Attachment 18178 Details for Bug 15510 – Partial log from Samba server with the failure captured, Log Level 10

Partial log from Samba server with the failure captured, Log Level 10

smb4.19err.txt (text/plain), 34.35 KB, created by William Feely on 2023-11-03 17:09:41 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: William Feely

Created: 2023-11-03 17:09:41 UTC

Size: 34.35 KB

patch

obsolete

>  gendb_search_v: DC=home,DC=williamfeely,DC=info NULL -> 1
>[2023/11/03 10:04:55.002563,  6, pid=55007, effective(0, 0), real(0, 0)] ../../lib/util/util_ldb.c:59(gendb_search_v)
>  gendb_search_v: DC=home,DC=williamfeely,DC=info NULL -> 1
>[2023/11/03 10:04:55.010397,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: heim_audit_setkv_number(): setting kv pair auth=1699020222
>[2023/11/03 10:04:55.010485,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: heim_audit_setkv_number(): setting kv pair start=1699020294
>[2023/11/03 10:04:55.010525,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: heim_audit_setkv_number(): setting kv pair end=1699056222
>[2023/11/03 10:04:55.010581,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: TGS-REQ authtime: 2023-11-03T10:03:42 starttime: 2023-11-03T10:04:54 endtime: 2023-11-03T20:03:42 renew till: unset
>[2023/11/03 10:04:55.010629,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: heim_audit_vaddkv(): kv pair[0] canon_client_name=DC1$@HOME.WILLIAMFEELY.INFO
>[2023/11/03 10:04:55.010668,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: heim_audit_setkv_number(): setting kv pair pac_attributes=2
>[2023/11/03 10:04:55.010896,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: FAST armor protection
>[2023/11/03 10:04:55.011091,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: heim_audit_vaddkv(): kv pair[0] etypes=18,17,20,19,16,23
>[2023/11/03 10:04:55.011170,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, aes256-cts-hmac-sha384-192, aes128-cts-hmac-sha256-128, des3-cbc-sha1, arcfour-hmac-md5, using aes256-cts-hmac-sha1-96/aes256-cts-hmac-sha1-96
>[2023/11/03 10:04:55.011211,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: heim_audit_vaddkv(): kv pair[0] etype=18/18
>[2023/11/03 10:04:55.011251,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: Requested flags: forwarded, forwardable
>[2023/11/03 10:04:55.011290,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: heim_audit_vaddkv(): kv pair[0] flags=forwarded,forwardable
>  {"timestamp": "2023-11-03T10:04:55.011453-0400", "type": "KDC Authorization", "KDC Authorization": {"version": {"major": 1, "minor": 0}, "status": "NT_STATUS_OK", "localAddress": null, "remoteAddress": "ipv4:127.0.0.1:51000", "serviceDescription": "krbtgt/HOME.WILLIAMFEELY.INFO@HOME.WILLIAMFEELY.INFO", "authType": "TGS-REQ with Ticket-Granting Ticket", "domain": "WILLIAMFEELY", "account": "DC1$", "sid": "S-1-5-21-305796992-579194986-2674561319-1000", "logonServer": "DC1", "authTime": "2023-11-03T10:04:54.992879-0400", "serverPolicyAccessCheck": null}}
>[2023/11/03 10:04:55.011728,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: heim_audit_vaddkv(): kv pair[0] elapsed=0.018738
>[2023/11/03 10:04:55.011781,  3, pid=55007, effective(0, 0), real(0, 0), class=kerberos] ../../source4/auth/kerberos/krb5_init_context.c:90(smb_krb5_debug_wrapper)
>  Kerberos: TGS-REQ SUCCESS ipv4:127.0.0.1:51000 DC1$@HOME.WILLIAMFEELY.INFO krbtgt/HOME.WILLIAMFEELY.INFO@HOME.WILLIAMFEELY.INFO etype=18/18 pac_attributes=2 canon_client_name=DC1$@HOME.WILLIAMFEELY.INFO end=1699056222 auth=1699020222 etypes=18,17,20,19,16,23 elapsed=0.018738 flags=forwarded,forwardable start=1699020294 armor_client_name=DC1$@HOME.WILLIAMFEELY.INFO
>[2023/11/03 10:04:55.012185,  3, pid=55007, effective(0, 0), real(0, 0)] ../../source4/samba/service_stream.c:67(stream_terminate_connection)
>  stream_terminate_connection: Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNECTED'
>[2023/11/03 10:04:55.012369, 10, pid=55007, effective(0, 0), real(0, 0)] ../../lib/messaging/messages_dgm_ref.c:163(msg_dgm_ref_destructor)
>  msg_dgm_ref_destructor: refs=0x55a7e423e0
>[2023/11/03 10:04:55.013051, 10, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:457(gensec_update_send)
>  gensec_update_send: gssapi_krb5[0x55a9346290]: subreq: 0x55a9352850
>[2023/11/03 10:04:55.013136, 10, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:549(gensec_update_done)
>  gensec_update_done: gssapi_krb5[0x55a9346290]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x55a9352850/../../source4/auth/gensec/gensec_gssapi.c:1059]: state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state (0x55a9352a30)] timer[(nil)] finish[../../source4/auth/gensec/gensec_gssapi.c:1070]
>[2023/11/03 10:04:55.019688, 10, pid=54993, effective(0, 0), real(0, 0)] ../../librpc/rpc/dcerpc_util.c:399(dcerpc_pull_auth_trailer)
>  dcerpc_pull_auth_trailer: auth_pad_length 0
>[2023/11/03 10:04:55.019926,  5, pid=54993, effective(0, 0), real(0, 0)] ../../source4/auth/gensec/gensec_gssapi.c:673(gensec_gssapi_update_internal)
>  gensec_gssapi: NO credentials were delegated
>[2023/11/03 10:04:55.019966,  5, pid=54993, effective(0, 0), real(0, 0)] ../../source4/auth/gensec/gensec_gssapi.c:688(gensec_gssapi_update_internal)
>  GSSAPI Connection will be cryptographically sealed
>[2023/11/03 10:04:55.020033, 10, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:457(gensec_update_send)
>  gensec_update_send: gssapi_krb5[0x55a9346290]: subreq: 0x55a7e2b140
>[2023/11/03 10:04:55.020075, 10, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:549(gensec_update_done)
>  gensec_update_done: gssapi_krb5[0x55a9346290]: NT_STATUS_OK tevent_req[0x55a7e2b140/../../source4/auth/gensec/gensec_gssapi.c:1059]: state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state (0x55a7e2b320)] timer[(nil)] finish[../../source4/auth/gensec/gensec_gssapi.c:1077]
>[2023/11/03 10:04:55.020230, 10, pid=54993, effective(0, 0), real(0, 0)] ../../source4/librpc/rpc/dcerpc.c:549(dcerpc_bh_ndr_validate_in)
>  rpc request data:
>[2023/11/03 10:04:55.020267, 10, pid=54993, effective(0, 0), real(0, 0)] ../../lib/util/util.c:578(dump_data)
>  [0000] 00 00 02 00 E0 B1 7C DD   47 DD 06 43 A7 66 B2 27   ......|. G..C.f.'
>  [0010] AF DE E9 0E 04 00 02 00   1C 00 00 00 1C 00 00 00   ........ ........
>  [0020] 7F FF FF 0F 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00               ........ ....
>[2023/11/03 10:04:55.020400,  1, pid=54993, effective(0, 0), real(0, 0), class=rpc_parse] ../../source4/librpc/rpc/dcerpc.c:1618(dcerpc_request_prepare_vt)
>       t: struct dcerpc_sec_verification_trailer
>          _pad                     : DATA_BLOB length=0
>          magic                    : 0000000000000000
>          count: struct dcerpc_sec_vt_count
>              count                    : 0x0002 (2)
>          commands: ARRAY(2)
>              commands: struct dcerpc_sec_vt
>                  command                  : 0x0001 (1)
>                      0x01: DCERPC_SEC_VT_COMMAND_ENUM (1)
>                         0: DCERPC_SEC_VT_COMMAND_END
>                         0: DCERPC_SEC_VT_MUST_PROCESS
>                  u                        : union dcerpc_sec_vt_union(case 0x1)
>                  bitmask1                 : 0x00000001 (1)
>                         1: DCERPC_SEC_VT_CLIENT_SUPPORTS_HEADER_SIGNING
>              commands: struct dcerpc_sec_vt
>                  command                  : 0x4002 (16386)
>                      0x02: DCERPC_SEC_VT_COMMAND_ENUM (2)
>                         1: DCERPC_SEC_VT_COMMAND_END
>                         0: DCERPC_SEC_VT_MUST_PROCESS
>                  u                        : union dcerpc_sec_vt_union(case 0x2)
>                  pcontext: struct dcerpc_sec_vt_pcontext
>                      abstract_syntax: struct ndr_syntax_id
>                          uuid                     : e3514235-4b06-11d1-ab04-00c04fc2dcd2
>                          if_version               : 0x00000004 (4)
>                      transfer_syntax: struct ndr_syntax_id
>                          uuid                     : 8a885d04-1ceb-11c9-9fe8-08002b104860
>                          if_version               : 0x00000002 (2)
>[2023/11/03 10:04:55.020874, 10, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/kerberos/gssapi_helper.c:208(gssapi_seal_packet)
>  Sealed 128 bytes, and got 76 bytes header/signature.
>[2023/11/03 10:04:55.031067, 10, pid=54993, effective(0, 0), real(0, 0)] ../../librpc/rpc/dcerpc_util.c:399(dcerpc_pull_auth_trailer)
>  dcerpc_pull_auth_trailer: auth_pad_length 8
>[2023/11/03 10:04:55.031155,  1, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/kerberos/gssapi_helper.c:294(gssapi_unseal_packet)
>  gss_unwrap_iov failed:  A token was invalid: unknown mech-code 0 for mech 1 2 840 113554 1 2 2
>[2023/11/03 10:04:55.031189,  0, pid=54993, effective(0, 0), real(0, 0)] ../../source4/auth/gensec/gensec_gssapi.c:1288(gensec_gssapi_unseal_packet)
>  gssapi_unseal_packet(hdr_signing=1,sig_size=76,data=96,pdu=128) failed: NT_STATUS_ACCESS_DENIED
>[2023/11/03 10:04:55.031463,  5, pid=54993, effective(0, 0), real(0, 0), class=drs_repl] ../../source4/dsdb/repl/drepl_notify.c:196(dreplsrv_notify_op_callback)
>  dreplsrv_notify_op_callback: dreplsrv_notify: Failed to send DsReplicaSync to 76704c96-c8aa-4115-bdea-2edb08ba66e2._msdcs.home.williamfeely.info for CN=Configuration,DC=home,DC=williamfeely,DC=info - NT_STATUS_RPC_SEC_PKG_ERROR : WERR_INVALID_PARAMETER
>[2023/11/03 10:04:55.034644, 10, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/acl.c:1912(acl_modify)
>  ldb:acl_modify: repsTo
>[2023/11/03 10:04:55.036456,  5, pid=54993, effective(0, 0), real(0, 0), class=dsdb_audit] ../../lib/audit_logging/audit_logging.c:97(audit_log_human_text)
>  DSDB Change [Modify] at [Fri, 03 Nov 2023 10:04:55.036404 EDT] status [Success] remote host [Unknown] SID [S-1-5-18] DN [CN=Configuration,DC=home,DC=williamfeely,DC=info] attributes [replace: repsTo {AQAAAAAAAAAXAQAA4xMAAAAAAAAAAAAAB49VGwMAAABXAAAA0AAAAEcAAAAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJZMcHaqyBVBveou2wi6ZuIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMAAAA3NjcwNGM5Ni1jOGFhLTQxMTUtYmRlYS0yZWRiMDhiYTY2ZTIuX21zZGNzLmhvbWUud2lsbGlhbWZlZWx5LmluZm8A}]
>  {"timestamp": "2023-11-03T10:04:55.036637-0400", "type": "dsdbChange", "dsdbChange": {"version": {"major": 1, "minor": 0}, "statusCode": 0, "status": "Success", "operation": "Modify", "remoteAddress": null, "performedAsSystem": false, "userSid": "S-1-5-18", "dn": "CN=Configuration,DC=home,DC=williamfeely,DC=info", "transactionId": "b4cb3de7-0975-4b61-883e-715a9feaa54e", "sessionId": "3a9dbe0d-635d-48c1-ad72-54c5d7a75990", "attributes": {"repsTo": {"actions": [{"action": "replace", "values": [{"base64": true, "value": "AQAAAAAAAAAXAQAA4xMAAAAAAAAAAAAAB49VGwMAAABXAAAA0AAAAEcAAAAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJZMcHaqyBVBveou2wi6ZuIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMAAAA3NjcwNGM5Ni1jOGFhLTQxMTUtYmRlYS0yZWRiMDhiYTY2ZTIuX21zZGNzLmhvbWUud2lsbGlhbWZlZWx5LmluZm8A"}]}]}}}}
>[2023/11/03 10:04:55.036767,  3, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/descriptor.c:1885(descriptor_prepare_commit)
>  descriptor_prepare_commit: changes: num_registrations=0
>[2023/11/03 10:04:55.036801,  3, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/descriptor.c:1887(descriptor_prepare_commit)
>  descriptor_prepare_commit: changes: num_registered=0
>[2023/11/03 10:04:55.036832,  3, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/descriptor.c:1997(descriptor_prepare_commit)
>  descriptor_prepare_commit: changes: num_toplevel=0
>[2023/11/03 10:04:55.036862,  3, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/descriptor.c:2018(descriptor_prepare_commit)
>  descriptor_prepare_commit: changes: num_processed=0
>[2023/11/03 10:04:55.036941,  3, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/descriptor.c:2019(descriptor_prepare_commit)
>  descriptor_prepare_commit: objects: num_processed=0
>[2023/11/03 10:04:55.036977,  3, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/descriptor.c:2020(descriptor_prepare_commit)
>  descriptor_prepare_commit: objects: num_skipped=0
>[2023/11/03 10:04:55.038965, 10, pid=54993, effective(0, 0), real(0, 0), class=dsdb_transaction_audit] ../../lib/audit_logging/audit_logging.c:97(audit_log_human_text)
>  DSDB Transaction [commit] at [Fri, 03 Nov 2023 10:04:55.038934 EDT] duration [6256]
>  {"timestamp": "2023-11-03T10:04:55.039029-0400", "type": "dsdbTransaction", "dsdbTransaction": {"version": {"major": 1, "minor": 0}, "action": "commit", "transactionId": "b4cb3de7-0975-4b61-883e-715a9feaa54e", "duration": 6256}}
>[2023/11/03 10:04:55.039298,  5, pid=54993, effective(0, 0), real(0, 0), class=drs_repl] ../../source4/dsdb/repl/drepl_notify.c:245(dreplsrv_notify_run_ops)
>  dreplsrv_notify_run_ops: started DsReplicaSync for CN=Schema,CN=Configuration,DC=home,DC=williamfeely,DC=info to 76704c96-c8aa-4115-bdea-2edb08ba66e2._msdcs.home.williamfeely.info
>[2023/11/03 10:04:55.039384,  4, pid=54993, effective(0, 0), real(0, 0)] ../../source4/librpc/rpc/dcerpc_connect.c:798(continue_map_binding)
>  Mapped to DCERPC endpoint 135
>  added interface eth0 ip=2603:7080:c438:d11f::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=2603:7080:c438:d11f:72e3:cc33:edb5:8b7e bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=fd6e:e111:5a64::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=fd6e:e111:5a64:0:2386:4c7:5994:989c bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=192.168.1.248 bcast=192.168.1.255 netmask=255.255.254.0
>  added interface eth0 ip=2603:7080:c438:d11f::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=2603:7080:c438:d11f:72e3:cc33:edb5:8b7e bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=fd6e:e111:5a64::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=fd6e:e111:5a64:0:2386:4c7:5994:989c bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=192.168.1.248 bcast=192.168.1.255 netmask=255.255.254.0
>[2023/11/03 10:04:55.041241,  3, pid=54993, effective(0, 0), real(0, 0)] ../../libcli/nbt/lmhosts.c:182(resolve_lmhosts_file_as_sockaddr)
>  resolve_lmhosts: Attempting lmhosts lookup for name 76704c96-c8aa-4115-bdea-2edb08ba66e2._msdcs.home.williamfeely.info<0x20>
>[2023/11/03 10:04:55.041293,  4, pid=54993, effective(0, 0), real(0, 0)] ../../libcli/nbt/lmhosts.c:38(startlmhosts)
>  startlmhosts: Can't open lmhosts file /etc/samba/lmhosts. Error was No such file or directory
>[2023/11/03 10:04:55.063047, 10, pid=54993, effective(0, 0), real(0, 0)] ../../source4/librpc/rpc/dcerpc.c:549(dcerpc_bh_ndr_validate_in)
>  rpc request data:
>[2023/11/03 10:04:55.063160, 10, pid=54993, effective(0, 0), real(0, 0)] ../../lib/util/util.c:578(dump_data)
>  [0000] 01 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0010] 00 00 00 00 02 00 00 00   4B 00 00 00 4B 00 00 00   ........ K...K...
>  [0020] 05 00 13 00 0D 35 42 51   E3 06 4B D1 11 AB 04 00   .....5BQ ..K.....
>  [0030] C0 4F C2 DC D2 04 00 02   00 00 00 13 00 0D 04 5D   .O...... .......]
>  [0040] 88 8A EB 1C C9 11 9F E8   08 00 2B 10 48 60 02 00   ........ ..+.H`..
>  [0050] 02 00 00 00 01 00 0B 02   00 00 00 01 00 07 02 00   ........ ........
>  [0060] 00 00 01 00 09 04 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0070] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0080] 01 00 00 00                                         ....
>[2023/11/03 10:04:55.064125, 10, pid=54993, effective(0, 0), real(0, 0)] ../../source4/librpc/rpc/dcerpc.c:564(dcerpc_bh_ndr_validate_out)
>  rpc reply data:
>[2023/11/03 10:04:55.064165, 10, pid=54993, effective(0, 0), real(0, 0)] ../../lib/util/util.c:578(dump_data)
>  [0000] 00 00 00 00 9D 12 2B 8B   A4 54 4C 41 9A 19 6F 1E   ......+. .TLA..o.
>  [0010] 9A AA D7 B3 01 00 00 00   01 00 00 00 00 00 00 00   ........ ........
>  [0020] 01 00 00 00 03 00 00 00   4B 00 00 00 4B 00 00 00   ........ K...K...
>  [0030] 05 00 13 00 0D 35 42 51   E3 06 4B D1 11 AB 04 00   .....5BQ ..K.....
>  [0040] C0 4F C2 DC D2 04 00 02   00 00 00 13 00 0D 04 5D   .O...... .......]
>  [0050] 88 8A EB 1C C9 11 9F E8   08 00 2B 10 48 60 02 00   ........ ..+.H`..
>  [0060] 02 00 00 00 01 00 0B 02   00 00 00 01 00 07 02 00   ........ ........
>  [0070] C2 17 01 00 09 04 00 00   00 00 00 00 00 00 00 00   ........ ........
>[2023/11/03 10:04:55.064508,  4, pid=54993, effective(0, 0), real(0, 0)] ../../source4/librpc/rpc/dcerpc_connect.c:798(continue_map_binding)
>  Mapped to DCERPC endpoint 49687
>  added interface eth0 ip=2603:7080:c438:d11f::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=2603:7080:c438:d11f:72e3:cc33:edb5:8b7e bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=fd6e:e111:5a64::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=fd6e:e111:5a64:0:2386:4c7:5994:989c bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=192.168.1.248 bcast=192.168.1.255 netmask=255.255.254.0
>  added interface eth0 ip=2603:7080:c438:d11f::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=2603:7080:c438:d11f:72e3:cc33:edb5:8b7e bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=fd6e:e111:5a64::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=fd6e:e111:5a64:0:2386:4c7:5994:989c bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=192.168.1.248 bcast=192.168.1.255 netmask=255.255.254.0
>[2023/11/03 10:04:55.066474,  3, pid=54993, effective(0, 0), real(0, 0)] ../../libcli/nbt/lmhosts.c:182(resolve_lmhosts_file_as_sockaddr)
>  resolve_lmhosts: Attempting lmhosts lookup for name 76704c96-c8aa-4115-bdea-2edb08ba66e2._msdcs.home.williamfeely.info<0x20>
>[2023/11/03 10:04:55.066530,  4, pid=54993, effective(0, 0), real(0, 0)] ../../libcli/nbt/lmhosts.c:38(startlmhosts)
>  startlmhosts: Can't open lmhosts file /etc/samba/lmhosts. Error was No such file or directory
>[2023/11/03 10:04:55.087187,  5, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:844(gensec_start_mech)
>  Starting GENSEC mechanism gssapi_krb5
>[2023/11/03 10:04:55.088021,  5, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/credentials/credentials_krb5.c:865(cli_credentials_get_client_gss_creds)
>  GSSAPI credentials for DC1$@HOME.WILLIAMFEELY.INFO will expire in 35927 secs
>[2023/11/03 10:04:55.306031, 10, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:457(gensec_update_send)
>  gensec_update_send: gssapi_krb5[0x55a9700e10]: subreq: 0x55a80511c0
>[2023/11/03 10:04:55.306175, 10, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:549(gensec_update_done)
>  gensec_update_done: gssapi_krb5[0x55a9700e10]: NT_STATUS_MORE_PROCESSING_REQUIRED tevent_req[0x55a80511c0/../../source4/auth/gensec/gensec_gssapi.c:1059]: state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state (0x55a80513a0)] timer[(nil)] finish[../../source4/auth/gensec/gensec_gssapi.c:1070]
>[2023/11/03 10:04:55.311786, 10, pid=54993, effective(0, 0), real(0, 0)] ../../librpc/rpc/dcerpc_util.c:399(dcerpc_pull_auth_trailer)
>  dcerpc_pull_auth_trailer: auth_pad_length 0
>[2023/11/03 10:04:55.312127,  5, pid=54993, effective(0, 0), real(0, 0)] ../../source4/auth/gensec/gensec_gssapi.c:673(gensec_gssapi_update_internal)
>  gensec_gssapi: NO credentials were delegated
>[2023/11/03 10:04:55.312182,  5, pid=54993, effective(0, 0), real(0, 0)] ../../source4/auth/gensec/gensec_gssapi.c:688(gensec_gssapi_update_internal)
>  GSSAPI Connection will be cryptographically sealed
>[2023/11/03 10:04:55.312215, 10, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:457(gensec_update_send)
>  gensec_update_send: gssapi_krb5[0x55a9700e10]: subreq: 0x55a7e2b140
>[2023/11/03 10:04:55.312260, 10, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec.c:549(gensec_update_done)
>  gensec_update_done: gssapi_krb5[0x55a9700e10]: NT_STATUS_OK tevent_req[0x55a7e2b140/../../source4/auth/gensec/gensec_gssapi.c:1059]: state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state (0x55a7e2b320)] timer[(nil)] finish[../../source4/auth/gensec/gensec_gssapi.c:1077]
>[2023/11/03 10:04:55.312428, 10, pid=54993, effective(0, 0), real(0, 0)] ../../source4/librpc/rpc/dcerpc.c:549(dcerpc_bh_ndr_validate_in)
>  rpc request data:
>[2023/11/03 10:04:55.312472, 10, pid=54993, effective(0, 0), real(0, 0)] ../../lib/util/util.c:578(dump_data)
>  [0000] 00 00 02 00 E0 B1 7C DD   47 DD 06 43 A7 66 B2 27   ......|. G..C.f.'
>  [0010] AF DE E9 0E 04 00 02 00   1C 00 00 00 1C 00 00 00   ........ ........
>  [0020] 7F FF FF 0F 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00               ........ ....
>[2023/11/03 10:04:55.312606,  1, pid=54993, effective(0, 0), real(0, 0), class=rpc_parse] ../../source4/librpc/rpc/dcerpc.c:1618(dcerpc_request_prepare_vt)
>       t: struct dcerpc_sec_verification_trailer
>          _pad                     : DATA_BLOB length=0
>          magic                    : 0000000000000000
>          count: struct dcerpc_sec_vt_count
>              count                    : 0x0002 (2)
>          commands: ARRAY(2)
>              commands: struct dcerpc_sec_vt
>                  command                  : 0x0001 (1)
>                      0x01: DCERPC_SEC_VT_COMMAND_ENUM (1)
>                         0: DCERPC_SEC_VT_COMMAND_END
>                         0: DCERPC_SEC_VT_MUST_PROCESS
>                  u                        : union dcerpc_sec_vt_union(case 0x1)
>                  bitmask1                 : 0x00000001 (1)
>                         1: DCERPC_SEC_VT_CLIENT_SUPPORTS_HEADER_SIGNING
>              commands: struct dcerpc_sec_vt
>                  command                  : 0x4002 (16386)
>                      0x02: DCERPC_SEC_VT_COMMAND_ENUM (2)
>                         1: DCERPC_SEC_VT_COMMAND_END
>                         0: DCERPC_SEC_VT_MUST_PROCESS
>                  u                        : union dcerpc_sec_vt_union(case 0x2)
>                  pcontext: struct dcerpc_sec_vt_pcontext
>                      abstract_syntax: struct ndr_syntax_id
>                          uuid                     : e3514235-4b06-11d1-ab04-00c04fc2dcd2
>                          if_version               : 0x00000004 (4)
>                      transfer_syntax: struct ndr_syntax_id
>                          uuid                     : 8a885d04-1ceb-11c9-9fe8-08002b104860
>                          if_version               : 0x00000002 (2)
>[2023/11/03 10:04:55.313189, 10, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/kerberos/gssapi_helper.c:208(gssapi_seal_packet)
>  Sealed 128 bytes, and got 76 bytes header/signature.
>[2023/11/03 10:04:55.327109, 10, pid=54993, effective(0, 0), real(0, 0)] ../../librpc/rpc/dcerpc_util.c:399(dcerpc_pull_auth_trailer)
>  dcerpc_pull_auth_trailer: auth_pad_length 8
>[2023/11/03 10:04:55.327262,  1, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/kerberos/gssapi_helper.c:294(gssapi_unseal_packet)
>  gss_unwrap_iov failed:  A token was invalid: unknown mech-code 0 for mech 1 2 840 113554 1 2 2
>[2023/11/03 10:04:55.327300,  0, pid=54993, effective(0, 0), real(0, 0)] ../../source4/auth/gensec/gensec_gssapi.c:1288(gensec_gssapi_unseal_packet)
>  gssapi_unseal_packet(hdr_signing=1,sig_size=76,data=96,pdu=128) failed: NT_STATUS_ACCESS_DENIED
>[2023/11/03 10:04:55.327611,  5, pid=54993, effective(0, 0), real(0, 0), class=drs_repl] ../../source4/dsdb/repl/drepl_notify.c:196(dreplsrv_notify_op_callback)
>  dreplsrv_notify_op_callback: dreplsrv_notify: Failed to send DsReplicaSync to 76704c96-c8aa-4115-bdea-2edb08ba66e2._msdcs.home.williamfeely.info for CN=Schema,CN=Configuration,DC=home,DC=williamfeely,DC=info - NT_STATUS_RPC_SEC_PKG_ERROR : WERR_INVALID_PARAMETER
>[2023/11/03 10:04:55.331178, 10, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/acl.c:1912(acl_modify)
>  ldb:acl_modify: repsTo
>[2023/11/03 10:04:55.332746,  5, pid=54993, effective(0, 0), real(0, 0), class=dsdb_audit] ../../lib/audit_logging/audit_logging.c:97(audit_log_human_text)
>  DSDB Change [Modify] at [Fri, 03 Nov 2023 10:04:55.332665 EDT] status [Success] remote host [Unknown] SID [S-1-5-18] DN [CN=Schema,CN=Configuration,DC=home,DC=williamfeely,DC=info] attributes [replace: repsTo {AQAAAAAAAAAXAQAA4hMAAAAAAAAAAAAAB49VGwMAAABXAAAA0AAAAEcAAAAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJZMcHaqyBVBveou2wi6ZuIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMAAAA3NjcwNGM5Ni1jOGFhLTQxMTUtYmRlYS0yZWRiMDhiYTY2ZTIuX21zZGNzLmhvbWUud2lsbGlhbWZlZWx5LmluZm8A}]
>  {"timestamp": "2023-11-03T10:04:55.332987-0400", "type": "dsdbChange", "dsdbChange": {"version": {"major": 1, "minor": 0}, "statusCode": 0, "status": "Success", "operation": "Modify", "remoteAddress": null, "performedAsSystem": false, "userSid": "S-1-5-18", "dn": "CN=Schema,CN=Configuration,DC=home,DC=williamfeely,DC=info", "transactionId": "97800970-09d9-446f-94c5-f9ba98d19bcf", "sessionId": "3a9dbe0d-635d-48c1-ad72-54c5d7a75990", "attributes": {"repsTo": {"actions": [{"action": "replace", "values": [{"base64": true, "value": "AQAAAAAAAAAXAQAA4hMAAAAAAAAAAAAAB49VGwMAAABXAAAA0AAAAEcAAAAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJZMcHaqyBVBveou2wi6ZuIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMAAAA3NjcwNGM5Ni1jOGFhLTQxMTUtYmRlYS0yZWRiMDhiYTY2ZTIuX21zZGNzLmhvbWUud2lsbGlhbWZlZWx5LmluZm8A"}]}]}}}}
>[2023/11/03 10:04:55.333167,  3, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/descriptor.c:1885(descriptor_prepare_commit)
>  descriptor_prepare_commit: changes: num_registrations=0
>[2023/11/03 10:04:55.333204,  3, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/descriptor.c:1887(descriptor_prepare_commit)
>  descriptor_prepare_commit: changes: num_registered=0
>[2023/11/03 10:04:55.333235,  3, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/descriptor.c:1997(descriptor_prepare_commit)
>  descriptor_prepare_commit: changes: num_toplevel=0
>[2023/11/03 10:04:55.333265,  3, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/descriptor.c:2018(descriptor_prepare_commit)
>  descriptor_prepare_commit: changes: num_processed=0
>[2023/11/03 10:04:55.333294,  3, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/descriptor.c:2019(descriptor_prepare_commit)
>  descriptor_prepare_commit: objects: num_processed=0
>[2023/11/03 10:04:55.333322,  3, pid=54993, effective(0, 0), real(0, 0)] ../../source4/dsdb/samdb/ldb_modules/descriptor.c:2020(descriptor_prepare_commit)
>  descriptor_prepare_commit: objects: num_skipped=0
>[2023/11/03 10:04:55.335589, 10, pid=54993, effective(0, 0), real(0, 0), class=dsdb_transaction_audit] ../../lib/audit_logging/audit_logging.c:97(audit_log_human_text)
>  DSDB Transaction [commit] at [Fri, 03 Nov 2023 10:04:55.335548 EDT] duration [6565]
>  {"timestamp": "2023-11-03T10:04:55.335666-0400", "type": "dsdbTransaction", "dsdbTransaction": {"version": {"major": 1, "minor": 0}, "action": "commit", "transactionId": "97800970-09d9-446f-94c5-f9ba98d19bcf", "duration": 6565}}
>[2023/11/03 10:04:55.335973,  5, pid=54993, effective(0, 0), real(0, 0), class=drs_repl] ../../source4/dsdb/repl/drepl_notify.c:245(dreplsrv_notify_run_ops)
>  dreplsrv_notify_run_ops: started DsReplicaSync for DC=home,DC=williamfeely,DC=info to 76704c96-c8aa-4115-bdea-2edb08ba66e2._msdcs.home.williamfeely.info
>[2023/11/03 10:04:55.336040,  4, pid=54993, effective(0, 0), real(0, 0)] ../../source4/librpc/rpc/dcerpc_connect.c:798(continue_map_binding)
>  Mapped to DCERPC endpoint 135
>  added interface eth0 ip=2603:7080:c438:d11f::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=2603:7080:c438:d11f:72e3:cc33:edb5:8b7e bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=fd6e:e111:5a64::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=fd6e:e111:5a64:0:2386:4c7:5994:989c bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=192.168.1.248 bcast=192.168.1.255 netmask=255.255.254.0
>  added interface eth0 ip=2603:7080:c438:d11f::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=2603:7080:c438:d11f:72e3:cc33:edb5:8b7e bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=fd6e:e111:5a64::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=fd6e:e111:5a64:0:2386:4c7:5994:989c bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=192.168.1.248 bcast=192.168.1.255 netmask=255.255.254.0
>[2023/11/03 10:04:55.338060,  3, pid=54993, effective(0, 0), real(0, 0)] ../../libcli/nbt/lmhosts.c:182(resolve_lmhosts_file_as_sockaddr)
>  resolve_lmhosts: Attempting lmhosts lookup for name 76704c96-c8aa-4115-bdea-2edb08ba66e2._msdcs.home.williamfeely.info<0x20>
>[2023/11/03 10:04:55.338147,  4, pid=54993, effective(0, 0), real(0, 0)] ../../libcli/nbt/lmhosts.c:38(startlmhosts)
>  startlmhosts: Can't open lmhosts file /etc/samba/lmhosts. Error was No such file or directory
>[2023/11/03 10:04:55.361602, 10, pid=54993, effective(0, 0), real(0, 0)] ../../source4/librpc/rpc/dcerpc.c:549(dcerpc_bh_ndr_validate_in)
>  rpc request data:
>[2023/11/03 10:04:55.361717, 10, pid=54993, effective(0, 0), real(0, 0)] ../../lib/util/util.c:578(dump_data)
>  [0000] 01 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0010] 00 00 00 00 02 00 00 00   4B 00 00 00 4B 00 00 00   ........ K...K...
>  [0020] 05 00 13 00 0D 35 42 51   E3 06 4B D1 11 AB 04 00   .....5BQ ..K.....
>  [0030] C0 4F C2 DC D2 04 00 02   00 00 00 13 00 0D 04 5D   .O...... .......]
>  [0040] 88 8A EB 1C C9 11 9F E8   08 00 2B 10 48 60 02 00   ........ ..+.H`..
>  [0050] 02 00 00 00 01 00 0B 02   00 00 00 01 00 07 02 00   ........ ........
>  [0060] 00 00 01 00 09 04 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0070] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0080] 01 00 00 00                                         ....
>[2023/11/03 10:04:55.362706, 10, pid=54993, effective(0, 0), real(0, 0)] ../../source4/librpc/rpc/dcerpc.c:564(dcerpc_bh_ndr_validate_out)
>  rpc reply data:
>[2023/11/03 10:04:55.362761, 10, pid=54993, effective(0, 0), real(0, 0)] ../../lib/util/util.c:578(dump_data)
>  [0000] 00 00 00 00 77 B7 DF 88   A2 14 70 4E 8B A3 D7 F9   ....w... ..pN....
>  [0010] 04 E7 A3 4D 01 00 00 00   01 00 00 00 00 00 00 00   ...M.... ........
>  [0020] 01 00 00 00 03 00 00 00   4B 00 00 00 4B 00 00 00   ........ K...K...
>  [0030] 05 00 13 00 0D 35 42 51   E3 06 4B D1 11 AB 04 00   .....5BQ ..K.....
>  [0040] C0 4F C2 DC D2 04 00 02   00 00 00 13 00 0D 04 5D   .O...... .......]
>  [0050] 88 8A EB 1C C9 11 9F E8   08 00 2B 10 48 60 02 00   ........ ..+.H`..
>  [0060] 02 00 00 00 01 00 0B 02   00 00 00 01 00 07 02 00   ........ ........
>  [0070] C2 17 01 00 09 04 00 00   00 00 00 00 00 00 00 00   ........ ........
>[2023/11/03 10:04:55.363105,  4, pid=54993, effective(0, 0), real(0, 0)] ../../source4/librpc/rpc/dcerpc_connect.c:798(continue_map_binding)
>  Mapped to DCERPC endpoint 49687
>  added interface eth0 ip=2603:7080:c438:d11f::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=2603:7080:c438:d11f:72e3:cc33:edb5:8b7e bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=fd6e:e111:5a64::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=fd6e:e111:5a64:0:2386:4c7:5994:989c bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=192.168.1.248 bcast=192.168.1.255 netmask=255.255.254.0
>  added interface eth0 ip=2603:7080:c438:d11f::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=2603:7080:c438:d11f:72e3:cc33:edb5:8b7e bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=fd6e:e111:5a64::f8 bcast= netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
>  added interface eth0 ip=fd6e:e111:5a64:0:2386:4c7:5994:989c bcast= netmask=ffff:ffff:ffff:ffff::
>  added interface eth0 ip=192.168.1.248 bcast=192.168.1.255 netmask=255.255.254.0
>[2023/11/03 10:04:55.365183,  3, pid=54993, effective(0, 0), real(0, 0)] ../../libcli/nbt/lmhosts.c:182(resolve_lmhosts_file_as_sockaddr)
>  resolve_lmhosts: Attempting lmhosts lookup for name 76704c96-c8aa-4115-bdea-2edb08ba66e2._msdcs.home.williamfeely.info<0x20>
>[2023/11/03 10:04:55.365244,  4, pid=54993, effective(0, 0), real(0, 0)] ../../libcli/nbt/lmhosts.c:38(startlmhosts)
>  startlmhosts: Can't open lmhosts file /etc/samba/lmhosts. Error was No such file or directory
>[2023/11/03 10:04:55.391426,  5, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/gensec/gensec_start.c:844(gensec_start_mech)
>  Starting GENSEC mechanism gssapi_krb5
>[2023/11/03 10:04:55.392274,  5, pid=54993, effective(0, 0), real(0, 0), class=auth] ../../auth/credentials/credentials_krb5.c:865(cli_credentials_get_client_gss_creds)
>  GSSAPI credentials for DC1$@HOME.WILLIAMFEELY.INFO will expire in 35927 secs

Actions: View

Attachments on bug 15510: 18178