018/01/25 16:07:01.987114, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > d: struct share_mode_data > sequence_number : 0x22c0365756f3c906 (2504061141566867718) > servicepath : * > servicepath : '/foo/timecapsule' > base_name : * > base_name : '.' > stream_name : NULL > num_share_modes : 0x00000000 (0) > share_modes: ARRAY(0) > num_leases : 0x00000000 (0) > leases: ARRAY(0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Wed Dec 31 19:00:00 1969 EST.0 > changed_write_time : Wed Dec 31 19:00:00 1969 EST.0 > fresh : 0x00 (0) > modified : 0x01 (1) > record : * > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) >[2018/01/25 16:07:01.987407, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:157(share_mode_memcache_delete) > deleting entry for file . seq 0x2504061141566867718 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.987434, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:380(unparse_share_modes) > No used share mode found >[2018/01/25 16:07:01.987460, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.987489, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.987518, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.987545, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.987573, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 9E158F0A >[2018/01/25 16:07:01.987599, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013c1f60 >[2018/01/25 16:07:01.987631, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 9E158F0A >[2018/01/25 16:07:01.987656, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.987686, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:563(file_free) > freed files structure 1208521572 (0 used) >[2018/01/25 16:07:01.987715, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[9] status[NT_STATUS_OK] body[60] dyn[no:0] at ../source3/smbd/smb2_close.c:144 >[2018/01/25 16:07:01.987746, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.987772, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 3, current possible/max 3/512, total granted/max/low/range 512/8192/30/512 >[2018/01/25 16:07:01.987799, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 0, current possible/max 0/512, total granted/max/low/range 512/8192/30/512 >[2018/01/25 16:07:01.987825, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 0, current possible/max 0/512, total granted/max/low/range 512/8192/30/512 >[2018/01/25 16:07:01.987855, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.991830, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 9 vectors >[2018/01/25 16:07:01.991863, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 30 (position 30) from bitmap >[2018/01/25 16:07:01.991888, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 31 (position 31) from bitmap >[2018/01/25 16:07:01.991914, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CREATE] mid = 30 >[2018/01/25 16:07:01.991947, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.991978, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:649(smbd_smb2_create_send) > smbd_smb2_create_send: name [] >[2018/01/25 16:07:01.992006, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:747(smbd_smb2_create_send) > smbd_smb2_create_send: open execution phase >[2018/01/25 16:07:01.992032, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:461(unix_convert) > unix_convert called on file "" >[2018/01/25 16:07:01.992062, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:495(unix_convert) > conversion finished "" -> . >[2018/01/25 16:07:01.992087, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1283(check_reduced_name) > check_reduced_name: check_reduced_name [.] [/foo/timecapsule] >[2018/01/25 16:07:01.992120, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1347(check_reduced_name) > check_reduced_name realpath [.] -> [/foo/timecapsule] >[2018/01/25 16:07:01.992145, 5, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1458(check_reduced_name) > check_reduced_name: . reduced to /foo/timecapsule >[2018/01/25 16:07:01.992171, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5542(create_file_default) > create_file: access_mask = 0x80 file_attributes = 0x10, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = . >[2018/01/25 16:07:01.992200, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5017(create_file_unixpath) > create_file_unixpath: access_mask = 0x80 file_attributes = 0x10, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 ea_list = 0x0x0, sd = 0x0x0, fname = . >[2018/01/25 16:07:01.992228, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:3945(open_directory) > open_directory: opening directory ., access_mask = 0x80, share_access = 0x7 create_options = 0x1, create_disposition = 0x1, file_attributes = 0x10 >[2018/01/25 16:07:01.992314, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.992346, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.992379, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.992412, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.992439, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.992463, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.992488, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.992514, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.992538, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.992561, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.992584, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.992608, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.992633, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.992657, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.992680, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.992703, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.992727, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.992755, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.992778, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.992802, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.992827, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.992855, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:183(smbd_check_access_rights) > smbd_check_access_rights: file . requesting 0x80 returning 0x0 (NT_STATUS_OK) >[2018/01/25 16:07:01.992889, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.992915, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.992944, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2DBDCC0F >[2018/01/25 16:07:01.992971, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x801351260 >[2018/01/25 16:07:01.992997, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:625(smbXsrv_open_global_verify_record) > smbXsrv_open_global_verify_record: empty value >[2018/01/25 16:07:01.993038, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:744(smbXsrv_open_global_store) > smbXsrv_open_global_store: key '2DBDCC0F' stored >[2018/01/25 16:07:01.993067, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_open_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_open_globalU(case 0) > info0 : * > info0: struct smbXsrv_open_global0 > db_rec : * > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0x2dbdcc0f (767413263) > open_persistent_id : 0x000000002dbdcc0f (767413263) > open_volatile_id : 0x0000000011745447 (292836423) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) >[2018/01/25 16:07:01.993448, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2DBDCC0F >[2018/01/25 16:07:01.993474, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.993500, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:911(smbXsrv_open_create) > smbXsrv_open_create: global_id (0x2dbdcc0f) stored >[2018/01/25 16:07:01.993524, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &open_blob: struct smbXsrv_openB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_openU(case 0) > info0 : * > info0: struct smbXsrv_open > table : * > db_rec : NULL > local_id : 0x11745447 (292836423) > global : * > global: struct smbXsrv_open_global0 > db_rec : NULL > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0x2dbdcc0f (767413263) > open_persistent_id : 0x000000002dbdcc0f (767413263) > open_volatile_id : 0x0000000011745447 (292836423) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) > status : NT_STATUS_OK > idle_time : Thu Jan 25 16:07:02 2018 EST > compat : NULL > flags : 0x00 (0) > 0: SMBXSRV_OPEN_NEED_REPLAY_CACHE > 0: SMBXSRV_OPEN_HAVE_REPLAY_CACHE > create_action : 0x00000000 (0) > request_count : 0x0000000000000000 (0) > pre_request_count : 0x0000000000000000 (0) >[2018/01/25 16:07:01.994112, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:128(file_new) > allocated file structure fnum 292836423 (1 used) >[2018/01/25 16:07:01.994142, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:754(file_name_hash) > file_name_hash: /foo/timecapsule/. hash 0xbc0a1ea5 >[2018/01/25 16:07:01.994167, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:4153(open_directory) > Not opening Directory . >[2018/01/25 16:07:01.994197, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.994223, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/locking.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.994254, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.994280, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x81c5dbd50 >[2018/01/25 16:07:01.994312, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:368(unparse_share_modes) > unparse_share_modes: >[2018/01/25 16:07:01.994338, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > d: struct share_mode_data > sequence_number : 0x6c3e625b59cc4dca (7799779749140385226) > servicepath : * > servicepath : '/foo/timecapsule' > base_name : * > base_name : '.' > stream_name : NULL > num_share_modes : 0x00000001 (1) > share_modes: ARRAY(1) > share_modes: struct share_mode_entry > pid: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > op_mid : 0x000000000000001e (30) > op_type : 0x0000 (0) > lease_idx : 0xffffffff (4294967295) > access_mask : 0x00000080 (128) > share_access : 0x00000007 (7) > private_options : 0x00000000 (0) > time : Thu Jan 25 16:07:01 2018 EST.992883 > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) > share_file_id : 0x000000009c6bc536 (2624308534) > uid : 0x000003ea (1002) > flags : 0x0000 (0) > name_hash : 0xbc0a1ea5 (3154779813) > stale : 0x00 (0) > lease : NULL > num_leases : 0x00000000 (0) > leases: ARRAY(0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Wed Dec 31 19:00:00 1969 EST.0 > changed_write_time : Wed Dec 31 19:00:00 1969 EST.0 > fresh : 0x01 (1) > modified : 0x01 (1) > record : * > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) >[2018/01/25 16:07:01.994943, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:157(share_mode_memcache_delete) > deleting entry for file . seq 0x7799779749140385226 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.994981, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.995011, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.995038, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:171(share_mode_memcache_store) > stored entry for file . seq 0x7799779749140385227 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.995066, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5351(create_file_unixpath) > create_file_unixpath: info=1 >[2018/01/25 16:07:01.995090, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5630(create_file_default) > create_file: info=1 >[2018/01/25 16:07:01.995113, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1278(smbd_smb2_create_after_exec) > smbd_smb2_create_send: response construction phase >[2018/01/25 16:07:01.995187, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.995219, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.995251, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.995284, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.995312, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.995340, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.995365, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.995391, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.995415, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.995438, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.995461, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.995485, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.995510, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.995534, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.995557, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.995580, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.995604, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.995630, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.995653, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.995678, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.995704, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.995732, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/security/access_check.c:188(se_access_check) > se_access_check: MAX desired = 0x2000000, granted = 0x1e01ff, remaining = 0x1e01ff >[2018/01/25 16:07:01.995816, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:560(smb_get_nt_acl_nfs4) > smb_get_nt_acl_nfs4 invoked for . >[2018/01/25 16:07:01.995848, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:103(smbacl4_get_vfs_params) > mode:simple, do_chown:true, acedup: dontcare map full control:true >[2018/01/25 16:07:01.995879, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1286(uid_to_sid) > uid 1002 -> sid S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.995912, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/passdb/lookup_sid.c:1335(gid_to_sid) > gid 0 -> sid S-1-22-2-0 >[2018/01/25 16:07:01.995938, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:306(smbacl4_nfs42win) > smbacl4_nfs42win entered >[2018/01/25 16:07:01.995962, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 1000, mask: 1e01ff, who: 1 >[2018/01/25 16:07:01.995987, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 1 to S-1-5-21-3769338274-3953817585-4204003668-1000 >[2018/01/25 16:07:01.996013, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x1000 => 0x0 >[2018/01/25 16:07:01.996036, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.996059, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.996082, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 2040, mask: 1200a9, who: 2 >[2018/01/25 16:07:01.996107, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 2 to S-1-22-2-0 >[2018/01/25 16:07:01.996132, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x2040 => 0x0 >[2018/01/25 16:07:01.996156, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:391(smbacl4_nfs42win) > Map special entry >[2018/01/25 16:07:01.996182, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:394(smbacl4_nfs42win) > Map current sid >[2018/01/25 16:07:01.996205, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:326(smbacl4_nfs42win) > type: 0, iflags: 2, flags: 4000, mask: 1200a9, who: 3 >[2018/01/25 16:07:01.996230, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:352(smbacl4_nfs42win) > mapped 3 to S-1-1-0 >[2018/01/25 16:07:01.996255, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:381(smbacl4_nfs42win) > Windows mapped ace flags: 0x4000 => 0x0 >[2018/01/25 16:07:01.996279, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:427(smbacl4_nfs42win) > Map normal sid >[2018/01/25 16:07:01.996303, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:491(smb_get_nt_acl_nfs4_common) > after make sec_acl >[2018/01/25 16:07:01.996332, 10, pid=93847, effective(1002, 1002), real(0, 0), class=acls] ../source3/modules/nfs4_acls.c:505(smb_get_nt_acl_nfs4_common) > smb_get_nt_acl_nfs4_common successfully exited with sd_size 152 >[2018/01/25 16:07:01.996361, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:183(smbd_check_access_rights) > smbd_check_access_rights: file . requesting 0x40 returning 0x40 (NT_STATUS_OK) >[2018/01/25 16:07:01.996392, 8, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:667(dos_mode) > dos_mode: . >[2018/01/25 16:07:01.996419, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode_from_sbuf returning (0x10): "d" >[2018/01/25 16:07:01.996446, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/dosmode.c:70(dos_mode_debug_print) > dos_mode_debug_print: dos_mode returning (0x10): "d" >[2018/01/25 16:07:01.996471, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1504(smbd_smb2_create_finish) > smbd_smb2_create_finish: . - fnum 292836423 >[2018/01/25 16:07:01.996503, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[1] status[NT_STATUS_OK] body[88] dyn[yes:32] at ../source3/smbd/smb2_create.c:364 >[2018/01/25 16:07:01.996538, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3011(smbd_smb2_request_dispatch_immediate) > smbd_smb2_request_dispatch_immediate: idx[5] of 9 vectors > req->in.vector[0].iov_len = 0 > req->in.vector[1].iov_len = 0 > req->in.vector[2].iov_len = 64 > req->in.vector[3].iov_len = 56 > req->in.vector[4].iov_len = 32 > req->in.vector[5].iov_len = 0 > req->in.vector[6].iov_len = 64 > req->in.vector[7].iov_len = 24 > req->in.vector[8].iov_len = 0 > req->out.vector[0].iov_len = 4 > req->out.vector[1].iov_len = 0 > req->out.vector[2].iov_len = 64 > req->out.vector[3].iov_len = 88 > req->out.vector[4].iov_len = 32 > req->out.vector[5].iov_len = 0 > req->out.vector[6].iov_len = 64 > req->out.vector[7].iov_len = 8 > req->out.vector[8].iov_len = 0 >[2018/01/25 16:07:01.996740, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CLOSE] mid = 31 >[2018/01/25 16:07:01.996772, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.996800, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_close.c:227(smbd_smb2_close) > smbd_smb2_close: . - fnum 292836423 >[2018/01/25 16:07:01.996828, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.996854, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/locking.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.996885, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.996912, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x81c5d5e20 >[2018/01/25 16:07:01.996943, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:285(share_mode_memcache_fetch) > fetched entry for file . seq 0x7799779749140385227 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.996971, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/locking.c:1226(find_delete_on_close_token) > find_delete_on_close_token: name_hash = 0xbc0a1ea5 >[2018/01/25 16:07:01.996996, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:368(unparse_share_modes) > unparse_share_modes: >[2018/01/25 16:07:01.997020, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > d: struct share_mode_data > sequence_number : 0x6c3e625b59cc4dcb (7799779749140385227) > servicepath : * > servicepath : '/foo/timecapsule' > base_name : * > base_name : '.' > stream_name : NULL > num_share_modes : 0x00000000 (0) > share_modes: ARRAY(0) > num_leases : 0x00000000 (0) > leases: ARRAY(0) > num_delete_tokens : 0x00000000 (0) > delete_tokens: ARRAY(0) > old_write_time : Wed Dec 31 19:00:00 1969 EST.0 > changed_write_time : Wed Dec 31 19:00:00 1969 EST.0 > fresh : 0x00 (0) > modified : 0x01 (1) > record : * > id: struct file_id > devid : 0x7819a1dea0dc6420 (8654126136522728480) > inode : 0x0000000000000004 (4) > extid : 0x0000000000000000 (0) >[2018/01/25 16:07:01.997313, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:157(share_mode_memcache_delete) > deleting entry for file . seq 0x7799779749140385227 key 7819a1dea0dc6420:4:0 >[2018/01/25 16:07:01.997340, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/share_mode_lock.c:380(unparse_share_modes) > No used share mode found >[2018/01/25 16:07:01.997366, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/locking.tdb >[2018/01/25 16:07:01.997395, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2064DCA0DEA119780400 >[2018/01/25 16:07:01.997424, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.997450, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:01.997478, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 2DBDCC0F >[2018/01/25 16:07:01.997505, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x8013c1de0 >[2018/01/25 16:07:01.997536, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 2DBDCC0F >[2018/01/25 16:07:01.997562, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:01.997592, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/files.c:563(file_free) > freed files structure 292836423 (0 used) >[2018/01/25 16:07:01.997621, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3043(smbd_smb2_request_done_ex) > smbd_smb2_request_done_ex: idx[5] status[NT_STATUS_OK] body[60] dyn[no:0] at ../source3/smbd/smb2_close.c:144 >[2018/01/25 16:07:01.997654, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.997679, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 2, current possible/max 2/512, total granted/max/low/range 512/8192/32/512 >[2018/01/25 16:07:01.997707, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:923(smb2_set_operation_credit) > smb2_set_operation_credit: requested 256, charge 1, granted 0, current possible/max 0/512, total granted/max/low/range 512/8192/32/512 >[2018/01/25 16:07:01.997737, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../libcli/smb/smb2_signing.c:93(smb2_signing_sign_pdu) > signed SMB2 message >[2018/01/25 16:07:01.999610, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:3915(smbd_smb2_io_handler) > smbd_smb2_request idx[1] of 5 vectors >[2018/01/25 16:07:01.999655, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:671(smb2_validate_sequence_number) > smb2_validate_sequence_number: clearing id 32 (position 32) from bitmap >[2018/01/25 16:07:01.999681, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_server.c:2310(smbd_smb2_request_dispatch) > smbd_smb2_request_dispatch: opcode[SMB2_OP_CREATE] mid = 32 >[2018/01/25 16:07:01.999716, 4, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/uid.c:384(change_to_user) > Skipping user change - already user >[2018/01/25 16:07:01.999752, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:649(smbd_smb2_create_send) > smbd_smb2_create_send: name [.com.apple.timemachine.supported] >[2018/01/25 16:07:01.999787, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:1220(smbd_smb2_create_before_exec) > Got lease request size 52 >[2018/01/25 16:07:01.999812, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > state->lease_ptr: struct smb2_lease > lease_key: struct smb2_lease_key > data: ARRAY(2) > data : 0xffff809cf5ba207c (-140063350841220) > data : 0x342f3ec9c3279b68 (3760293250161154920) > lease_state : 0x00000003 (3) > 1: SMB2_LEASE_READ > 1: SMB2_LEASE_HANDLE > 0: SMB2_LEASE_WRITE > lease_flags : 0x00000000 (0) > lease_duration : 0x0000000000000000 (0) > parent_lease_key: struct smb2_lease_key > data: ARRAY(2) > data : 0x0000000000000000 (0) > data : 0x0000000000000000 (0) > lease_version : 0x0002 (2) > lease_epoch : 0x0000 (0) >[2018/01/25 16:07:02.000137, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smb2_create.c:747(smbd_smb2_create_send) > smbd_smb2_create_send: open execution phase >[2018/01/25 16:07:02.000172, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:461(unix_convert) > unix_convert called on file ".com.apple.timemachine.supported" >[2018/01/25 16:07:02.000203, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/statcache.c:245(stat_cache_lookup) > stat_cache_lookup: lookup failed for name [.COM.APPLE.TIMEMACHINE.SUPPORTED] >[2018/01/25 16:07:02.000237, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:662(unix_convert) > unix_convert begin: name = .com.apple.timemachine.supported, dirpath = , start = .com.apple.timemachine.supported >[2018/01/25 16:07:02.000320, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/mangle_hash2.c:418(is_mangled) > is_mangled .com.apple.timemachine.supported ? >[2018/01/25 16:07:02.000357, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component .com.apple.timemachine.supported (len 32) ? >[2018/01/25 16:07:02.000385, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/mangle_hash2.c:418(is_mangled) > is_mangled .com.apple.timemachine.supported ? >[2018/01/25 16:07:02.000410, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component .com.apple.timemachine.supported (len 32) ? >[2018/01/25 16:07:02.000462, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1283(check_reduced_name) > check_reduced_name: check_reduced_name [.] [/foo/timecapsule] >[2018/01/25 16:07:02.000496, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1347(check_reduced_name) > check_reduced_name realpath [.] -> [/foo/timecapsule] >[2018/01/25 16:07:02.000522, 5, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1458(check_reduced_name) > check_reduced_name: . reduced to /foo/timecapsule >[2018/01/25 16:07:02.000617, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/mangle_hash2.c:418(is_mangled) > is_mangled .com.apple.timemachine.supported ? >[2018/01/25 16:07:02.000645, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/mangle_hash2.c:357(is_mangled_component) > is_mangled_component .com.apple.timemachine.supported (len 32) ? >[2018/01/25 16:07:02.000670, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/filename.c:1060(unix_convert) > New file .com.apple.timemachine.supported >[2018/01/25 16:07:02.000694, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1283(check_reduced_name) > check_reduced_name: check_reduced_name [.com.apple.timemachine.supported] [/foo/timecapsule] >[2018/01/25 16:07:02.000736, 10, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1347(check_reduced_name) > check_reduced_name realpath [.com.apple.timemachine.supported] -> [/foo/timecapsule/.com.apple.timemachine.supported] >[2018/01/25 16:07:02.000766, 5, pid=93847, effective(1002, 1002), real(0, 0), class=vfs] ../source3/smbd/vfs.c:1458(check_reduced_name) > check_reduced_name: .com.apple.timemachine.supported reduced to /foo/timecapsule/.com.apple.timemachine.supported >[2018/01/25 16:07:02.000792, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5542(create_file_default) > create_file: access_mask = 0x89 file_attributes = 0xa2, share_access = 0x1, create_disposition = 0x3 create_options = 0x0 oplock_request = 0x100 private_flags = 0x0 root_dir_fid = 0x0, ea_list = 0x0x0, sd = 0x0x0, fname = .com.apple.timemachine.supported >[2018/01/25 16:07:02.000822, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/open.c:5017(create_file_unixpath) > create_file_unixpath: access_mask = 0x89 file_attributes = 0xa2, share_access = 0x1, create_disposition = 0x3 create_options = 0x0 oplock_request = 0x100 private_flags = 0x0 ea_list = 0x0x0, sd = 0x0x0, fname = .com.apple.timemachine.supported >[2018/01/25 16:07:02.000859, 10, pid=93847, effective(1002, 1002), real(0, 0), class=locking] ../source3/locking/leases_db.c:75(leases_db_key) > leases_db_key: >[2018/01/25 16:07:02.000885, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &db_key: struct leases_db_key > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > lease_key: struct smb2_lease_key > data: ARRAY(2) > data : 0xffff809cf5ba207c (-140063350841220) > data : 0x342f3ec9c3279b68 (3760293250161154920) >[2018/01/25 16:07:02.001020, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:130(dbwrap_lock_order_lock) > dbwrap_lock_order_lock: check lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:02.001049, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:116(debug_lock_order) > lock order: 1:/var/opt/samba/lock/smbXsrv_open_global.tdb 2:<none> 3:<none> >[2018/01/25 16:07:02.001079, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Locking key 0CE2EC50 >[2018/01/25 16:07:02.001106, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:145(db_tdb_fetch_locked_internal) > Allocated locked data 0x0x801351020 >[2018/01/25 16:07:02.001131, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:625(smbXsrv_open_global_verify_record) > smbXsrv_open_global_verify_record: empty value >[2018/01/25 16:07:02.001172, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:744(smbXsrv_open_global_store) > smbXsrv_open_global_store: key '0CE2EC50' stored >[2018/01/25 16:07:02.001201, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &global_blob: struct smbXsrv_open_globalB > version : SMBXSRV_VERSION_0 (0) > seqnum : 0x00000001 (1) > info : union smbXsrv_open_globalU(case 0) > info0 : * > info0: struct smbXsrv_open_global0 > db_rec : * > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > unique_id : 0xbf55d45d2bbd1690 (-4659584742814050672) > open_global_id : 0x0ce2ec50 (216198224) > open_persistent_id : 0x000000000ce2ec50 (216198224) > open_volatile_id : 0x0000000076aecf03 (1991167747) > open_owner : S-1-5-21-3769338274-3953817585-4204003668-1000 > open_time : Thu Jan 25 16:07:02 2018 EST > create_guid : 00000000-0000-0000-0000-000000000000 > client_guid : 4471de5f-bc12-2954-bdc1-50560ac6d03c > app_instance_id : 00000000-0000-0000-0000-000000000000 > disconnect_time : NTTIME(0) > durable_timeout_msec : 0x00000000 (0) > durable : 0x00 (0) > backend_cookie : DATA_BLOB length=0 > channel_sequence : 0x0000 (0) > channel_generation : 0x0000000000000000 (0) >[2018/01/25 16:07:02.001581, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap_tdb.c:61(db_tdb_log_key) > Unlocking key 0CE2EC50 >[2018/01/25 16:07:02.001607, 5, pid=93847, effective(1002, 1002), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_lock_order_unlock) > dbwrap_lock_order_unlock: release lock order 1 for /var/opt/samba/lock/smbXsrv_open_global.tdb >[2018/01/25 16:07:02.001633, 10, pid=93847, effective(1002, 1002), real(0, 0)] ../source3/smbd/smbXsrv_open.c:911(smbXsrv_open_create) > smbXsrv_open_create: global_id (0x0ce2ec50) stored >[2018/01/25 16:07:02.001660, 1, pid=93847, effective(1002, 1002), real(0, 0), class=rpc_parse] ../librpc/ndr/ndr.c:422(ndr_print_debug) > &open_blob: struct smbXsrv_openB > version : SMBXSRV_VERSION_0 (0) > reserved : 0x00000000 (0) > info : union smbXsrv_openU(case 0) > info0 : * > info0: struct smbXsrv_open > table : * > db_rec : NULL > local_id : 0x76aecf03 (1991167747) > global : * > global: struct smbXsrv_open_global0 > db_rec : NULL > server_id: struct server_id > pid : 0x0000000000016e97 (93847) > task_id : 0x00000000 (0) > vnn : 0xffffffff (4294967295) > u