[2006/03/01 16:54:06, 10] lib/util.c:dump_data(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 00 .\.P.I.P .E.\.... [010] 00 05 00 00 03 10 00 00 00 34 00 00 00 7C 00 00 ........ .4...|.. [020] 00 1C 00 00 00 00 00 16 00 00 00 00 00 28 00 00 ........ .....(.. [030] 00 00 00 00 00 99 C3 05 44 39 07 00 00 36 17 00 ........ D9...6.. [040] 00 05 00 00 00 ..... [2006/03/01 16:54:06, 3] smbd/process.c:switch_message(993) switch message SMBtrans (pid 1849) conn 0x842bcf0 [2006/03/01 16:54:06, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2006/03/01 16:54:06, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=52 params=0 setup=2 [2006/03/01 16:54:06, 5] smbd/ipc.c:reply_trans(560) calling named_pipe [2006/03/01 16:54:06, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2006/03/01 16:54:06, 5] smbd/ipc.c:api_fd_reply(265) api_fd_reply [2006/03/01 16:54:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261) search for pipe pnum=74ad [2006/03/01 16:54:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name lsarpc pnum=74ae (pipes_open=2) [2006/03/01 16:54:06, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1265) pipe name samr pnum=74ad (pipes_open=2) [2006/03/01 16:54:06, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "samr" (pnum 74ad) [2006/03/01 16:54:06, 10] smbd/ipc.c:api_fd_reply(299) api_fd_reply: p:0x841e860 max_trans_reply: 4280 [2006/03/01 16:54:06, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(934) write_to_pipe: 74ad name: samr open: Yes len: 52 [2006/03/01 16:54:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 52 [2006/03/01 16:54:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 52 [2006/03/01 16:54:06, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(392) fill_rpc_header: data_to_copy = 52, len_needed_to_complete_hdr = 16, receive_len = 0 [2006/03/01 16:54:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 16 [2006/03/01 16:54:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 36 [2006/03/01 16:54:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 36 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 00 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 0034 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 0000007c [2006/03/01 16:54:06, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(479) unmarshall_rpc_header: using little-endian RPC [2006/03/01 16:54:06, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(508) unmarshall_rpc_header: type = 0, flags = 3 [2006/03/01 16:54:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 0 [2006/03/01 16:54:06, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(956) write_to_pipe: data_left = 36 [2006/03/01 16:54:06, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(849) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 36, incoming data = 36 [2006/03/01 16:54:06, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(716) process_complete_pdu: processing packet type 0 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr_req req [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 alloc_hint: 0000001c [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0004 context_id: 0000 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0006 opnum : 0016 [2006/03/01 16:54:06, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 0 [2006/03/01 16:54:06, 5] rpc_server/srv_pipe.c:api_pipe_request(2195) Requested \PIPE\samr [2006/03/01 16:54:06, 4] rpc_server/srv_pipe.c:api_rpcTNP(2230) api_rpcTNP: samr op 0x16 - api_rpcTNP: rpc command: SAMR_ADD_GROUPMEM [2006/03/01 16:54:06, 6] rpc_server/srv_pipe.c:api_rpcTNP(2256) api_rpc_cmds[12].fn == 0x8162d70 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 samr_io_q_add_groupmem [2006/03/01 16:54:06, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_pol_hnd pol [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0000 data1: 00000000 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0004 data2: 00000028 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 data3: 0000 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a data4: 0000 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint8s(819) 000c data5: 99 c3 05 44 39 07 00 00 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0014 rid : 00001736 [2006/03/01 16:54:06, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0018 unknown: 00000005 [2006/03/01 16:54:06, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 28 00 00 00 00 00 00 00 99 C3 05 44 ....(... .......D [010] 39 07 00 00 9... [2006/03/01 16:54:06, 5] rpc_server/srv_samr_nt.c:access_check_samr_function(222) _samr_add_groupmem: access check ((granted: 0x000d001f; required: 0x00000004) [2006/03/01 16:54:06, 10] rpc_server/srv_samr_nt.c:_samr_add_groupmem(3746) sid is S-1-5-21-2039556742-464797305-1116685130-2813 [2006/03/01 16:54:06, 10] rpc_server/srv_samr_nt.c:_samr_add_groupmem(3751) lookup on Domain SID [2006/03/01 16:54:06, 10] groupdb/mapping.c:get_domain_group_from_sid(799) get_domain_group_from_sid [2006/03/01 16:54:06, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(1000, 1000) : sec_ctx_stack_ndx = 1 [2006/03/01 16:54:06, 3] smbd/uid.c:push_conn_ctx(393) push_conn_ctx(101) : conn_ctx_stack_ndx = 0 [2006/03/01 16:54:06, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/03/01 16:54:06, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/03/01 16:54:06, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/03/01 16:54:06, 5] lib/smbldap.c:smbldap_search_ext(1080) smbldap_search_ext: base => [ou=Groups,ou=dominio,o=mydomain], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-2039556742-464797305-1116685130-2813))], scope => [2] [2006/03/01 16:54:06, 2] passdb/pdb_ldap.c:init_group_from_ldap(2199) init_group_from_ldap: Entry found for group: 1030 [2006/03/01 16:54:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (1000, 1000) - sec_ctx_stack_ndx = 0 [2006/03/01 16:54:06, 10] groupdb/mapping.c:get_domain_group_from_sid(810) get_domain_group_from_sid: SID found in the TDB [2006/03/01 16:54:06, 10] groupdb/mapping.c:get_domain_group_from_sid(817) get_domain_group_from_sid: SID is a domain group [2006/03/01 16:54:06, 10] groupdb/mapping.c:get_domain_group_from_sid(823) get_domain_group_from_sid: SID is mapped to gid:1030 [2006/03/01 16:54:06, 10] groupdb/mapping.c:get_domain_group_from_sid(831) get_domain_group_from_sid: gid exists in UNIX security [2006/03/01 16:54:06, 5] lib/smbldap.c:smbldap_search_ext(1080) smbldap_search_ext: base => [ou=dominio,o=mydomain], filter => [(&(sambaSID=S-1-5-21-2039556742-464797305-1116685130-5942)(objectclass=sambaSamAccount))], scope => [2] [2006/03/01 16:54:06, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:06, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 1 try! [2006/03/01 16:54:07, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:07, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 2 try! [2006/03/01 16:54:08, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:08, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 3 try! [2006/03/01 16:54:09, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:09, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 4 try! [2006/03/01 16:54:10, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:10, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 5 try! [2006/03/01 16:54:11, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:11, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 6 try! [2006/03/01 16:54:12, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:12, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 7 try! [2006/03/01 16:54:13, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:13, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 8 try! [2006/03/01 16:54:14, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:14, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 9 try! [2006/03/01 16:54:15, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:15, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 10 try! [2006/03/01 16:54:16, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:16, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 11 try! [2006/03/01 16:54:17, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:17, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 12 try! [2006/03/01 16:54:18, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:18, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 13 try! [2006/03/01 16:54:19, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:19, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 14 try! [2006/03/01 16:54:20, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:20, 1] lib/smbldap.c:another_ldap_try(1051) Connection to LDAP server failed for the 15 try! [2006/03/01 16:54:21, 0] lib/smbldap.c:smbldap_open(922) smbldap_open: cannot access LDAP when not root.. [2006/03/01 16:54:21, 0] lib/smbldap.c:smbldap_search_suffix(1346) smbldap_search_suffix: Problem during the LDAP search: (Time limit exceeded) [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 samr_io_r_add_groupmem [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_ntstatus(762) 0000 status: NT_STATUS_NO_SUCH_USER [2006/03/01 16:54:21, 5] rpc_server/srv_pipe.c:api_rpcTNP(2277) api_rpcTNP: called samr successfully [2006/03/01 16:54:21, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526) free_pipe_context: destroying talloc pool of size 0 [2006/03/01 16:54:21, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(960) write_to_pipe: data_used = 36 [2006/03/01 16:54:21, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(992) read_from_pipe: 74ad name: samr len: 4280 [2006/03/01 16:54:21, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(1065) read_from_pipe: samr: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 4. [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0000 major : 05 [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0001 minor : 00 [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0002 pkt_type : 02 [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0003 flags : 03 [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0004 pack_type0: 10 [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0005 pack_type1: 00 [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0006 pack_type2: 00 [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0007 pack_type3: 00 [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0008 frag_len : 001c [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint16(674) 000a auth_len : 0000 [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint32(703) 000c call_id : 0000007c [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp resp [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint32(703) 0010 alloc_hint: 00000004 [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint16(674) 0014 context_id: 0000 [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0016 cancel_ct : 00 [2006/03/01 16:54:21, 5] rpc_parse/parse_prs.c:prs_uint8(614) 0017 reserved : 00 [2006/03/01 16:54:21, 5] smbd/ipc.c:copy_trans_params_and_data(60) copy_trans_params_and_data: params[0..0] data[0..28] [2006/03/01 16:54:21, 5] lib/util.c:show_msg(454) [2006/03/01 16:54:21, 5] lib/util.c:show_msg(464) size=84 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=1140 smb_uid=101 smb_mid=15872 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 28 (0x1C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 28 (0x1C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2006/03/01 16:54:21, 10] lib/util.c:dump_data(2058) [000] 00 05 00 02 03 10 00 00 00 1C 00 00 00 7C 00 00 ........ .....|.. [010] 00 04 00 00 00 00 00 00 00 64 00 00 C0 ........ .d... [2006/03/01 16:54:21, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/03/01 16:54:21, 5] auth/auth_util.c:debug_nt_user_token(433) NT user token: (NULL) [2006/03/01 16:54:21, 5] auth/auth_util.c:debug_unix_user_token(454) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2006/03/01 16:54:21, 5] smbd/uid.c:change_to_root_user(324) change_to_root_user: now uid=(0,0) gid=(0,0) [2006/03/01 16:54:21, 10] smbd/process.c:setup_select_timeout(1372) change_notify_timeout: -1 [2006/03/01 16:54:21, 10] smbd/process.c:run_events(299) run_events: No events