[2003/11/13 10:53:24, 4] rpc_server/srv_pipe.c:api_rpcTNP(1496) api_rpcTNP: lsarpc op 0xf - api_rpcTNP: rpc command: LSA_LOOKUPSIDS [2003/11/13 10:53:24, 6] rpc_server/srv_pipe.c:api_rpcTNP(1522) api_rpc_cmds[6].fn == 0x80eb9a0 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 lsa_io_q_lookup_sids [2003/11/13 10:53:24, 6] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_pol_hnd pol_hnd [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 data1: 00000000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 data2: 00000023 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0008 data3: 0000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 000a data4: 0000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8s(722) 000c data5: 94 54 b3 3f f2 11 00 00 [2003/11/13 10:53:24, 6] rpc_parse/parse_prs.c:prs_debug(82) 000014 lsa_io_sid_enum sids [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0014 num_entries : 00000004 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 ptr_sid_enum: 000f0d28 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c num_entries2: 00000004 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0020 ptr_sid[0]: 74e51780 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 ptr_sid[1]: 74e51790 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0028 ptr_sid[2]: 74e517a0 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 002c ptr_sid[3]: 74e517d0 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_dom_sid2 sid[0] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 num_auths: 00000002 [2003/11/13 10:53:24, 8] rpc_parse/parse_prs.c:prs_debug(82) 000034 smb_io_dom_sid sid [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0034 sid_rev_num: 01 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0035 num_auths : 02 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0036 id_auth[0] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0037 id_auth[1] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0038 id_auth[2] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0039 id_auth[3] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 003a id_auth[4] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 003b id_auth[5] : 05 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 003c sub_auths : 00000020 00000224 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000044 smb_io_dom_sid2 sid[1] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0044 num_auths: 00000002 [2003/11/13 10:53:24, 8] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_dom_sid sid [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0048 sid_rev_num: 01 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0049 num_auths : 02 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004a id_auth[0] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004b id_auth[1] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004c id_auth[2] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004d id_auth[3] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004e id_auth[4] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 004f id_auth[5] : 05 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0050 sub_auths : 00000020 00000225 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000058 smb_io_dom_sid2 sid[2] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0058 num_auths: 00000002 [2003/11/13 10:53:24, 8] rpc_parse/parse_prs.c:prs_debug(82) 00005c smb_io_dom_sid sid [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 005c sid_rev_num: 01 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 005d num_auths : 02 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 005e id_auth[0] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 005f id_auth[1] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0060 id_auth[2] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0061 id_auth[3] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0062 id_auth[4] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0063 id_auth[5] : 05 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0064 sub_auths : 00000020 00000226 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_dom_sid2 sid[3] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 006c num_auths: 00000002 [2003/11/13 10:53:24, 8] rpc_parse/parse_prs.c:prs_debug(82) 000070 smb_io_dom_sid sid [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0070 sid_rev_num: 01 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0071 num_auths : 02 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0072 id_auth[0] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0073 id_auth[1] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0074 id_auth[2] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0075 id_auth[3] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0076 id_auth[4] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0077 id_auth[5] : 05 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 0078 sub_auths : 00000020 00000229 [2003/11/13 10:53:24, 6] rpc_parse/parse_prs.c:prs_debug(82) 000080 lsa_io_trans_names names [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0080 num_entries : 00000000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0084 ptr_trans_names: 00000000 [2003/11/13 10:53:24, 6] rpc_parse/parse_prs.c:prs_debug(82) 000088 smb_io_lookup_level switch [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0088 value: 0001 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 008c mapped_count: 00000000 [2003/11/13 10:53:24, 4] rpc_server/srv_lsa_hnd.c:find_policy_by_hnd_internal(162) Found policy hnd[0] [000] 00 00 00 00 23 00 00 00 00 00 00 00 94 54 B3 3F ....#... .....T³? [010] F2 11 00 00 ò... [2003/11/13 10:53:24, 3] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2003/11/13 10:53:24, 3] smbd/uid.c:push_conn_ctx(287) push_conn_ctx(102) : conn_ctx_stack_ndx = 0 [2003/11/13 10:53:24, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2003/11/13 10:53:24, 5] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2003/11/13 10:53:24, 5] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/11/13 10:53:24, 5] rpc_server/srv_lsa_nt.c:init_lsa_trans_names(251) init_lsa_trans_names: looking up sid S-1-5-32-548 [2003/11/13 10:53:24, 10] passdb/lookup_sid.c:lookup_sid(107) lookup_sid: winbind lookup for SID S-1-5-32-548 failed - trying local. [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(156) map_domain_sid_to_name: S-1-5-32 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(163) map_domain_sid_to_name: compare: S-1-5-21-598206826-3982707997-2769875126 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(163) map_domain_sid_to_name: compare: S-1-5-21-598206826-3982707997-2769875126 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(163) map_domain_sid_to_name: compare: S-1-5-32 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(166) map_domain_sid_to_name: found 'BUILTIN' [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:lookup_known_rid(196) lookup_builtin_rid: rid = 548, domain = 'BUILTIN', user = 'Account Operators' [2003/11/13 10:53:24, 5] rpc_server/srv_lsa_nt.c:init_lsa_trans_names(261) init_lsa_trans_names: found [2003/11/13 10:53:24, 10] rpc_server/srv_lsa_nt.c:init_lsa_trans_names(278) init_lsa_trans_names: added user 'BUILTIN\Account Operators' to referenced list. [2003/11/13 10:53:24, 5] rpc_server/srv_lsa_nt.c:init_lsa_trans_names(251) init_lsa_trans_names: looking up sid S-1-5-32-549 [2003/11/13 10:53:24, 10] passdb/lookup_sid.c:lookup_sid(107) lookup_sid: winbind lookup for SID S-1-5-32-549 failed - trying local. [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(156) map_domain_sid_to_name: S-1-5-32 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(163) map_domain_sid_to_name: compare: S-1-5-21-598206826-3982707997-2769875126 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(163) map_domain_sid_to_name: compare: S-1-5-21-598206826-3982707997-2769875126 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(163) map_domain_sid_to_name: compare: S-1-5-32 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(166) map_domain_sid_to_name: found 'BUILTIN' [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:lookup_known_rid(196) lookup_builtin_rid: rid = 549, domain = 'BUILTIN', user = 'Server Operators' [2003/11/13 10:53:24, 5] rpc_server/srv_lsa_nt.c:init_lsa_trans_names(261) init_lsa_trans_names: found [2003/11/13 10:53:24, 10] rpc_server/srv_lsa_nt.c:init_lsa_trans_names(278) init_lsa_trans_names: added user 'BUILTIN\Server Operators' to referenced list. [2003/11/13 10:53:24, 5] rpc_server/srv_lsa_nt.c:init_lsa_trans_names(251) init_lsa_trans_names: looking up sid S-1-5-32-550 [2003/11/13 10:53:24, 10] passdb/lookup_sid.c:lookup_sid(107) lookup_sid: winbind lookup for SID S-1-5-32-550 failed - trying local. [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(156) map_domain_sid_to_name: S-1-5-32 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(163) map_domain_sid_to_name: compare: S-1-5-21-598206826-3982707997-2769875126 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(163) map_domain_sid_to_name: compare: S-1-5-21-598206826-3982707997-2769875126 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(163) map_domain_sid_to_name: compare: S-1-5-32 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(166) map_domain_sid_to_name: found 'BUILTIN' [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:lookup_known_rid(196) lookup_builtin_rid: rid = 550, domain = 'BUILTIN', user = 'Print Operators' [2003/11/13 10:53:24, 5] rpc_server/srv_lsa_nt.c:init_lsa_trans_names(261) init_lsa_trans_names: found [2003/11/13 10:53:24, 10] rpc_server/srv_lsa_nt.c:init_lsa_trans_names(278) init_lsa_trans_names: added user 'BUILTIN\Print Operators' to referenced list. [2003/11/13 10:53:24, 5] rpc_server/srv_lsa_nt.c:init_lsa_trans_names(251) init_lsa_trans_names: looking up sid S-1-5-32-553 [2003/11/13 10:53:24, 10] passdb/lookup_sid.c:lookup_sid(107) lookup_sid: winbind lookup for SID S-1-5-32-553 failed - trying local. [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(156) map_domain_sid_to_name: S-1-5-32 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(163) map_domain_sid_to_name: compare: S-1-5-21-598206826-3982707997-2769875126 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(163) map_domain_sid_to_name: compare: S-1-5-21-598206826-3982707997-2769875126 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(163) map_domain_sid_to_name: compare: S-1-5-32 [2003/11/13 10:53:24, 5] passdb/util_sam_sid.c:map_domain_sid_to_name(166) map_domain_sid_to_name: found 'BUILTIN' [2003/11/13 10:53:24, 5] rpc_server/srv_lsa_nt.c:init_lsa_trans_names(261) init_lsa_trans_names: not found [2003/11/13 10:53:24, 10] rpc_server/srv_lsa_nt.c:init_lsa_trans_names(278) init_lsa_trans_names: added user 'BUILTIN\' to referenced list. [2003/11/13 10:53:24, 3] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_debug(82) 000000 lsa_io_r_lookup_sids [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0000 ptr_dom_ref: 00000001 [2003/11/13 10:53:24, 6] rpc_parse/parse_prs.c:prs_debug(82) 000004 lsa_io_dom_r_ref dom_ref [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0004 num_ref_doms_1: 00000004 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0008 ptr_ref_dom : 00000001 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 000c max_entries : 00000020 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0010 num_ref_doms_2: 00000004 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000014 smb_io_unihdr dom_ref[0] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0014 uni_str_len: 000e [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0016 uni_max_len: 000e [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0018 buffer : 00000001 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 001c sid_ptr[0] : 00000001 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_unihdr dom_ref[1] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0020 uni_str_len: 000e [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0022 uni_max_len: 000e [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0024 buffer : 00000001 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0028 sid_ptr[1] : 00000001 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 00002c smb_io_unihdr dom_ref[2] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 002c uni_str_len: 000e [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 002e uni_max_len: 000e [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0030 buffer : 00000001 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0034 sid_ptr[2] : 00000001 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000038 smb_io_unihdr dom_ref[3] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0038 uni_str_len: 000e [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 003a uni_max_len: 000e [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 003c buffer : 00000001 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0040 sid_ptr[3] : 00000001 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000044 smb_io_unistr2 dom_ref[0] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0044 uni_max_len: 00000007 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0048 offset : 00000000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 004c uni_str_len: 00000007 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0050 buffer : B.U.I.L.T.I.N. [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000060 smb_io_dom_sid2 sid_ptr[0] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0060 num_auths: 00000002 [2003/11/13 10:53:24, 8] rpc_parse/parse_prs.c:prs_debug(82) 000064 smb_io_dom_sid sid [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0064 sid_rev_num: 01 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0065 num_auths : 02 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0066 id_auth[0] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0067 id_auth[1] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0068 id_auth[2] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0069 id_auth[3] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006a id_auth[4] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 006b id_auth[5] : 05 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 006c sub_auths : 00000020 00000224 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000074 smb_io_unistr2 dom_ref[1] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0074 uni_max_len: 00000007 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0078 offset : 00000000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 007c uni_str_len: 00000007 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0080 buffer : B.U.I.L.T.I.N. [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000090 smb_io_dom_sid2 sid_ptr[1] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0090 num_auths: 00000002 [2003/11/13 10:53:24, 8] rpc_parse/parse_prs.c:prs_debug(82) 000094 smb_io_dom_sid sid [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0094 sid_rev_num: 01 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0095 num_auths : 02 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0096 id_auth[0] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0097 id_auth[1] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0098 id_auth[2] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 0099 id_auth[3] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 009a id_auth[4] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 009b id_auth[5] : 05 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 009c sub_auths : 00000020 00000225 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 0000a4 smb_io_unistr2 dom_ref[2] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 00a4 uni_max_len: 00000007 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 00a8 offset : 00000000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 00ac uni_str_len: 00000007 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 00b0 buffer : B.U.I.L.T.I.N. [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 0000c0 smb_io_dom_sid2 sid_ptr[2] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 00c0 num_auths: 00000002 [2003/11/13 10:53:24, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000c4 smb_io_dom_sid sid [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00c4 sid_rev_num: 01 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00c5 num_auths : 02 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00c6 id_auth[0] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00c7 id_auth[1] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00c8 id_auth[2] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00c9 id_auth[3] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00ca id_auth[4] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00cb id_auth[5] : 05 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 00cc sub_auths : 00000020 00000226 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 0000d4 smb_io_unistr2 dom_ref[3] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 00d4 uni_max_len: 00000007 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 00d8 offset : 00000000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 00dc uni_str_len: 00000007 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 00e0 buffer : B.U.I.L.T.I.N. [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 0000f0 smb_io_dom_sid2 sid_ptr[3] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 00f0 num_auths: 00000002 [2003/11/13 10:53:24, 8] rpc_parse/parse_prs.c:prs_debug(82) 0000f4 smb_io_dom_sid sid [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00f4 sid_rev_num: 01 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00f5 num_auths : 02 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00f6 id_auth[0] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00f7 id_auth[1] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00f8 id_auth[2] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00f9 id_auth[3] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00fa id_auth[4] : 00 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint8(577) 00fb id_auth[5] : 05 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32s(862) 00fc sub_auths : 00000020 00000229 [2003/11/13 10:53:24, 6] rpc_parse/parse_prs.c:prs_debug(82) 000104 lsa_io_trans_names names [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0104 num_entries : 00000004 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0108 ptr_trans_names: 00000001 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 010c num_entries2 : 00000004 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000110 lsa_io_trans_name name[0] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0110 sid_name_use: 0004 [2003/11/13 10:53:24, 8] rpc_parse/parse_prs.c:prs_debug(82) 000114 smb_io_unihdr hdr_name [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0114 uni_str_len: 0022 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0116 uni_max_len: 0022 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0118 buffer : 00000001 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 011c domain_idx : 00000000 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000120 lsa_io_trans_name name[1] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0120 sid_name_use: 0004 [2003/11/13 10:53:24, 8] rpc_parse/parse_prs.c:prs_debug(82) 000124 smb_io_unihdr hdr_name [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0124 uni_str_len: 0020 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0126 uni_max_len: 0020 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0128 buffer : 00000001 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 012c domain_idx : 00000001 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000130 lsa_io_trans_name name[2] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0130 sid_name_use: 0004 [2003/11/13 10:53:24, 8] rpc_parse/parse_prs.c:prs_debug(82) 000134 smb_io_unihdr hdr_name [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0134 uni_str_len: 001e [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0136 uni_max_len: 001e [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0138 buffer : 00000001 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 013c domain_idx : 00000002 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000140 lsa_io_trans_name name[3] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0140 sid_name_use: 0008 [2003/11/13 10:53:24, 8] rpc_parse/parse_prs.c:prs_debug(82) 000144 smb_io_unihdr hdr_name [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0144 uni_str_len: 0000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint16(606) 0146 uni_max_len: 0000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0148 buffer : 00000000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 014c domain_idx : 00000003 [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000150 smb_io_unistr2 name[0] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0150 uni_max_len: 00000011 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0154 offset : 00000000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0158 uni_str_len: 00000011 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 015c buffer : A.c.c.o.u.n.t. .O.p.e.r.a.t.o.r.s. [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 000180 smb_io_unistr2 name[1] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0180 uni_max_len: 00000010 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0184 offset : 00000000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 0188 uni_str_len: 00000010 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 018c buffer : S.e.r.v.e.r. .O.p.e.r.a.t.o.r.s. [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 0001ac smb_io_unistr2 name[2] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 01ac uni_max_len: 0000000f [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 01b0 offset : 00000000 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 01b4 uni_str_len: 0000000f [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807) 01b8 buffer : P.r.i.n.t. .O.p.e.r.a.t.o.r.s. [2003/11/13 10:53:24, 7] rpc_parse/parse_prs.c:prs_debug(82) 0001d8 smb_io_unistr2 - NULL name[3] [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_uint32(635) 01d8 mapped_count: 00000003 [2003/11/13 10:53:24, 5] rpc_parse/parse_prs.c:prs_ntstatus(665) 01dc status : NT_STATUS_OK [2003/11/13 10:53:24, 5] rpc_server/srv_pipe.c:api_rpcTNP(1543) api_rpcTNP: called lsarpc successfully