[2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000087 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 00001560 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0016 cancel_ct : 00 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0017 reserved : 00 [2005/08/22 07:16:34, 3] smbd/pipes.c:reply_pipe_read_and_X(241) readX-IPC pnum=7678 min=4280 max=4280 nread=4280 [2005/08/22 07:16:34, 5] lib/util.c:show_msg(464) [2005/08/22 07:16:34, 5] lib/util.c:show_msg(467) size=4339 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=27329 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=4280 [2005/08/22 07:16:34, 10] lib/util.c:dump_data(1995) [000] 05 00 02 00 10 00 00 00 B8 10 00 00 87 00 00 00 ........ ........ [010] 60 15 00 00 00 00 00 00 E0 8C 01 00 50 53 02 00 `....... ....PS.. [020] 00 00 00 00 80 06 00 00 00 12 7A 00 00 12 7A 00 ........ ..z...z. [030] 40 42 0F 00 80 84 1E 00 C0 CF 6A 00 80 8D 5B 00 @B...... ..j...[. [040] 02 00 00 00 42 06 00 00 85 78 02 00 E5 5B 03 00 ....B... .x...[.. [050] 00 00 00 00 00 00 00 00 85 78 02 00 E5 5B 03 00 ........ .x...[.. [060] 02 00 00 00 08 06 00 00 47 99 01 00 94 AE 03 00 ........ G....... [070] 00 00 00 00 00 00 00 00 47 99 01 00 94 AE 03 00 ........ G....... [080] 02 00 00 00 CE 05 00 00 A0 A6 04 00 F0 F9 06 00 ........ ........ [090] 00 00 00 00 00 00 00 00 A0 A6 04 00 F0 F9 06 00 ........ ........ [0A0] 02 00 00 00 A0 05 00 00 5C 4B 03 00 D8 09 05 00 ........ \K...... [0B0] 00 00 00 00 00 00 00 00 5C 4B 03 00 D8 09 05 00 ........ \K...... [0C0] 02 00 00 00 6A 05 00 00 E0 F3 0D 00 80 9A 12 00 ....j... ........ [0D0] 00 00 00 00 00 00 00 00 E0 F3 0D 00 80 9A 12 00 ........ ........ [0E0] 02 00 00 00 38 05 00 00 18 F0 01 00 88 B6 02 00 ....8... ........ [0F0] 00 00 00 00 00 00 00 00 18 F0 01 00 88 B6 02 00 ........ ........ [100] 02 00 00 00 0A 05 00 00 07 D1 03 00 6B 63 05 00 ........ ....kc.. [110] 00 00 00 00 00 00 00 00 07 D1 03 00 6B 63 05 00 ........ ....kc.. [120] 02 00 00 00 E4 04 00 00 11 C7 02 00 97 EC 03 00 ........ ........ [130] 00 00 00 00 00 00 00 00 11 C7 02 00 97 EC 03 00 ........ ........ [140] 00 00 00 00 B2 04 00 00 00 12 7A 00 00 12 7A 00 ........ ..z...z. [150] 40 42 0F 00 40 42 0F 00 80 8D 5B 00 80 8D 5B 00 @B..@B.. ..[...[. [160] 02 00 00 00 74 04 00 00 18 F0 01 00 C0 19 03 00 ....t... ........ [170] 00 00 00 00 00 00 00 00 18 F0 01 00 C0 19 03 00 ........ ........ [180] 02 00 00 00 42 04 00 00 39 0B 05 00 28 5D 07 00 ....B... 9...(].. [190] 00 00 00 00 00 00 00 00 39 0B 05 00 28 5D 07 00 ........ 9...(].. [1A0] 02 00 00 00 0A 04 00 00 E5 5B 03 00 0A F1 04 00 ........ .[...... [1B0] 00 00 00 00 00 00 00 00 E5 5B 03 00 0A F1 04 00 ........ .[...... [1C0] 02 00 00 00 DC 03 00 00 A4 AF 02 00 07 D1 03 00 ........ ........ [1D0] 00 00 00 00 00 00 00 00 A4 AF 02 00 07 D1 03 00 ........ ........ [1E0] 02 00 00 00 A6 03 00 00 07 AE 0A 00 BD 42 0F 00 ........ .....B.. [1F0] 00 00 00 00 00 00 00 00 07 AE 0A 00 BD 42 0F 00 ........ .....B.. [2005/08/22 07:16:34, 6] lib/util_sock.c:write_socket(449) write_socket(25,4343) [2005/08/22 07:16:34, 6] lib/util_sock.c:write_socket(452) write_socket(25,4343) wrote 4343 [2005/08/22 07:16:34, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 59 [2005/08/22 07:16:34, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0x3b [2005/08/22 07:16:34, 3] smbd/process.c:process_smb(1091) Transaction 432 of length 63 [2005/08/22 07:16:34, 5] lib/util.c:show_msg(464) [2005/08/22 07:16:34, 5] lib/util.c:show_msg(467) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=27393 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30328 (0x7678) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 4280 (0x10B8) smb_vwv[ 6]= 4280 (0x10B8) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 4280 (0x10B8) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2005/08/22 07:16:34, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 16294) conn 0x83c3548 [2005/08/22 07:16:34, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(158) fetch sid from uid cache 0 -> S-1-5-21-1426079282-3730378279-3702951429-1000 [2005/08/22 07:16:34, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-1426079282-3730378279-3702951429-1001 [2005/08/22 07:16:34, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-1426079282-3730378279-3702951429-1001 [2005/08/22 07:16:34, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 1 -> S-1-5-21-1426079282-3730378279-3702951429-1003 [2005/08/22 07:16:34, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 2 -> S-1-5-21-1426079282-3730378279-3702951429-1005 [2005/08/22 07:16:34, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 3 -> S-1-5-21-1426079282-3730378279-3702951429-1007 [2005/08/22 07:16:34, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 4 -> S-1-5-21-1426079282-3730378279-3702951429-1009 [2005/08/22 07:16:34, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 6 -> S-1-5-21-1426079282-3730378279-3702951429-1013 [2005/08/22 07:16:34, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 10 -> S-1-5-21-1426079282-3730378279-3702951429-1021 [2005/08/22 07:16:34, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 31 -> S-1-5-21-1426079282-3730378279-3702951429-1063 [2005/08/22 07:16:34, 10] auth/auth_util.c:debug_nt_user_token(489) NT user token of user S-1-5-21-1426079282-3730378279-3702951429-1000 contains 12 SIDs SID[ 0]: S-1-5-21-1426079282-3730378279-3702951429-1000 SID[ 1]: S-1-5-21-1426079282-3730378279-3702951429-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1426079282-3730378279-3702951429-1003 SID[ 6]: S-1-5-21-1426079282-3730378279-3702951429-1005 SID[ 7]: S-1-5-21-1426079282-3730378279-3702951429-1007 SID[ 8]: S-1-5-21-1426079282-3730378279-3702951429-1009 SID[ 9]: S-1-5-21-1426079282-3730378279-3702951429-1013 SID[ 10]: S-1-5-21-1426079282-3730378279-3702951429-1021 SID[ 11]: S-1-5-21-1426079282-3730378279-3702951429-1063 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/22 07:16:34, 3] smbd/sec_ctx.c:set_sec_ctx(287) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/22 07:16:34, 5] auth/auth_util.c:debug_nt_user_token(489) NT user token of user S-1-5-21-1426079282-3730378279-3702951429-1000 contains 12 SIDs SID[ 0]: S-1-5-21-1426079282-3730378279-3702951429-1000 SID[ 1]: S-1-5-21-1426079282-3730378279-3702951429-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1426079282-3730378279-3702951429-1003 SID[ 6]: S-1-5-21-1426079282-3730378279-3702951429-1005 SID[ 7]: S-1-5-21-1426079282-3730378279-3702951429-1007 SID[ 8]: S-1-5-21-1426079282-3730378279-3702951429-1009 SID[ 9]: S-1-5-21-1426079282-3730378279-3702951429-1013 SID[ 10]: S-1-5-21-1426079282-3730378279-3702951429-1021 SID[ 11]: S-1-5-21-1426079282-3730378279-3702951429-1063 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/22 07:16:34, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 8 supplementary groups Group[ 0]: 0 Group[ 1]: 1 Group[ 2]: 2 Group[ 3]: 3 Group[ 4]: 4 Group[ 5]: 6 Group[ 6]: 10 Group[ 7]: 31 [2005/08/22 07:16:34, 5] smbd/uid.c:change_to_user(280) change_to_user uid=(0,0) gid=(0,0) [2005/08/22 07:16:34, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168) search for pipe pnum=7678 [2005/08/22 07:16:34, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1171) pipe name spoolss pnum=7678 (pipes_open=1) [2005/08/22 07:16:34, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909) read_from_pipe: 7678 name: spoolss len: 4280 [2005/08/22 07:16:34, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(980) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 8512, prs_offset(&p->out_data.rdata) = 9728. [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 02 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 02 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 04d8 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000087 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 000004c0 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0016 cancel_ct : 00 [2005/08/22 07:16:34, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0017 reserved : 00 [2005/08/22 07:16:34, 3] smbd/pipes.c:reply_pipe_read_and_X(241) readX-IPC pnum=7678 min=4280 max=4280 nread=1240 [2005/08/22 07:16:34, 5] lib/util.c:show_msg(464) [2005/08/22 07:16:34, 5] lib/util.c:show_msg(467) size=1299 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=27393 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1240 (0x4D8) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=1240 [2005/08/22 07:16:34, 10] lib/util.c:dump_data(1995) [000] 05 00 02 02 10 00 00 00 D8 04 00 00 87 00 00 00 ........ ........ [010] C0 04 00 00 00 00 00 00 65 00 72 00 73 00 65 00 ........ e.r.s.e. [020] 00 00 41 00 34 00 20 00 54 00 72 00 61 00 6E 00 ..A.4. . T.r.a.n. [030] 73 00 76 00 65 00 72 00 73 00 65 00 00 00 4C 00 s.v.e.r. s.e...L. [040] 65 00 74 00 74 00 65 00 72 00 20 00 54 00 72 00 e.t.t.e. r. .T.r. [050] 61 00 6E 00 73 00 76 00 65 00 72 00 73 00 65 00 a.n.s.v. e.r.s.e. [060] 00 00 41 00 34 00 20 00 45 00 78 00 74 00 72 00 ..A.4. . E.x.t.r. [070] 61 00 00 00 54 00 61 00 62 00 6C 00 6F 00 69 00 a...T.a. b.l.o.i. [080] 64 00 20 00 45 00 78 00 74 00 72 00 61 00 00 00 d. .E.x. t.r.a... [090] 4C 00 65 00 67 00 61 00 6C 00 20 00 45 00 78 00 L.e.g.a. l. .E.x. [0A0] 74 00 72 00 61 00 00 00 4C 00 65 00 74 00 74 00 t.r.a... L.e.t.t. [0B0] 65 00 72 00 20 00 45 00 78 00 74 00 72 00 61 00 e.r. .E. x.t.r.a. [0C0] 00 00 52 00 65 00 73 00 65 00 72 00 76 00 65 00 ..R.e.s. e.r.v.e. [0D0] 64 00 34 00 39 00 00 00 52 00 65 00 73 00 65 00 d.4.9... R.e.s.e. [0E0] 72 00 76 00 65 00 64 00 34 00 38 00 00 00 45 00 r.v.e.d. 4.8...E. [0F0] 6E 00 76 00 65 00 6C 00 6F 00 70 00 65 00 20 00 n.v.e.l. o.p.e. . [100] 49 00 6E 00 76 00 69 00 74 00 65 00 00 00 31 00 I.n.v.i. t.e...1. [110] 35 00 78 00 31 00 31 00 00 00 31 00 30 00 78 00 5.x.1.1. ..1.0.x. [120] 31 00 31 00 00 00 39 00 78 00 31 00 31 00 00 00 1.1...9. x.1.1... [130] 4A 00 61 00 70 00 61 00 6E 00 65 00 73 00 65 00 J.a.p.a. n.e.s.e. [140] 20 00 50 00 6F 00 73 00 74 00 63 00 61 00 72 00 .P.o.s. t.c.a.r. [150] 64 00 00 00 42 00 34 00 20 00 28 00 49 00 53 00 d...B.4. .(.I.S. [160] 4F 00 29 00 00 00 47 00 65 00 72 00 6D 00 61 00 O.)...G. e.r.m.a. [170] 6E 00 20 00 4C 00 65 00 67 00 61 00 6C 00 20 00 n. .L.e. g.a.l. . [180] 46 00 61 00 6E 00 66 00 6F 00 6C 00 64 00 00 00 F.a.n.f. o.l.d... [190] 47 00 65 00 72 00 6D 00 61 00 6E 00 20 00 53 00 G.e.r.m. a.n. .S. [1A0] 74 00 64 00 20 00 46 00 61 00 6E 00 66 00 6F 00 t.d. .F. a.n.f.o. [1B0] 6C 00 64 00 00 00 55 00 53 00 20 00 53 00 74 00 l.d...U. S. .S.t. [1C0] 64 00 20 00 46 00 61 00 6E 00 66 00 6F 00 6C 00 d. .F.a. n.f.o.l. [1D0] 64 00 00 00 36 00 20 00 33 00 2F 00 34 00 20 00 d...6. . 3./.4. . [1E0] 45 00 6E 00 76 00 65 00 6C 00 6F 00 70 00 65 00 E.n.v.e. l.o.p.e. [1F0] 00 00 45 00 6E 00 76 00 65 00 6C 00 6F 00 70 00 ..E.n.v. e.l.o.p. [2005/08/22 07:16:34, 6] lib/util_sock.c:write_socket(449) write_socket(25,1303) [2005/08/22 07:16:34, 6] lib/util_sock.c:write_socket(452) write_socket(25,1303) wrote 1303 client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn INTERFACE_VERSION [2005/08/22 07:17:02, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(261) [25154]: request interface version [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn WINBINDD_PRIV_PIPE_DIR [2005/08/22 07:17:02, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297) [25154]: request location of privileged pipe [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:client_write(569) client_write: need to write 35 extra data bytes. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 35 bytes. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:client_write(558) client_write: client_write: complete response written. [2005/08/22 07:17:02, 6] nsswitch/winbindd.c:new_connection(356) accepted socket 24 [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 0 bytes. Need 1824 more for a full request. [2005/08/22 07:17:02, 5] nsswitch/winbindd.c:winbind_client_read(475) read failed on sock 18, pid 25154: EOF [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn ENDPWENT [2005/08/22 07:17:02, 3] nsswitch/winbindd_user.c:winbindd_endpwent(375) [25154]: endpwent [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 0 bytes. Need 1824 more for a full request. [2005/08/22 07:17:02, 5] nsswitch/winbindd.c:winbind_client_read(475) read failed on sock 24, pid 25154: EOF [2005/08/22 07:17:02, 6] nsswitch/winbindd.c:new_connection(356) accepted socket 18 [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn INTERFACE_VERSION [2005/08/22 07:17:02, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(261) [25157]: request interface version [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn WINBINDD_PRIV_PIPE_DIR [2005/08/22 07:17:02, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297) [25157]: request location of privileged pipe [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:client_write(569) client_write: need to write 35 extra data bytes. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 35 bytes. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:client_write(558) client_write: client_write: complete response written. [2005/08/22 07:17:02, 6] nsswitch/winbindd.c:new_connection(356) accepted socket 24 [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 0 bytes. Need 1824 more for a full request. [2005/08/22 07:17:02, 5] nsswitch/winbindd.c:winbind_client_read(475) read failed on sock 18, pid 25157: EOF [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 1824 bytes. Need 0 more for a full request. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:process_request(321) process_request: request fn ENDPWENT [2005/08/22 07:17:02, 3] nsswitch/winbindd_user.c:winbindd_endpwent(375) [25157]: endpwent [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:client_write(524) client_write: wrote 1300 bytes. [2005/08/22 07:17:02, 10] nsswitch/winbindd.c:winbind_client_read(470) client_read: read 0 bytes. Need 1824 more for a full request. [2005/08/22 07:17:02, 5] nsswitch/winbindd.c:winbind_client_read(475) read failed on sock 24, pid 25157: EOF [2005/08/22 07:17:22, 10] lib/util_sock.c:read_smb_length_return_keepalive(505) got smb length of 202 [2005/08/22 07:17:22, 6] smbd/process.c:process_smb(1090) got message type 0x0 of len 0xca [2005/08/22 07:17:22, 3] smbd/process.c:process_smb(1091) Transaction 433 of length 206 [2005/08/22 07:17:22, 5] lib/util.c:show_msg(464) [2005/08/22 07:17:22, 5] lib/util.c:show_msg(467) size=202 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=200 smb_uid=100 smb_mid=27457 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 118 (0x76) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 118 (0x76) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30328 (0x7678) smb_bcc=135 [2005/08/22 07:17:22, 10] lib/util.c:dump_data(1995) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 03 10 00 00 00 76 00 00 00 88 00 00 ........ .v...... [020] 00 5E 00 00 00 00 00 1E 00 00 00 00 00 1B 00 00 .^...... ........ [030] 00 00 00 00 00 CC 7B 09 43 A6 3F 00 00 01 00 00 ......{. C.?..... [040] 00 01 00 00 00 00 00 02 00 00 00 00 00 04 00 02 ........ ........ [050] 00 00 12 7A 00 00 12 7A 00 40 42 0F 00 40 42 0F ...z...z .@B..@B. [060] 00 80 8D 5B 00 80 8D 5B 00 09 00 00 00 00 00 00 ...[...[ ........ [070] 00 09 00 00 00 74 00 65 00 73 00 74 00 66 00 6F .....t.e .s.t.f.o [080] 00 72 00 6D 00 00 00 .r.m... [2005/08/22 07:17:22, 3] smbd/process.c:switch_message(886) switch message SMBtrans (pid 16294) conn 0x83c3548 [2005/08/22 07:17:22, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(158) fetch sid from uid cache 0 -> S-1-5-21-1426079282-3730378279-3702951429-1000 [2005/08/22 07:17:22, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-1426079282-3730378279-3702951429-1001 [2005/08/22 07:17:22, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 0 -> S-1-5-21-1426079282-3730378279-3702951429-1001 [2005/08/22 07:17:22, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 1 -> S-1-5-21-1426079282-3730378279-3702951429-1003 [2005/08/22 07:17:22, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 2 -> S-1-5-21-1426079282-3730378279-3702951429-1005 [2005/08/22 07:17:22, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 3 -> S-1-5-21-1426079282-3730378279-3702951429-1007 [2005/08/22 07:17:22, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 4 -> S-1-5-21-1426079282-3730378279-3702951429-1009 [2005/08/22 07:17:22, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 6 -> S-1-5-21-1426079282-3730378279-3702951429-1013 [2005/08/22 07:17:22, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 10 -> S-1-5-21-1426079282-3730378279-3702951429-1021 [2005/08/22 07:17:22, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232) fetch sid from gid cache 31 -> S-1-5-21-1426079282-3730378279-3702951429-1063 [2005/08/22 07:17:22, 10] auth/auth_util.c:debug_nt_user_token(489) NT user token of user S-1-5-21-1426079282-3730378279-3702951429-1000 contains 12 SIDs SID[ 0]: S-1-5-21-1426079282-3730378279-3702951429-1000 SID[ 1]: S-1-5-21-1426079282-3730378279-3702951429-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1426079282-3730378279-3702951429-1003 SID[ 6]: S-1-5-21-1426079282-3730378279-3702951429-1005 SID[ 7]: S-1-5-21-1426079282-3730378279-3702951429-1007 SID[ 8]: S-1-5-21-1426079282-3730378279-3702951429-1009 SID[ 9]: S-1-5-21-1426079282-3730378279-3702951429-1013 SID[ 10]: S-1-5-21-1426079282-3730378279-3702951429-1021 SID[ 11]: S-1-5-21-1426079282-3730378279-3702951429-1063 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/22 07:17:22, 3] smbd/sec_ctx.c:set_sec_ctx(287) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/08/22 07:17:22, 5] auth/auth_util.c:debug_nt_user_token(489) NT user token of user S-1-5-21-1426079282-3730378279-3702951429-1000 contains 12 SIDs SID[ 0]: S-1-5-21-1426079282-3730378279-3702951429-1000 SID[ 1]: S-1-5-21-1426079282-3730378279-3702951429-1001 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1426079282-3730378279-3702951429-1003 SID[ 6]: S-1-5-21-1426079282-3730378279-3702951429-1005 SID[ 7]: S-1-5-21-1426079282-3730378279-3702951429-1007 SID[ 8]: S-1-5-21-1426079282-3730378279-3702951429-1009 SID[ 9]: S-1-5-21-1426079282-3730378279-3702951429-1013 SID[ 10]: S-1-5-21-1426079282-3730378279-3702951429-1021 SID[ 11]: S-1-5-21-1426079282-3730378279-3702951429-1063 SE_PRIV 0x0 0x0 0x0 0x0 [2005/08/22 07:17:22, 5] auth/auth_util.c:debug_unix_user_token(506) UNIX token of user 0 Primary group is 0 and contains 8 supplementary groups Group[ 0]: 0 Group[ 1]: 1 Group[ 2]: 2 Group[ 3]: 3 Group[ 4]: 4 Group[ 5]: 6 Group[ 6]: 10 Group[ 7]: 31 [2005/08/22 07:17:22, 5] smbd/uid.c:change_to_user(280) change_to_user uid=(0,0) gid=(0,0) [2005/08/22 07:17:22, 3] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=118 params=0 setup=2 [2005/08/22 07:17:22, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2005/08/22 07:17:22, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2005/08/22 07:17:22, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2005/08/22 07:17:22, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168) search for pipe pnum=7678 [2005/08/22 07:17:22, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1171) pipe name spoolss pnum=7678 (pipes_open=1) [2005/08/22 07:17:22, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "spoolss" (pnum 7678) [2005/08/22 07:17:22, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x83da0a8 max_trans_reply: 4280 [2005/08/22 07:17:22, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852) write_to_pipe: 7678 name: spoolss open: Yes len: 118 [2005/08/22 07:17:22, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 118 [2005/08/22 07:17:22, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(775) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 118 [2005/08/22 07:17:22, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(397) fill_rpc_header: data_to_copy = 118, len_needed_to_complete_hdr = 16, receive_len = 0 [2005/08/22 07:17:22, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 16 [2005/08/22 07:17:22, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 102 [2005/08/22 07:17:22, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(775) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 102 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 00 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 0076 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000088 [2005/08/22 07:17:22, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(485) unmarshall_rpc_header: using little-endian RPC [2005/08/22 07:17:22, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(514) unmarshall_rpc_header: type = 0, flags = 3 [2005/08/22 07:17:22, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 0 [2005/08/22 07:17:22, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874) write_to_pipe: data_left = 102 [2005/08/22 07:17:22, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(775) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 102, incoming data = 102 [2005/08/22 07:17:22, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(719) process_complete_pdu: processing packet type 0 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 alloc_hint: 0000005e [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0004 context_id: 0000 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0006 opnum : 001e [2005/08/22 07:17:22, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542) free_pipe_context: destroying talloc pool of size 0 [2005/08/22 07:17:22, 5] rpc_server/srv_pipe.c:api_pipe_request(1497) Requested \PIPE\spoolss [2005/08/22 07:17:22, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531) api_rpcTNP: spoolss op 0x1e - api_rpcTNP: rpc command: SPOOLSS_ADDFORM [2005/08/22 07:17:22, 6] rpc_server/srv_pipe.c:api_rpcTNP(1556) api_rpc_cmds[33].fn == 0x8142e60 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_q_addform [2005/08/22 07:17:22, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd printer handle [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0000 data1: 00000000 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0004 data2: 0000001b [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 data3: 0000 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a data4: 0000 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8s(729) 000c data5: cc 7b 09 43 a6 3f 00 00 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0014 level: 00000001 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0018 level2: 00000001 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 001c useless_ptr: 00020000 [2005/08/22 07:17:22, 6] rpc_parse/parse_prs.c:prs_debug(82) 000020 spoolss_io_addform [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0020 flags: 00000000 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0024 name_ptr: 00020004 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0028 size_x: 007a1200 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 002c size_y: 007a1200 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0030 left: 000f4240 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0034 top: 000f4240 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0038 right: 005b8d80 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 003c bottom: 005b8d80 [2005/08/22 07:17:22, 7] rpc_parse/parse_prs.c:prs_debug(82) 000040 smb_io_unistr2 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0040 uni_max_len: 00000009 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0044 offset : 00000000 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0048 uni_str_len: 00000009 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:dbg_rw_punival(814) 004c buffer : t.e.s.t.f.o.r.m... [2005/08/22 07:17:22, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 1B 00 00 00 00 00 00 00 CC 7B 09 43 ........ .....{.C [010] A6 3F 00 00 .?.. [2005/08/22 07:17:22, 5] rpc_server/srv_spoolss_nt.c:_spoolss_addform(8175) spoolss_addform Looking for builtin form testform [2005/08/22 07:17:22, 6] printing/nt_printing.c:add_a_form(620) add_a_form: Successfully added form [testform] [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 spoolss_io_r_addform [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_werror(701) 0000 status: WERR_OK [2005/08/22 07:17:22, 5] rpc_server/srv_pipe.c:api_rpcTNP(1578) api_rpcTNP: called spoolss successfully [2005/08/22 07:17:22, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542) free_pipe_context: destroying talloc pool of size 18 [2005/08/22 07:17:22, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878) write_to_pipe: data_used = 102 [2005/08/22 07:17:22, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909) read_from_pipe: 7678 name: spoolss len: 4280 [2005/08/22 07:17:22, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(980) read_from_pipe: spoolss: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 4. [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0000 major : 05 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0001 minor : 00 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0002 pkt_type : 02 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0003 flags : 03 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0004 pack_type0: 10 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0005 pack_type1: 00 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0006 pack_type2: 00 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0007 pack_type3: 00 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0008 frag_len : 001c [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint16(613) 000a auth_len : 0000 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 000c call_id : 00000088 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint32(642) 0010 alloc_hint: 00000004 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint16(613) 0014 context_id: 0000 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0016 cancel_ct : 00 [2005/08/22 07:17:22, 5] rpc_parse/parse_prs.c:prs_uint8(584) 0017 reserved : 00 [2005/08/22 07:17:22, 5] smbd/ipc.c:copy_trans_params_and_data(58) copy_trans_params_and_data: params[0..0] data[0..28] [2005/08/22 07:17:22, 5] lib/util.c:show_msg(464) [2005/08/22 07:17:22, 5] lib/util.c:show_msg(467) size=84 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=200 smb_uid=100 smb_mid=27457 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 28 (0x1C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 28 (0x1C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2005/08/22 07:17:22, 10] lib/util.c:dump_data(1995) [000] 00 05 00 02 03 10 00 00 00 1C 00 00 00 88 00 00 ........ ........ [010] 00 04 00 00 00 00 00 00 00 00 00 00 00 ........ ..... [2005/08/22 07:17:22, 6] lib/util_sock.c:write_socket(449) write_socket(25,88) [2005/08/22 07:17:22, 6] lib/util_sock.c:write_socket(452) write_socket(25,88) wrote 88