[2006/01/16 09:31:02, 6] param/loadparm.c:(2950) lp_file_list_changed() file /opt/local/sambat/lib/smb.conf.%h -> /opt/local/sambat/lib/smb.conf.angler last mod_time: Wed May 5 16:31:19 2004 file /opt/local/sambat/lib/smb.conf -> /opt/local/sambat/lib/smb.conf last mod_time: Mon Jan 16 09:14:59 2006 [2006/01/16 09:31:02, 5] smbd/reply.c:(537) init msg_type=0x81 msg_flags=0x0 [2006/01/16 09:31:02, 0] lib/util_sock.c:(554) write_data: write failure in writing to client 192.168.2.23. Error Broken pipe [2006/01/16 09:31:02, 0] lib/util_sock.c:(762) Error writing 4 bytes to client. -1. (Broken pipe) [2006/01/16 09:31:02, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/01/16 09:31:02, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:02, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:02, 5] smbd/uid.c:(319) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/01/16 09:31:02, 2] smbd/server.c:(614) Closing connections [2006/01/16 09:31:02, 3] smbd/connection.c:(69) Yielding connection to [2006/01/16 09:31:02, 3] smbd/connection.c:(76) yield_connection: tdb_delete for name failed with error Record does not exist. [2006/01/16 09:31:02, 3] smbd/server.c:(655) Server exit (process_smb: send_smb failed.) [2006/01/16 09:31:02, 6] param/loadparm.c:(2950) lp_file_list_changed() file /opt/local/sambat/lib/smb.conf.%h -> /opt/local/sambat/lib/smb.conf.angler last mod_time: Wed May 5 16:31:19 2004 file /opt/local/sambat/lib/smb.conf -> /opt/local/sambat/lib/smb.conf last mod_time: Mon Jan 16 09:14:59 2006 [2006/01/16 09:31:02, 5] auth/auth_util.c:(163) make_user_info_map: Mapping user [ADI]\[schulz] from workstation [TETRA] [2006/01/16 09:31:02, 10] lib/gencache.c:(269) Returning expired cache entry: key = TDOMCACHE/TIMESTAMP, value = 0, timeout = Fri Jan 13 16:39:59 2006 [2006/01/16 09:31:02, 5] libsmb/trustdom_cache.c:(220) no timestamp for trusted domain cache located. [2006/01/16 09:31:02, 10] lib/gencache.c:(127) Adding cache entry with key = TDOMCACHE/TIMESTAMP; value = 0 and timeout = Mon Jan 16 09:41:02 2006 (600 seconds ahead) [2006/01/16 09:31:02, 5] passdb/secrets.c:(291) secrets_fetch failed! [2006/01/16 09:31:02, 8] libsmb/namequery.c:(1433) get_sorted_dc_list: attempting lookup using [host] [2006/01/16 09:31:02, 10] libsmb/namequery.c:(1028) internal_resolve_name: looking up starfish2#20 [2006/01/16 09:31:02, 10] lib/gencache.c:(269) Returning valid cache entry: key = NBT/STARFISH2#20, value = 192.168.2.178:0, timeout = Mon Jan 16 09:42:02 2006 [2006/01/16 09:31:02, 5] libsmb/namecache.c:(201) name starfish2#20 found. [2006/01/16 09:31:02, 10] libsmb/namequery.c:(320) remove_duplicate_addrs2: looking for duplicate address/port pairs [2006/01/16 09:31:02, 4] libsmb/namequery.c:(1406) get_dc_list: returning 1 ip addresses in an ordered list [2006/01/16 09:31:02, 4] libsmb/namequery.c:(1407) get_dc_list: 192.168.2.178:0 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(188) name_status_find: looking up ADI#1c at 192.168.2.178 [2006/01/16 09:31:02, 10] lib/gencache.c:(291) Cache entry with key = NBT/ADI#1C.20.192.168.2.178 couldn't be found [2006/01/16 09:31:02, 5] libsmb/namecache.c:(308) namecache_status_fetch: no entry for NBT/ADI#1C.20.192.168.2.178 found. [2006/01/16 09:31:02, 10] lib/gencache.c:(214) Deleting cache entry (key = NBT/ADI#1C.20.192.168.2.178) [2006/01/16 09:31:02, 10] lib/util_sock.c:(832) bind succeeded on port 0 [2006/01/16 09:31:02, 5] libsmb/nmblib.c:(777) Sending a packet of len 50 to (192.168.2.178) on port 137 [2006/01/16 09:31:02, 10] lib/util_sock.c:(286) read_udp_socket: lastip 192.168.2.178 lastport 137 read: 391 [2006/01/16 09:31:02, 10] libsmb/nmblib.c:(506) parse_nmb: packet id = 2161 [2006/01/16 09:31:02, 5] libsmb/nmblib.c:(755) Received a packet of len 391 from (192.168.2.178) port 137 [2006/01/16 09:31:02, 4] libsmb/nmblib.c:(112) nmb packet from 192.168.2.178(137) header: id=2161 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=ADI<1c> rr_type=33 rr_class=1 ttl=0 answers 0 char .STARFISH2 hex 0F535441524649534832202020202020 answers 10 char .D.ADI hex 00440041444920202020202020202020 answers 20 char ...ADI hex 202000C4004144492020202020202020 answers 30 char ...STARFISH2 hex 202020201CC400535441524649534832 answers 40 char D.ADI hex 20202020202020440041444920202020 answers 50 char .D.ADI hex 20202020202020201B44004144492020 answers 60 char ...ADI hex 202020202020202020201EC400414449 answers 70 char .D.. hex 2020202020202020202020201D440001 answers 80 char .__MSBROWSE__... hex 025F5F4D5342524F5753455F5F0201C4 answers 90 char .STARFISH2 hex 00535441524649534832202020202020 answers a0 char .D.STARFISH2$ hex 03440053544152464953483224202020 answers b0 char .D.INet~Servic hex 2020034400494E65747E536572766963 answers c0 char es ...ADMINISTR hex 657320201CC40041444D494E49535452 answers d0 char ATOR .D.IS~STAR hex 41544F52202003440049537E53544152 answers e0 char FISH2....D.JFCEN hex 46495348320000000044004A4643454E answers f0 char TRAL .D.STA hex 5452414C202020202020034400535441 answers 100 char RFISH2 .D.. hex 524649534832202020202020BE440000 answers 110 char .[8............ hex 065B38177F0000000000000000000000 answers 120 char ................ hex 00000000000000000000000000000000 answers 130 char ............. hex 00000000000000000000000000 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) STARFISH2#00: flags = 0x44 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) ADI#00: flags = 0xc4 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) ADI#1c: flags = 0xc4 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) STARFISH2#20: flags = 0x44 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) ADI#1b: flags = 0x44 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) ADI#1e: flags = 0xc4 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) ADI#1d: flags = 0x44 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) __MSBROWSE__#01: flags = 0xc4 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) STARFISH2#03: flags = 0x44 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) STARFISH2$#03: flags = 0x44 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) INet~Services#1c: flags = 0xc4 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) ADMINISTRATOR#03: flags = 0x44 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) IS~STARFISH2#00: flags = 0x44 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) JFCENTRAL#03: flags = 0x44 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(70) STARFISH2#be: flags = 0x44 [2006/01/16 09:31:02, 10] libsmb/namequery.c:(227) name_status_find: name found, name STARFISH2 ip address is 192.168.2.178 [2006/01/16 09:31:02, 3] libsmb/namequery_dc.c:(145) rpc_dc_name: Returning DC STARFISH2 (192.168.2.178) for domain ADI [2006/01/16 09:31:02, 3] libsmb/cliconnect.c:(1389) Connecting to host=STARFISH2 [2006/01/16 09:31:02, 3] lib/util_sock.c:(867) Connecting to 192.168.2.178 at port 445 [2006/01/16 09:31:02, 5] lib/util_sock.c:(203) socket option SO_KEEPALIVE = 0 [2006/01/16 09:31:02, 5] lib/util_sock.c:(203) socket option SO_REUSEADDR = 0 [2006/01/16 09:31:02, 5] lib/util_sock.c:(203) socket option SO_BROADCAST = 0 [2006/01/16 09:31:02, 5] lib/util_sock.c:(203) socket option TCP_NODELAY = 1 [2006/01/16 09:31:02, 5] lib/util_sock.c:(203) socket option IPTOS_LOWDELAY = 0 [2006/01/16 09:31:02, 5] lib/util_sock.c:(203) socket option IPTOS_THROUGHPUT = 0 [2006/01/16 09:31:02, 5] lib/util_sock.c:(203) socket option SO_SNDBUF = 16384 [2006/01/16 09:31:02, 5] lib/util_sock.c:(203) socket option SO_RCVBUF = 24820 [2006/01/16 09:31:02, 5] lib/util_sock.c:(201) Could not test socket option SO_SNDLOWAT. [2006/01/16 09:31:02, 5] lib/util_sock.c:(201) Could not test socket option SO_RCVLOWAT. [2006/01/16 09:31:02, 5] lib/util_sock.c:(201) Could not test socket option SO_SNDTIMEO. [2006/01/16 09:31:02, 5] lib/util_sock.c:(201) Could not test socket option SO_RCVTIMEO. [2006/01/16 09:31:02, 6] libsmb/clientgen.c:(132) write_socket(21,183) [2006/01/16 09:31:02, 6] libsmb/clientgen.c:(135) write_socket(21,183) wrote 183 [2006/01/16 09:31:02, 10] lib/util_sock.c:(615) got smb length of 175 [2006/01/16 09:31:02, 5] lib/util.c:(454) [2006/01/16 09:31:02, 5] lib/util.c:(464) size=175 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=10951 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12807 (0x3207) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 243 (0xF3) smb_vwv[11]=64128 (0xFA80) smb_vwv[12]= 218 (0xDA) smb_vwv[13]=43362 (0xA962) smb_vwv[14]=50714 (0xC61A) smb_vwv[15]=11265 (0x2C01) smb_vwv[16]= 1 (0x1) smb_bcc=106 [2006/01/16 09:31:02, 10] lib/util.c:(2058) [000] 1A D3 B5 47 6D 85 28 4F 93 37 3C FF 64 B0 40 DB ...Gm.(O .7<.d.@. [010] 60 58 06 06 2B 06 01 05 05 02 A0 4E 30 4C A0 30 `X..+... ...N0L.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 18 30 16 A0 14 1B 12 73 74 61 72 66 69 73 68 ..0..... starfish [060] 32 24 40 41 44 49 2E 43 4F 4D 2$@ADI.C OM [2006/01/16 09:31:02, 5] lib/util.c:(454) [2006/01/16 09:31:02, 5] lib/util.c:(464) size=175 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=10951 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12807 (0x3207) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 243 (0xF3) smb_vwv[11]=64128 (0xFA80) smb_vwv[12]= 218 (0xDA) smb_vwv[13]=43362 (0xA962) smb_vwv[14]=50714 (0xC61A) smb_vwv[15]=11265 (0x2C01) smb_vwv[16]= 1 (0x1) smb_bcc=106 [2006/01/16 09:31:02, 10] lib/util.c:(2058) [000] 1A D3 B5 47 6D 85 28 4F 93 37 3C FF 64 B0 40 DB ...Gm.(O .7<.d.@. [010] 60 58 06 06 2B 06 01 05 05 02 A0 4E 30 4C A0 30 `X..+... ...N0L.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 18 30 16 A0 14 1B 12 73 74 61 72 66 69 73 68 ..0..... starfish [060] 32 24 40 41 44 49 2E 43 4F 4D 2$@ADI.C OM [2006/01/16 09:31:02, 6] libsmb/clientgen.c:(132) write_socket(21,92) [2006/01/16 09:31:02, 6] libsmb/clientgen.c:(135) write_socket(21,92) wrote 92 [2006/01/16 09:31:02, 10] lib/util_sock.c:(615) got smb length of 123 [2006/01/16 09:31:02, 5] lib/util.c:(454) [2006/01/16 09:31:02, 5] lib/util.c:(464) size=123 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=10951 smb_uid=59394 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 123 (0x7B) smb_vwv[ 2]= 0 (0x0) smb_bcc=82 [2006/01/16 09:31:02, 10] lib/util.c:(2058) [000] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n [040] 00 61 00 67 00 65 00 72 00 00 00 41 00 44 00 49 .a.g.e.r ...A.D.I [050] 00 00 .. [2006/01/16 09:31:02, 5] lib/util.c:(454) [2006/01/16 09:31:02, 5] lib/util.c:(464) size=123 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=10951 smb_uid=59394 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 123 (0x7B) smb_vwv[ 2]= 0 (0x0) smb_bcc=82 [2006/01/16 09:31:02, 10] lib/util.c:(2058) [000] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n [040] 00 61 00 67 00 65 00 72 00 00 00 41 00 44 00 49 .a.g.e.r ...A.D.I [050] 00 00 .. [2006/01/16 09:31:02, 6] libsmb/clientgen.c:(132) write_socket(21,86) [2006/01/16 09:31:02, 6] libsmb/clientgen.c:(135) write_socket(21,86) wrote 86 [2006/01/16 09:31:02, 10] lib/util_sock.c:(615) got smb length of 48 [2006/01/16 09:31:02, 5] lib/util.c:(454) [2006/01/16 09:31:02, 5] lib/util.c:(464) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=16388 smb_pid=10951 smb_uid=59394 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2006/01/16 09:31:02, 10] lib/util.c:(2058) [000] 49 50 43 00 00 00 00 IPC.... [2006/01/16 09:31:02, 10] libsmb/clientgen.c:(233) cli_init_creds: user domain [2006/01/16 09:31:02, 6] libsmb/clientgen.c:(132) write_socket(21,104) [2006/01/16 09:31:02, 6] libsmb/clientgen.c:(135) write_socket(21,104) wrote 104 [2006/01/16 09:31:02, 10] lib/util_sock.c:(615) got smb length of 103 [2006/01/16 09:31:02, 5] lib/util.c:(454) [2006/01/16 09:31:02, 5] lib/util.c:(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=16388 smb_pid=10951 smb_uid=59394 smb_mid=4 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 1024 (0x400) smb_vwv[ 3]= 384 (0x180) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2006/01/16 09:31:02, 5] rpc_client/cli_pipe.c:(2044) Bind RPC Pipe[8004]: \lsarpc auth_type 0, auth_level 0 [2006/01/16 09:31:02, 5] rpc_client/cli_pipe.c:(1647) Bind Abstract Syntax: [000] 12 34 57 78 12 34 AB CD EF 00 01 23 45 67 89 AB .4Wx.4.. ...#Eg.. [010] 00 00 00 00 .... [2006/01/16 09:31:02, 5] rpc_client/cli_pipe.c:(1650) Bind Transfer Syntax: [000] 8A 88 5D 04 1C EB 11 C9 9F E8 08 00 2B 10 48 60 ..]..... ....+.H` [010] 00 00 00 02 .... [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr hdr [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 0b [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0048 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000001 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_rb [2006/01/16 09:31:02, 6] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_bba [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) 0010 max_tsize: 10b8 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) 0012 max_rsize: 10b8 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(703) 0014 assoc_gid: 00000000 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) 0018 num_contexts: 01 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) 001c context_id : 0000 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(614) 001e num_transfer_syntaxes: 01 [2006/01/16 09:31:02, 6] rpc_parse/parse_prs.c:(84) 00001f smb_io_rpc_iface [2006/01/16 09:31:02, 7] rpc_parse/parse_prs.c:(84) 000020 smb_io_uuid uuid [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(703) 0020 data : 12345778 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) 0024 data : 1234 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) 0026 data : abcd [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(790) 0028 data : ef 00 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(790) 002a data : 01 23 45 67 89 ab [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(703) 0030 version: 00000000 [2006/01/16 09:31:02, 6] rpc_parse/parse_prs.c:(84) 000034 smb_io_rpc_iface [2006/01/16 09:31:02, 7] rpc_parse/parse_prs.c:(84) 000034 smb_io_uuid uuid [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(703) 0034 data : 8a885d04 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) 0038 data : 1ceb [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(674) 003a data : 11c9 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(790) 003c data : 9f e8 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(790) 003e data : 08 00 2b 10 48 60 [2006/01/16 09:31:02, 5] rpc_parse/parse_prs.c:(703) 0044 version: 00000002 [2006/01/16 09:31:02, 5] rpc_client/cli_pipe.c:(770) rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 [2006/01/16 09:31:02, 5] lib/util.c:(454) [2006/01/16 09:31:02, 5] lib/util.c:(464) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=16388 smb_pid=10951 smb_uid=59394 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32772 (0x8004) smb_bcc=87 [2006/01/16 09:31:02, 10] lib/util.c:(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2006/01/16 09:31:02, 6] libsmb/clientgen.c:(132) write_socket(21,158) [2006/01/16 09:31:02, 6] libsmb/clientgen.c:(135) write_socket(21,158) wrote 158 [2006/01/16 09:31:02, 10] lib/util_sock.c:(615) got smb length of 124 [2006/01/16 09:31:02, 5] lib/util.c:(454) [2006/01/16 09:31:02, 5] lib/util.c:(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=16388 smb_pid=10951 smb_uid=59394 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/01/16 09:31:02, 10] lib/util.c:(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... [010] 00 B8 10 B8 10 80 65 02 00 0C 00 5C 50 49 50 45 ......e. ...\PIPE [020] 5C 6C 73 61 73 73 00 DC 80 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/01/16 09:31:02, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=16388 smb_pid=10951 smb_uid=59394 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... [010] 00 B8 10 B8 10 80 65 02 00 0C 00 5C 50 49 50 45 ......e. ...\PIPE [020] 5C 6C 73 61 73 73 00 DC 80 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 0c [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0044 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000001 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(843) rpc_api_pipe: got PDU len of 68 at offset 0 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(894) rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 returned 68 bytes. [2006/01/16 09:31:03, 3] rpc_client/cli_pipe.c:(2081) rpc_pipe_bind: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 bind request returned ok. [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr hdr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 0c [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0044 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000001 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_ba [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_bba [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0010 max_tsize: 10b8 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0012 max_rsize: 10b8 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0014 assoc_gid: 00026580 [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000018 smb_io_rpc_addr_str [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0018 len: 000c [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 001a str: \PIPE\lsass. [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000026 smb_io_rpc_results [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0028 num_results: 01 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 002c result : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 002e reason : 0000 [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000030 smb_io_rpc_iface [2006/01/16 09:31:03, 7] rpc_parse/parse_prs.c:(84) 000030 smb_io_uuid uuid [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0030 data : 8a885d04 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0034 data : 1ceb [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0036 data : 11c9 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 0038 data : 9f e8 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 003a data : 08 00 2b 10 48 60 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0040 version: 00000002 [2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(1701) check_bind_response: accepted! [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(2246) cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine STARFISH2 and bound anonymously. [2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(142) init_lsa_sec_qos [2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(261) init_open_pol: attr:0 da:1 [2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(193) init_lsa_obj_attr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 lsa_io_q_open_pol [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0000 ptr : 00000001 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0004 system_name: 005c [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000008 lsa_io_obj_attr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0008 len : 00000018 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c ptr_root_dir: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0010 ptr_obj_name: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0014 attributes : 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0018 ptr_sec_desc: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 001c ptr_sec_qos : 00000001 [2006/01/16 09:31:03, 7] rpc_parse/parse_prs.c:(84) 000020 lsa_io_obj_qos sec_qos [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0020 len : 0000000c [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0024 sec_imp_level : 0002 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0026 sec_ctxt_mode : 01 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0027 effective_only: 00 [2006/01/16 09:31:03, 3] rpc_parse/parse_lsa.c:(181) lsa_io_sec_qos: length c does not match size 8 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0028 des_access: 00000001 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr hdr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0044 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000002 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0010 alloc_hint: 0000002c [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0014 context_id: 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0016 opnum : 0006 [2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(770) rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=150 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=16388 smb_pid=10951 smb_uid=59394 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 68 (0x44) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32772 (0x8004) smb_bcc=83 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 44 00 00 00 02 00 00 00 2C .......D ......., [020] 00 00 00 00 00 06 00 01 00 00 00 5C 00 00 00 18 ........ ...\.... [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 01 00 00 00 0C 00 00 00 02 00 01 00 01 ........ ........ [050] 00 00 00 ... [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(21,154) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(21,154) wrote 154 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 104 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=16388 smb_pid=10951 smb_uid=59394 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 80 17 06 ........ ........ [020] 58 B9 3D E7 41 A4 87 53 1D 43 29 2D 05 00 00 00 X.=.A..S .C)-.... [030] 00 . [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=16388 smb_pid=10951 smb_uid=59394 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 80 17 06 ........ ........ [020] 58 B9 3D E7 41 A4 87 53 1D 43 29 2D 05 00 00 00 X.=.A..S .C)-.... [030] 00 . [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 02 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0030 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000002 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0010 alloc_hint: 00000018 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0014 context_id: 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0016 cancel_ct : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0017 reserved : 00 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(577) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(843) rpc_api_pipe: got PDU len of 48 at offset 0 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(894) rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 returned 48 bytes. [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 lsa_io_r_open_pol [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000000 smb_io_pol_hnd [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0000 data1: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0004 data2: 58061780 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 data3: 3db9 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a data4: 41e7 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 000c data5: a4 87 53 1d 43 29 2d 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(733) 0014 status: NT_STATUS_OK [2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(477) init_q_enum_trust_dom [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 lsa_io_q_enum_trust_dom [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000000 smb_io_pol_hnd [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0000 data1: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0004 data2: 58061780 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 data3: 3db9 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a data4: 41e7 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 000c data5: a4 87 53 1d 43 29 2d 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0014 enum_context : 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0018 preferred_len: 00010000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr hdr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0034 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000003 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0010 alloc_hint: 0000001c [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0014 context_id: 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0016 opnum : 000d [2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(770) rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=134 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=16388 smb_pid=10951 smb_uid=59394 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 52 (0x34) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 52 (0x34) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=32772 (0x8004) smb_bcc=67 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 34 00 00 00 03 00 00 00 1C .......4 ........ [020] 00 00 00 00 00 0D 00 00 00 00 00 80 17 06 58 B9 ........ ......X. [030] 3D E7 41 A4 87 53 1D 43 29 2D 05 00 00 00 00 00 =.A..S.C )-...... [040] 00 01 00 ... [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(21,138) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(21,138) wrote 138 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 96 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=16388 smb_pid=10951 smb_uid=59394 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... [010] 00 10 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 ........ ........ [020] 00 00 00 00 00 1A 00 00 80 ........ . [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=16388 smb_pid=10951 smb_uid=59394 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... [010] 00 10 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 ........ ........ [020] 00 00 00 00 00 1A 00 00 80 ........ . [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 02 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0028 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000003 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0010 alloc_hint: 00000010 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0014 context_id: 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0016 cancel_ct : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0017 reserved : 00 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(577) cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(843) rpc_api_pipe: got PDU len of 40 at offset 0 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(894) rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x8004 returned 32 bytes. [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 lsa_io_r_enum_trust_dom [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0000 enum_context: ffffffff [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0004 count: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0008 ptr: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(733) 000c status: NT_STATUS_NO_MORE_ENTRIES [2006/01/16 09:31:03, 10] libsmb/trusts_util.c:(196) enumerate_domain_trusts: shutting down connection... [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(21,45) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(21,45) wrote 45 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 35 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=16388 smb_pid=10951 smb_uid=59394 smb_mid=8 smt_wct=0 smb_bcc=0 [2006/01/16 09:31:03, 10] libsmb/clientgen.c:(375) cli_rpc_pipe_close: closed pipe \lsarpc to machine STARFISH2 [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(21,39) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(21,39) wrote 39 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 35 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=16388 smb_pid=10951 smb_uid=59394 smb_mid=9 smt_wct=0 smb_bcc=0 [2006/01/16 09:31:03, 10] lib/gencache.c:(291) Cache entry with key = TDOM/ADI couldn't be found [2006/01/16 09:31:03, 5] libsmb/trustdom_cache.c:(184) no entry for trusted domain ADI found. [2006/01/16 09:31:03, 5] auth/auth_util.c:(69) attempting to make a user_info for schulz (schulz) [2006/01/16 09:31:03, 5] auth/auth_util.c:(79) making strings for schulz's user_info struct [2006/01/16 09:31:03, 5] auth/auth_util.c:(121) making blobs for schulz's user_info struct [2006/01/16 09:31:03, 10] auth/auth_util.c:(139) made an encrypted user_info for schulz (schulz) [2006/01/16 09:31:03, 3] auth/auth.c:(219) check_ntlm_password: Checking password for unmapped user [ADI]\[schulz]@[TETRA] with the new password interface [2006/01/16 09:31:03, 3] auth/auth.c:(222) check_ntlm_password: mapped user is: [ADI]\[schulz]@[TETRA] [2006/01/16 09:31:03, 10] auth/auth.c:(231) check_ntlm_password: auth_context challenge created by smbserver [2006/01/16 09:31:03, 10] auth/auth.c:(233) challenge is: [2006/01/16 09:31:03, 5] lib/util.c:(2058) [000] 7F 29 00 17 62 88 3A 6F .)..b.:o [2006/01/16 09:31:03, 10] auth/auth.c:(259) check_ntlm_password: guest had nothing to say [2006/01/16 09:31:03, 8] lib/util.c:(1879) is_myname("ADI") returns 0 [2006/01/16 09:31:03, 6] auth/auth_sam.c:(383) check_samstrict_security: ADI is not one of my local names (ROLE_DOMAIN_MEMBER) [2006/01/16 09:31:03, 10] auth/auth.c:(259) check_ntlm_password: sam had nothing to say [2006/01/16 09:31:03, 8] lib/util.c:(1879) is_myname("ADI") returns 0 [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(26,176) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(26,176) wrote 176 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 35 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=53249 smb_tid=0 smb_pid=10951 smb_uid=51203 smb_mid=3 smt_wct=0 smb_bcc=0 [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(26,158) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(26,158) wrote 158 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 123 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=123 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=53249 smb_tid=0 smb_pid=10951 smb_uid=57344 smb_mid=4 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 123 (0x7B) smb_vwv[ 2]= 0 (0x0) smb_bcc=82 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n [040] 00 61 00 67 00 65 00 72 00 00 00 41 00 44 00 49 .a.g.e.r ...A.D.I [050] 00 00 .. [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(26,43) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(26,43) wrote 43 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 39 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=53249 smb_tid=0 smb_pid=10951 smb_uid=57344 smb_mid=5 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 39 (0x27) smb_bcc=0 [2006/01/16 09:31:03, 5] lib/username.c:(313) Finding user schulz [2006/01/16 09:31:03, 5] lib/username.c:(262) Trying _Get_Pwnam(), username as lowercase is schulz [2006/01/16 09:31:03, 5] lib/username.c:(290) Get_Pwnam_internals did find user [schulz]! [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(617) pdb_set_username: setting username schulz, was [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(698) pdb_set_full_name: setting full name Thomas Schulz, was [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(833) pdb_set_unix_homedir: setting home dir /home/users/schulz, was NULL [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(644) pdb_set_domain: setting domain ANGLER, was [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(544) pdb_set_user_sid: setting user sid S-1-5-21-2004388657-1986329904-1871150094-1620 [2006/01/16 09:31:03, 10] passdb/pdb_compat.c:(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2004388657-1986329904-1871150094-1620 from rid 1620 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(580) pdb_set_group_sid: setting group sid S-1-5-21-2004388657-1986329904-1871150094-1221 [2006/01/16 09:31:03, 10] passdb/pdb_compat.c:(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-2004388657-1986329904-1871150094-1221 from rid 1221 [2006/01/16 09:31:03, 4] lib/substitute.c:(359) Home server: angler [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(752) pdb_set_profile_path: setting profile path \\angler\schulz\profile, was [2006/01/16 09:31:03, 4] lib/substitute.c:(359) Home server: angler [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(806) pdb_set_homedir: setting home dir \\angler\schulz, was [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(779) pdb_set_dir_drive: setting dir drive , was NULL [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(725) pdb_set_logon_script: setting logon script , was [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 10] lib/system_smbd.c:(167) sys_getgrouplist: user [schulz] [2006/01/16 09:31:03, 10] lib/system_smbd.c:(176) sys_getgrouplist(): disabled winbindd for group lookup [user == schulz] [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 8] lib/system_smbd.c:(49) remove_duplicate_gids: Enter 6 gids [2006/01/16 09:31:03, 8] lib/system_smbd.c:(67) remove_duplicate_gids: Exit 5 gids [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 10] passdb/passdb.c:(1245) local_gid_to_sid: Fall back to algorithmic mapping: 110 -> S-1-5-21-2004388657-1986329904-1871150094-1221 [2006/01/16 09:31:03, 10] passdb/lookup_sid.c:(406) gid_to_sid: local 110 -> S-1-5-21-2004388657-1986329904-1871150094-1221 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 10] passdb/passdb.c:(1245) local_gid_to_sid: Fall back to algorithmic mapping: 14 -> S-1-5-21-2004388657-1986329904-1871150094-1029 [2006/01/16 09:31:03, 10] passdb/lookup_sid.c:(406) gid_to_sid: local 14 -> S-1-5-21-2004388657-1986329904-1871150094-1029 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 10] passdb/passdb.c:(1245) local_gid_to_sid: Fall back to algorithmic mapping: 203 -> S-1-5-21-2004388657-1986329904-1871150094-1407 [2006/01/16 09:31:03, 10] passdb/lookup_sid.c:(406) gid_to_sid: local 203 -> S-1-5-21-2004388657-1986329904-1871150094-1407 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 10] passdb/passdb.c:(1245) local_gid_to_sid: Fall back to algorithmic mapping: 309 -> S-1-5-21-2004388657-1986329904-1871150094-1619 [2006/01/16 09:31:03, 10] passdb/lookup_sid.c:(406) gid_to_sid: local 309 -> S-1-5-21-2004388657-1986329904-1871150094-1619 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 10] passdb/passdb.c:(1245) local_gid_to_sid: Fall back to algorithmic mapping: 310 -> S-1-5-21-2004388657-1986329904-1871150094-1621 [2006/01/16 09:31:03, 10] passdb/lookup_sid.c:(406) gid_to_sid: local 310 -> S-1-5-21-2004388657-1986329904-1871150094-1621 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/01/16 09:31:03, 10] auth/auth_util.c:(438) NT user token of user S-1-5-21-2004388657-1986329904-1871150094-1620 contains 9 SIDs SID[ 0]: S-1-5-21-2004388657-1986329904-1871150094-1620 SID[ 1]: S-1-5-21-2004388657-1986329904-1871150094-1221 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2004388657-1986329904-1871150094-1029 SID[ 6]: S-1-5-21-2004388657-1986329904-1871150094-1407 SID[ 7]: S-1-5-21-2004388657-1986329904-1871150094-1619 SID[ 8]: S-1-5-21-2004388657-1986329904-1871150094-1621 SE_PRIV 0x0 0x0 0x0 0x0 [2006/01/16 09:31:03, 3] auth/auth.c:(268) check_ntlm_password: smbserver authentication for user [schulz] succeeded [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/01/16 09:31:03, 5] auth/auth.c:(294) check_ntlm_password: PAM Account for user [schulz] succeeded [2006/01/16 09:31:03, 2] auth/auth.c:(307) check_ntlm_password: authentication for user [schulz] -> [schulz] -> [schulz] succeeded [2006/01/16 09:31:03, 5] auth/auth_util.c:(1485) attempting to free (and zero) a user_info structure [2006/01/16 09:31:03, 10] auth/auth_util.c:(1488) structure was created for schulz [2006/01/16 09:31:03, 10] libsmb/ntlmssp.c:(730) ntlmssp_server_auth: Failed to create NTLM session key. [2006/01/16 09:31:03, 5] libsmb/ntlmssp.c:(756) server session key is invalid (len == 0), cannot do KEY_EXCH! [2006/01/16 09:31:03, 3] libsmb/ntlmssp_sign.c:(332) NTLMSSP Sign/Seal - Initialising with flags: [2006/01/16 09:31:03, 3] libsmb/ntlmssp.c:(63) Got NTLMSSP neg_flags=0x600082b5 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_SEAL NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2006/01/16 09:31:03, 5] libsmb/ntlmssp_sign.c:(449) NTLMSSP Sign/Seal - using NTLM1 [2006/01/16 09:31:03, 0] lib/fault.c:(36) =============================================================== [2006/01/16 09:31:03, 0] lib/fault.c:(37) INTERNAL ERROR: Signal 11 in pid 10951 (3.0.21a) Please read the Trouble-Shooting section of the Samba3-HOWTO [2006/01/16 09:31:03, 0] lib/fault.c:(39) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2006/01/16 09:31:03, 0] lib/fault.c:(40) =============================================================== [2006/01/16 09:31:03, 0] lib/util.c:(1554) PANIC: internal error [2006/01/16 09:31:03, 6] param/loadparm.c:(2950) lp_file_list_changed() file /opt/local/sambat/lib/smb.conf.%h -> /opt/local/sambat/lib/smb.conf.angler last mod_time: Wed May 5 16:31:19 2004 file /opt/local/sambat/lib/smb.conf -> /opt/local/sambat/lib/smb.conf last mod_time: Mon Jan 16 09:14:59 2006 [2006/01/16 09:31:03, 5] auth/auth_util.c:(163) make_user_info_map: Mapping user [ADI]\[schulz] from workstation [TETRA] [2006/01/16 09:31:03, 10] lib/gencache.c:(269) Returning valid cache entry: key = TDOMCACHE/TIMESTAMP, value = 0, timeout = Mon Jan 16 09:41:02 2006 [2006/01/16 09:31:03, 10] lib/gencache.c:(127) Adding cache entry with key = TDOMCACHE/TIMESTAMP; value = 0 and timeout = Mon Jan 16 09:41:03 2006 (600 seconds ahead) [2006/01/16 09:31:03, 5] passdb/secrets.c:(291) secrets_fetch failed! [2006/01/16 09:31:03, 8] libsmb/namequery.c:(1433) get_sorted_dc_list: attempting lookup using [host] [2006/01/16 09:31:03, 10] libsmb/namequery.c:(1028) internal_resolve_name: looking up starfish2#20 [2006/01/16 09:31:03, 10] lib/gencache.c:(269) Returning valid cache entry: key = NBT/STARFISH2#20, value = 192.168.2.178:0, timeout = Mon Jan 16 09:42:02 2006 [2006/01/16 09:31:03, 5] libsmb/namecache.c:(201) name starfish2#20 found. [2006/01/16 09:31:03, 10] libsmb/namequery.c:(320) remove_duplicate_addrs2: looking for duplicate address/port pairs [2006/01/16 09:31:03, 4] libsmb/namequery.c:(1406) get_dc_list: returning 1 ip addresses in an ordered list [2006/01/16 09:31:03, 4] libsmb/namequery.c:(1407) get_dc_list: 192.168.2.178:0 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(188) name_status_find: looking up ADI#1c at 192.168.2.178 [2006/01/16 09:31:03, 10] lib/gencache.c:(291) Cache entry with key = NBT/ADI#1C.20.192.168.2.178 couldn't be found [2006/01/16 09:31:03, 5] libsmb/namecache.c:(308) namecache_status_fetch: no entry for NBT/ADI#1C.20.192.168.2.178 found. [2006/01/16 09:31:03, 10] lib/gencache.c:(214) Deleting cache entry (key = NBT/ADI#1C.20.192.168.2.178) [2006/01/16 09:31:03, 10] lib/util_sock.c:(832) bind succeeded on port 0 [2006/01/16 09:31:03, 5] libsmb/nmblib.c:(777) Sending a packet of len 50 to (192.168.2.178) on port 137 [2006/01/16 09:31:03, 10] lib/util_sock.c:(286) read_udp_socket: lastip 192.168.2.178 lastport 137 read: 391 [2006/01/16 09:31:03, 10] libsmb/nmblib.c:(506) parse_nmb: packet id = 20097 [2006/01/16 09:31:03, 5] libsmb/nmblib.c:(755) Received a packet of len 391 from (192.168.2.178) port 137 [2006/01/16 09:31:03, 4] libsmb/nmblib.c:(112) nmb packet from 192.168.2.178(137) header: id=20097 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=No trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=ADI<1c> rr_type=33 rr_class=1 ttl=0 answers 0 char .STARFISH2 hex 0F535441524649534832202020202020 answers 10 char .D.ADI hex 00440041444920202020202020202020 answers 20 char ...ADI hex 202000C4004144492020202020202020 answers 30 char ...STARFISH2 hex 202020201CC400535441524649534832 answers 40 char D.ADI hex 20202020202020440041444920202020 answers 50 char .D.ADI hex 20202020202020201B44004144492020 answers 60 char ...ADI hex 202020202020202020201EC400414449 answers 70 char .D.. hex 2020202020202020202020201D440001 answers 80 char .__MSBROWSE__... hex 025F5F4D5342524F5753455F5F0201C4 answers 90 char .STARFISH2 hex 00535441524649534832202020202020 answers a0 char .D.STARFISH2$ hex 03440053544152464953483224202020 answers b0 char .D.INet~Servic hex 2020034400494E65747E536572766963 answers c0 char es ...ADMINISTR hex 657320201CC40041444D494E49535452 answers d0 char ATOR .D.IS~STAR hex 41544F52202003440049537E53544152 answers e0 char FISH2....D.JFCEN hex 46495348320000000044004A4643454E answers f0 char TRAL .D.STA hex 5452414C202020202020034400535441 answers 100 char RFISH2 .D.. hex 524649534832202020202020BE440000 answers 110 char .[8............ hex 065B38177F0000000000000000000000 answers 120 char ................ hex 00000000000000000000000000000000 answers 130 char ............. hex 00000000000000000000000000 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) STARFISH2#00: flags = 0x44 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) ADI#00: flags = 0xc4 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) ADI#1c: flags = 0xc4 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) STARFISH2#20: flags = 0x44 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) ADI#1b: flags = 0x44 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) ADI#1e: flags = 0xc4 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) ADI#1d: flags = 0x44 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) __MSBROWSE__#01: flags = 0xc4 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) STARFISH2#03: flags = 0x44 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) STARFISH2$#03: flags = 0x44 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) INet~Services#1c: flags = 0xc4 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) ADMINISTRATOR#03: flags = 0x44 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) IS~STARFISH2#00: flags = 0x44 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) JFCENTRAL#03: flags = 0x44 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(70) STARFISH2#be: flags = 0x44 [2006/01/16 09:31:03, 10] libsmb/namequery.c:(227) name_status_find: name found, name STARFISH2 ip address is 192.168.2.178 [2006/01/16 09:31:03, 3] libsmb/namequery_dc.c:(145) rpc_dc_name: Returning DC STARFISH2 (192.168.2.178) for domain ADI [2006/01/16 09:31:03, 3] libsmb/cliconnect.c:(1389) Connecting to host=STARFISH2 [2006/01/16 09:31:03, 3] lib/util_sock.c:(867) Connecting to 192.168.2.178 at port 445 [2006/01/16 09:31:03, 5] lib/util_sock.c:(203) socket option SO_KEEPALIVE = 0 [2006/01/16 09:31:03, 5] lib/util_sock.c:(203) socket option SO_REUSEADDR = 0 [2006/01/16 09:31:03, 5] lib/util_sock.c:(203) socket option SO_BROADCAST = 0 [2006/01/16 09:31:03, 5] lib/util_sock.c:(203) socket option TCP_NODELAY = 1 [2006/01/16 09:31:03, 5] lib/util_sock.c:(203) socket option IPTOS_LOWDELAY = 0 [2006/01/16 09:31:03, 5] lib/util_sock.c:(203) socket option IPTOS_THROUGHPUT = 0 [2006/01/16 09:31:03, 5] lib/util_sock.c:(203) socket option SO_SNDBUF = 16384 [2006/01/16 09:31:03, 5] lib/util_sock.c:(203) socket option SO_RCVBUF = 24820 [2006/01/16 09:31:03, 5] lib/util_sock.c:(201) Could not test socket option SO_SNDLOWAT. [2006/01/16 09:31:03, 5] lib/util_sock.c:(201) Could not test socket option SO_RCVLOWAT. [2006/01/16 09:31:03, 5] lib/util_sock.c:(201) Could not test socket option SO_SNDTIMEO. [2006/01/16 09:31:03, 5] lib/util_sock.c:(201) Could not test socket option SO_RCVTIMEO. [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(21,183) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(21,183) wrote 183 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 175 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=175 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=10952 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12807 (0x3207) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 243 (0xF3) smb_vwv[11]=63104 (0xF680) smb_vwv[12]=33177 (0x8199) smb_vwv[13]=43362 (0xA962) smb_vwv[14]=50714 (0xC61A) smb_vwv[15]=11265 (0x2C01) smb_vwv[16]= 1 (0x1) smb_bcc=106 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 1A D3 B5 47 6D 85 28 4F 93 37 3C FF 64 B0 40 DB ...Gm.(O .7<.d.@. [010] 60 58 06 06 2B 06 01 05 05 02 A0 4E 30 4C A0 30 `X..+... ...N0L.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 18 30 16 A0 14 1B 12 73 74 61 72 66 69 73 68 ..0..... starfish [060] 32 24 40 41 44 49 2E 43 4F 4D 2$@ADI.C OM [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=175 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=10952 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12807 (0x3207) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 243 (0xF3) smb_vwv[11]=63104 (0xF680) smb_vwv[12]=33177 (0x8199) smb_vwv[13]=43362 (0xA962) smb_vwv[14]=50714 (0xC61A) smb_vwv[15]=11265 (0x2C01) smb_vwv[16]= 1 (0x1) smb_bcc=106 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 1A D3 B5 47 6D 85 28 4F 93 37 3C FF 64 B0 40 DB ...Gm.(O .7<.d.@. [010] 60 58 06 06 2B 06 01 05 05 02 A0 4E 30 4C A0 30 `X..+... ...N0L.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 18 30 16 A0 14 1B 12 73 74 61 72 66 69 73 68 ..0..... starfish [060] 32 24 40 41 44 49 2E 43 4F 4D 2$@ADI.C OM [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(21,92) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(21,92) wrote 92 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 123 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=123 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=10952 smb_uid=8194 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 123 (0x7B) smb_vwv[ 2]= 0 (0x0) smb_bcc=82 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n [040] 00 61 00 67 00 65 00 72 00 00 00 41 00 44 00 49 .a.g.e.r ...A.D.I [050] 00 00 .. [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=123 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=0 smb_pid=10952 smb_uid=8194 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 123 (0x7B) smb_vwv[ 2]= 0 (0x0) smb_bcc=82 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n [040] 00 61 00 67 00 65 00 72 00 00 00 41 00 44 00 49 .a.g.e.r ...A.D.I [050] 00 00 .. [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(21,86) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(21,86) wrote 86 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 48 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=4097 smb_pid=10952 smb_uid=8194 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 49 50 43 00 00 00 00 IPC.... [2006/01/16 09:31:03, 10] libsmb/clientgen.c:(233) cli_init_creds: user domain [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(21,104) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(21,104) wrote 104 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 103 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=4097 smb_pid=10952 smb_uid=8194 smb_mid=4 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 2816 (0xB00) smb_vwv[ 3]= 320 (0x140) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(2044) Bind RPC Pipe[400b]: \lsarpc auth_type 0, auth_level 0 [2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(1647) Bind Abstract Syntax: [000] 12 34 57 78 12 34 AB CD EF 00 01 23 45 67 89 AB .4Wx.4.. ...#Eg.. [010] 00 00 00 00 .... [2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(1650) Bind Transfer Syntax: [000] 8A 88 5D 04 1C EB 11 C9 9F E8 08 00 2B 10 48 60 ..]..... ....+.H` [010] 00 00 00 02 .... [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr hdr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 0b [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0048 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000001 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_rb [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_bba [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0010 max_tsize: 10b8 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0012 max_rsize: 10b8 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0014 assoc_gid: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0018 num_contexts: 01 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 001c context_id : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 001e num_transfer_syntaxes: 01 [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 00001f smb_io_rpc_iface [2006/01/16 09:31:03, 7] rpc_parse/parse_prs.c:(84) 000020 smb_io_uuid uuid [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0020 data : 12345778 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0024 data : 1234 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0026 data : abcd [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 0028 data : ef 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 002a data : 01 23 45 67 89 ab [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0030 version: 00000000 [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000034 smb_io_rpc_iface [2006/01/16 09:31:03, 7] rpc_parse/parse_prs.c:(84) 000034 smb_io_uuid uuid [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0034 data : 8a885d04 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0038 data : 1ceb [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 003a data : 11c9 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 003c data : 9f e8 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 003e data : 08 00 2b 10 48 60 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0044 version: 00000002 [2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(770) rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=4097 smb_pid=10952 smb_uid=8194 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16395 (0x400B) smb_bcc=87 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(21,158) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(21,158) wrote 158 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 124 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=4097 smb_pid=10952 smb_uid=8194 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... [010] 00 B8 10 B8 10 81 65 02 00 0C 00 5C 50 49 50 45 ......e. ...\PIPE [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=4097 smb_pid=10952 smb_uid=8194 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 48 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 H....... .D...... [010] 00 B8 10 B8 10 81 65 02 00 0C 00 5C 50 49 50 45 ......e. ...\PIPE [020] 5C 6C 73 61 73 73 00 00 80 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 0c [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0044 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000001 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(843) rpc_api_pipe: got PDU len of 68 at offset 0 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(894) rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b returned 68 bytes. [2006/01/16 09:31:03, 3] rpc_client/cli_pipe.c:(2081) rpc_pipe_bind: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b bind request returned ok. [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr hdr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 0c [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0044 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000001 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_ba [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_bba [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0010 max_tsize: 10b8 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0012 max_rsize: 10b8 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0014 assoc_gid: 00026581 [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000018 smb_io_rpc_addr_str [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0018 len: 000c [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 001a str: \PIPE\lsass. [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000026 smb_io_rpc_results [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0028 num_results: 01 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 002c result : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 002e reason : 0000 [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000030 smb_io_rpc_iface [2006/01/16 09:31:03, 7] rpc_parse/parse_prs.c:(84) 000030 smb_io_uuid uuid [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0030 data : 8a885d04 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0034 data : 1ceb [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0036 data : 11c9 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 0038 data : 9f e8 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 003a data : 08 00 2b 10 48 60 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0040 version: 00000002 [2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(1701) check_bind_response: accepted! [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(2246) cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine STARFISH2 and bound anonymously. [2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(142) init_lsa_sec_qos [2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(261) init_open_pol: attr:0 da:1 [2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(193) init_lsa_obj_attr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 lsa_io_q_open_pol [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0000 ptr : 00000001 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0004 system_name: 005c [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000008 lsa_io_obj_attr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0008 len : 00000018 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c ptr_root_dir: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0010 ptr_obj_name: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0014 attributes : 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0018 ptr_sec_desc: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 001c ptr_sec_qos : 00000001 [2006/01/16 09:31:03, 7] rpc_parse/parse_prs.c:(84) 000020 lsa_io_obj_qos sec_qos [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0020 len : 0000000c [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0024 sec_imp_level : 0002 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0026 sec_ctxt_mode : 01 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0027 effective_only: 00 [2006/01/16 09:31:03, 3] rpc_parse/parse_lsa.c:(181) lsa_io_sec_qos: length c does not match size 8 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0028 des_access: 00000001 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr hdr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0044 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000002 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0010 alloc_hint: 0000002c [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0014 context_id: 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0016 opnum : 0006 [2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(770) rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=150 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=4097 smb_pid=10952 smb_uid=8194 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 68 (0x44) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16395 (0x400B) smb_bcc=83 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 44 00 00 00 02 00 00 00 2C .......D ......., [020] 00 00 00 00 00 06 00 01 00 00 00 5C 00 00 00 18 ........ ...\.... [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 01 00 00 00 0C 00 00 00 02 00 01 00 01 ........ ........ [050] 00 00 00 ... [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(21,154) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(21,154) wrote 154 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 104 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=4097 smb_pid=10952 smb_uid=8194 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 E8 91 4B ........ .......K [020] 85 40 7D 75 40 92 E7 73 C7 8B 5D EB B9 00 00 00 .@}u@..s ..]..... [030] 00 . [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=4097 smb_pid=10952 smb_uid=8194 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 44 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 D....... .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 E8 91 4B ........ .......K [020] 85 40 7D 75 40 92 E7 73 C7 8B 5D EB B9 00 00 00 .@}u@..s ..]..... [030] 00 . [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 02 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0030 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000002 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0010 alloc_hint: 00000018 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0014 context_id: 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0016 cancel_ct : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0017 reserved : 00 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(577) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(843) rpc_api_pipe: got PDU len of 48 at offset 0 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(894) rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b returned 48 bytes. [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 lsa_io_r_open_pol [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000000 smb_io_pol_hnd [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0000 data1: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0004 data2: 854b91e8 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 data3: 7d40 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a data4: 4075 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 000c data5: 92 e7 73 c7 8b 5d eb b9 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(733) 0014 status: NT_STATUS_OK [2006/01/16 09:31:03, 5] rpc_parse/parse_lsa.c:(477) init_q_enum_trust_dom [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 lsa_io_q_enum_trust_dom [2006/01/16 09:31:03, 6] rpc_parse/parse_prs.c:(84) 000000 smb_io_pol_hnd [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0000 data1: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0004 data2: 854b91e8 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 data3: 7d40 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a data4: 4075 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(790) 000c data5: 92 e7 73 c7 8b 5d eb b9 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0014 enum_context : 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0018 preferred_len: 00010000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr hdr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0034 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000003 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0010 alloc_hint: 0000001c [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0014 context_id: 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0016 opnum : 000d [2006/01/16 09:31:03, 5] rpc_client/cli_pipe.c:(770) rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=134 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=4097 smb_pid=10952 smb_uid=8194 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 52 (0x34) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 52 (0x34) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16395 (0x400B) smb_bcc=67 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 34 00 00 00 03 00 00 00 1C .......4 ........ [020] 00 00 00 00 00 0D 00 00 00 00 00 E8 91 4B 85 40 ........ .....K.@ [030] 7D 75 40 92 E7 73 C7 8B 5D EB B9 00 00 00 00 00 }u@..s.. ]....... [040] 00 01 00 ... [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(21,138) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(21,138) wrote 138 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 96 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=4097 smb_pid=10952 smb_uid=8194 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... [010] 00 10 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 ........ ........ [020] 00 00 00 00 00 1A 00 00 80 ........ . [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=4097 smb_pid=10952 smb_uid=8194 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 34 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 4....... .(...... [010] 00 10 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 ........ ........ [020] 00 00 00 00 00 1A 00 00 80 ........ . [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 02 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0028 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000003 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0010 alloc_hint: 00000010 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(674) 0014 context_id: 0000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0016 cancel_ct : 00 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(614) 0017 reserved : 00 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(577) cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(843) rpc_api_pipe: got PDU len of 40 at offset 0 [2006/01/16 09:31:03, 10] rpc_client/cli_pipe.c:(894) rpc_api_pipe: Remote machine STARFISH2 pipe \lsarpc fnum 0x400b returned 32 bytes. [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(84) 000000 lsa_io_r_enum_trust_dom [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0000 enum_context: ffffffff [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0004 count: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(703) 0008 ptr: 00000000 [2006/01/16 09:31:03, 5] rpc_parse/parse_prs.c:(733) 000c status: NT_STATUS_NO_MORE_ENTRIES [2006/01/16 09:31:03, 10] libsmb/trusts_util.c:(196) enumerate_domain_trusts: shutting down connection... [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(21,45) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(21,45) wrote 45 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 35 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=4097 smb_pid=10952 smb_uid=8194 smb_mid=8 smt_wct=0 smb_bcc=0 [2006/01/16 09:31:03, 10] libsmb/clientgen.c:(375) cli_rpc_pipe_close: closed pipe \lsarpc to machine STARFISH2 [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(21,39) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(21,39) wrote 39 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 35 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55297 smb_tid=4097 smb_pid=10952 smb_uid=8194 smb_mid=9 smt_wct=0 smb_bcc=0 [2006/01/16 09:31:03, 10] lib/gencache.c:(291) Cache entry with key = TDOM/ADI couldn't be found [2006/01/16 09:31:03, 5] libsmb/trustdom_cache.c:(184) no entry for trusted domain ADI found. [2006/01/16 09:31:03, 5] auth/auth_util.c:(69) attempting to make a user_info for schulz (schulz) [2006/01/16 09:31:03, 5] auth/auth_util.c:(79) making strings for schulz's user_info struct [2006/01/16 09:31:03, 5] auth/auth_util.c:(121) making blobs for schulz's user_info struct [2006/01/16 09:31:03, 10] auth/auth_util.c:(139) made an encrypted user_info for schulz (schulz) [2006/01/16 09:31:03, 3] auth/auth.c:(219) check_ntlm_password: Checking password for unmapped user [ADI]\[schulz]@[TETRA] with the new password interface [2006/01/16 09:31:03, 3] auth/auth.c:(222) check_ntlm_password: mapped user is: [ADI]\[schulz]@[TETRA] [2006/01/16 09:31:03, 10] auth/auth.c:(231) check_ntlm_password: auth_context challenge created by smbserver [2006/01/16 09:31:03, 10] auth/auth.c:(233) challenge is: [2006/01/16 09:31:03, 5] lib/util.c:(2058) [000] E2 2C 5B 15 85 A4 B5 53 .,[....S [2006/01/16 09:31:03, 10] auth/auth.c:(259) check_ntlm_password: guest had nothing to say [2006/01/16 09:31:03, 8] lib/util.c:(1879) is_myname("ADI") returns 0 [2006/01/16 09:31:03, 6] auth/auth_sam.c:(383) check_samstrict_security: ADI is not one of my local names (ROLE_DOMAIN_MEMBER) [2006/01/16 09:31:03, 10] auth/auth.c:(259) check_ntlm_password: sam had nothing to say [2006/01/16 09:31:03, 8] lib/util.c:(1879) is_myname("ADI") returns 0 [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(26,176) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(26,176) wrote 176 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 35 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=53249 smb_tid=0 smb_pid=10952 smb_uid=55299 smb_mid=3 smt_wct=0 smb_bcc=0 [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(26,158) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(26,158) wrote 158 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 123 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=123 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=53249 smb_tid=0 smb_pid=10952 smb_uid=61440 smb_mid=4 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 123 (0x7B) smb_vwv[ 2]= 0 (0x0) smb_bcc=82 [2006/01/16 09:31:03, 10] lib/util.c:(2058) [000] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n [040] 00 61 00 67 00 65 00 72 00 00 00 41 00 44 00 49 .a.g.e.r ...A.D.I [050] 00 00 .. [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(132) write_socket(26,43) [2006/01/16 09:31:03, 6] libsmb/clientgen.c:(135) write_socket(26,43) wrote 43 [2006/01/16 09:31:03, 10] lib/util_sock.c:(615) got smb length of 39 [2006/01/16 09:31:03, 5] lib/util.c:(454) [2006/01/16 09:31:03, 5] lib/util.c:(464) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=53249 smb_tid=0 smb_pid=10952 smb_uid=61440 smb_mid=5 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 39 (0x27) smb_bcc=0 [2006/01/16 09:31:03, 5] lib/username.c:(313) Finding user schulz [2006/01/16 09:31:03, 5] lib/username.c:(262) Trying _Get_Pwnam(), username as lowercase is schulz [2006/01/16 09:31:03, 5] lib/username.c:(290) Get_Pwnam_internals did find user [schulz]! [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(617) pdb_set_username: setting username schulz, was [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(698) pdb_set_full_name: setting full name Thomas Schulz, was [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(833) pdb_set_unix_homedir: setting home dir /home/users/schulz, was NULL [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(644) pdb_set_domain: setting domain ANGLER, was [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(544) pdb_set_user_sid: setting user sid S-1-5-21-2004388657-1986329904-1871150094-1620 [2006/01/16 09:31:03, 10] passdb/pdb_compat.c:(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2004388657-1986329904-1871150094-1620 from rid 1620 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(580) pdb_set_group_sid: setting group sid S-1-5-21-2004388657-1986329904-1871150094-1221 [2006/01/16 09:31:03, 10] passdb/pdb_compat.c:(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-2004388657-1986329904-1871150094-1221 from rid 1221 [2006/01/16 09:31:03, 4] lib/substitute.c:(359) Home server: angler [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(752) pdb_set_profile_path: setting profile path \\angler\schulz\profile, was [2006/01/16 09:31:03, 4] lib/substitute.c:(359) Home server: angler [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(806) pdb_set_homedir: setting home dir \\angler\schulz, was [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(779) pdb_set_dir_drive: setting dir drive , was NULL [2006/01/16 09:31:03, 10] passdb/pdb_get_set.c:(725) pdb_set_logon_script: setting logon script , was [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 10] lib/system_smbd.c:(167) sys_getgrouplist: user [schulz] [2006/01/16 09:31:03, 10] lib/system_smbd.c:(176) sys_getgrouplist(): disabled winbindd for group lookup [user == schulz] [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 8] lib/system_smbd.c:(49) remove_duplicate_gids: Enter 6 gids [2006/01/16 09:31:03, 8] lib/system_smbd.c:(67) remove_duplicate_gids: Exit 5 gids [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 10] passdb/passdb.c:(1245) local_gid_to_sid: Fall back to algorithmic mapping: 110 -> S-1-5-21-2004388657-1986329904-1871150094-1221 [2006/01/16 09:31:03, 10] passdb/lookup_sid.c:(406) gid_to_sid: local 110 -> S-1-5-21-2004388657-1986329904-1871150094-1221 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/01/16 09:31:03, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:03, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:03, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:04, 10] passdb/passdb.c:(1245) local_gid_to_sid: Fall back to algorithmic mapping: 14 -> S-1-5-21-2004388657-1986329904-1871150094-1029 [2006/01/16 09:31:04, 10] passdb/lookup_sid.c:(406) gid_to_sid: local 14 -> S-1-5-21-2004388657-1986329904-1871150094-1029 [2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/01/16 09:31:04, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/01/16 09:31:04, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:04, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:04, 10] passdb/passdb.c:(1245) local_gid_to_sid: Fall back to algorithmic mapping: 203 -> S-1-5-21-2004388657-1986329904-1871150094-1407 [2006/01/16 09:31:04, 10] passdb/lookup_sid.c:(406) gid_to_sid: local 203 -> S-1-5-21-2004388657-1986329904-1871150094-1407 [2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/01/16 09:31:04, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/01/16 09:31:04, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:04, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:04, 10] passdb/passdb.c:(1245) local_gid_to_sid: Fall back to algorithmic mapping: 309 -> S-1-5-21-2004388657-1986329904-1871150094-1619 [2006/01/16 09:31:04, 10] passdb/lookup_sid.c:(406) gid_to_sid: local 309 -> S-1-5-21-2004388657-1986329904-1871150094-1619 [2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2006/01/16 09:31:04, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2006/01/16 09:31:04, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:04, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:04, 10] passdb/passdb.c:(1245) local_gid_to_sid: Fall back to algorithmic mapping: 310 -> S-1-5-21-2004388657-1986329904-1871150094-1621 [2006/01/16 09:31:04, 10] passdb/lookup_sid.c:(406) gid_to_sid: local 310 -> S-1-5-21-2004388657-1986329904-1871150094-1621 [2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/01/16 09:31:04, 10] auth/auth_util.c:(438) NT user token of user S-1-5-21-2004388657-1986329904-1871150094-1620 contains 9 SIDs SID[ 0]: S-1-5-21-2004388657-1986329904-1871150094-1620 SID[ 1]: S-1-5-21-2004388657-1986329904-1871150094-1221 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2004388657-1986329904-1871150094-1029 SID[ 6]: S-1-5-21-2004388657-1986329904-1871150094-1407 SID[ 7]: S-1-5-21-2004388657-1986329904-1871150094-1619 SID[ 8]: S-1-5-21-2004388657-1986329904-1871150094-1621 SE_PRIV 0x0 0x0 0x0 0x0 [2006/01/16 09:31:04, 3] auth/auth.c:(268) check_ntlm_password: smbserver authentication for user [schulz] succeeded [2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/01/16 09:31:04, 3] smbd/uid.c:(388) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/01/16 09:31:04, 5] auth/auth_util.c:(433) NT user token: (NULL) [2006/01/16 09:31:04, 5] auth/auth_util.c:(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/01/16 09:31:04, 3] smbd/sec_ctx.c:(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/01/16 09:31:04, 5] auth/auth.c:(294) check_ntlm_password: PAM Account for user [schulz] succeeded [2006/01/16 09:31:04, 2] auth/auth.c:(307) check_ntlm_password: authentication for user [schulz] -> [schulz] -> [schulz] succeeded [2006/01/16 09:31:04, 5] auth/auth_util.c:(1485) attempting to free (and zero) a user_info structure [2006/01/16 09:31:04, 10] auth/auth_util.c:(1488) structure was created for schulz [2006/01/16 09:31:04, 10] libsmb/ntlmssp.c:(730) ntlmssp_server_auth: Failed to create NTLM session key. [2006/01/16 09:31:04, 5] libsmb/ntlmssp.c:(756) server session key is invalid (len == 0), cannot do KEY_EXCH! [2006/01/16 09:31:04, 3] libsmb/ntlmssp_sign.c:(332) NTLMSSP Sign/Seal - Initialising with flags: [2006/01/16 09:31:04, 3] libsmb/ntlmssp.c:(63) Got NTLMSSP neg_flags=0x600082b5 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_SEAL NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2006/01/16 09:31:04, 5] libsmb/ntlmssp_sign.c:(449) NTLMSSP Sign/Seal - using NTLM1 [2006/01/16 09:31:04, 0] lib/fault.c:(36) =============================================================== [2006/01/16 09:31:04, 0] lib/fault.c:(37) INTERNAL ERROR: Signal 11 in pid 10952 (3.0.21a) Please read the Trouble-Shooting section of the Samba3-HOWTO [2006/01/16 09:31:04, 0] lib/fault.c:(39) From: http://www.samba.org/samba/docs/Samba3-HOWTO.pdf [2006/01/16 09:31:04, 0] lib/fault.c:(40) =============================================================== [2006/01/16 09:31:04, 0] lib/util.c:(1554) PANIC: internal error