[2006/03/15 14:30:26, 5] rpc_client/cli_pipe.c:(770) rpc_api_pipe: Remote machine CIFS-DC pipe \NETLOGON fnum 0xc00c [2006/03/15 14:30:26, 5] lib/util.c:(454) [2006/03/15 14:30:26, 5] lib/util.c:(464) size=176 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=6148 smb_pid=12284 smb_uid=47105 smb_mid=17 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 94 (0x5E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 94 (0x5E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=49164 (0xC00C) smb_bcc=109 [2006/03/15 14:30:26, 10] lib/util.c:(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 5E 00 00 00 07 00 00 00 46 .......^ .......F [020] 00 00 00 00 00 04 00 01 00 00 00 0A 00 00 00 00 ........ ........ [030] 00 00 00 0A 00 00 00 5C 00 5C 00 43 00 49 00 46 .......\ .\.C.I.F [040] 00 53 00 2D 00 44 00 43 00 00 00 07 00 00 00 00 .S.-.D.C ........ [050] 00 00 00 07 00 00 00 41 00 55 00 52 00 4F 00 52 .......A .U.R.O.R [060] 00 41 00 00 00 E5 24 F3 DD F1 B1 B8 E3 .A....$. ..... [2006/03/15 14:30:26, 6] libsmb/clientgen.c:(132) write_socket(11,180) [2006/03/15 14:30:26, 6] libsmb/clientgen.c:(135) write_socket(11,180) wrote 180 [2006/03/15 14:30:26, 10] lib/util_sock.c:(618) got smb length of 92 [2006/03/15 14:30:26, 5] lib/util.c:(454) [2006/03/15 14:30:26, 5] lib/util.c:(464) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55301 smb_tid=6148 smb_pid=12284 smb_uid=47105 smb_mid=17 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2006/03/15 14:30:26, 10] lib/util.c:(2058) [000] 00 05 00 02 03 10 00 00 00 24 00 00 00 07 00 00 ........ .$...... [010] 00 0C 00 00 00 00 00 00 00 C7 36 18 02 EF A3 85 ........ ..6..... [020] E5 00 00 00 00 ..... [2006/03/15 14:30:26, 5] lib/util.c:(454) [2006/03/15 14:30:26, 5] lib/util.c:(464) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55301 smb_tid=6148 smb_pid=12284 smb_uid=47105 smb_mid=17 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2006/03/15 14:30:26, 10] lib/util.c:(2058) [000] 00 05 00 02 03 10 00 00 00 24 00 00 00 07 00 00 ........ .$...... [010] 00 0C 00 00 00 00 00 00 00 C7 36 18 02 EF A3 85 ........ ..6..... [020] E5 00 00 00 00 ..... [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 02 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0024 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000007 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 0010 alloc_hint: 0000000c [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(674) 0014 context_id: 0000 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0016 cancel_ct : 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0017 reserved : 00 [2006/03/15 14:30:26, 10] rpc_client/cli_pipe.c:(577) cli_pipe_validate_current_pdu: got pdu len 36, data_len 12, ss_len 0 [2006/03/15 14:30:26, 10] rpc_client/cli_pipe.c:(843) rpc_api_pipe: got PDU len of 36 at offset 0 [2006/03/15 14:30:26, 10] rpc_client/cli_pipe.c:(894) rpc_api_pipe: Remote machine CIFS-DC pipe \NETLOGON fnum 0xc00c returned 24 bytes. [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(84) 000000 net_io_r_req_chal [2006/03/15 14:30:26, 6] rpc_parse/parse_prs.c:(84) 000000 smb_io_chal [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(819) 0000 data: c7 36 18 02 ef a3 85 e5 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(762) 0008 status: NT_STATUS_OK [2006/03/15 14:30:26, 10] libsmb/credentials.c:(213) creds_client_init: client chal : E524F3DDF1B1B8E3 [2006/03/15 14:30:26, 10] libsmb/credentials.c:(214) creds_client_init: server chal : C7361802EFA385E5 [2006/03/15 14:30:26, 4] libsmb/credentials.c:(65) cred_create_session_key [2006/03/15 14:30:26, 5] libsmb/credentials.c:(67) clnt_chal_in: E524F3DDF1B1B8E3 [2006/03/15 14:30:26, 5] libsmb/credentials.c:(68) srv_chal_in : C7361802EFA385E5 [2006/03/15 14:30:26, 5] libsmb/credentials.c:(69) clnt+srv : AC5B0BE0E0553EC9 [2006/03/15 14:30:26, 5] libsmb/credentials.c:(70) sess_key_out : E3A805361F00878B [2006/03/15 14:30:26, 10] libsmb/credentials.c:(240) creds_client_init: clnt : 60C31014B1063282 [2006/03/15 14:30:26, 10] libsmb/credentials.c:(241) creds_client_init: server : 2E35326ED13A352D [2006/03/15 14:30:26, 10] libsmb/credentials.c:(242) creds_client_init: seed : 60C31014B1063282 [2006/03/15 14:30:26, 4] rpc_client/cli_netlogon.c:(170) cli_net_auth2: srv:\\CIFS-DC acct:AURORA$ sc:2 mc: AURORA neg: 400701ff [2006/03/15 14:30:26, 5] rpc_parse/parse_net.c:(800) init_q_auth_2: 800 [2006/03/15 14:30:26, 5] rpc_parse/parse_misc.c:(1411) make_log_info 1411 [2006/03/15 14:30:26, 5] rpc_parse/parse_net.c:(806) init_q_auth_2: 806 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(84) 000000 net_io_q_auth_2 [2006/03/15 14:30:26, 6] rpc_parse/parse_prs.c:(84) 000000 smb_io_log_info [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 0000 undoc_buffer: 00000001 [2006/03/15 14:30:26, 7] rpc_parse/parse_prs.c:(84) 000004 smb_io_unistr2 unistr2 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 0004 uni_max_len: 0000000a [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 0008 offset : 00000000 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 000c uni_str_len: 0000000a [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(904) 0010 buffer : \.\.C.I.F.S.-.D.C... [2006/03/15 14:30:26, 7] rpc_parse/parse_prs.c:(84) 000024 smb_io_unistr2 unistr2 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 0024 uni_max_len: 00000008 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 0028 offset : 00000000 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 002c uni_str_len: 00000008 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(904) 0030 buffer : A.U.R.O.R.A.$... [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(674) 0040 sec_chan: 0002 [2006/03/15 14:30:26, 7] rpc_parse/parse_prs.c:(84) 000042 smb_io_unistr2 unistr2 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 0044 uni_max_len: 00000007 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 0048 offset : 00000000 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 004c uni_str_len: 00000007 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(904) 0050 buffer : A.U.R.O.R.A... [2006/03/15 14:30:26, 6] rpc_parse/parse_prs.c:(84) 00005e smb_io_chal [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(819) 005e data: 60 c3 10 14 b1 06 32 82 [2006/03/15 14:30:26, 6] rpc_parse/parse_prs.c:(84) 000066 net_io_neg_flags [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 0068 neg_flags: 400701ff [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr hdr [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0084 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000008 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_req hdr_req [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 0010 alloc_hint: 0000006c [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(674) 0014 context_id: 0000 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(674) 0016 opnum : 000f [2006/03/15 14:30:26, 5] rpc_client/cli_pipe.c:(770) rpc_api_pipe: Remote machine CIFS-DC pipe \NETLOGON fnum 0xc00c [2006/03/15 14:30:26, 5] lib/util.c:(454) [2006/03/15 14:30:26, 5] lib/util.c:(464) size=214 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=55297 smb_tid=6148 smb_pid=12284 smb_uid=47105 smb_mid=18 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 132 (0x84) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 132 (0x84) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=49164 (0xC00C) smb_bcc=147 [2006/03/15 14:30:26, 10] lib/util.c:(2058) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 84 00 00 00 08 00 00 00 6C ........ .......l [020] 00 00 00 00 00 0F 00 01 00 00 00 0A 00 00 00 00 ........ ........ [030] 00 00 00 0A 00 00 00 5C 00 5C 00 43 00 49 00 46 .......\ .\.C.I.F [040] 00 53 00 2D 00 44 00 43 00 00 00 08 00 00 00 00 .S.-.D.C ........ [050] 00 00 00 08 00 00 00 41 00 55 00 52 00 4F 00 52 .......A .U.R.O.R [060] 00 41 00 24 00 00 00 02 00 00 00 07 00 00 00 00 .A.$.... ........ [070] 00 00 00 07 00 00 00 41 00 55 00 52 00 4F 00 52 .......A .U.R.O.R [080] 00 41 00 00 00 60 C3 10 14 B1 06 32 82 00 00 FF .A...`.. ...2.... [090] 01 07 40 ..@ [2006/03/15 14:30:26, 6] libsmb/clientgen.c:(132) write_socket(11,218) [2006/03/15 14:30:26, 6] libsmb/clientgen.c:(135) write_socket(11,218) wrote 218 [2006/03/15 14:30:26, 10] lib/util_sock.c:(618) got smb length of 96 [2006/03/15 14:30:26, 5] lib/util.c:(454) [2006/03/15 14:30:26, 5] lib/util.c:(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55301 smb_tid=6148 smb_pid=12284 smb_uid=47105 smb_mid=18 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/03/15 14:30:26, 10] lib/util.c:(2058) [000] 00 05 00 02 03 10 00 00 00 28 00 00 00 08 00 00 ........ .(...... [010] 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 FF 01 07 40 8B 01 00 C0 ....@... . [2006/03/15 14:30:26, 5] lib/util.c:(454) [2006/03/15 14:30:26, 5] lib/util.c:(464) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55301 smb_tid=6148 smb_pid=12284 smb_uid=47105 smb_mid=18 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2006/03/15 14:30:26, 10] lib/util.c:(2058) [000] 00 05 00 02 03 10 00 00 00 28 00 00 00 08 00 00 ........ .(...... [010] 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [020] 00 FF 01 07 40 8B 01 00 C0 ....@... . [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(84) 000000 smb_io_rpc_hdr rpc_hdr [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0000 major : 05 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0001 minor : 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0002 pkt_type : 02 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0003 flags : 03 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0004 pack_type0: 10 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0005 pack_type1: 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0006 pack_type2: 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0007 pack_type3: 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(674) 0008 frag_len : 0028 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(674) 000a auth_len : 0000 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 000c call_id : 00000008 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 0010 alloc_hint: 00000010 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(674) 0014 context_id: 0000 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0016 cancel_ct : 00 [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(614) 0017 reserved : 00 [2006/03/15 14:30:26, 10] rpc_client/cli_pipe.c:(577) cli_pipe_validate_current_pdu: got pdu len 40, data_len 16, ss_len 0 [2006/03/15 14:30:26, 10] rpc_client/cli_pipe.c:(843) rpc_api_pipe: got PDU len of 40 at offset 0 [2006/03/15 14:30:26, 10] rpc_client/cli_pipe.c:(894) rpc_api_pipe: Remote machine CIFS-DC pipe \NETLOGON fnum 0xc00c returned 32 bytes. [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(84) 000000 net_io_r_auth_2 [2006/03/15 14:30:26, 6] rpc_parse/parse_prs.c:(84) 000000 smb_io_chal [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(819) 0000 data: 00 00 00 00 00 00 00 00 [2006/03/15 14:30:26, 6] rpc_parse/parse_prs.c:(84) 000008 net_io_neg_flags [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(703) 0008 neg_flags: 400701ff [2006/03/15 14:30:26, 5] rpc_parse/parse_prs.c:(762) 000c status: NT_STATUS_NO_TRUST_SAM_ACCOUNT [2006/03/15 14:30:26, 6] libsmb/clientgen.c:(132) write_socket(11,45) [2006/03/15 14:30:26, 6] libsmb/clientgen.c:(135) write_socket(11,45) wrote 45 [2006/03/15 14:30:26, 10] lib/util_sock.c:(618) got smb length of 35 [2006/03/15 14:30:26, 5] lib/util.c:(454) [2006/03/15 14:30:26, 5] lib/util.c:(464) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=55301 smb_tid=6148 smb_pid=12284 smb_uid=47105 smb_mid=19 smt_wct=0 smb_bcc=0 [2006/03/15 14:30:26, 10] libsmb/clientgen.c:(375) cli_rpc_pipe_close: closed pipe \NETLOGON to machine CIFS-DC [2006/03/15 14:30:26, 5] nsswitch/winbindd_ads.c:(891) trusted_domains: Could not open a connection to CIFS-DOMAIN for PIPE_NETLOGON (NT_STATUS_NO_TRUST_SAM_ACCOUNT) [2006/03/15 14:30:26, 10] nsswitch/winbindd_cache.c:(1494) Storing response for pid 12284, len 1300