[2006/07/20 08:49:13, 5] auth/auth_util.c:make_user_info_map(162) make_user_info_map: Mapping user []\[] from workstation [SSDC1] [2006/07/20 08:49:13, 3] libsmb/namequery.c:get_dc_list(1401) get_dc_list: preferred server list: ", 10.20.0.101" [2006/07/20 08:49:13, 3] libads/ldap.c:ads_connect(286) Connected to LDAP server 10.20.0.101 [2006/07/20 08:49:13, 3] libsmb/cliconnect.c:cli_start_connection(1417) Connecting to host=SSDC1.STK.LOCAL [2006/07/20 08:49:13, 3] lib/util_sock.c:open_socket_out(874) Connecting to 10.20.0.101 at port 445 [2006/07/20 08:49:13, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine SSDC1.STK.LOCAL pipe \lsarpc fnum 0x800c bind request returned ok. [2006/07/20 08:49:13, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(224) lsa_io_sec_qos: length c does not match size 8 [2006/07/20 08:49:13, 5] auth/auth_util.c:make_user_info(76) attempting to make a user_info for () [2006/07/20 08:49:13, 5] auth/auth_util.c:make_user_info(86) making strings for 's user_info struct [2006/07/20 08:49:13, 5] auth/auth_util.c:make_user_info(118) making blobs for 's user_info struct [2006/07/20 08:49:13, 10] auth/auth_util.c:make_user_info(136) made an encrypted user_info for () [2006/07/20 08:49:13, 3] auth/auth.c:check_ntlm_password(221) check_ntlm_password: Checking password for unmapped user []\[]@[SSDC1] with the new password interface [2006/07/20 08:49:13, 3] auth/auth.c:check_ntlm_password(224) check_ntlm_password: mapped user is: [STK]\[]@[SSDC1] [2006/07/20 08:49:13, 10] auth/auth.c:check_ntlm_password(233) check_ntlm_password: auth_context challenge created by random [2006/07/20 08:49:13, 10] auth/auth.c:check_ntlm_password(235) challenge is: [2006/07/20 08:49:13, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) fetch gid from cache 99 -> S-1-5-21-1370735783-3310077184-2744196715-1199 [2006/07/20 08:49:13, 3] auth/auth.c:check_ntlm_password(270) check_ntlm_password: guest authentication for user [] succeeded [2006/07/20 08:49:13, 5] auth/auth.c:check_ntlm_password(309) check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded [2006/07/20 08:49:13, 5] auth/auth_util.c:free_user_info(1821) attempting to free (and zero) a user_info structure [2006/07/20 08:49:13, 10] auth/auth_util.c:free_user_info(1825) structure was created for [2006/07/20 08:49:13, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-1370735783-3310077184-2744196715-501] [2006/07/20 08:49:13, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-1370735783-3310077184-2744196715-1199] [2006/07/20 08:49:13, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2006/07/20 08:49:13, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2006/07/20 08:49:13, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) fetch gid from cache 99 -> S-1-5-21-1370735783-3310077184-2744196715-1199 [2006/07/20 08:49:13, 10] auth/auth_util.c:create_local_token(996) Could not convert SID S-1-1-0 to gid, ignoring it [2006/07/20 08:49:13, 10] auth/auth_util.c:create_local_token(996) Could not convert SID S-1-5-2 to gid, ignoring it [2006/07/20 08:49:13, 10] auth/auth_util.c:create_local_token(996) Could not convert SID S-1-5-32-546 to gid, ignoring it [2006/07/20 08:49:13, 10] auth/auth_util.c:debug_nt_user_token(455) NT user token of user S-1-5-21-1370735783-3310077184-2744196715-501 contains 5 SIDs SID[ 0]: S-1-5-21-1370735783-3310077184-2744196715-501 SID[ 1]: S-1-5-21-1370735783-3310077184-2744196715-1199 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SE_PRIV 0x0 0x0 0x0 0x0 [2006/07/20 08:49:13, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338) NTLMSSP Sign/Seal - Initialising with flags: [2006/07/20 08:49:13, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088215 [2006/07/20 08:49:13, 3] smbd/password.c:register_vuid(280) User name: nobody Real name: Nobody [2006/07/20 08:49:13, 3] smbd/password.c:register_vuid(301) UNIX uid 99 is UNIX user nobody, and will be vuid 101 [2006/07/20 08:49:13, 3] smbd/process.c:process_smb(1110) Transaction 3 of length 84 [2006/07/20 08:49:13, 3] smbd/process.c:switch_message(914) switch message SMBtconX (pid 3098) conn 0x0 [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 3] lib/access.c:check_access(313) check_access: no hostnames in host allow/deny list. [2006/07/20 08:49:13, 2] lib/access.c:check_access(324) Allowed connection from (10.20.0.101) [2006/07/20 08:49:13, 3] smbd/service.c:make_connection_snum(752) Connect path is '/tmp' for service [IPC$] [2006/07/20 08:49:13, 3] lib/util_seaccess.c:se_access_check(250) [2006/07/20 08:49:13, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1370735783-3310077184-2744196715-501 se_access_check: also S-1-5-21-1370735783-3310077184-2744196715-1199 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 [2006/07/20 08:49:13, 3] smbd/vfs.c:vfs_init_default(219) Initialising default vfs hooks [2006/07/20 08:49:13, 3] lib/util_seaccess.c:se_access_check(250) [2006/07/20 08:49:13, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-1370735783-3310077184-2744196715-501 se_access_check: also S-1-5-21-1370735783-3310077184-2744196715-1199 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 3] smbd/service.c:make_connection_snum(941) ssdc1 (10.20.0.101) connect to service IPC$ initially as user nobody (uid=99, gid=99) (pid 3098) [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 2] smbd/reply.c:reply_tcon_and_X(711) Serving IPC$ as a Dfs root [2006/07/20 08:49:13, 3] smbd/reply.c:reply_tcon_and_X(716) tconX service=IPC$ [2006/07/20 08:49:13, 3] smbd/process.c:process_smb(1110) Transaction 4 of length 106 [2006/07/20 08:49:13, 3] smbd/process.c:switch_message(914) switch message SMBtrans2 (pid 3098) conn 0x92082f0 [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 3] smbd/process.c:process_smb(1110) Transaction 5 of length 270 [2006/07/20 08:49:13, 3] smbd/process.c:switch_message(914) switch message SMBsesssetupX (pid 3098) conn 0x0 [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 3] smbd/sesssetup.c:reply_sesssetup_and_X(845) wct=12 flg2=0xc807 [2006/07/20 08:49:13, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(656) Doing spnego session setup [2006/07/20 08:49:13, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(687) NativeOS=[Windows Server 2003 3790 Service Pack 1] NativeLanMan=[] PrimaryDomain=[Windows Server 2003 5.2] [2006/07/20 08:49:13, 3] smbd/sesssetup.c:reply_spnego_negotiate(547) Got OID 1 3 6 1 4 1 311 2 2 10 [2006/07/20 08:49:13, 3] smbd/sesssetup.c:reply_spnego_negotiate(550) Got secblob of size 40 [2006/07/20 08:49:13, 5] auth/auth.c:make_auth_context_subsystem(505) Making default auth method list for security=ADS [2006/07/20 08:49:13, 5] auth/auth.c:load_auth_module(391) load_auth_module: Attempting to find an auth method to match guest [2006/07/20 08:49:13, 5] auth/auth.c:load_auth_module(416) load_auth_module: auth method guest has a valid init [2006/07/20 08:49:13, 5] auth/auth.c:load_auth_module(391) load_auth_module: Attempting to find an auth method to match sam [2006/07/20 08:49:13, 5] auth/auth.c:load_auth_module(416) load_auth_module: auth method sam has a valid init [2006/07/20 08:49:13, 5] auth/auth.c:load_auth_module(391) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2006/07/20 08:49:13, 5] auth/auth.c:load_auth_module(391) load_auth_module: Attempting to find an auth method to match ntdomain [2006/07/20 08:49:13, 5] auth/auth.c:load_auth_module(416) load_auth_module: auth method ntdomain has a valid init [2006/07/20 08:49:13, 5] auth/auth.c:load_auth_module(416) load_auth_module: auth method winbind has a valid init [2006/07/20 08:49:13, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088297 [2006/07/20 08:49:13, 5] auth/auth.c:get_ntlm_challenge(97) auth_get_challenge: module guest did not want to specify a challenge [2006/07/20 08:49:13, 5] auth/auth.c:get_ntlm_challenge(97) auth_get_challenge: module sam did not want to specify a challenge [2006/07/20 08:49:13, 5] auth/auth.c:get_ntlm_challenge(97) auth_get_challenge: module winbind did not want to specify a challenge [2006/07/20 08:49:13, 5] auth/auth.c:get_ntlm_challenge(137) auth_context challenge created by random [2006/07/20 08:49:13, 5] auth/auth.c:get_ntlm_challenge(138) challenge is: [2006/07/20 08:49:13, 3] smbd/process.c:process_smb(1110) Transaction 6 of length 388 [2006/07/20 08:49:13, 3] smbd/process.c:switch_message(914) switch message SMBsesssetupX (pid 3098) conn 0x0 [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 3] smbd/sesssetup.c:reply_sesssetup_and_X(845) wct=12 flg2=0xc807 [2006/07/20 08:49:13, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(656) Doing spnego session setup [2006/07/20 08:49:13, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(687) NativeOS=[Windows Server 2003 3790 Service Pack 1] NativeLanMan=[] PrimaryDomain=[Windows Server 2003 5.2] [2006/07/20 08:49:13, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(672) Got user=[phil] domain=[stk] workstation=[SSDC1] len1=24 len2=24 [2006/07/20 08:49:13, 5] auth/auth_util.c:make_user_info_map(162) make_user_info_map: Mapping user [stk]\[phil] from workstation [SSDC1] [2006/07/20 08:49:13, 3] libsmb/namequery.c:get_dc_list(1401) get_dc_list: preferred server list: ", 10.20.0.101" [2006/07/20 08:49:13, 3] libads/ldap.c:ads_connect(286) Connected to LDAP server 10.20.0.101 [2006/07/20 08:49:13, 3] libsmb/cliconnect.c:cli_start_connection(1417) Connecting to host=SSDC1.STK.LOCAL [2006/07/20 08:49:13, 3] lib/util_sock.c:open_socket_out(874) Connecting to 10.20.0.101 at port 445 [2006/07/20 08:49:13, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine SSDC1.STK.LOCAL pipe \lsarpc fnum 0x4003 bind request returned ok. [2006/07/20 08:49:13, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(224) lsa_io_sec_qos: length c does not match size 8 [2006/07/20 08:49:13, 5] auth/auth_util.c:make_user_info(76) attempting to make a user_info for phil (phil) [2006/07/20 08:49:13, 5] auth/auth_util.c:make_user_info(86) making strings for phil's user_info struct [2006/07/20 08:49:13, 5] auth/auth_util.c:make_user_info(118) making blobs for phil's user_info struct [2006/07/20 08:49:13, 10] auth/auth_util.c:make_user_info(136) made an encrypted user_info for phil (phil) [2006/07/20 08:49:13, 3] auth/auth.c:check_ntlm_password(221) check_ntlm_password: Checking password for unmapped user [stk]\[phil]@[SSDC1] with the new password interface [2006/07/20 08:49:13, 3] auth/auth.c:check_ntlm_password(224) check_ntlm_password: mapped user is: [STK]\[phil]@[SSDC1] [2006/07/20 08:49:13, 10] auth/auth.c:check_ntlm_password(233) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2006/07/20 08:49:13, 10] auth/auth.c:check_ntlm_password(235) challenge is: [2006/07/20 08:49:13, 10] auth/auth.c:check_ntlm_password(261) check_ntlm_password: guest had nothing to say [2006/07/20 08:49:13, 6] auth/auth_sam.c:check_samstrict_security(414) check_samstrict_security: STK is not one of my local names (ROLE_DOMAIN_MEMBER) [2006/07/20 08:49:13, 10] auth/auth.c:check_ntlm_password(261) check_ntlm_password: sam had nothing to say [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/07/20 08:49:13, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 3] libsmb/namequery.c:get_dc_list(1401) get_dc_list: preferred server list: ", 10.20.0.101" [2006/07/20 08:49:13, 3] libads/ldap.c:ads_connect(286) Connected to LDAP server 10.20.0.101 [2006/07/20 08:49:13, 3] libsmb/cliconnect.c:cli_start_connection(1417) Connecting to host=SSDC1.STK.LOCAL [2006/07/20 08:49:13, 3] lib/util_sock.c:open_socket_out(874) Connecting to 10.20.0.101 at port 445 [2006/07/20 08:49:13, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine SSDC1.STK.LOCAL pipe \NETLOGON fnum 0x4002 bind request returned ok. [2006/07/20 08:49:13, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine SSDC1.STK.LOCAL pipe \NETLOGON fnum 0x4003 bind request returned ok. [2006/07/20 08:49:13, 5] auth/auth_util.c:fill_sam_account(1487) fill_sam_account: located username was [phil] [2006/07/20 08:49:13, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) store_gid_sid_cache: gid 1001 in cache -> S-1-5-21-1370735783-3310077184-2744196715-3003 [2006/07/20 08:49:13, 3] passdb/lookup_sid.c:fetch_gid_from_cache(999) fetch gid from cache 1001 -> S-1-5-21-1370735783-3310077184-2744196715-3003 [2006/07/20 08:49:13, 3] auth/auth.c:check_ntlm_password(270) check_ntlm_password: winbind authentication for user [phil] succeeded [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/07/20 08:49:13, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 5] auth/auth.c:check_ntlm_password(296) check_ntlm_password: PAM Account for user [phil] succeeded [2006/07/20 08:49:13, 2] auth/auth.c:check_ntlm_password(309) check_ntlm_password: authentication for user [phil] -> [phil] -> [phil] succeeded [2006/07/20 08:49:13, 5] auth/auth_util.c:free_user_info(1821) attempting to free (and zero) a user_info structure [2006/07/20 08:49:13, 10] auth/auth_util.c:free_user_info(1825) structure was created for phil [2006/07/20 08:49:13, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-622673343-1960665537-1190612905-2532] [2006/07/20 08:49:13, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-1370735783-3310077184-2744196715-513] [2006/07/20 08:49:13, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2006/07/20 08:49:13, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-11] [2006/07/20 08:49:13, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-622673343-1960665537-1190612905-513] [2006/07/20 08:49:13, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-622673343-1960665537-1190612905-1348] [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2006/07/20 08:49:13, 3] smbd/uid.c:push_conn_ctx(345) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 3] passdb/lookup_sid.c:store_gid_sid_cache(1038) store_gid_sid_cache: gid 2147483404 in cache -> S-1-5-21-1370735783-3310077184-2744196715-513 [2006/07/20 08:49:13, 10] auth/auth_util.c:create_local_token(996) Could not convert SID S-1-1-0 to gid, ignoring it [2006/07/20 08:49:13, 10] auth/auth_util.c:create_local_token(996) Could not convert SID S-1-5-2 to gid, ignoring it [2006/07/20 08:49:13, 10] auth/auth_util.c:create_local_token(996) Could not convert SID S-1-5-11 to gid, ignoring it [2006/07/20 08:49:13, 10] auth/auth_util.c:create_local_token(996) Could not convert SID S-1-5-21-622673343-1960665537-1190612905-513 to gid, ignoring it [2006/07/20 08:49:13, 10] auth/auth_util.c:create_local_token(996) Could not convert SID S-1-5-21-622673343-1960665537-1190612905-1348 to gid, ignoring it [2006/07/20 08:49:13, 10] auth/auth_util.c:debug_nt_user_token(455) NT user token of user S-1-5-21-622673343-1960665537-1190612905-2532 contains 7 SIDs SID[ 0]: S-1-5-21-622673343-1960665537-1190612905-2532 SID[ 1]: S-1-5-21-1370735783-3310077184-2744196715-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-622673343-1960665537-1190612905-513 SID[ 6]: S-1-5-21-622673343-1960665537-1190612905-1348 SE_PRIV 0x0 0x0 0x0 0x0 [2006/07/20 08:49:13, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338) NTLMSSP Sign/Seal - Initialising with flags: [2006/07/20 08:49:13, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088215 [2006/07/20 08:49:13, 3] smbd/password.c:register_vuid(280) User name: phil Real name: [2006/07/20 08:49:13, 3] smbd/password.c:register_vuid(301) UNIX uid 596 is UNIX user phil, and will be vuid 103 [2006/07/20 08:49:13, 3] smbd/password.c:register_vuid(332) Adding homes service for user 'phil' using home directory: '/home/phil' [2006/07/20 08:49:13, 3] param/loadparm.c:lp_add_home(2591) adding home's share [phil] for user 'phil' at '/home/phil' [2006/07/20 08:49:13, 3] smbd/process.c:process_smb(1110) Transaction 7 of length 88 [2006/07/20 08:49:13, 3] smbd/process.c:switch_message(914) switch message SMBtconX (pid 3098) conn 0x0 [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 3] lib/access.c:check_access(313) check_access: no hostnames in host allow/deny list. [2006/07/20 08:49:13, 2] lib/access.c:check_access(324) Allowed connection from (10.20.0.101) [2006/07/20 08:49:13, 3] lib/util_sid.c:string_to_sid(223) string_to_sid: Sid +stkdev does not start with 'S-'. [2006/07/20 08:49:13, 3] lib/util_sid.c:string_to_sid(223) string_to_sid: Sid +stkadm does not start with 'S-'. [2006/07/20 08:49:13, 2] smbd/service.c:make_connection_snum(571) user 'phil' (from session setup) not permitted to access this share (webdev) [2006/07/20 08:49:13, 3] smbd/error.c:error_packet(146) error packet at smbd/reply.c(676) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED [2006/07/20 08:49:13, 3] smbd/process.c:process_smb(1110) Transaction 8 of length 43 [2006/07/20 08:49:13, 3] smbd/process.c:switch_message(914) switch message SMBulogoffX (pid 3098) conn 0x0 [2006/07/20 08:49:13, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2006/07/20 08:49:13, 3] smbd/reply.c:reply_ulogoffX(1618) ulogoffX vuid=103