Attachment 2968 Details for Bug 5081 – Samba log for joining of the client during installation

Samba log for joining of the client during installation

installation.log (text/plain), 73.10 KB, created by Mike Starov on 2007-11-14 11:29:21 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Mike Starov

Created: 2007-11-14 11:29:21 UTC

Size: 73.10 KB

patch

obsolete

>[2007/11/13 16:03:35, 2] tdb/tdbutil.c:tdb_log(783)
>  tdb(/etc/samba/secrets.tdb): tdb_mmap failed for size 8192 (Invalid argument)
>[2007/11/13 16:03:35, 3] smbd/oplock.c:init_oplocks(862)
>  open_oplock_ipc: initializing messages.
>[2007/11/13 16:03:35, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(260)
>  Linux kernel oplocks enabled
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 0 of length 137
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBnegprot (pid 2688) conn 0x0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/negprot.c:reply_negprot(508)
>  Requested protocol [PC NETWORK PROGRAM 1.0]
>[2007/11/13 16:03:35, 3] smbd/negprot.c:reply_negprot(508)
>  Requested protocol [LANMAN1.0]
>[2007/11/13 16:03:35, 3] smbd/negprot.c:reply_negprot(508)
>  Requested protocol [Windows for Workgroups 3.1a]
>[2007/11/13 16:03:35, 3] smbd/negprot.c:reply_negprot(508)
>  Requested protocol [LM1.2X002]
>[2007/11/13 16:03:35, 3] smbd/negprot.c:reply_negprot(508)
>  Requested protocol [LANMAN2.1]
>[2007/11/13 16:03:35, 3] smbd/negprot.c:reply_negprot(508)
>  Requested protocol [NT LM 0.12]
>[2007/11/13 16:03:35, 3] smbd/negprot.c:reply_nt1(367)
>  using SPNEGO
>[2007/11/13 16:03:35, 3] smbd/negprot.c:reply_negprot(609)
>  Selected protocol NT LM 0.12
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 1 of length 202
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBsesssetupX (pid 2688) conn 0x0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sesssetup.c:reply_sesssetup_and_X(849)
>  wct=12 flg2=0xc807
>[2007/11/13 16:03:35, 2] smbd/sesssetup.c:setup_new_vc_session(799)
>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
>[2007/11/13 16:03:35, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(660)
>  Doing spnego session setup
>[2007/11/13 16:03:35, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(691)
>  NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[]
>[2007/11/13 16:03:35, 3] smbd/sesssetup.c:reply_spnego_negotiate(551)
>  Got OID 1 3 6 1 4 1 311 2 2 10
>[2007/11/13 16:03:35, 3] smbd/sesssetup.c:reply_spnego_negotiate(554)
>  Got secblob of size 32
>[2007/11/13 16:03:35, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
>  Got NTLMSSP neg_flags=0xc0008297
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 2 of length 338
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBsesssetupX (pid 2688) conn 0x0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sesssetup.c:reply_sesssetup_and_X(849)
>  wct=12 flg2=0xc807
>[2007/11/13 16:03:35, 2] smbd/sesssetup.c:setup_new_vc_session(799)
>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
>[2007/11/13 16:03:35, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(660)
>  Doing spnego session setup
>[2007/11/13 16:03:35, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(691)
>  NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[]
>[2007/11/13 16:03:35, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739)
>  Got user=[netce.admin] domain=[NETCE.COM] workstation=[MACHINENAME] len1=24 len2=24
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] auth/auth.c:check_ntlm_password(221)
>  check_ntlm_password:  Checking password for unmapped user [NETCE.COM]\[netce.admin]@[MACHINENAME] with the new password interface
>[2007/11/13 16:03:35, 3] auth/auth.c:check_ntlm_password(224)
>  check_ntlm_password:  mapped user is: [NETCE.COM]\[netce.admin]@[MACHINENAME]
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 2] lib/smbldap.c:smbldap_open_connection(788)
>  smbldap_open_connection: connection opened
>[2007/11/13 16:03:35, 3] lib/smbldap.c:smbldap_connect_system(992)
>  ldap_connect_system: succesful connection to the LDAP server
>[2007/11/13 16:03:35, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541)
>  init_sam_from_ldap: Entry found for user: netce.admin
>[2007/11/13 16:03:35, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140)
>  init_group_from_ldap: Entry found for group: 1000
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:35, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2007/11/13 16:03:35, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2007/11/13 16:03:35, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140)
>  init_group_from_ldap: Entry found for group: 1000
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:35, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2007/11/13 16:03:35, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2007/11/13 16:03:35, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140)
>  init_group_from_ldap: Entry found for group: 1000
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] passdb/lookup_sid.c:store_gid_sid_cache(1079)
>  store_gid_sid_cache: gid 1000 in cache -> S-1-5-21-1076953358-2977740552-3776987585-512
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1015)
>  fetch sid from gid cache 1000 -> S-1-5-21-1076953358-2977740552-3776987585-512
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:35, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:35, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140)
>  init_group_from_ldap: Entry found for group: 1001
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] passdb/lookup_sid.c:store_gid_sid_cache(1079)
>  store_gid_sid_cache: gid 1001 in cache -> S-1-5-21-1076953358-2977740552-3776987585-513
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] auth/auth.c:check_ntlm_password(270)
>  check_ntlm_password: sam authentication for user [netce.admin] succeeded
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 2] auth/auth.c:check_ntlm_password(309)
>  check_ntlm_password:  authentication for user [netce.admin] -> [netce.admin] -> [netce.admin] succeeded
>[2007/11/13 16:03:35, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035)
>  fetch gid from cache 10000 -> S-1-5-32-544
>[2007/11/13 16:03:35, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035)
>  fetch gid from cache 10001 -> S-1-5-32-545
>[2007/11/13 16:03:35, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-5-21-1076953358-2977740552-3776987585-3006]
>[2007/11/13 16:03:35, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2007/11/13 16:03:35, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-5-11]
>[2007/11/13 16:03:35, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-5-21-1076953358-2977740552-3776987585-513]
>[2007/11/13 16:03:35, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-22-2-1000]
>[2007/11/13 16:03:35, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-22-2-1001]
>[2007/11/13 16:03:35, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-5-32-545]
>[2007/11/13 16:03:35, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035)
>  fetch gid from cache 1000 -> S-1-5-21-1076953358-2977740552-3776987585-512
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035)
>  fetch gid from cache 1001 -> S-1-5-21-1076953358-2977740552-3776987585-513
>[2007/11/13 16:03:35, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035)
>  fetch gid from cache 10000 -> S-1-5-32-544
>[2007/11/13 16:03:35, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035)
>  fetch gid from cache 10001 -> S-1-5-32-545
>[2007/11/13 16:03:35, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2007/11/13 16:03:35, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
>  Got NTLMSSP neg_flags=0xc0008295
>[2007/11/13 16:03:35, 3] smbd/password.c:register_vuid(282)
>  User name: netce.admin	Real name: NetCE Admin
>[2007/11/13 16:03:35, 3] smbd/password.c:register_vuid(303)
>  UNIX uid 1003 is UNIX user netce.admin, and will be vuid 101
>[2007/11/13 16:03:35, 3] smbd/password.c:register_vuid(334)
>  Adding homes service for user 'netce.admin' using home directory: '/home/netce.admin'
>[2007/11/13 16:03:35, 3] param/loadparm.c:lp_add_home(2638)
>  adding home's share [netce.admin] for user 'netce.admin' at '/cluster/samba-ntprofiles/%S'
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 3 of length 80
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBtconX (pid 2688) conn 0x0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/service.c:make_connection_snum(761)
>  Connect path is '/var/tmp' for service [IPC$]
>[2007/11/13 16:03:35, 3] lib/util_seaccess.c:se_access_check(250)
>[2007/11/13 16:03:35, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513
>  se_access_check: also S-1-22-2-1000
>  se_access_check: also S-1-22-2-1001
>  se_access_check: also S-1-5-32-544
>  se_access_check: also S-1-5-32-545
>[2007/11/13 16:03:35, 3] smbd/vfs.c:vfs_init_default(219)
>  Initialising default vfs hooks
>[2007/11/13 16:03:35, 3] lib/util_seaccess.c:se_access_check(250)
>[2007/11/13 16:03:35, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513
>  se_access_check: also S-1-22-2-1000
>  se_access_check: also S-1-22-2-1001
>  se_access_check: also S-1-5-32-544
>  se_access_check: also S-1-5-32-545
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (1003, 1000) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/service.c:make_connection_snum(950)
>  machinename (192.168.9.99) connect to service IPC$ initially as user netce.admin (uid=1003, gid=1000) (pid 2688)
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/reply.c:reply_tcon_and_X(716)
>  tconX service=IPC$ 
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 4 of length 104
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBntcreateX (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (1003, 1000) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/nttrans.c:nt_open_pipe(346)
>  nt_open_pipe: Known pipe lsarpc opening.
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 5 of length 140
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBwriteX (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
>  api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:check_bind_req(985)
>  check_bind_req for \PIPE\lsarpc
>[2007/11/13 16:03:35, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
>  writeX-IPC pnum=71d7 nwritten=72
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 6 of length 63
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBreadX (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
>  readX-IPC pnum=71d7 min=1024 max=1024 nread=68
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 7 of length 172
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=84 params=0 setup=2
>[2007/11/13 16:03:35, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:35, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "lsarpc" (pnum 71d7)
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 71
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: LSA_OPENPOLICY2
>[2007/11/13 16:03:35, 3] lib/util_seaccess.c:se_access_check(250)
>[2007/11/13 16:03:35, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513
>  se_access_check: also S-1-22-2-1000
>  se_access_check: also S-1-22-2-1001
>  se_access_check: also S-1-5-32-544
>  se_access_check: also S-1-5-32-545
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 816
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 8 of length 134
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=46 params=0 setup=2
>[2007/11/13 16:03:35, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:35, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "lsarpc" (pnum 71d7)
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 9 of length 134
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=46 params=0 setup=2
>[2007/11/13 16:03:35, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:35, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "lsarpc" (pnum 71d7)
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 20
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 10 of length 104
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBntcreateX (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/nttrans.c:nt_open_pipe(346)
>  nt_open_pipe: Known pipe winreg opening.
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 11 of length 140
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBwriteX (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
>  api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:check_bind_req(985)
>  check_bind_req for \PIPE\winreg
>[2007/11/13 16:03:35, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
>  writeX-IPC pnum=71d8 nwritten=72
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 12 of length 63
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBreadX (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
>  readX-IPC pnum=71d8 min=1024 max=1024 nread=68
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 13 of length 124
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=36 params=0 setup=2
>[2007/11/13 16:03:35, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:35, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "winreg" (pnum 71d8)
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 71
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: REG_OPEN_HKLM
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] lib/util_seaccess.c:se_access_check(250)
>[2007/11/13 16:03:35, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513
>  se_access_check: also S-1-22-2-1000
>  se_access_check: also S-1-22-2-1001
>  se_access_check: also S-1-5-32-544
>  se_access_check: also S-1-5-32-545
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 510
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 14 of length 272
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=184 params=0 setup=2
>[2007/11/13 16:03:35, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:35, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "winreg" (pnum 71d8)
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: REG_OPEN_ENTRY
>[2007/11/13 16:03:35, 3] lib/util_seaccess.c:se_access_check(250)
>[2007/11/13 16:03:35, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513
>  se_access_check: also S-1-22-2-1000
>  se_access_check: also S-1-22-2-1001
>  se_access_check: also S-1-5-32-544
>  se_access_check: also S-1-5-32-545
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 634
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 15 of length 236
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=148 params=0 setup=2
>[2007/11/13 16:03:35, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:35, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "winreg" (pnum 71d8)
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: REG_QUERY_VALUE
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 90
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 16 of length 132
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2007/11/13 16:03:35, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:35, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "winreg" (pnum 71d8)
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: REG_CLOSE
>[2007/11/13 16:03:35, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
>  Closed policy
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 17 of length 132
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2007/11/13 16:03:35, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:35, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "winreg" (pnum 71d8)
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: REG_CLOSE
>[2007/11/13 16:03:35, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
>  Closed policy
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 18 of length 45
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBclose (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 19 of length 108
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBntcreateX (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/nttrans.c:nt_open_pipe(346)
>  nt_open_pipe: Known pipe NETLOGON opening.
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 20 of length 140
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBwriteX (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
>  api_pipe_bind_req: \PIPE\NETLOGON -> \PIPE\lsass
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:check_bind_req(985)
>  check_bind_req for \PIPE\NETLOGON
>[2007/11/13 16:03:35, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
>  writeX-IPC pnum=71d9 nwritten=72
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 21 of length 63
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBreadX (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
>  readX-IPC pnum=71d9 min=1024 max=1024 nread=68
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 22 of length 196
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=108 params=0 setup=2
>[2007/11/13 16:03:35, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:35, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "NETLOGON" (pnum 71d9)
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 73
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: NET_REQCHAL
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 48
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 23 of length 45
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBclose (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 24 of length 108
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBntcreateX (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/nttrans.c:nt_open_pipe(346)
>  nt_open_pipe: Known pipe NETLOGON opening.
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 25 of length 140
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBwriteX (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
>  api_pipe_bind_req: \PIPE\NETLOGON -> \PIPE\lsass
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:check_bind_req(985)
>  check_bind_req for \PIPE\NETLOGON
>[2007/11/13 16:03:35, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
>  writeX-IPC pnum=71da nwritten=72
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 26 of length 63
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBreadX (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
>  readX-IPC pnum=71da min=1024 max=1024 nread=68
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 27 of length 244
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=156 params=0 setup=2
>[2007/11/13 16:03:35, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:35, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "NETLOGON" (pnum 71da)
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 73
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: NET_AUTH
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 82
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 28 of length 45
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBclose (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 29 of length 132
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2007/11/13 16:03:35, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:35, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "lsarpc" (pnum 71d7)
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: LSA_CLOSE
>[2007/11/13 16:03:35, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
>  Closed policy
>[2007/11/13 16:03:35, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 30 of length 45
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBclose (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 31 of length 39
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBtdis (pid 2688) conn 0x80418e60
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/service.c:close_cnum(1150)
>  machinename (192.168.9.99) closed connection to service IPC$
>[2007/11/13 16:03:35, 3] smbd/connection.c:yield_connection(69)
>  Yielding connection to IPC$
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/process.c:process_smb(1110)
>  Transaction 32 of length 43
>[2007/11/13 16:03:35, 3] smbd/process.c:switch_message(914)
>  switch message SMBulogoffX (pid 2688) conn 0x0
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/reply.c:reply_ulogoffX(1618)
>  ulogoffX vuid=101
>[2007/11/13 16:03:35, 3] smbd/process.c:timeout_processing(1359)
>  timeout_processing: End of file from client (client has disconnected).
>[2007/11/13 16:03:35, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:35, 3] smbd/connection.c:yield_connection(69)
>  Yielding connection to 
>[2007/11/13 16:03:35, 3] smbd/server.c:exit_server_common(675)
>  Server exit (normal exit)
>[2007/11/13 16:03:36, 2] tdb/tdbutil.c:tdb_log(783)
>  tdb(/etc/samba/secrets.tdb): tdb_mmap failed for size 8192 (Invalid argument)
>[2007/11/13 16:03:36, 3] smbd/oplock.c:init_oplocks(862)
>  open_oplock_ipc: initializing messages.
>[2007/11/13 16:03:36, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(260)
>  Linux kernel oplocks enabled
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 0 of length 137
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBnegprot (pid 2732) conn 0x0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/negprot.c:reply_negprot(508)
>  Requested protocol [PC NETWORK PROGRAM 1.0]
>[2007/11/13 16:03:36, 3] smbd/negprot.c:reply_negprot(508)
>  Requested protocol [LANMAN1.0]
>[2007/11/13 16:03:36, 3] smbd/negprot.c:reply_negprot(508)
>  Requested protocol [Windows for Workgroups 3.1a]
>[2007/11/13 16:03:36, 3] smbd/negprot.c:reply_negprot(508)
>  Requested protocol [LM1.2X002]
>[2007/11/13 16:03:36, 3] smbd/negprot.c:reply_negprot(508)
>  Requested protocol [LANMAN2.1]
>[2007/11/13 16:03:36, 3] smbd/negprot.c:reply_negprot(508)
>  Requested protocol [NT LM 0.12]
>[2007/11/13 16:03:36, 3] smbd/negprot.c:reply_nt1(367)
>  using SPNEGO
>[2007/11/13 16:03:36, 3] smbd/negprot.c:reply_negprot(609)
>  Selected protocol NT LM 0.12
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 1 of length 202
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBsesssetupX (pid 2732) conn 0x0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sesssetup.c:reply_sesssetup_and_X(849)
>  wct=12 flg2=0xc807
>[2007/11/13 16:03:36, 2] smbd/sesssetup.c:setup_new_vc_session(799)
>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
>[2007/11/13 16:03:36, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(660)
>  Doing spnego session setup
>[2007/11/13 16:03:36, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(691)
>  NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[]
>[2007/11/13 16:03:36, 3] smbd/sesssetup.c:reply_spnego_negotiate(551)
>  Got OID 1 3 6 1 4 1 311 2 2 10
>[2007/11/13 16:03:36, 3] smbd/sesssetup.c:reply_spnego_negotiate(554)
>  Got secblob of size 32
>[2007/11/13 16:03:36, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
>  Got NTLMSSP neg_flags=0xc0008297
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 2 of length 338
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBsesssetupX (pid 2732) conn 0x0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sesssetup.c:reply_sesssetup_and_X(849)
>  wct=12 flg2=0xc807
>[2007/11/13 16:03:36, 2] smbd/sesssetup.c:setup_new_vc_session(799)
>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
>[2007/11/13 16:03:36, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(660)
>  Doing spnego session setup
>[2007/11/13 16:03:36, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(691)
>  NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0] PrimaryDomain=[]
>[2007/11/13 16:03:36, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739)
>  Got user=[netce.admin] domain=[NETCE.COM] workstation=[MACHINENAME] len1=24 len2=24
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] auth/auth.c:check_ntlm_password(221)
>  check_ntlm_password:  Checking password for unmapped user [NETCE.COM]\[netce.admin]@[MACHINENAME] with the new password interface
>[2007/11/13 16:03:36, 3] auth/auth.c:check_ntlm_password(224)
>  check_ntlm_password:  mapped user is: [NETCE.COM]\[netce.admin]@[MACHINENAME]
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 2] lib/smbldap.c:smbldap_open_connection(788)
>  smbldap_open_connection: connection opened
>[2007/11/13 16:03:36, 3] lib/smbldap.c:smbldap_connect_system(992)
>  ldap_connect_system: succesful connection to the LDAP server
>[2007/11/13 16:03:36, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541)
>  init_sam_from_ldap: Entry found for user: netce.admin
>[2007/11/13 16:03:36, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140)
>  init_group_from_ldap: Entry found for group: 1000
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2007/11/13 16:03:36, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140)
>  init_group_from_ldap: Entry found for group: 1000
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3
>[2007/11/13 16:03:36, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140)
>  init_group_from_ldap: Entry found for group: 1000
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] passdb/lookup_sid.c:store_gid_sid_cache(1079)
>  store_gid_sid_cache: gid 1000 in cache -> S-1-5-21-1076953358-2977740552-3776987585-512
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(1015)
>  fetch sid from gid cache 1000 -> S-1-5-21-1076953358-2977740552-3776987585-512
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 2] passdb/pdb_ldap.c:init_group_from_ldap(2140)
>  init_group_from_ldap: Entry found for group: 1001
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] passdb/lookup_sid.c:store_gid_sid_cache(1079)
>  store_gid_sid_cache: gid 1001 in cache -> S-1-5-21-1076953358-2977740552-3776987585-513
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] auth/auth.c:check_ntlm_password(270)
>  check_ntlm_password: sam authentication for user [netce.admin] succeeded
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 2] auth/auth.c:check_ntlm_password(309)
>  check_ntlm_password:  authentication for user [netce.admin] -> [netce.admin] -> [netce.admin] succeeded
>[2007/11/13 16:03:36, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035)
>  fetch gid from cache 10000 -> S-1-5-32-544
>[2007/11/13 16:03:36, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035)
>  fetch gid from cache 10001 -> S-1-5-32-545
>[2007/11/13 16:03:36, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-5-21-1076953358-2977740552-3776987585-3006]
>[2007/11/13 16:03:36, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2007/11/13 16:03:36, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-5-11]
>[2007/11/13 16:03:36, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-5-21-1076953358-2977740552-3776987585-513]
>[2007/11/13 16:03:36, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-22-2-1000]
>[2007/11/13 16:03:36, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-22-2-1001]
>[2007/11/13 16:03:36, 3] lib/privileges.c:get_privileges(261)
>  get_privileges: No privileges assigned to SID [S-1-5-32-545]
>[2007/11/13 16:03:36, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035)
>  fetch gid from cache 1000 -> S-1-5-21-1076953358-2977740552-3776987585-512
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035)
>  fetch gid from cache 1001 -> S-1-5-21-1076953358-2977740552-3776987585-513
>[2007/11/13 16:03:36, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035)
>  fetch gid from cache 10000 -> S-1-5-32-544
>[2007/11/13 16:03:36, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1035)
>  fetch gid from cache 10001 -> S-1-5-32-545
>[2007/11/13 16:03:36, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2007/11/13 16:03:36, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
>  Got NTLMSSP neg_flags=0xc0008295
>[2007/11/13 16:03:36, 3] smbd/password.c:register_vuid(282)
>  User name: netce.admin	Real name: NetCE Admin
>[2007/11/13 16:03:36, 3] smbd/password.c:register_vuid(303)
>  UNIX uid 1003 is UNIX user netce.admin, and will be vuid 101
>[2007/11/13 16:03:36, 3] smbd/password.c:register_vuid(334)
>  Adding homes service for user 'netce.admin' using home directory: '/home/netce.admin'
>[2007/11/13 16:03:36, 3] param/loadparm.c:lp_add_home(2638)
>  adding home's share [netce.admin] for user 'netce.admin' at '/cluster/samba-ntprofiles/%S'
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 3 of length 80
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtconX (pid 2732) conn 0x0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/service.c:make_connection_snum(761)
>  Connect path is '/var/tmp' for service [IPC$]
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(250)
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513
>  se_access_check: also S-1-22-2-1000
>  se_access_check: also S-1-22-2-1001
>  se_access_check: also S-1-5-32-544
>  se_access_check: also S-1-5-32-545
>[2007/11/13 16:03:36, 3] smbd/vfs.c:vfs_init_default(219)
>  Initialising default vfs hooks
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(250)
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513
>  se_access_check: also S-1-22-2-1000
>  se_access_check: also S-1-22-2-1001
>  se_access_check: also S-1-5-32-544
>  se_access_check: also S-1-5-32-545
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (1003, 1000) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/service.c:make_connection_snum(950)
>  machinename (192.168.9.99) connect to service IPC$ initially as user netce.admin (uid=1003, gid=1000) (pid 2732)
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/reply.c:reply_tcon_and_X(716)
>  tconX service=IPC$ 
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 4 of length 104
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBntcreateX (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (1003, 1000) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/nttrans.c:nt_open_pipe(346)
>  nt_open_pipe: Known pipe lsarpc opening.
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 5 of length 140
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBwriteX (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
>  api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsass
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:check_bind_req(985)
>  check_bind_req for \PIPE\lsarpc
>[2007/11/13 16:03:36, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
>  writeX-IPC pnum=71f4 nwritten=72
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 6 of length 63
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBreadX (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
>  readX-IPC pnum=71f4 min=1024 max=1024 nread=68
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 7 of length 172
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=84 params=0 setup=2
>[2007/11/13 16:03:36, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:36, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "lsarpc" (pnum 71f4)
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 71
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: LSA_OPENPOLICY2
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(250)
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513
>  se_access_check: also S-1-22-2-1000
>  se_access_check: also S-1-22-2-1001
>  se_access_check: also S-1-5-32-544
>  se_access_check: also S-1-5-32-545
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 816
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 8 of length 134
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=46 params=0 setup=2
>[2007/11/13 16:03:36, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:36, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "lsarpc" (pnum 71f4)
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 9 of length 134
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=46 params=0 setup=2
>[2007/11/13 16:03:36, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:36, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "lsarpc" (pnum 71f4)
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 20
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 10 of length 104
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBntcreateX (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/nttrans.c:nt_open_pipe(346)
>  nt_open_pipe: Known pipe winreg opening.
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 11 of length 140
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBwriteX (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
>  api_pipe_bind_req: \PIPE\winreg -> \PIPE\winreg
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:check_bind_req(985)
>  check_bind_req for \PIPE\winreg
>[2007/11/13 16:03:36, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
>  writeX-IPC pnum=71f5 nwritten=72
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 12 of length 63
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBreadX (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
>  readX-IPC pnum=71f5 min=1024 max=1024 nread=68
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 13 of length 124
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=36 params=0 setup=2
>[2007/11/13 16:03:36, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:36, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "winreg" (pnum 71f5)
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 71
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: REG_OPEN_HKLM
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(250)
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513
>  se_access_check: also S-1-22-2-1000
>  se_access_check: also S-1-22-2-1001
>  se_access_check: also S-1-5-32-544
>  se_access_check: also S-1-5-32-545
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 510
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 14 of length 272
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=184 params=0 setup=2
>[2007/11/13 16:03:36, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:36, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "winreg" (pnum 71f5)
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: REG_OPEN_ENTRY
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(250)
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513
>  se_access_check: also S-1-22-2-1000
>  se_access_check: also S-1-22-2-1001
>  se_access_check: also S-1-5-32-544
>  se_access_check: also S-1-5-32-545
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 634
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 15 of length 236
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=148 params=0 setup=2
>[2007/11/13 16:03:36, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:36, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "winreg" (pnum 71f5)
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: REG_QUERY_VALUE
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 90
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 16 of length 132
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2007/11/13 16:03:36, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:36, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "winreg" (pnum 71f5)
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: REG_CLOSE
>[2007/11/13 16:03:36, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
>  Closed policy
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 17 of length 132
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2007/11/13 16:03:36, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:36, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "winreg" (pnum 71f5)
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: REG_CLOSE
>[2007/11/13 16:03:36, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
>  Closed policy
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 18 of length 45
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBclose (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 19 of length 100
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBntcreateX (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/nttrans.c:nt_open_pipe(346)
>  nt_open_pipe: Known pipe samr opening.
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 20 of length 140
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBwriteX (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1534)
>  api_pipe_bind_req: \PIPE\samr -> \PIPE\lsass
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:check_bind_req(985)
>  check_bind_req for \PIPE\samr
>[2007/11/13 16:03:36, 3] smbd/pipes.c:reply_pipe_write_and_X(217)
>  writeX-IPC pnum=71f6 nwritten=72
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 21 of length 63
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBreadX (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/pipes.c:reply_pipe_read_and_X(262)
>  readX-IPC pnum=71f6 min=1024 max=1024 nread=68
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 22 of length 152
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=64 params=0 setup=2
>[2007/11/13 16:03:36, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:36, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "samr" (pnum 71f6)
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 69
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: SAMR_CONNECT4
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(250)
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513
>  se_access_check: also S-1-22-2-1000
>  se_access_check: also S-1-22-2-1001
>  se_access_check: also S-1-5-32-544
>  se_access_check: also S-1-5-32-545
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 972
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 23 of length 140
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=52 params=0 setup=2
>[2007/11/13 16:03:36, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:36, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "samr" (pnum 71f6)
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: SAMR_ENUM_DOMAINS
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 92
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 24 of length 170
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=82 params=0 setup=2
>[2007/11/13 16:03:36, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:36, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "samr" (pnum 71f6)
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: SAMR_LOOKUP_DOMAIN
>[2007/11/13 16:03:36, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2797)
>  Returning domain sid for domain NETCE.COM -> S-1-5-21-1076953358-2977740552-3776987585
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 18
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 25 of length 164
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=76 params=0 setup=2
>[2007/11/13 16:03:36, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:36, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "samr" (pnum 71f6)
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: SAMR_OPEN_DOMAIN
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(250)
>[2007/11/13 16:03:36, 3] lib/util_seaccess.c:se_access_check(251)
>  se_access_check: user sid is S-1-5-21-1076953358-2977740552-3776987585-3006
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-512
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-1076953358-2977740552-3776987585-513
>  se_access_check: also S-1-22-2-1000
>  se_access_check: also S-1-22-2-1001
>  se_access_check: also S-1-5-32-544
>  se_access_check: also S-1-5-32-545
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 956
>[2007/11/13 16:03:36, 3] smbd/process.c:process_smb(1110)
>  Transaction 26 of length 192
>[2007/11/13 16:03:36, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:36, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=104 params=0 setup=2
>[2007/11/13 16:03:36, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:36, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "samr" (pnum 71f6)
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:36, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: SAMR_CREATE_USER
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:36, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:41, 3] passdb/pdb_interface.c:pdb_default_create_user(368)
>  _samr_create_user: Running the command `/cluster/samba-ntprofiles/create_computer_account2 192.168.9.99 machinename netce.admin' gave 0
>[2007/11/13 16:03:41, 3] passdb/pdb_interface.c:pdb_default_create_user(384)
>  pdb_default_create_user: failed to create a new user structure: NT_STATUS_NO_SUCH_USER
>[2007/11/13 16:03:41, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:41, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 323
>[2007/11/13 16:03:41, 3] smbd/process.c:process_smb(1110)
>  Transaction 27 of length 132
>[2007/11/13 16:03:41, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:41, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2007/11/13 16:03:41, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:41, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "samr" (pnum 71f6)
>[2007/11/13 16:03:41, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:41, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: SAMR_CLOSE_HND
>[2007/11/13 16:03:41, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
>  Closed policy
>[2007/11/13 16:03:41, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:41, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:41, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:41, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:41, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:41, 3] smbd/process.c:process_smb(1110)
>  Transaction 28 of length 132
>[2007/11/13 16:03:41, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:41, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2007/11/13 16:03:41, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:41, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "samr" (pnum 71f6)
>[2007/11/13 16:03:41, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:41, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: SAMR_CLOSE_HND
>[2007/11/13 16:03:41, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
>  Closed policy
>[2007/11/13 16:03:41, 3] smbd/sec_ctx.c:push_sec_ctx(208)
>  push_sec_ctx(1003, 1000) : sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:41, 3] smbd/uid.c:push_conn_ctx(345)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2007/11/13 16:03:41, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2007/11/13 16:03:41, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
>  pop_sec_ctx (1003, 1000) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:41, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:41, 3] smbd/process.c:process_smb(1110)
>  Transaction 29 of length 45
>[2007/11/13 16:03:41, 3] smbd/process.c:switch_message(914)
>  switch message SMBclose (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:41, 3] smbd/process.c:process_smb(1110)
>  Transaction 30 of length 132
>[2007/11/13 16:03:41, 3] smbd/process.c:switch_message(914)
>  switch message SMBtrans (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:41, 3] smbd/ipc.c:handle_trans(373)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2007/11/13 16:03:41, 3] smbd/ipc.c:named_pipe(340)
>  named pipe command on <> name
>[2007/11/13 16:03:41, 3] smbd/ipc.c:api_fd_reply(300)
>  Got API command 0x26 on pipe "lsarpc" (pnum 71f4)
>[2007/11/13 16:03:41, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:41, 3] rpc_server/srv_pipe.c:api_rpcTNP(2265)
>  api_rpcTNP: rpc command: LSA_CLOSE
>[2007/11/13 16:03:41, 3] rpc_server/srv_lsa_hnd.c:close_policy_hnd(200)
>  Closed policy
>[2007/11/13 16:03:41, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(549)
>  free_pipe_context: destroying talloc pool of size 0
>[2007/11/13 16:03:41, 3] smbd/process.c:process_smb(1110)
>  Transaction 31 of length 45
>[2007/11/13 16:03:41, 3] smbd/process.c:switch_message(914)
>  switch message SMBclose (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:41, 3] smbd/process.c:process_smb(1110)
>  Transaction 32 of length 39
>[2007/11/13 16:03:41, 3] smbd/process.c:switch_message(914)
>  switch message SMBtdis (pid 2732) conn 0x8042f990
>[2007/11/13 16:03:41, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:41, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:41, 3] smbd/service.c:close_cnum(1150)
>  machinename (192.168.9.99) closed connection to service IPC$
>[2007/11/13 16:03:41, 3] smbd/connection.c:yield_connection(69)
>  Yielding connection to IPC$
>[2007/11/13 16:03:41, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:41, 3] smbd/process.c:process_smb(1110)
>  Transaction 33 of length 43
>[2007/11/13 16:03:41, 3] smbd/process.c:switch_message(914)
>  switch message SMBulogoffX (pid 2732) conn 0x0
>[2007/11/13 16:03:41, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:41, 3] smbd/reply.c:reply_ulogoffX(1618)
>  ulogoffX vuid=101
>[2007/11/13 16:03:41, 3] smbd/process.c:timeout_processing(1359)
>  timeout_processing: End of file from client (client has disconnected).
>[2007/11/13 16:03:41, 3] smbd/sec_ctx.c:set_sec_ctx(241)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2007/11/13 16:03:41, 3] smbd/connection.c:yield_connection(69)
>  Yielding connection to 
>[2007/11/13 16:03:41, 3] smbd/server.c:exit_server_common(675)
>  Server exit (normal exit)

Actions: View

Attachments on bug 5081: 2968 | 2969 | 2970 | 2971