[2007/11/25 15:42:54, 2] lib/interface.c:add_interface(81) added interface ip=192.168.31.191 bcast=192.168.31.255 nmask=255.255.255.0 [2007/11/25 15:42:54, 5] lib/util.c:init_names(287) Netbios name list:- my_netbios_names[0]="DD-RHES3" [2007/11/25 15:42:54, 2] lib/interface.c:add_interface(81) added interface ip=192.168.31.191 bcast=192.168.31.255 nmask=255.255.255.0 [2007/11/25 15:42:54, 5] lib/gencache.c:gencache_init(61) Opening cache file at /var/lib/samba/gencache.tdb [2007/11/25 15:42:54, 5] libsmb/namecache.c:namecache_enable(58) namecache_enable: enabling netbios namecache, timeout 660 seconds [2007/11/25 15:42:54, 10] nsswitch/idmap_cache.c:idmap_cache_init(60) Opening cache file at /var/lib/samba/idmap_cache.tdb [2007/11/25 15:42:54, 8] lib/util.c:fcntl_lock(1992) fcntl_lock fd=8 op=13 offset=0 count=1 type=1 [2007/11/25 15:42:54, 8] lib/util.c:fcntl_lock(2011) fcntl_lock: Lock call successful [2007/11/25 15:42:54, 4] lib/time.c:TimeInit(1258) TimeInit: Serverzone is 28800 [2007/11/25 15:42:54, 2] lib/tallocmsg.c:register_msg_pool_usage(105) Registered MSG_REQ_POOL_USAGE [2007/11/25 15:42:54, 2] lib/dmallocmsg.c:register_dmalloc_msgs(75) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2007/11/25 15:42:54, 0] nsswitch/winbindd_cache.c:initialize_winbindd_cache(2222) initialize_winbindd_cache: clearing cache and re-creating with version number 1 [2007/11/25 15:42:54, 2] nsswitch/winbindd_util.c:add_trusted_domain(177) Added domain DDCENTRIFY DDCENTRIFY.DEV S-1-5-21-641626746-684231166-3284099977 [2007/11/25 15:42:54, 10] nsswitch/winbindd_cm.c:set_domain_online_request(417) set_domain_online_request: called for domain DDCENTRIFY [2007/11/25 15:42:54, 10] nsswitch/winbindd_cm.c:set_domain_online_request(437) set_domain_online_request: domain DDCENTRIFY was globally offline. [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "check_domain_online_handler": 83dfff8 [2007/11/25 15:42:54, 2] nsswitch/winbindd_util.c:add_trusted_domain(177) Added domain DD-RHES3 S-1-5-21-641626746-684231166-3284099977-3210 [2007/11/25 15:42:54, 2] nsswitch/winbindd_util.c:add_trusted_domain(177) Added domain BUILTIN S-1-5-32 [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:open_winbindd_socket(927) open_winbindd_socket: opened socket fd 12 [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:open_winbindd_priv_socket(939) open_winbindd_priv_socket: opened socket fd 13 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 4/998004 [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dd4f0 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 4/997874 [2007/11/25 15:42:54, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:42:54, 2] lib/interface.c:add_interface(81) added interface ip=192.168.31.191 bcast=192.168.31.255 nmask=255.255.255.0 [2007/11/25 15:42:54, 5] lib/util.c:init_names(287) Netbios name list:- my_netbios_names[0]="DD-RHES3" [2007/11/25 15:42:54, 3] smbd/server.c:main(982) loaded services [2007/11/25 15:42:54, 0] smbd/server.c:main(986) standard input is not a socket, assuming -D option [2007/11/25 15:42:54, 3] smbd/server.c:main(997) Becoming a daemon. [2007/11/25 15:42:54, 8] lib/util.c:fcntl_lock(1992) fcntl_lock fd=7 op=13 offset=0 count=1 type=1 [2007/11/25 15:42:54, 8] lib/util.c:fcntl_lock(2011) fcntl_lock: Lock call successful [2007/11/25 15:42:54, 2] lib/tallocmsg.c:register_msg_pool_usage(105) Registered MSG_REQ_POOL_USAGE [2007/11/25 15:42:54, 2] lib/dmallocmsg.c:register_dmalloc_msgs(75) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2007/11/25 15:42:54, 5] passdb/pdb_interface.c:smb_register_passdb(68) Attempting to register passdb backend smbpasswd [2007/11/25 15:42:54, 5] passdb/pdb_interface.c:smb_register_passdb(81) Successfully added passdb backend 'smbpasswd' [2007/11/25 15:42:54, 5] passdb/pdb_interface.c:smb_register_passdb(68) Attempting to register passdb backend tdbsam [2007/11/25 15:42:54, 5] passdb/pdb_interface.c:smb_register_passdb(81) Successfully added passdb backend 'tdbsam' [2007/11/25 15:42:54, 5] passdb/pdb_interface.c:make_pdb_method_name(121) Attempting to find an passdb backend to match tdbsam:/etc/samba/private/passdb.tdb (tdbsam) [2007/11/25 15:42:54, 5] passdb/pdb_interface.c:make_pdb_method_name(142) Found pdb backend tdbsam [2007/11/25 15:42:54, 5] passdb/pdb_interface.c:make_pdb_method_name(153) pdb backend tdbsam:/etc/samba/private/passdb.tdb has a valid init [2007/11/25 15:42:54, 5] lib/gencache.c:gencache_init(61) Opening cache file at /var/lib/samba/gencache.tdb [2007/11/25 15:42:54, 5] libsmb/namecache.c:namecache_enable(58) namecache_enable: enabling netbios namecache, timeout 660 seconds [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Print] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print] with subkey [Printers] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Ports] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Print] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [LanmanServer] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer] with subkey [Shares] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [Eventlog] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Perflib] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM] with subkey [SOFTWARE] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE] with subkey [Microsoft] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft] with subkey [Windows NT] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT] with subkey [CurrentVersion] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion] with subkey [Perflib] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] with subkey [009] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Print] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print] with subkey [Monitors] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [ProductOptions] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Control] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control] with subkey [Terminal Server] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server] with subkey [DefaultUserConfiguration] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [TcpIp] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp] with subkey [Parameters] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM] with subkey [SYSTEM] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM] with subkey [CurrentControlSet] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet] with subkey [Services] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services] with subkey [Netlogon] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon] with subkey [Parameters] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKU] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKU] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKCR] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKCR] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKPD] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKPD] with subkey [NULL] [2007/11/25 15:42:54, 6] registry/reg_db.c:init_registry_data(118) init_registry_data: Adding [HKPT] [2007/11/25 15:42:54, 10] registry/reg_db.c:init_registry_data(144) init_registry_data: Storing key [HKPT] with subkey [NULL] [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_fetch_values(594) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2007/11/25 15:42:54, 8] registry/reg_db.c:regdb_unpack_values(544) specific: [Samba Printer Port], len: 2 [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_fetch_values(594) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2007/11/25 15:42:54, 8] registry/reg_db.c:regdb_unpack_values(544) specific: [DefaultSpoolDirectory], len: 70 [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_fetch_values(594) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2007/11/25 15:42:54, 8] registry/reg_db.c:regdb_unpack_values(544) specific: [DisplayName], len: 20 [2007/11/25 15:42:54, 8] registry/reg_db.c:regdb_unpack_values(544) specific: [ErrorControl], len: 4 [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_fetch_values(594) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2007/11/25 15:42:54, 8] registry/reg_db.c:regdb_unpack_values(544) specific: [DisplayName], len: 20 [2007/11/25 15:42:54, 8] registry/reg_db.c:regdb_unpack_values(544) specific: [ErrorControl], len: 4 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dd4f0 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20722 [2007/11/25 15:42:54, 5] nsswitch/winbindd_util.c:init_child_recv(425) Received child initialization response for domain DDCENTRIFY [2007/11/25 15:42:54, 8] nsswitch/winbindd_cm.c:connection_ok(1442) connection_ok: Connection to for domain DDCENTRIFY has NULL cli! [2007/11/25 15:42:54, 10] lib/gencache.c:gencache_get(226) Returning valid cache entry: key = SAF/DOMAIN/DDCENTRIFY, value = dd-dc1.DDCentrify.dev, timeout = Sun Nov 25 15:57:54 2007 [2007/11/25 15:42:54, 5] libsmb/namequery.c:saf_fetch(136) saf_fetch: Returning "dd-dc1.DDCentrify.dev" for "DDCENTRIFY" domain [2007/11/25 15:42:54, 10] nsswitch/winbindd_cm.c:cm_open_connection(1282) cm_open_connection: saf_servername is 'dd-dc1.DDCentrify.dev' for domain DDCENTRIFY [2007/11/25 15:42:54, 10] nsswitch/winbindd_cm.c:cm_open_connection(1312) cm_open_connection: dcname is 'dd-dc1.DDCentrify.dev' for domain DDCENTRIFY [2007/11/25 15:42:54, 10] lib/gencache.c:gencache_get(226) Returning valid cache entry: key = AD_SITENAME/DOMAIN/DDCENTRIFY.DEV, value = Default-First-Site-Name, timeout = Mon Jan 18 19:14:07 2038 [2007/11/25 15:42:54, 5] libads/dns.c:sitename_fetch(677) sitename_fetch: Returning sitename for DDCENTRIFY.DEV: "Default-First-Site-Name" [2007/11/25 15:42:54, 10] libsmb/namequery.c:internal_resolve_name(1166) internal_resolve_name: looking up dd-dc1.DDCentrify.dev#20 (sitename Default-First-Site-Name) [2007/11/25 15:42:54, 10] lib/gencache.c:gencache_get(226) Returning valid cache entry: key = NBT/DD-DC1.DDCENTRIFY.DEV#20, value = 192.168.31.190:0, timeout = Sun Nov 25 15:53:54 2007 [2007/11/25 15:42:54, 5] libsmb/namecache.c:namecache_fetch(214) name dd-dc1.DDCentrify.dev#20 found. [2007/11/25 15:42:54, 10] nsswitch/winbindd_cm.c:cm_prepare_connection(612) cm_prepare_connection: connecting to DC dd-dc1.DDCentrify.dev for domain DDCENTRIFY [2007/11/25 15:42:54, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(507) cm_get_ipc_userpass: No auth-user defined [2007/11/25 15:42:54, 10] passdb/secrets.c:secrets_named_mutex(930) secrets_named_mutex: got mutex for dd-dc1.DDCentrify.dev [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(153) write_socket(18,194) [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(156) write_socket(18,194) wrote 194 [2007/11/25 15:42:54, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 179 [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=179 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=20721 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 9 (0x9) smb_vwv[ 1]=12807 (0x3207) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 17 (0x11) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 499 (0x1F3) smb_vwv[11]=11392 (0x2C80) smb_vwv[12]=16295 (0x3FA7) smb_vwv[13]=48358 (0xBCE6) smb_vwv[14]=51247 (0xC82F) smb_vwv[15]=57345 (0xE001) smb_vwv[16]= 1 (0x1) smb_bcc=110 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] CF 1A AC 8A FD 24 1B 43 91 11 AC 7F 5C D5 04 ED .....$.C ....\... [010] 60 5C 06 06 2B 06 01 05 05 02 A0 52 30 50 A0 30 `\..+... ...R0P.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 1C 30 1A A0 18 1B 16 64 64 2D 64 63 31 24 40 ..0..... dd-dc1$@ [060] 44 44 43 45 4E 54 52 49 46 59 2E 44 45 56 DDCENTRI FY.DEV [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=179 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=20721 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 9 (0x9) smb_vwv[ 1]=12807 (0x3207) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 17 (0x11) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 499 (0x1F3) smb_vwv[11]=11392 (0x2C80) smb_vwv[12]=16295 (0x3FA7) smb_vwv[13]=48358 (0xBCE6) smb_vwv[14]=51247 (0xC82F) smb_vwv[15]=57345 (0xE001) smb_vwv[16]= 1 (0x1) smb_bcc=110 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] CF 1A AC 8A FD 24 1B 43 91 11 AC 7F 5C D5 04 ED .....$.C ....\... [010] 60 5C 06 06 2B 06 01 05 05 02 A0 52 30 50 A0 30 `\..+... ...R0P.0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 1C 30 1A A0 18 1B 16 64 64 2D 64 63 31 24 40 ..0..... dd-dc1$@ [060] 44 44 43 45 4E 54 52 49 46 59 2E 44 45 56 DDCENTRI FY.DEV [2007/11/25 15:42:54, 5] nsswitch/winbindd_cm.c:cm_prepare_connection(698) connecting to dd-dc1.DDCentrify.dev from DD-RHES3 with kerberos principal [DD-RHES3$@DDCENTRIFY.DEV] [2007/11/25 15:42:54, 3] libsmb/cliconnect.c:cli_session_setup_spnego(845) Doing spnego session setup (blob length=110) [2007/11/25 15:42:54, 3] libsmb/cliconnect.c:cli_session_setup_spnego(870) got OID=1 2 840 48018 1 2 2 [2007/11/25 15:42:54, 3] libsmb/cliconnect.c:cli_session_setup_spnego(870) got OID=1 2 840 113554 1 2 2 [2007/11/25 15:42:54, 3] libsmb/cliconnect.c:cli_session_setup_spnego(870) got OID=1 2 840 113554 1 2 2 3 [2007/11/25 15:42:54, 3] libsmb/cliconnect.c:cli_session_setup_spnego(870) got OID=1 3 6 1 4 1 311 2 2 10 [2007/11/25 15:42:54, 3] libsmb/cliconnect.c:cli_session_setup_spnego(878) got principal=dd-dc1$@DDCENTRIFY.DEV [2007/11/25 15:42:54, 10] libads/kerberos.c:kerberos_kinit_password_ext(91) kerberos_kinit_password: using [MEMORY:cliconnect] as ccache and config [(null)] [2007/11/25 15:42:54, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(665) Doing kerberos session setup [2007/11/25 15:42:54, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(528) ads_cleanup_expired_creds: Ticket in ccache[MEMORY:cliconnect] expiration Mon, 26 Nov 2007 01:42:54 PST [2007/11/25 15:42:54, 10] libsmb/clikrb5.c:ads_krb5_mk_req(624) ads_krb5_mk_req: Ticket (dd-dc1$@DDCENTRIFY.DEV) in ccache (MEMORY:cliconnect) is valid until: (Mon, 26 Nov 2007 01:42:54 PST - 1196070174) [2007/11/25 15:42:54, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(735) Got KRB5 session key of length 16 [2007/11/25 15:42:54, 5] libsmb/smb_signing.c:set_smb_signing_real_common(145) SMB signing enabled! [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:cli_simple_set_signing(490) cli_simple_set_signing: user_session_key [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] D7 23 89 05 68 D5 31 CB F4 50 61 59 3F F9 27 50 .#..h.1. .PaY?.'P [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:cli_simple_set_signing(498) cli_simple_set_signing: NULL response_data [2007/11/25 15:42:54, 10] libsmb/cliconnect.c:cli_session_setup_blob(624) cli_session_setup_blob: Remaining (0) sending (1192) current (1192) [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 0 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) client_sign_outgoing_message: sent SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] BF FA 0A B0 A0 3F F9 0B .....?.. [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) store_sequence_for_reply: stored seq = 1 mid = 2 [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(153) write_socket(18,1278) [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(156) write_socket(18,1278) wrote 1278 [2007/11/25 15:42:54, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 197 [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=197 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=0 smb_pid=20721 smb_uid=6146 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 197 (0xC5) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 26 (0x1A) smb_bcc=154 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] A1 18 30 16 A0 03 0A 01 00 A1 0B 06 09 2A 86 48 ..0..... .....*.H [010] 82 F7 12 01 02 02 A2 02 04 00 89 57 00 69 00 6E ........ ...W.i.n [020] 00 64 00 6F 00 77 00 73 00 20 00 53 00 65 00 72 .d.o.w.s . .S.e.r [030] 00 76 00 65 00 72 00 20 00 32 00 30 00 30 00 33 .v.e.r. .2.0.0.3 [040] 00 20 00 33 00 37 00 39 00 30 00 20 00 53 00 65 . .3.7.9 .0. .S.e [050] 00 72 00 76 00 69 00 63 00 65 00 20 00 50 00 61 .r.v.i.c .e. .P.a [060] 00 63 00 6B 00 20 00 31 00 00 00 57 00 69 00 6E .c.k. .1 ...W.i.n [070] 00 64 00 6F 00 77 00 73 00 20 00 53 00 65 00 72 .d.o.w.s . .S.e.r [080] 00 76 00 65 00 72 00 20 00 32 00 30 00 30 00 33 .v.e.r. .2.0.0.3 [090] 00 20 00 35 00 2E 00 32 00 00 . .5...2 .. [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 1 mid = 2 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 1 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_check_incoming_message(430) client_check_incoming_message: seq 1: got good SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] A6 E1 CE 16 4F 77 64 26 ....Owd& [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=197 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=0 smb_pid=20721 smb_uid=6146 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 197 (0xC5) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 26 (0x1A) smb_bcc=154 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] A1 18 30 16 A0 03 0A 01 00 A1 0B 06 09 2A 86 48 ..0..... .....*.H [010] 82 F7 12 01 02 02 A2 02 04 00 89 57 00 69 00 6E ........ ...W.i.n [020] 00 64 00 6F 00 77 00 73 00 20 00 53 00 65 00 72 .d.o.w.s . .S.e.r [030] 00 76 00 65 00 72 00 20 00 32 00 30 00 30 00 33 .v.e.r. .2.0.0.3 [040] 00 20 00 33 00 37 00 39 00 30 00 20 00 53 00 65 . .3.7.9 .0. .S.e [050] 00 72 00 76 00 69 00 63 00 65 00 20 00 50 00 61 .r.v.i.c .e. .P.a [060] 00 63 00 6B 00 20 00 31 00 00 00 57 00 69 00 6E .c.k. .1 ...W.i.n [070] 00 64 00 6F 00 77 00 73 00 20 00 53 00 65 00 72 .d.o.w.s . .S.e.r [080] 00 76 00 65 00 72 00 20 00 32 00 30 00 30 00 33 .v.e.r. .2.0.0.3 [090] 00 20 00 35 00 2E 00 32 00 00 . .5...2 .. [2007/11/25 15:42:54, 10] libsmb/clientgen.c:cli_init_creds(265) cli_init_creds: user DD-RHES3$ domain DDCENTRIFY [2007/11/25 15:42:54, 10] libsmb/namequery.c:saf_store(74) saf_store: domain = [DDCENTRIFY], server = [dd-dc1.DDCentrify.dev], expire = [1196035074] [2007/11/25 15:42:54, 10] lib/gencache.c:gencache_set(140) Adding cache entry with key = SAF/DOMAIN/DDCENTRIFY; value = dd-dc1.DDCentrify.dev and timeout = Sun Nov 25 15:57:54 2007 (900 seconds ahead) [2007/11/25 15:42:54, 10] libsmb/namequery.c:saf_store(74) saf_store: domain = [DDCentrify.dev], server = [dd-dc1.DDCentrify.dev], expire = [1196035074] [2007/11/25 15:42:54, 10] lib/gencache.c:gencache_set(140) Adding cache entry with key = SAF/DOMAIN/DDCENTRIFY.DEV; value = dd-dc1.DDCentrify.dev and timeout = Sun Nov 25 15:57:54 2007 (900 seconds ahead) [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 2 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) client_sign_outgoing_message: sent SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 61 51 21 FE 3C B6 D8 6E aQ!.<..n [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) store_sequence_for_reply: stored seq = 3 mid = 3 [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(153) write_socket(18,110) [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(156) write_socket(18,110) wrote 110 [2007/11/25 15:42:54, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 56 [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=56 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=3 smt_wct=7 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 56 (0x38) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 511 (0x1FF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 511 (0x1FF) smb_vwv[ 6]= 0 (0x0) smb_bcc=7 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 49 50 43 00 00 00 00 IPC.... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 3 mid = 3 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 3 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_check_incoming_message(430) client_check_incoming_message: seq 3: got good SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] EB 7B 3E 40 46 6F 76 EA .{>@Fov. [2007/11/25 15:42:54, 10] passdb/secrets.c:secrets_named_mutex_release(942) secrets_named_mutex: released mutex for dd-dc1.DDCentrify.dev [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:set_global_winbindd_state_online(2687) set_global_winbindd_state_online: online requested. [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:set_global_winbindd_state_online(2690) set_global_winbindd_state_online: rejecting. [2007/11/25 15:42:54, 10] nsswitch/winbindd_cm.c:set_domain_online(359) set_domain_online: called for domain DDCENTRIFY [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "check_domain_online_handler" [2007/11/25 15:42:54, 5] nsswitch/winbindd_cm.c:set_dc_type_and_flags(1535) set_dc_type_and_flags: domain DDCENTRIFY [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 4 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) client_sign_outgoing_message: sent SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 91 45 2E A7 34 2E F9 64 .E..4..d [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) store_sequence_for_reply: stored seq = 5 mid = 4 [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(153) write_socket(18,104) [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(156) write_socket(18,104) wrote 104 [2007/11/25 15:42:54, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 103 [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=4 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 2816 (0xB00) smb_vwv[ 3]= 448 (0x1C0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 5 mid = 4 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 5 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_check_incoming_message(430) client_check_incoming_message: seq 5: got good SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 4E E6 96 BB 1A 23 D9 E3 N....#.. [2007/11/25 15:42:54, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) Bind RPC Pipe[c00b]: \lsarpc auth_type 0, auth_level 0 [2007/11/25 15:42:54, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) Bind Abstract Syntax: [000] 6A 28 19 39 0C B1 D0 11 9B A8 00 C0 4F D9 2E F5 j(.9.... ....O... [010] 00 00 00 00 .... [2007/11/25 15:42:54, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0000 major : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0001 minor : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0002 pkt_type : 0b [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0003 flags : 03 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0004 pack_type0: 10 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0005 pack_type1: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0006 pack_type2: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0007 pack_type3: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 frag_len : 0048 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a auth_len : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c call_id : 00000001 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_rb [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0010 max_tsize: 10b8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0012 max_rsize: 10b8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0014 assoc_gid: 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0018 num_contexts: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 001c context_id : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 001e num_transfer_syntaxes: 01 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 00001f smb_io_rpc_iface [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_uuid uuid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0020 data : 3919286a [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0024 data : b10c [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0026 data : 11d0 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 0028 data : 9b a8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 002a data : 00 c0 4f d9 2e f5 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0030 version: 00000000 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_rpc_iface [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_uuid uuid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0034 data : 8a885d04 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0038 data : 1ceb [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 003a data : 11c9 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 003c data : 9f e8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 003e data : 08 00 2b 10 48 60 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0044 version: 00000002 [2007/11/25 15:42:54, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine dd-dc1.DDCentrify.dev pipe \lsarpc fnum 0xc00b [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=49163 (0xC00B) smb_bcc=87 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 6A ........ .......j [030] 28 19 39 0C B1 D0 11 9B A8 00 C0 4F D9 2E F5 00 (.9..... ...O.... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 6 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) client_sign_outgoing_message: sent SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 8A 50 D1 0F B5 60 2A DD .P...`*. [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) store_sequence_for_reply: stored seq = 7 mid = 5 [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(153) write_socket(18,158) [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(156) write_socket(18,158) wrote 158 [2007/11/25 15:42:54, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 124 [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 97 86 00 00 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 02 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 7 mid = 5 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 7 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_check_incoming_message(430) client_check_incoming_message: seq 7: got good SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] B1 7F 3B 02 F1 1A 16 95 ..;..... [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 97 86 00 00 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 02 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 7 mid = 5 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0000 major : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0001 minor : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0002 pkt_type : 0c [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0003 flags : 03 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0004 pack_type0: 10 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0005 pack_type1: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0006 pack_type2: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0007 pack_type3: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 frag_len : 0044 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a auth_len : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c call_id : 00000001 [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 68 at offset 0 [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine dd-dc1.DDCentrify.dev pipe \lsarpc fnum 0xc00b returned 68 bytes. [2007/11/25 15:42:54, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine dd-dc1.DDCentrify.dev pipe \lsarpc fnum 0xc00b bind request returned ok. [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0000 major : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0001 minor : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0002 pkt_type : 0c [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0003 flags : 03 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0004 pack_type0: 10 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0005 pack_type1: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0006 pack_type2: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0007 pack_type3: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 frag_len : 0044 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a auth_len : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c call_id : 00000001 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_ba [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0010 max_tsize: 10b8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0012 max_rsize: 10b8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0014 assoc_gid: 00008697 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_rpc_addr_str [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0018 len: 000c [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 001a str: \PIPE\lsass. [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000026 smb_io_rpc_results [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0028 num_results: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 002c result : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 002e reason : 0000 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_rpc_iface [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_uuid uuid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0030 data : 8a885d04 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0034 data : 1ceb [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0036 data : 11c9 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 0038 data : 9f e8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 003a data : 08 00 2b 10 48 60 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0040 version: 00000002 [2007/11/25 15:42:54, 5] rpc_client/cli_pipe.c:check_bind_response(1701) check_bind_response: accepted! [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2277) cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine dd-dc1.DDCentrify.dev and bound anonymously. [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 ds_io_q_getprimdominfo [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0000 level: 0001 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0000 major : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0001 minor : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0002 pkt_type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0003 flags : 03 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0004 pack_type0: 10 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0005 pack_type1: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0006 pack_type2: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0007 pack_type3: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 frag_len : 001a [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a auth_len : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c call_id : 00000002 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0010 alloc_hint: 00000002 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0014 context_id: 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0016 opnum : 0000 [2007/11/25 15:42:54, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine dd-dc1.DDCentrify.dev pipe \lsarpc fnum 0xc00b [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=108 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 26 (0x1A) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 26 (0x1A) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=49163 (0xC00B) smb_bcc=41 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 1A 00 00 00 02 00 00 00 02 ........ ........ [020] 00 00 00 00 00 00 00 01 00 ........ . [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 8 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) client_sign_outgoing_message: sent SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] B7 5D 64 2A 03 96 51 EE .]d*..Q. [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) store_sequence_for_reply: stored seq = 9 mid = 6 [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(153) write_socket(18,112) [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(156) write_socket(18,112) wrote 112 [2007/11/25 15:42:54, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 252 [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=252 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 196 (0xC4) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 196 (0xC4) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=197 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 05 00 02 03 10 00 00 00 C4 00 00 00 02 00 00 ........ ........ [010] 00 AC 00 00 00 00 00 00 00 00 00 02 00 01 00 00 ........ ........ [020] 00 05 00 00 00 01 00 00 01 04 00 02 00 08 00 02 ........ ........ [030] 00 0C 00 02 00 18 8A B4 E1 FC 61 65 41 88 F6 0F ........ ..aeA... [040] 9B 23 33 07 0D 0B 00 00 00 00 00 00 00 0B 00 00 .#3..... ........ [050] 00 44 00 44 00 43 00 45 00 4E 00 54 00 52 00 49 .D.D.C.E .N.T.R.I [060] 00 46 00 59 00 00 00 49 00 0F 00 00 00 00 00 00 .F.Y...I ........ [070] 00 0F 00 00 00 44 00 44 00 43 00 65 00 6E 00 74 .....D.D .C.e.n.t [080] 00 72 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 .r.i.f.y ...d.e.v [090] 00 00 00 76 00 0F 00 00 00 00 00 00 00 0F 00 00 ...v.... ........ [0A0] 00 44 00 44 00 43 00 65 00 6E 00 74 00 72 00 69 .D.D.C.e .n.t.r.i [0B0] 00 66 00 79 00 2E 00 64 00 65 00 76 00 00 00 00 .f.y...d .e.v.... [0C0] 00 00 00 00 00 ..... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 9 mid = 6 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 9 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_check_incoming_message(430) client_check_incoming_message: seq 9: got good SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] E7 CF 5E 8F B9 32 41 B2 ..^..2A. [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=252 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 196 (0xC4) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 196 (0xC4) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=197 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 05 00 02 03 10 00 00 00 C4 00 00 00 02 00 00 ........ ........ [010] 00 AC 00 00 00 00 00 00 00 00 00 02 00 01 00 00 ........ ........ [020] 00 05 00 00 00 01 00 00 01 04 00 02 00 08 00 02 ........ ........ [030] 00 0C 00 02 00 18 8A B4 E1 FC 61 65 41 88 F6 0F ........ ..aeA... [040] 9B 23 33 07 0D 0B 00 00 00 00 00 00 00 0B 00 00 .#3..... ........ [050] 00 44 00 44 00 43 00 45 00 4E 00 54 00 52 00 49 .D.D.C.E .N.T.R.I [060] 00 46 00 59 00 00 00 49 00 0F 00 00 00 00 00 00 .F.Y...I ........ [070] 00 0F 00 00 00 44 00 44 00 43 00 65 00 6E 00 74 .....D.D .C.e.n.t [080] 00 72 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 .r.i.f.y ...d.e.v [090] 00 00 00 76 00 0F 00 00 00 00 00 00 00 0F 00 00 ...v.... ........ [0A0] 00 44 00 44 00 43 00 65 00 6E 00 74 00 72 00 69 .D.D.C.e .n.t.r.i [0B0] 00 66 00 79 00 2E 00 64 00 65 00 76 00 00 00 00 .f.y...d .e.v.... [0C0] 00 00 00 00 00 ..... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 9 mid = 6 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0000 major : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0001 minor : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0002 pkt_type : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0003 flags : 03 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0004 pack_type0: 10 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0005 pack_type1: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0006 pack_type2: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0007 pack_type3: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 frag_len : 00c4 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a auth_len : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c call_id : 00000002 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0010 alloc_hint: 000000ac [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0014 context_id: 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0016 cancel_ct : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0017 reserved : 00 [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 196, data_len 172, ss_len 0 [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 196 at offset 0 [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine dd-dc1.DDCentrify.dev pipe \lsarpc fnum 0xc00b returned 344 bytes. [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 ds_io_r_getprimdominfo [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0000 ptr: 00020000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0004 level: 0001 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0006 unknown0: 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 machine_role: 0005 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c flags: 01000001 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0010 netbios_ptr: 00020004 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0014 dnsname_ptr: 00020008 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0018 forestname_ptr: 0002000c [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 00001c smb_io_uuid domain_guid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 001c data : e1b48a18 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0020 data : 61fc [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0022 data : 4165 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 0024 data : 88 f6 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 0026 data : 0f 9b 23 33 07 0d [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 00002c smb_io_unistr2 netbios_domain [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 002c uni_max_len: 0000000b [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0030 offset : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0034 uni_str_len: 0000000b [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) 0038 buffer : D.D.C.E.N.T.R.I.F.Y... [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_unistr2 dns_domain [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0050 uni_max_len: 0000000f [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0054 offset : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0058 uni_str_len: 0000000f [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) 005c buffer : D.D.C.e.n.t.r.i.f.y...d.e.v... [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 00007c smb_io_unistr2 forest_domain [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 007c uni_max_len: 0000000f [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0080 offset : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0084 uni_str_len: 0000000f [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) 0088 buffer : D.D.C.e.n.t.r.i.f.y...d.e.v... [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) 00a8 status: NT_STATUS_OK [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 10 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) client_sign_outgoing_message: sent SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] FD F9 B1 D2 1D 51 DF F3 .....Q.. [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) store_sequence_for_reply: stored seq = 11 mid = 7 [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(153) write_socket(18,45) [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(156) write_socket(18,45) wrote 45 [2007/11/25 15:42:54, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 35 [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=7 smt_wct=0 smb_bcc=0 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 11 mid = 7 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 11 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_check_incoming_message(430) client_check_incoming_message: seq 11: got good SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 62 61 09 54 E1 49 2D 9D ba.T.I-. [2007/11/25 15:42:54, 10] libsmb/clientgen.c:cli_rpc_pipe_close(406) cli_rpc_pipe_close: closed pipe \lsarpc to machine dd-dc1.DDCentrify.dev [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 12 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) client_sign_outgoing_message: sent SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] DC B0 E9 D2 BC 51 6C 46 .....QlF [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) store_sequence_for_reply: stored seq = 13 mid = 8 [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(153) write_socket(18,104) [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(156) write_socket(18,104) wrote 104 [2007/11/25 15:42:54, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 103 [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=8 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 3072 (0xC00) smb_vwv[ 3]= 448 (0x1C0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 13 mid = 8 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 13 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_check_incoming_message(430) client_check_incoming_message: seq 13: got good SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] E9 A0 42 15 C5 B9 83 35 ..B....5 [2007/11/25 15:42:54, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2044) Bind RPC Pipe[c00c]: \lsarpc auth_type 0, auth_level 0 [2007/11/25 15:42:54, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. [010] 00 00 00 00 .... [2007/11/25 15:42:54, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0000 major : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0001 minor : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0002 pkt_type : 0b [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0003 flags : 03 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0004 pack_type0: 10 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0005 pack_type1: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0006 pack_type2: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0007 pack_type3: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 frag_len : 0048 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a auth_len : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c call_id : 00000003 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_rb [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0010 max_tsize: 10b8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0012 max_rsize: 10b8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0014 assoc_gid: 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0018 num_contexts: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 001c context_id : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 001e num_transfer_syntaxes: 01 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 00001f smb_io_rpc_iface [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_uuid uuid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0020 data : 12345778 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0024 data : 1234 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0026 data : abcd [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 0028 data : ef 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 002a data : 01 23 45 67 89 ab [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0030 version: 00000000 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_rpc_iface [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_uuid uuid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0034 data : 8a885d04 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0038 data : 1ceb [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 003a data : 11c9 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 003c data : 9f e8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 003e data : 08 00 2b 10 48 60 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0044 version: 00000002 [2007/11/25 15:42:54, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine dd-dc1.DDCentrify.dev pipe \lsarpc fnum 0xc00c [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=9 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=49164 (0xC00C) smb_bcc=87 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 03 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 14 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) client_sign_outgoing_message: sent SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 03 99 0A 86 1C 4F 08 8B .....O.. [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) store_sequence_for_reply: stored seq = 15 mid = 9 [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(153) write_socket(18,158) [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(156) write_socket(18,158) wrote 158 [2007/11/25 15:42:54, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 124 [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 03 00 00 ........ .D...... [010] 00 B8 10 B8 10 98 86 00 00 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 01 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 15 mid = 9 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 15 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_check_incoming_message(430) client_check_incoming_message: seq 15: got good SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 5A D1 5A A3 8A CB A1 A5 Z.Z..... [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 03 00 00 ........ .D...... [010] 00 B8 10 B8 10 98 86 00 00 0C 00 5C 50 49 50 45 ........ ...\PIPE [020] 5C 6C 73 61 73 73 00 00 01 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 15 mid = 9 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0000 major : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0001 minor : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0002 pkt_type : 0c [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0003 flags : 03 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0004 pack_type0: 10 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0005 pack_type1: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0006 pack_type2: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0007 pack_type3: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 frag_len : 0044 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a auth_len : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c call_id : 00000003 [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 68 at offset 0 [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine dd-dc1.DDCentrify.dev pipe \lsarpc fnum 0xc00c returned 68 bytes. [2007/11/25 15:42:54, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081) rpc_pipe_bind: Remote machine dd-dc1.DDCentrify.dev pipe \lsarpc fnum 0xc00c bind request returned ok. [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0000 major : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0001 minor : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0002 pkt_type : 0c [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0003 flags : 03 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0004 pack_type0: 10 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0005 pack_type1: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0006 pack_type2: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0007 pack_type3: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 frag_len : 0044 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a auth_len : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c call_id : 00000003 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_ba [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_bba [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0010 max_tsize: 10b8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0012 max_rsize: 10b8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0014 assoc_gid: 00008698 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_rpc_addr_str [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0018 len: 000c [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 001a str: \PIPE\lsass. [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000026 smb_io_rpc_results [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0028 num_results: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 002c result : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 002e reason : 0000 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_rpc_iface [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_uuid uuid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0030 data : 8a885d04 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0034 data : 1ceb [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0036 data : 11c9 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 0038 data : 9f e8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 003a data : 08 00 2b 10 48 60 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0040 version: 00000002 [2007/11/25 15:42:54, 5] rpc_client/cli_pipe.c:check_bind_response(1701) check_bind_response: accepted! [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2277) cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine dd-dc1.DDCentrify.dev and bound anonymously. [2007/11/25 15:42:54, 5] rpc_parse/parse_lsa.c:init_lsa_sec_qos(185) init_lsa_sec_qos [2007/11/25 15:42:54, 5] rpc_parse/parse_lsa.c:init_q_open_pol2(368) init_q_open_pol2: attr:0 da:33554432 [2007/11/25 15:42:54, 5] rpc_parse/parse_lsa.c:init_lsa_obj_attr(236) init_lsa_obj_attr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_q_open_pol2 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0000 ptr : 00000001 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_unistr2 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0004 uni_max_len: 00000018 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0008 offset : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c uni_str_len: 00000018 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) 0010 buffer : \.\.d.d.-.d.c.1...D.D.C.e.n.t.r.i.f.y...d.e.v... [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000040 lsa_io_obj_attr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0040 len : 00000018 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0044 ptr_root_dir: 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0048 ptr_obj_name: 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 004c attributes : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0050 ptr_sec_desc: 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0054 ptr_sec_qos : 00000001 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000058 lsa_io_obj_qos sec_qos [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0058 len : 0000000c [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 005c sec_imp_level : 0002 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 005e sec_ctxt_mode : 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 005f effective_only: 00 [2007/11/25 15:42:54, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(224) lsa_io_sec_qos: length c does not match size 8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0060 des_access: 02000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0000 major : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0001 minor : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0002 pkt_type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0003 flags : 03 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0004 pack_type0: 10 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0005 pack_type1: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0006 pack_type2: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0007 pack_type3: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 frag_len : 007c [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a auth_len : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c call_id : 00000004 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0010 alloc_hint: 00000064 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0014 context_id: 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0016 opnum : 002c [2007/11/25 15:42:54, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine dd-dc1.DDCentrify.dev pipe \lsarpc fnum 0xc00c [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=206 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=10 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 124 (0x7C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 124 (0x7C) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=49164 (0xC00C) smb_bcc=139 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 7C 00 00 00 04 00 00 00 64 .......| .......d [020] 00 00 00 00 00 2C 00 01 00 00 00 18 00 00 00 00 .....,.. ........ [030] 00 00 00 18 00 00 00 5C 00 5C 00 64 00 64 00 2D .......\ .\.d.d.- [040] 00 64 00 63 00 31 00 2E 00 44 00 44 00 43 00 65 .d.c.1.. .D.D.C.e [050] 00 6E 00 74 00 72 00 69 00 66 00 79 00 2E 00 64 .n.t.r.i .f.y...d [060] 00 65 00 76 00 00 00 18 00 00 00 00 00 00 00 00 .e.v.... ........ [070] 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 0C ........ ........ [080] 00 00 00 02 00 01 00 00 00 00 02 ........ ... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 16 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) client_sign_outgoing_message: sent SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 13 7F F9 C9 78 0C 08 F6 ....x... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) store_sequence_for_reply: stored seq = 17 mid = 10 [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(153) write_socket(18,210) [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(156) write_socket(18,210) wrote 210 [2007/11/25 15:42:54, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 104 [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=10 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 BA 3A 13 ........ ......:. [020] 37 37 65 92 47 80 18 6D 3A F4 35 14 86 00 00 00 77e.G..m :.5..... [030] 00 . [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 17 mid = 10 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 17 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_check_incoming_message(430) client_check_incoming_message: seq 17: got good SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] EE 32 42 1F 4C A3 23 18 .2B.L.#. [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=10 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 BA 3A 13 ........ ......:. [020] 37 37 65 92 47 80 18 6D 3A F4 35 14 86 00 00 00 77e.G..m :.5..... [030] 00 . [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 17 mid = 10 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0000 major : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0001 minor : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0002 pkt_type : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0003 flags : 03 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0004 pack_type0: 10 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0005 pack_type1: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0006 pack_type2: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0007 pack_type3: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 frag_len : 0030 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a auth_len : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c call_id : 00000004 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0010 alloc_hint: 00000018 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0014 context_id: 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0016 cancel_ct : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0017 reserved : 00 [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 48 at offset 0 [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine dd-dc1.DDCentrify.dev pipe \lsarpc fnum 0xc00c returned 48 bytes. [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_r_open_pol2 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_pol_hnd [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0000 handle_type: 00000000 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_uuid uuid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0004 data : 37133aba [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 data : 6537 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a data : 4792 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 000c data : 80 18 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 000e data : 6d 3a f4 35 14 86 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) 0014 status: NT_STATUS_OK [2007/11/25 15:42:54, 5] rpc_parse/parse_lsa.c:init_q_query2(3141) init_q_query2 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_q_query_info2 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_pol_hnd pol [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0000 handle_type: 00000000 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000004 smb_io_uuid uuid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0004 data : 37133aba [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 data : 6537 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a data : 4792 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 000c data : 80 18 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 000e data : 6d 3a f4 35 14 86 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0014 info_class: 000c [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr hdr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0000 major : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0001 minor : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0002 pkt_type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0003 flags : 03 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0004 pack_type0: 10 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0005 pack_type1: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0006 pack_type2: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0007 pack_type3: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 frag_len : 002e [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a auth_len : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c call_id : 00000005 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_req hdr_req [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0010 alloc_hint: 00000016 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0014 context_id: 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0016 opnum : 002e [2007/11/25 15:42:54, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) rpc_api_pipe: Remote machine dd-dc1.DDCentrify.dev pipe \lsarpc fnum 0xc00c [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=11 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 46 (0x2E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 46 (0x2E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=49164 (0xC00C) smb_bcc=61 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 2E 00 00 00 05 00 00 00 16 ........ ........ [020] 00 00 00 00 00 2E 00 00 00 00 00 BA 3A 13 37 37 ........ ....:.77 [030] 65 92 47 80 18 6D 3A F4 35 14 86 0C 00 e.G..m:. 5.... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 18 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) client_sign_outgoing_message: sent SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] F2 7B D2 AB 32 C4 46 E4 .{..2.F. [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) store_sequence_for_reply: stored seq = 19 mid = 11 [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(153) write_socket(18,132) [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(156) write_socket(18,132) wrote 132 [2007/11/25 15:42:54, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 276 [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=276 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=11 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 220 (0xDC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 220 (0xDC) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=221 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 05 00 02 03 10 00 00 00 DC 00 00 00 05 00 00 ........ ........ [010] 00 C4 00 00 00 00 00 00 00 00 00 02 00 0C 00 00 ........ ........ [020] 00 14 00 16 00 04 00 02 00 1C 00 1E 00 08 00 02 ........ ........ [030] 00 1C 00 1E 00 0C 00 02 00 18 8A B4 E1 FC 61 65 ........ ......ae [040] 41 88 F6 0F 9B 23 33 07 0D 10 00 02 00 0B 00 00 A....#3. ........ [050] 00 00 00 00 00 0A 00 00 00 44 00 44 00 43 00 45 ........ .D.D.C.E [060] 00 4E 00 54 00 52 00 49 00 46 00 59 00 0F 00 00 .N.T.R.I .F.Y.... [070] 00 00 00 00 00 0E 00 00 00 44 00 44 00 43 00 65 ........ .D.D.C.e [080] 00 6E 00 74 00 72 00 69 00 66 00 79 00 2E 00 64 .n.t.r.i .f.y...d [090] 00 65 00 76 00 0F 00 00 00 00 00 00 00 0E 00 00 .e.v.... ........ [0A0] 00 44 00 44 00 43 00 65 00 6E 00 74 00 72 00 69 .D.D.C.e .n.t.r.i [0B0] 00 66 00 79 00 2E 00 64 00 65 00 76 00 04 00 00 .f.y...d .e.v.... [0C0] 00 01 04 00 00 00 00 00 05 15 00 00 00 7A 72 3E ........ .....zr> [0D0] 26 FE 89 C8 28 89 63 BF C3 00 00 00 00 &...(.c. ..... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 19 mid = 11 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 19 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_check_incoming_message(430) client_check_incoming_message: seq 19: got good SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] C7 D7 33 D1 AA 4C AB 91 ..3..L.. [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=276 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=11 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 220 (0xDC) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 220 (0xDC) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=221 [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 00 05 00 02 03 10 00 00 00 DC 00 00 00 05 00 00 ........ ........ [010] 00 C4 00 00 00 00 00 00 00 00 00 02 00 0C 00 00 ........ ........ [020] 00 14 00 16 00 04 00 02 00 1C 00 1E 00 08 00 02 ........ ........ [030] 00 1C 00 1E 00 0C 00 02 00 18 8A B4 E1 FC 61 65 ........ ......ae [040] 41 88 F6 0F 9B 23 33 07 0D 10 00 02 00 0B 00 00 A....#3. ........ [050] 00 00 00 00 00 0A 00 00 00 44 00 44 00 43 00 45 ........ .D.D.C.E [060] 00 4E 00 54 00 52 00 49 00 46 00 59 00 0F 00 00 .N.T.R.I .F.Y.... [070] 00 00 00 00 00 0E 00 00 00 44 00 44 00 43 00 65 ........ .D.D.C.e [080] 00 6E 00 74 00 72 00 69 00 66 00 79 00 2E 00 64 .n.t.r.i .f.y...d [090] 00 65 00 76 00 0F 00 00 00 00 00 00 00 0E 00 00 .e.v.... ........ [0A0] 00 44 00 44 00 43 00 65 00 6E 00 74 00 72 00 69 .D.D.C.e .n.t.r.i [0B0] 00 66 00 79 00 2E 00 64 00 65 00 76 00 04 00 00 .f.y...d .e.v.... [0C0] 00 01 04 00 00 00 00 00 05 15 00 00 00 7A 72 3E ........ .....zr> [0D0] 26 FE 89 C8 28 89 63 BF C3 00 00 00 00 &...(.c. ..... [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 19 mid = 11 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 smb_io_rpc_hdr rpc_hdr [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0000 major : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0001 minor : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0002 pkt_type : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0003 flags : 03 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0004 pack_type0: 10 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0005 pack_type1: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0006 pack_type2: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0007 pack_type3: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 frag_len : 00dc [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a auth_len : 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c call_id : 00000005 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0010 alloc_hint: 000000c4 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0014 context_id: 0000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0016 cancel_ct : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0017 reserved : 00 [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) cli_pipe_validate_current_pdu: got pdu len 220, data_len 196, ss_len 0 [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 220 at offset 0 [2007/11/25 15:42:54, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) rpc_api_pipe: Remote machine dd-dc1.DDCentrify.dev pipe \lsarpc fnum 0xc00c returned 392 bytes. [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 lsa_io_r_query_info2 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0000 dom_ptr: 00020000 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000004 lsa_io_query_info_ctr2 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0004 info_class: 000c [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000006 lsa_io_dom_query_12 [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000008 smb_io_unihdr nb_name [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0008 uni_str_len: 0014 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000a uni_max_len: 0016 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c buffer : 00020004 [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000010 smb_io_unihdr dns_name [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0010 uni_str_len: 001c [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0012 uni_max_len: 001e [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0014 buffer : 00020008 [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000018 smb_io_unihdr forest [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0018 uni_str_len: 001c [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 001a uni_max_len: 001e [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 001c buffer : 0002000c [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000020 smb_io_uuid dom_guid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0020 data : e1b48a18 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0024 data : 61fc [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0026 data : 4165 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 0028 data : 88 f6 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8s(857) 002a data : 0f 9b 23 33 07 0d [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0030 dom_sid: 00020010 [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000034 smb_io_unistr2 nb_name [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0034 uni_max_len: 0000000b [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0038 offset : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 003c uni_str_len: 0000000a [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) 0040 buffer : D.D.C.E.N.T.R.I.F.Y. [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000054 smb_io_unistr2 dns_name [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0054 uni_max_len: 0000000f [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0058 offset : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 005c uni_str_len: 0000000e [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) 0060 buffer : D.D.C.e.n.t.r.i.f.y...d.e.v. [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 00007c smb_io_unistr2 forest [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 007c uni_max_len: 0000000f [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0080 offset : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0084 uni_str_len: 0000000e [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) 0088 buffer : D.D.C.e.n.t.r.i.f.y...d.e.v. [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 0000a4 smb_io_dom_sid2 dom_sid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 00a4 num_auths: 00000004 [2007/11/25 15:42:54, 9] rpc_parse/parse_prs.c:prs_debug(84) 0000a8 smb_io_dom_sid sid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a8 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a9 num_auths : 04 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00aa id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00ab id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00ac id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00ad id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00ae id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00af id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 00b0 sub_auths : 00000015 263e727a 28c889fe c3bf6389 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) 00c0 status: NT_STATUS_OK [2007/11/25 15:42:54, 5] nsswitch/winbindd_cm.c:set_dc_type_and_flags(1651) set_dc_type_and_flags: domain DDCENTRIFY is in native mode. [2007/11/25 15:42:54, 5] nsswitch/winbindd_cm.c:set_dc_type_and_flags(1654) set_dc_type_and_flags: domain DDCENTRIFY is running active directory. [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 20 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) client_sign_outgoing_message: sent SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] 4E 46 1D C0 E0 B3 0F 32 NF.....2 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) store_sequence_for_reply: stored seq = 21 mid = 12 [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(153) write_socket(18,45) [2007/11/25 15:42:54, 6] libsmb/clientgen.c:write_socket(156) write_socket(18,45) wrote 45 [2007/11/25 15:42:54, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 35 [2007/11/25 15:42:54, 5] lib/util.c:show_msg(484) [2007/11/25 15:42:54, 5] lib/util.c:show_msg(494) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=43011 smb_pid=20721 smb_uid=6146 smb_mid=12 smt_wct=0 smb_bcc=0 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) get_sequence_for_reply: found seq = 21 mid = 12 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:simple_packet_signature(283) simple_packet_signature: sequence number 21 [2007/11/25 15:42:54, 10] libsmb/smb_signing.c:client_check_incoming_message(430) client_check_incoming_message: seq 21: got good SMB signature of [2007/11/25 15:42:54, 10] lib/util.c:dump_data(2264) [000] B1 72 0C 3E 5C 5A 1C 9A .r.>\Z.. [2007/11/25 15:42:54, 10] libsmb/clientgen.c:cli_rpc_pipe_close(406) cli_rpc_pipe_close: closed pipe \lsarpc to machine dd-dc1.DDCentrify.dev [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999979 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20722 [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2322) Retrieving extra data length=66 [2007/11/25 15:42:54, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Control/Print] [2007/11/25 15:42:54, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_add(268) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree [2007/11/25 15:42:54, 8] lib/adt_tree.c:pathtree_add(270) pathtree_add: Exit [2007/11/25 15:42:54, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] [2007/11/25 15:42:54, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_add(268) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] to tree [2007/11/25 15:42:54, 8] lib/adt_tree.c:pathtree_add(270) pathtree_add: Exit [2007/11/25 15:42:54, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] [2007/11/25 15:42:54, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_add(268) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] to tree [2007/11/25 15:42:54, 8] lib/adt_tree.c:pathtree_add(270) pathtree_add: Exit [2007/11/25 15:42:54, 10] registry/reg_cachehook.c:reghook_cache_add(61) reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] [2007/11/25 15:42:54, 8] lib/adt_tree.c:pathtree_add(201) pathtree_add: Enter [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_add(268) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] to tree [2007/11/25 15:42:54, 8] lib/adt_tree.c:pathtree_add(270) pathtree_add: Exit [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:uid_to_sid(1314) I:uid_to_sid: uid=0 [2007/11/25 15:42:54, 6] nsswitch/winbindd.c:new_connection(630) accepted socket 19 (number of winbind client=0) [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn INTERFACE_VERSION (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(491) [20730]: request interface version [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn WINBINDD_PRIV_PIPE_DIR (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(524) [20730]: request location of privileged pipe [2007/11/25 15:42:54, 6] nsswitch/winbindd.c:new_connection(630) accepted socket 20 (number of winbind client=1) [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn UID_TO_SID (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_sid.c:winbindd_uid_to_sid(447) [20730]: uid to sid 0 [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999926 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:42:54, 10] nsswitch/winbindd_sid.c:uid2sid_recv(433) uid2sid: uid 0 has sid S-1-22-1-0 [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:uid_to_sid(1331) uid 0 -> sid S-1-22-1-0 [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn GID_TO_SID (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_sid.c:winbindd_gid_to_sid(477) [20730]: gid to sid 0 [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999787 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:42:54, 10] nsswitch/winbindd_sid.c:gid2sid_recv(462) gid2sid: gid 0 has sid S-1-22-2-0 [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:gid_to_sid(1360) gid 0 -> sid S-1-22-2-0 [2007/11/25 15:42:54, 10] auth/auth_util.c:create_local_nt_token(844) Create local NT token for S-1-22-1-0 [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20730]: sid to gid S-1-5-32-544 [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-32-544) [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(682) calling find_domain_from_sid [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999852 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20734 [2007/11/25 15:42:54, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-32-544 to a gid [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:42:54, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:42:54, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-5-32-544 [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20730]: ping [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-5-32-544 [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20730]: ping [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:42:54, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:42:54, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:42:54, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:42:54, 10] groupdb/mapping.c:pdb_create_builtin_alias(702) Trying to create builtin alias 544 [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:check_dom_sid_to_level(663) Accepting SID S-1-5-32 in level 1 [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:lookup_sid(941) Sid S-1-5-32-544 -> BUILTIN\Administrators(4) [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn ALLOCATE_GID (from pid 20730) [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:42:54, 3] groupdb/mapping.c:pdb_create_builtin_alias(723) pdb_create_builtin_alias: Could not get a gid out of winbind [2007/11/25 15:42:54, 2] auth/auth_util.c:create_builtin_administrators(792) create_builtin_administrators: Failed to create Administrators [2007/11/25 15:42:54, 2] auth/auth_util.c:create_local_nt_token(914) create_local_nt_token: Failed to create BUILTIN\Administrators group! [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20730]: sid to gid S-1-5-32-545 [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-32-545) [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(682) calling find_domain_from_sid [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999981 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20734 [2007/11/25 15:42:54, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-32-545 to a gid [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:sid_to_gid(1456) sid S-1-5-32-545 -> gid 10003 [2007/11/25 15:42:54, 3] passdb/lookup_sid.c:store_gid_sid_cache(1133) store_gid_sid_cache: gid 10003 in cache -> S-1-5-32-545 [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:42:54, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:42:54, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:42:54, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:42:54, 10] lib/privileges.c:grant_privilege(572) grant_privilege: S-1-1-0 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:42:54, 10] lib/privileges.c:grant_privilege(572) grant_privilege: S-1-5-32-548 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:42:54, 10] lib/privileges.c:grant_privilege(572) grant_privilege: S-1-5-32-549 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:42:54, 10] lib/privileges.c:grant_privilege(572) grant_privilege: S-1-5-32-550 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:42:54, 10] lib/privileges.c:grant_privilege(572) grant_privilege: S-1-5-32-551 original privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:42:54, 10] lib/privileges.c:grant_privilege(572) grant_privilege: S-1-5-32-544 original privilege mask: SE_PRIV 0xff0 0x0 0x0 0x0 new privilege mask: SE_PRIV 0xff0 0x0 0x0 0x0 [2007/11/25 15:42:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-22-1-0] [2007/11/25 15:42:54, 5] lib/privileges.c:get_privileges_for_sids(460) get_privileges_for_sids: sid = S-1-5-32-544 Privilege set: SE_PRIV 0xff0 0x0 0x0 0x0 [2007/11/25 15:42:54, 5] lib/privileges.c:get_privileges_for_sids(460) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:42:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2007/11/25 15:42:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-11] [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_open(277) regdb_open: incrementing refcount (1) [2007/11/25 15:42:54, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services] [2007/11/25 15:42:54, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(414) pathtree_find: Exit [2007/11/25 15:42:54, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/11/25 15:42:54, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-22-1-0. [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/11/25 15:42:54, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_open(277) regdb_open: incrementing refcount (2) [2007/11/25 15:42:54, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2007/11/25 15:42:54, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(414) pathtree_find: Exit [2007/11/25 15:42:54, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/11/25 15:42:54, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-22-1-0. [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/11/25 15:42:54, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_store_values(624) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_close(308) regdb_close: decrementing refcount (2) [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_open(277) regdb_open: incrementing refcount (2) [2007/11/25 15:42:54, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2007/11/25 15:42:54, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(414) pathtree_find: Exit [2007/11/25 15:42:54, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/11/25 15:42:54, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-22-1-0. [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/11/25 15:42:54, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc sec_desc [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0000 revision : 0001 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0002 type : 8004 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0004 off_owner_sid: 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0008 off_grp_sid : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c off_sacl : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0010 off_dacl : 00000014 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 sec_io_acl dacl [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0014 revision: 0002 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0018 num_aces : 00000004 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 00001c sec_io_ace ace_list[00]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 001c type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 001d flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0020 access_mask: 0002018d [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0024 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0025 num_auths : 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0026 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0027 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0028 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0029 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 002a id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 002b id_auth[5] : 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 002c sub_auths : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 001e size : 0014 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 sec_io_ace ace_list[01]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0030 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0031 flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0034 access_mask: 000201fd [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0038 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0039 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003a id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003b id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003c id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003d id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003e id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003f id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0040 sub_auths : 00000020 00000223 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0032 size : 0018 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 sec_io_ace ace_list[02]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0048 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0049 flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 004c access_mask: 000f01ff [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0050 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0051 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0052 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0053 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0054 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0055 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0056 id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0057 id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0058 sub_auths : 00000020 00000225 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 004a size : 0018 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[03]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0060 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0061 flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0064 access_mask: 000f01ff [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0068 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0069 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006a id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006b id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006c id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006d id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006e id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006f id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0070 sub_auths : 00000020 00000220 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0062 size : 0018 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0016 size : 0064 [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_store_values(624) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_close(308) regdb_close: decrementing refcount (2) [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_open(277) regdb_open: incrementing refcount (2) [2007/11/25 15:42:54, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2007/11/25 15:42:54, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(414) pathtree_find: Exit [2007/11/25 15:42:54, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/11/25 15:42:54, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-22-1-0. [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/11/25 15:42:54, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_store_values(624) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_close(308) regdb_close: decrementing refcount (2) [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_open(277) regdb_open: incrementing refcount (2) [2007/11/25 15:42:54, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2007/11/25 15:42:54, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(414) pathtree_find: Exit [2007/11/25 15:42:54, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/11/25 15:42:54, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-22-1-0. [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/11/25 15:42:54, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc sec_desc [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0000 revision : 0001 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0002 type : 8004 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0004 off_owner_sid: 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0008 off_grp_sid : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c off_sacl : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0010 off_dacl : 00000014 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 sec_io_acl dacl [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0014 revision: 0002 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0018 num_aces : 00000004 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 00001c sec_io_ace ace_list[00]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 001c type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 001d flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0020 access_mask: 0002018d [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0024 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0025 num_auths : 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0026 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0027 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0028 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0029 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 002a id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 002b id_auth[5] : 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 002c sub_auths : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 001e size : 0014 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 sec_io_ace ace_list[01]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0030 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0031 flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0034 access_mask: 000201fd [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0038 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0039 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003a id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003b id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003c id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003d id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003e id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003f id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0040 sub_auths : 00000020 00000223 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0032 size : 0018 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 sec_io_ace ace_list[02]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0048 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0049 flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 004c access_mask: 000f01ff [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0050 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0051 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0052 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0053 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0054 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0055 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0056 id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0057 id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0058 sub_auths : 00000020 00000225 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 004a size : 0018 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[03]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0060 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0061 flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0064 access_mask: 000f01ff [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0068 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0069 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006a id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006b id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006c id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006d id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006e id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006f id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0070 sub_auths : 00000020 00000220 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0062 size : 0018 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0016 size : 0064 [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_store_values(624) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_close(308) regdb_close: decrementing refcount (2) [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_open(277) regdb_open: incrementing refcount (2) [2007/11/25 15:42:54, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2007/11/25 15:42:54, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(414) pathtree_find: Exit [2007/11/25 15:42:54, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/11/25 15:42:54, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-22-1-0. [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/11/25 15:42:54, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_store_values(624) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_close(308) regdb_close: decrementing refcount (2) [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_open(277) regdb_open: incrementing refcount (2) [2007/11/25 15:42:54, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2007/11/25 15:42:54, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(414) pathtree_find: Exit [2007/11/25 15:42:54, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/11/25 15:42:54, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-22-1-0. [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/11/25 15:42:54, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc sec_desc [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0000 revision : 0001 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0002 type : 8004 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0004 off_owner_sid: 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0008 off_grp_sid : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c off_sacl : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0010 off_dacl : 00000014 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 sec_io_acl dacl [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0014 revision: 0002 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0018 num_aces : 00000004 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 00001c sec_io_ace ace_list[00]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 001c type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 001d flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0020 access_mask: 0002018d [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0024 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0025 num_auths : 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0026 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0027 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0028 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0029 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 002a id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 002b id_auth[5] : 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 002c sub_auths : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 001e size : 0014 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 sec_io_ace ace_list[01]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0030 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0031 flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0034 access_mask: 000201fd [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0038 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0039 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003a id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003b id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003c id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003d id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003e id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003f id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0040 sub_auths : 00000020 00000223 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0032 size : 0018 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 sec_io_ace ace_list[02]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0048 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0049 flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 004c access_mask: 000f01ff [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0050 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0051 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0052 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0053 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0054 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0055 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0056 id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0057 id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0058 sub_auths : 00000020 00000225 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 004a size : 0018 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[03]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0060 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0061 flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0064 access_mask: 000f01ff [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0068 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0069 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006a id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006b id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006c id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006d id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006e id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006f id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0070 sub_auths : 00000020 00000220 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0062 size : 0018 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0016 size : 0064 [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_store_values(624) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_close(308) regdb_close: decrementing refcount (2) [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_open(277) regdb_open: incrementing refcount (2) [2007/11/25 15:42:54, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2007/11/25 15:42:54, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(414) pathtree_find: Exit [2007/11/25 15:42:54, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/11/25 15:42:54, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-22-1-0. [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/11/25 15:42:54, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_store_values(624) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_close(308) regdb_close: decrementing refcount (2) [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_open(277) regdb_open: incrementing refcount (2) [2007/11/25 15:42:54, 7] registry/reg_frontend.c:regkey_open_internal(359) regkey_open_internal: name = [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2007/11/25 15:42:54, 10] registry/reg_cachehook.c:reghook_cache_find(95) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(341) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2007/11/25 15:42:54, 10] lib/adt_tree.c:pathtree_find(414) pathtree_find: Exit [2007/11/25 15:42:54, 5] registry/reg_frontend.c:registry_access_check(59) registry_access_check: using root's token [2007/11/25 15:42:54, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x000f003f, for NT token with 5 entries and first sid S-1-22-1-0. [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:42:54, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-22-1-0 se_access_check: also S-1-5-32-544 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 20019, current desired = f003f se_access_check: ACE 1: type 0, flags = 0x00, SID = S-1-5-32-544 mask = f003f, current desired = d0026 [2007/11/25 15:42:54, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (f003f) granted. [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc sec_desc [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0000 revision : 0001 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0002 type : 8004 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0004 off_owner_sid: 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0008 off_grp_sid : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 000c off_sacl : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0010 off_dacl : 00000014 [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000014 sec_io_acl dacl [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0014 revision: 0002 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0018 num_aces : 00000004 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 00001c sec_io_ace ace_list[00]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 001c type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 001d flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0020 access_mask: 0002018d [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000024 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0024 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0025 num_auths : 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0026 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0027 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0028 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0029 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 002a id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 002b id_auth[5] : 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 002c sub_auths : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 001e size : 0014 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000030 sec_io_ace ace_list[01]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0030 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0031 flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0034 access_mask: 000201fd [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000038 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0038 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0039 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003a id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003b id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003c id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003d id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003e id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003f id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0040 sub_auths : 00000020 00000223 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0032 size : 0018 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000048 sec_io_ace ace_list[02]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0048 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0049 flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 004c access_mask: 000f01ff [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000050 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0050 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0051 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0052 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0053 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0054 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0055 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0056 id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0057 id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0058 sub_auths : 00000020 00000225 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 004a size : 0018 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[03]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0060 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0061 flags: 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0064 access_mask: 000f01ff [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0068 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0069 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006a id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006b id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006c id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006d id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006e id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006f id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0070 sub_auths : 00000020 00000220 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0062 size : 0018 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0016 size : 0064 [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_store_values(624) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_close(308) regdb_close: decrementing refcount (2) [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_close(308) regdb_close: decrementing refcount (1) [2007/11/25 15:42:54, 10] registry/reg_db.c:regdb_close(308) regdb_close: decrementing refcount (0) [2007/11/25 15:42:54, 10] printing/nt_printing.c:update_c_setprinter(711) update_c_setprinter: c_setprinter = 0 [2007/11/25 15:42:54, 10] lib/gencache.c:gencache_get(226) Returning valid cache entry: key = AD_SITENAME/DOMAIN/DDCENTRIFY.DEV, value = Default-First-Site-Name, timeout = Mon Jan 18 19:14:07 2038 [2007/11/25 15:42:54, 5] libads/dns.c:sitename_fetch(677) sitename_fetch: Returning sitename for DDCENTRIFY.DEV: "Default-First-Site-Name" [2007/11/25 15:42:54, 6] libads/ldap.c:ads_find_dc(294) ads_find_dc: looking for realm 'DDCENTRIFY.DEV' [2007/11/25 15:42:54, 8] libsmb/namequery.c:get_sorted_dc_list(1626) get_sorted_dc_list: attempting lookup for name DDCENTRIFY.DEV (sitename Default-First-Site-Name) using [ads] [2007/11/25 15:42:54, 10] lib/gencache.c:gencache_get(226) Returning valid cache entry: key = SAF/DOMAIN/DDCENTRIFY.DEV, value = 192.168.31.190, timeout = Sun Nov 25 15:57:54 2007 [2007/11/25 15:42:54, 5] libsmb/namequery.c:saf_fetch(136) saf_fetch: Returning "192.168.31.190" for "DDCENTRIFY.DEV" domain [2007/11/25 15:42:54, 3] libsmb/namequery.c:get_dc_list(1489) get_dc_list: preferred server list: "192.168.31.190, *" [2007/11/25 15:42:54, 10] libsmb/namequery.c:internal_resolve_name(1166) internal_resolve_name: looking up DDCENTRIFY.DEV#1c (sitename Default-First-Site-Name) [2007/11/25 15:42:54, 10] lib/gencache.c:gencache_get(226) Returning valid cache entry: key = NBT/DDCENTRIFY.DEV#1C, value = 192.168.31.190:389, timeout = Sun Nov 25 15:53:54 2007 [2007/11/25 15:42:54, 5] libsmb/namecache.c:namecache_fetch(214) name DDCENTRIFY.DEV#1C found. [2007/11/25 15:42:54, 8] libsmb/namequery.c:get_dc_list(1505) Adding 1 DC's from auto lookup [2007/11/25 15:42:54, 10] lib/gencache.c:gencache_get(226) Returning valid cache entry: key = AD_SITENAME/DOMAIN/DDCENTRIFY.DEV, value = Default-First-Site-Name, timeout = Mon Jan 18 19:14:07 2038 [2007/11/25 15:42:54, 5] libads/dns.c:sitename_fetch(677) sitename_fetch: Returning sitename for DDCENTRIFY.DEV: "Default-First-Site-Name" [2007/11/25 15:42:54, 10] libsmb/namequery.c:remove_duplicate_addrs2(435) remove_duplicate_addrs2: looking for duplicate address/port pairs [2007/11/25 15:42:54, 4] libsmb/namequery.c:get_dc_list(1599) get_dc_list: returning 1 ip addresses in an ordered list [2007/11/25 15:42:54, 4] libsmb/namequery.c:get_dc_list(1600) get_dc_list: 192.168.31.190:389 [2007/11/25 15:42:54, 5] libads/ldap.c:ads_try_connect(180) ads_try_connect: sending CLDAP request to 192.168.31.190 (realm: DDCENTRIFY.DEV) [2007/11/25 15:42:54, 10] libads/dns.c:sitename_store(638) sitename_store: realm = [DDCENTRIFY.DEV], sitename = [Default-First-Site-Name], expire = [2147483647] [2007/11/25 15:42:54, 10] lib/gencache.c:gencache_set(140) Adding cache entry with key = AD_SITENAME/DOMAIN/DDCENTRIFY.DEV; value = Default-First-Site-Name and timeout = Mon Jan 18 19:14:07 2038 (951449473 seconds ahead) [2007/11/25 15:42:54, 3] libads/ldap.c:ads_connect(394) Connected to LDAP server 192.168.31.190 [2007/11/25 15:42:54, 10] libads/ldap.c:ads_closest_dc(149) ads_closest_dc: ADS_CLOSEST flag set [2007/11/25 15:42:54, 10] libsmb/namequery.c:saf_store(74) saf_store: domain = [DDCENTRIFY], server = [192.168.31.190], expire = [1196035074] [2007/11/25 15:42:54, 10] lib/gencache.c:gencache_set(140) Adding cache entry with key = SAF/DOMAIN/DDCENTRIFY; value = 192.168.31.190 and timeout = Sun Nov 25 15:57:54 2007 (900 seconds ahead) [2007/11/25 15:42:54, 10] libsmb/namequery.c:saf_store(74) saf_store: domain = [DDCENTRIFY.DEV], server = [192.168.31.190], expire = [1196035074] [2007/11/25 15:42:54, 10] lib/gencache.c:gencache_set(140) Adding cache entry with key = SAF/DOMAIN/DDCENTRIFY.DEV; value = 192.168.31.190 and timeout = Sun Nov 25 15:57:54 2007 (900 seconds ahead) [2007/11/25 15:42:54, 4] libads/ldap.c:ads_current_time(2414) time offset is 0 seconds [2007/11/25 15:42:54, 4] libads/sasl.c:ads_sasl_bind(521) Found SASL mechanism GSS-SPNEGO [2007/11/25 15:42:54, 3] libads/sasl.c:ads_sasl_spnego_bind(213) ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2 [2007/11/25 15:42:54, 3] libads/sasl.c:ads_sasl_spnego_bind(213) ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 [2007/11/25 15:42:54, 3] libads/sasl.c:ads_sasl_spnego_bind(213) ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3 [2007/11/25 15:42:54, 3] libads/sasl.c:ads_sasl_spnego_bind(213) ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10 [2007/11/25 15:42:54, 3] libads/sasl.c:ads_sasl_spnego_bind(222) ads_sasl_spnego_bind: got server principal name = dd-dc1$@DDCENTRIFY.DEV [2007/11/25 15:42:54, 3] libsmb/clikrb5.c:ads_krb5_mk_req(593) ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found) [2007/11/25 15:42:54, 10] libads/sasl.c:ads_sasl_spnego_bind(262) ads_sasl_spnego_krb5_bind failed with: No credentials cache found, calling kinit [2007/11/25 15:42:54, 10] libads/kerberos.c:kerberos_kinit_password_ext(91) kerberos_kinit_password: using [MEMORY:prtpub_cache] as ccache and config [(null)] [2007/11/25 15:42:54, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(528) ads_cleanup_expired_creds: Ticket in ccache[MEMORY:prtpub_cache] expiration Mon, 26 Nov 2007 01:42:54 PST [2007/11/25 15:42:54, 10] libsmb/clikrb5.c:ads_krb5_mk_req(624) ads_krb5_mk_req: Ticket (dd-dc1$@DDCENTRIFY.DEV) in ccache (MEMORY:prtpub_cache) is valid until: (Mon, 26 Nov 2007 01:42:54 PST - 1196070174) [2007/11/25 15:42:54, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(735) Got KRB5 session key of length 16 [2007/11/25 15:42:54, 10] printing/nt_printing.c:get_a_printer(4457) get_a_printer: [printers] level 2 [2007/11/25 15:42:54, 10] printing/nt_printing.c:get_a_printer_2_default(3766) get_a_printer_2_default: driver name set to [] [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc_buf nt_printing_getsec [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0000 max_len: 000000c8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0004 ptr : 00000001 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0008 len : 000000c8 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 00000c sec_io_desc sec [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000c revision : 0001 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000e type : 8004 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0010 off_owner_sid: 000000a8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0014 off_grp_sid : 000000b8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0018 off_sacl : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 001c off_dacl : 00000014 [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 0000b4 smb_io_dom_sid owner_sid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00b4 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00b5 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00b6 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00b7 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00b8 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00b9 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00ba id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00bb id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 00bc sub_auths : 00000020 00000220 [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 0000c4 smb_io_dom_sid group_sid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00c4 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00c5 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00c6 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00c7 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00c8 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00c9 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00ca id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00cb id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 00cc sub_auths : 00000020 00000220 [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000020 sec_io_acl dacl [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0020 revision: 0002 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0022 size : 0094 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0024 num_aces : 00000005 [2007/11/25 15:42:54, 9] rpc_parse/parse_prs.c:prs_debug(84) 000028 sec_io_ace ace_list[00]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0028 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0029 flags: 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 002a size : 0014 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 002c access_mask: 20020008 [2007/11/25 15:42:54, 10] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0030 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0031 num_auths : 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0032 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0033 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0034 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0035 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0036 id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0037 id_auth[5] : 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0038 sub_auths : 00000000 [2007/11/25 15:42:54, 9] rpc_parse/parse_prs.c:prs_debug(84) 00003c sec_io_ace ace_list[01]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003c type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003d flags: 09 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 003e size : 0024 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0040 access_mask: 100f000c [2007/11/25 15:42:54, 10] rpc_parse/parse_prs.c:prs_debug(84) 000044 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0044 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0045 num_auths : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0046 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0047 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0048 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0049 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 004a id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 004b id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 004c sub_auths : 00000015 263e727a 28c889fe c3bf6389 000001f4 [2007/11/25 15:42:54, 9] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[02]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0060 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0061 flags: 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0062 size : 0024 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0064 access_mask: 100f000c [2007/11/25 15:42:54, 10] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0068 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0069 num_auths : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006a id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006b id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006c id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006d id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006e id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006f id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0070 sub_auths : 00000015 263e727a 28c889fe c3bf6389 000001f4 [2007/11/25 15:42:54, 9] rpc_parse/parse_prs.c:prs_debug(84) 000084 sec_io_ace ace_list[03]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0084 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0085 flags: 09 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0086 size : 0018 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0088 access_mask: 100f000c [2007/11/25 15:42:54, 10] rpc_parse/parse_prs.c:prs_debug(84) 00008c smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 008c sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 008d num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 008e id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 008f id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0090 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0091 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0092 id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0093 id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0094 sub_auths : 00000020 00000220 [2007/11/25 15:42:54, 9] rpc_parse/parse_prs.c:prs_debug(84) 00009c sec_io_ace ace_list[04]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 009c type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 009d flags: 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 009e size : 0018 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 00a0 access_mask: 100f000c [2007/11/25 15:42:54, 10] rpc_parse/parse_prs.c:prs_debug(84) 0000a4 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a4 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a5 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a6 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a7 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a8 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a9 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00aa id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00ab id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 00ac sub_auths : 00000020 00000220 [2007/11/25 15:42:54, 10] printing/nt_printing.c:nt_printing_getsec(5361) secdesc_ctr for printers has 5 aces: [2007/11/25 15:42:54, 10] printing/nt_printing.c:nt_printing_getsec(5370) S-1-1-0 0 2 0x20020008 [2007/11/25 15:42:54, 10] printing/nt_printing.c:nt_printing_getsec(5370) S-1-5-21-641626746-684231166-3284099977-500 0 9 0x100f000c [2007/11/25 15:42:54, 10] printing/nt_printing.c:nt_printing_getsec(5370) S-1-5-21-641626746-684231166-3284099977-500 0 2 0x100f000c [2007/11/25 15:42:54, 10] printing/nt_printing.c:nt_printing_getsec(5370) S-1-5-32-544 0 9 0x100f000c [2007/11/25 15:42:54, 10] printing/nt_printing.c:nt_printing_getsec(5370) S-1-5-32-544 0 2 0x100f000c [2007/11/25 15:42:54, 10] printing/nt_printing.c:get_a_printer(4457) get_a_printer: [HP2100] level 2 [2007/11/25 15:42:54, 10] printing/nt_printing.c:get_a_printer_2_default(3766) get_a_printer_2_default: driver name set to [] [2007/11/25 15:42:54, 6] rpc_parse/parse_prs.c:prs_debug(84) 000000 sec_io_desc_buf nt_printing_getsec [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0000 max_len: 000000c8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0004 ptr : 00000001 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0008 len : 000000c8 [2007/11/25 15:42:54, 7] rpc_parse/parse_prs.c:prs_debug(84) 00000c sec_io_desc sec [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000c revision : 0001 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 000e type : 8004 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0010 off_owner_sid: 000000a8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0014 off_grp_sid : 000000b8 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0018 off_sacl : 00000000 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 001c off_dacl : 00000014 [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 0000b4 smb_io_dom_sid owner_sid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00b4 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00b5 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00b6 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00b7 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00b8 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00b9 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00ba id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00bb id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 00bc sub_auths : 00000020 00000220 [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 0000c4 smb_io_dom_sid group_sid [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00c4 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00c5 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00c6 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00c7 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00c8 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00c9 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00ca id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00cb id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 00cc sub_auths : 00000020 00000220 [2007/11/25 15:42:54, 8] rpc_parse/parse_prs.c:prs_debug(84) 000020 sec_io_acl dacl [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0020 revision: 0002 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0022 size : 0094 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0024 num_aces : 00000005 [2007/11/25 15:42:54, 9] rpc_parse/parse_prs.c:prs_debug(84) 000028 sec_io_ace ace_list[00]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0028 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0029 flags: 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 002a size : 0014 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 002c access_mask: 20020008 [2007/11/25 15:42:54, 10] rpc_parse/parse_prs.c:prs_debug(84) 000030 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0030 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0031 num_auths : 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0032 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0033 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0034 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0035 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0036 id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0037 id_auth[5] : 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0038 sub_auths : 00000000 [2007/11/25 15:42:54, 9] rpc_parse/parse_prs.c:prs_debug(84) 00003c sec_io_ace ace_list[01]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003c type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 003d flags: 09 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 003e size : 0024 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0040 access_mask: 100f000c [2007/11/25 15:42:54, 10] rpc_parse/parse_prs.c:prs_debug(84) 000044 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0044 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0045 num_auths : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0046 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0047 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0048 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0049 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 004a id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 004b id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 004c sub_auths : 00000015 263e727a 28c889fe c3bf6389 000001f4 [2007/11/25 15:42:54, 9] rpc_parse/parse_prs.c:prs_debug(84) 000060 sec_io_ace ace_list[02]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0060 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0061 flags: 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0062 size : 0024 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0064 access_mask: 100f000c [2007/11/25 15:42:54, 10] rpc_parse/parse_prs.c:prs_debug(84) 000068 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0068 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0069 num_auths : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006a id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006b id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006c id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006d id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006e id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 006f id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0070 sub_auths : 00000015 263e727a 28c889fe c3bf6389 000001f4 [2007/11/25 15:42:54, 9] rpc_parse/parse_prs.c:prs_debug(84) 000084 sec_io_ace ace_list[03]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0084 type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0085 flags: 09 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 0086 size : 0018 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 0088 access_mask: 100f000c [2007/11/25 15:42:54, 10] rpc_parse/parse_prs.c:prs_debug(84) 00008c smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 008c sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 008d num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 008e id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 008f id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0090 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0091 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0092 id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 0093 id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 0094 sub_auths : 00000020 00000220 [2007/11/25 15:42:54, 9] rpc_parse/parse_prs.c:prs_debug(84) 00009c sec_io_ace ace_list[04]: [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 009c type : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 009d flags: 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint16(681) 009e size : 0018 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32(710) 00a0 access_mask: 100f000c [2007/11/25 15:42:54, 10] rpc_parse/parse_prs.c:prs_debug(84) 0000a4 smb_io_dom_sid trustee [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a4 sid_rev_num: 01 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a5 num_auths : 02 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a6 id_auth[0] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a7 id_auth[1] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a8 id_auth[2] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00a9 id_auth[3] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00aa id_auth[4] : 00 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint8(616) 00ab id_auth[5] : 05 [2007/11/25 15:42:54, 5] rpc_parse/parse_prs.c:prs_uint32s(997) 00ac sub_auths : 00000020 00000220 [2007/11/25 15:42:54, 10] printing/nt_printing.c:nt_printing_getsec(5361) secdesc_ctr for HP2100 has 5 aces: [2007/11/25 15:42:54, 10] printing/nt_printing.c:nt_printing_getsec(5370) S-1-1-0 0 2 0x20020008 [2007/11/25 15:42:54, 10] printing/nt_printing.c:nt_printing_getsec(5370) S-1-5-21-641626746-684231166-3284099977-500 0 9 0x100f000c [2007/11/25 15:42:54, 10] printing/nt_printing.c:nt_printing_getsec(5370) S-1-5-21-641626746-684231166-3284099977-500 0 2 0x100f000c [2007/11/25 15:42:54, 10] printing/nt_printing.c:nt_printing_getsec(5370) S-1-5-32-544 0 9 0x100f000c [2007/11/25 15:42:54, 10] printing/nt_printing.c:nt_printing_getsec(5370) S-1-5-32-544 0 2 0x100f000c [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:42:54, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:42:54, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:42:54, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:42:54, 6] passdb/pdb_interface.c:pdb_getsampwsid(281) pdb_getsampwsid: Building guest account [2007/11/25 15:42:54, 10] passdb/pdb_get_set.c:pdb_set_username(581) pdb_set_username: setting username nobody, was [2007/11/25 15:42:54, 10] passdb/pdb_get_set.c:pdb_set_fullname(650) pdb_set_full_name: setting full name Nobody, was [2007/11/25 15:42:54, 10] passdb/pdb_get_set.c:pdb_set_domain(604) pdb_set_domain: setting domain DD-RHES3, was [2007/11/25 15:42:54, 10] passdb/pdb_get_set.c:pdb_set_user_sid(510) pdb_set_user_sid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-501 [2007/11/25 15:42:54, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-501 from rid 501 [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:42:54, 10] lib/util_pw.c:getpwnam_alloc(76) Got nobody from pwnam_cache [2007/11/25 15:42:54, 10] lib/util_pw.c:getpwnam_alloc(76) Got nobody from pwnam_cache [2007/11/25 15:42:54, 10] lib/system_smbd.c:sys_getgrouplist(125) sys_getgrouplist: user [nobody] [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:42:54, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:42:54, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:42:54, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn GID_TO_SID (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_sid.c:winbindd_gid_to_sid(477) [20730]: gid to sid 99 [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999979 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:42:54, 10] nsswitch/winbindd_sid.c:gid2sid_recv(462) gid2sid: gid 99 has sid S-1-22-2-99 [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:gid_to_sid(1360) gid 99 -> sid S-1-22-2-99 [2007/11/25 15:42:54, 5] auth/auth_util.c:make_server_info_sam(623) make_server_info_sam: made server info for user nobody -> nobody [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20730]: ping [2007/11/25 15:42:54, 10] auth/auth_util.c:create_local_nt_token(844) Create local NT token for S-1-5-21-641626746-684231166-3284099977-3210-501 [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20730]: sid to gid S-1-5-32-544 [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-32-544) [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(682) calling find_domain_from_sid [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20734 [2007/11/25 15:42:54, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-32-544 to a gid [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:42:54, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:42:54, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-5-32-544 [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20730]: ping [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-5-32-544 [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20730]: ping [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:42:54, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:42:54, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:42:54, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:42:54, 10] groupdb/mapping.c:pdb_create_builtin_alias(702) Trying to create builtin alias 544 [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:check_dom_sid_to_level(663) Accepting SID S-1-5-32 in level 1 [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:lookup_sid(941) Sid S-1-5-32-544 -> BUILTIN\Administrators(4) [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn ALLOCATE_GID (from pid 20730) [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999981 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:42:54, 3] groupdb/mapping.c:pdb_create_builtin_alias(723) pdb_create_builtin_alias: Could not get a gid out of winbind [2007/11/25 15:42:54, 2] auth/auth_util.c:create_builtin_administrators(792) create_builtin_administrators: Failed to create Administrators [2007/11/25 15:42:54, 2] auth/auth_util.c:create_local_nt_token(914) create_local_nt_token: Failed to create BUILTIN\Administrators group! [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:42:54, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1089) fetch gid from cache 10003 -> S-1-5-32-545 [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:42:54, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:42:54, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:42:54, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:42:54, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:42:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-641626746-684231166-3284099977-3210-501] [2007/11/25 15:42:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-22-2-99] [2007/11/25 15:42:54, 5] lib/privileges.c:get_privileges_for_sids(460) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:42:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2007/11/25 15:42:54, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:sid_to_gid(1438) sid S-1-22-2-99 -> gid 99 [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20730]: sid to gid S-1-1-0 [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-1-0) [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(689) calling find_our_domain [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999981 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20722 [2007/11/25 15:42:54, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-1-0 to a gid [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999979 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:42:54, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:42:54, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-1-0 [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20730]: ping [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-1-0 [2007/11/25 15:42:54, 10] auth/auth_util.c:create_local_token(1043) Could not convert SID S-1-1-0 to gid, ignoring it [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20730]: sid to gid S-1-5-2 [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-2) [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(689) calling find_our_domain [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20722 [2007/11/25 15:42:54, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-2 to a gid [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:42:54, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:42:54, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-5-2 [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20730]: ping [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-5-2 [2007/11/25 15:42:54, 10] auth/auth_util.c:create_local_token(1043) Could not convert SID S-1-5-2 to gid, ignoring it [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20730]: sid to gid S-1-5-32-546 [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-32-546) [2007/11/25 15:42:54, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(682) calling find_domain_from_sid [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20734 [2007/11/25 15:42:54, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-32-546 to a gid [2007/11/25 15:42:54, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:42:54, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999981 [2007/11/25 15:42:54, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:42:54, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:42:54, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:42:54, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-5-32-546 [2007/11/25 15:42:54, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20730) [2007/11/25 15:42:54, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20730]: ping [2007/11/25 15:42:54, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-5-32-546 [2007/11/25 15:42:54, 10] auth/auth_util.c:create_local_token(1043) Could not convert SID S-1-5-32-546 to gid, ignoring it [2007/11/25 15:42:54, 10] auth/auth_util.c:debug_nt_user_token(454) NT user token of user S-1-5-21-641626746-684231166-3284099977-3210-501 contains 5 SIDs SID[ 0]: S-1-5-21-641626746-684231166-3284099977-3210-501 SID[ 1]: S-1-22-2-99 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:42:54, 5] smbd/connection.c:claim_connection(182) claiming 0 [2007/11/25 15:42:54, 3] printing/printing.c:start_background_queue(1388) start_background_queue: Starting background LPQ thread [2007/11/25 15:42:54, 5] printing/printing.c:start_background_queue(1398) start_background_queue: background LPQ thread started [2007/11/25 15:42:54, 5] smbd/connection.c:claim_connection(182) claiming smbd lpq backend 0 [2007/11/25 15:42:54, 5] printing/printing.c:start_background_queue(1410) start_background_queue: background LPQ thread waiting for messages [2007/11/25 15:42:54, 10] lib/util_sock.c:open_socket_in(839) bind succeeded on port 445 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2007/11/25 15:42:54, 10] lib/util_sock.c:open_socket_in(839) bind succeeded on port 139 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2007/11/25 15:42:54, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2007/11/25 15:42:54, 2] smbd/server.c:open_sockets_smbd(458) waiting for a connection [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2007/11/25 15:43:14, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2007/11/25 15:43:14, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:43:14, 3] smbd/oplock.c:init_oplocks(863) init_oplocks: initializing messages. [2007/11/25 15:43:14, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(276) Linux kernel oplocks enabled [2007/11/25 15:43:14, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 133 [2007/11/25 15:43:14, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x85 [2007/11/25 15:43:14, 3] smbd/process.c:process_smb(1068) Transaction 0 of length 137 [2007/11/25 15:43:14, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:14, 5] lib/util.c:show_msg(494) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2007/11/25 15:43:14, 10] lib/util.c:dump_data(2264) [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [060] 32 00 2. [2007/11/25 15:43:14, 3] smbd/process.c:switch_message(926) switch message SMBnegprot (pid 20738) conn 0x0 [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:14, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:14, 3] smbd/negprot.c:reply_negprot(505) Requested protocol [PC NETWORK PROGRAM 1.0] [2007/11/25 15:43:14, 3] smbd/negprot.c:reply_negprot(505) Requested protocol [LANMAN1.0] [2007/11/25 15:43:14, 3] smbd/negprot.c:reply_negprot(505) Requested protocol [Windows for Workgroups 3.1a] [2007/11/25 15:43:14, 3] smbd/negprot.c:reply_negprot(505) Requested protocol [LM1.2X002] [2007/11/25 15:43:14, 3] smbd/negprot.c:reply_negprot(505) Requested protocol [LANMAN2.1] [2007/11/25 15:43:14, 3] smbd/negprot.c:reply_negprot(505) Requested protocol [NT LM 0.12] [2007/11/25 15:43:14, 10] lib/util.c:set_remote_arch(2239) set_remote_arch: Client arch is 'Win2K' [2007/11/25 15:43:14, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:43:14, 5] smbd/connection.c:claim_connection(182) claiming 0 [2007/11/25 15:43:14, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:43:14, 10] lib/util.c:name_to_fqdn(2957) name_to_fqdn: lookup for DD-RHES3 -> DD-RHES3.DDCENTRIFY.DEV. [2007/11/25 15:43:14, 3] smbd/negprot.c:reply_nt1(364) using SPNEGO [2007/11/25 15:43:14, 3] smbd/negprot.c:reply_negprot(606) Selected protocol NT LM 0.12 [2007/11/25 15:43:14, 5] smbd/negprot.c:reply_negprot(612) negprot index=5 [2007/11/25 15:43:14, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:14, 5] lib/util.c:show_msg(494) size=188 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 512 (0x200) smb_vwv[ 8]= 81 (0x51) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=63573 (0xF855) smb_vwv[13]=48369 (0xBCF1) smb_vwv[14]=51247 (0xC82F) smb_vwv[15]=57345 (0xE001) smb_vwv[16]= 1 (0x1) smb_bcc=119 [2007/11/25 15:43:14, 10] lib/util.c:dump_data(2264) [000] 64 64 2D 72 68 65 73 33 00 00 00 00 00 00 00 00 dd-rhes3 ........ [010] 60 65 06 06 2B 06 01 05 05 02 A0 5B 30 59 A0 24 `e..+... ...[0Y.$ [020] 30 22 06 09 2A 86 48 86 F7 12 01 02 02 06 09 2A 0"..*.H. .......* [030] 86 48 82 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H...... ..+..... [040] 37 02 02 0A A3 31 30 2F A0 2D 1B 2B 63 69 66 73 7....10/ .-.+cifs [050] 2F 64 64 2D 72 68 65 73 33 2E 64 64 63 65 6E 74 /dd-rhes 3.ddcent [060] 72 69 66 79 2E 64 65 76 40 44 44 43 45 4E 54 52 rify.dev @DDCENTR [070] 49 46 59 2E 44 45 56 IFY.DEV [2007/11/25 15:43:14, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 236 [2007/11/25 15:43:14, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0xec [2007/11/25 15:43:14, 3] smbd/process.c:process_smb(1068) Transaction 1 of length 240 [2007/11/25 15:43:14, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:14, 5] lib/util.c:show_msg(494) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=64 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2007/11/25 15:43:14, 10] lib/util.c:dump_data(2264) [000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* [020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P....... [030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2 [080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [0A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [0B0] 00 . [2007/11/25 15:43:14, 3] smbd/process.c:switch_message(926) switch message SMBsesssetupX (pid 20738) conn 0x0 [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:14, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1244) wct=12 flg2=0xc807 [2007/11/25 15:43:14, 2] smbd/sesssetup.c:setup_new_vc_session(1200) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2007/11/25 15:43:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1029) Doing spnego session setup [2007/11/25 15:43:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1060) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2007/11/25 15:43:14, 10] lib/util.c:set_remote_arch(2239) set_remote_arch: Client arch is 'WinXP' [2007/11/25 15:43:14, 10] smbd/password.c:register_vuid(186) register_vuid: allocated vuid = 100 [2007/11/25 15:43:14, 10] smbd/sesssetup.c:check_spnego_blob_complete(975) check_spnego_blob_complete: needed_len = 74, pblob->length = 74 [2007/11/25 15:43:14, 5] smbd/sesssetup.c:parse_spnego_mechanisms(667) parse_spnego_mechanisms: Got OID 1 3 6 1 4 1 311 2 2 10 [2007/11/25 15:43:14, 3] smbd/sesssetup.c:reply_spnego_negotiate(697) reply_spnego_negotiate: Got secblob of size 40 [2007/11/25 15:43:14, 5] auth/auth.c:make_auth_context_subsystem(512) Using specified auth order [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend sam [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'sam' [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend sam_ignoredomain [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'sam_ignoredomain' [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend unix [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'unix' [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend winbind [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'winbind' [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend smbserver [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'smbserver' [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend trustdomain [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'trustdomain' [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend ntdomain [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'ntdomain' [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend guest [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'guest' [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend fixed_challenge [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'fixed_challenge' [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend name_to_ntstatus [2007/11/25 15:43:14, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'name_to_ntstatus' [2007/11/25 15:43:14, 5] auth/auth.c:load_auth_module(391) load_auth_module: Attempting to find an auth method to match guest [2007/11/25 15:43:14, 5] auth/auth.c:load_auth_module(416) load_auth_module: auth method guest has a valid init [2007/11/25 15:43:14, 5] auth/auth.c:load_auth_module(391) load_auth_module: Attempting to find an auth method to match sam [2007/11/25 15:43:14, 5] auth/auth.c:load_auth_module(416) load_auth_module: auth method sam has a valid init [2007/11/25 15:43:14, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2007/11/25 15:43:14, 5] auth/auth.c:get_ntlm_challenge(97) auth_get_challenge: module guest did not want to specify a challenge [2007/11/25 15:43:14, 5] auth/auth.c:get_ntlm_challenge(97) auth_get_challenge: module sam did not want to specify a challenge [2007/11/25 15:43:14, 5] auth/auth.c:get_ntlm_challenge(137) auth_context challenge created by random [2007/11/25 15:43:14, 5] auth/auth.c:get_ntlm_challenge(138) challenge is: [2007/11/25 15:43:14, 5] lib/util.c:dump_data(2264) [000] 8B 08 26 5E 47 AA F8 63 ..&^G..c [2007/11/25 15:43:14, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:14, 5] lib/util.c:show_msg(494) size=360 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=64 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 229 (0xE5) smb_bcc=317 [2007/11/25 15:43:14, 10] lib/util.c:dump_data(2264) [000] A1 81 E2 30 81 DF A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 C9 04 81 C6 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 14 00 14 00 30 TLMSSP.. .......0 [030] 00 00 00 95 82 89 E2 8B 08 26 5E 47 AA F8 63 00 ........ .&^G..c. [040] 00 00 00 00 00 00 00 82 00 82 00 44 00 00 00 44 ........ ...D...D [050] 00 44 00 43 00 45 00 4E 00 54 00 52 00 49 00 46 .D.C.E.N .T.R.I.F [060] 00 59 00 02 00 14 00 44 00 44 00 43 00 45 00 4E .Y.....D .D.C.E.N [070] 00 54 00 52 00 49 00 46 00 59 00 01 00 10 00 44 .T.R.I.F .Y.....D [080] 00 44 00 2D 00 52 00 48 00 45 00 53 00 33 00 04 .D.-.R.H .E.S.3.. [090] 00 1C 00 64 00 64 00 63 00 65 00 6E 00 74 00 72 ...d.d.c .e.n.t.r [0A0] 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 00 03 .i.f.y.. .d.e.v.. [0B0] 00 2E 00 44 00 44 00 2D 00 52 00 48 00 45 00 53 ...D.D.- .R.H.E.S [0C0] 00 33 00 2E 00 44 00 44 00 43 00 65 00 6E 00 74 .3...D.D .C.e.n.t [0D0] 00 72 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 .r.i.f.y ...d.e.v [0E0] 00 00 00 00 00 55 00 6E 00 69 00 78 00 00 00 53 .....U.n .i.x...S [0F0] 00 61 00 6D 00 62 00 61 00 20 00 33 00 2E 00 30 .a.m.b.a . .3...0 [100] 00 2E 00 32 00 37 00 61 00 2D 00 63 00 64 00 63 ...2.7.a .-.c.d.c [110] 00 2D 00 34 00 2E 00 30 00 2E 00 30 00 2D 00 34 .-.4...0 ...0.-.4 [120] 00 39 00 32 00 00 00 44 00 44 00 43 00 45 00 4E .9.2...D .D.C.E.N [130] 00 54 00 52 00 49 00 46 00 59 00 00 00 .T.R.I.F .Y... [2007/11/25 15:43:14, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:14, 5] lib/util.c:show_msg(494) size=360 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=64 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 229 (0xE5) smb_bcc=317 [2007/11/25 15:43:14, 10] lib/util.c:dump_data(2264) [000] A1 81 E2 30 81 DF A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 C9 04 81 C6 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 14 00 14 00 30 TLMSSP.. .......0 [030] 00 00 00 95 82 89 E2 8B 08 26 5E 47 AA F8 63 00 ........ .&^G..c. [040] 00 00 00 00 00 00 00 82 00 82 00 44 00 00 00 44 ........ ...D...D [050] 00 44 00 43 00 45 00 4E 00 54 00 52 00 49 00 46 .D.C.E.N .T.R.I.F [060] 00 59 00 02 00 14 00 44 00 44 00 43 00 45 00 4E .Y.....D .D.C.E.N [070] 00 54 00 52 00 49 00 46 00 59 00 01 00 10 00 44 .T.R.I.F .Y.....D [080] 00 44 00 2D 00 52 00 48 00 45 00 53 00 33 00 04 .D.-.R.H .E.S.3.. [090] 00 1C 00 64 00 64 00 63 00 65 00 6E 00 74 00 72 ...d.d.c .e.n.t.r [0A0] 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 00 03 .i.f.y.. .d.e.v.. [0B0] 00 2E 00 44 00 44 00 2D 00 52 00 48 00 45 00 53 ...D.D.- .R.H.E.S [0C0] 00 33 00 2E 00 44 00 44 00 43 00 65 00 6E 00 74 .3...D.D .C.e.n.t [0D0] 00 72 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 .r.i.f.y ...d.e.v [0E0] 00 00 00 00 00 55 00 6E 00 69 00 78 00 00 00 53 .....U.n .i.x...S [0F0] 00 61 00 6D 00 62 00 61 00 20 00 33 00 2E 00 30 .a.m.b.a . .3...0 [100] 00 2E 00 32 00 37 00 61 00 2D 00 63 00 64 00 63 ...2.7.a .-.c.d.c [110] 00 2D 00 34 00 2E 00 30 00 2E 00 30 00 2D 00 34 .-.4...0 ...0.-.4 [120] 00 39 00 32 00 00 00 44 00 44 00 43 00 45 00 4E .9.2...D .D.C.E.N [130] 00 54 00 52 00 49 00 46 00 59 00 00 00 .T.R.I.F .Y... [2007/11/25 15:43:14, 0] smbd/process.c:process_smb(1083) ERROR: Invalid message response size! 1 360 [2007/11/25 15:43:14, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 278 [2007/11/25 15:43:14, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x116 [2007/11/25 15:43:14, 3] smbd/process.c:process_smb(1068) Transaction 2 of length 282 [2007/11/25 15:43:14, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:14, 5] lib/util.c:show_msg(494) size=278 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=128 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 278 (0x116) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 117 (0x75) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=219 [2007/11/25 15:43:14, 10] lib/util.c:dump_data(2264) [000] A1 73 30 71 A2 6F 04 6D 4E 54 4C 4D 53 53 50 00 .s0q.o.m NTLMSSP. [010] 03 00 00 00 01 00 01 00 5C 00 00 00 00 00 00 00 ........ \....... [020] 5D 00 00 00 00 00 00 00 48 00 00 00 00 00 00 00 ]....... H....... [030] 48 00 00 00 14 00 14 00 48 00 00 00 10 00 10 00 H....... H....... [040] 5D 00 00 00 15 8A 88 E2 05 01 28 0A 00 00 00 0F ]....... ..(..... [050] 44 00 44 00 41 00 55 00 47 00 48 00 45 00 52 00 D.D.A.U. G.H.E.R. [060] 54 00 59 00 00 9D 0A 53 DA 3F CE F9 FA CD DC E2 T.Y....S .?...... [070] A8 7B 08 9B 1C 57 00 69 00 6E 00 64 00 6F 00 77 .{...W.i .n.d.o.w [080] 00 73 00 20 00 32 00 30 00 30 00 32 00 20 00 53 .s. .2.0 .0.2. .S [090] 00 65 00 72 00 76 00 69 00 63 00 65 00 20 00 50 .e.r.v.i .c.e. .P [0A0] 00 61 00 63 00 6B 00 20 00 32 00 20 00 32 00 36 .a.c.k. .2. .2.6 [0B0] 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 00 6F .0.0...W .i.n.d.o [0C0] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. [0D0] 00 35 00 2E 00 31 00 00 00 00 00 .5...1.. ... [2007/11/25 15:43:14, 3] smbd/process.c:switch_message(926) switch message SMBsesssetupX (pid 20738) conn 0x0 [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:14, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1244) wct=12 flg2=0xc807 [2007/11/25 15:43:14, 2] smbd/sesssetup.c:setup_new_vc_session(1200) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2007/11/25 15:43:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1029) Doing spnego session setup [2007/11/25 15:43:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1060) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2007/11/25 15:43:14, 10] smbd/sesssetup.c:check_spnego_blob_complete(975) check_spnego_blob_complete: needed_len = 117, pblob->length = 117 [2007/11/25 15:43:14, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739) Got user=[] domain=[] workstation=[DDAUGHERTY] len1=1 len2=0 [2007/11/25 15:43:14, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:43:14, 5] auth/auth_util.c:make_user_info_map(161) make_user_info_map: Mapping user []\[] from workstation [DDAUGHERTY] [2007/11/25 15:43:14, 6] nsswitch/winbindd.c:new_connection(630) accepted socket 19 (number of winbind client=1) [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn INTERFACE_VERSION (from pid 20738) [2007/11/25 15:43:14, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(491) [20738]: request interface version [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn WINBINDD_PRIV_PIPE_DIR (from pid 20738) [2007/11/25 15:43:14, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(524) [20738]: request location of privileged pipe [2007/11/25 15:43:14, 6] nsswitch/winbindd.c:new_connection(630) accepted socket 23 (number of winbind client=2) [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn DOMAIN_INFO (from pid 20738) [2007/11/25 15:43:14, 3] nsswitch/winbindd_misc.c:winbindd_domain_info(385) [20738]: domain_info [DDCENTRIFY] [2007/11/25 15:43:14, 5] auth/auth_util.c:make_user_info(75) attempting to make a user_info for () [2007/11/25 15:43:14, 5] auth/auth_util.c:make_user_info(85) making strings for 's user_info struct [2007/11/25 15:43:14, 5] auth/auth_util.c:make_user_info(117) making blobs for 's user_info struct [2007/11/25 15:43:14, 10] auth/auth_util.c:make_user_info(135) made an encrypted user_info for () [2007/11/25 15:43:14, 3] auth/auth.c:check_ntlm_password(221) check_ntlm_password: Checking password for unmapped user []\[]@[DDAUGHERTY] with the new password interface [2007/11/25 15:43:14, 3] auth/auth.c:check_ntlm_password(224) check_ntlm_password: mapped user is: [DDCENTRIFY]\[]@[DDAUGHERTY] [2007/11/25 15:43:14, 10] auth/auth.c:check_ntlm_password(233) check_ntlm_password: auth_context challenge created by random [2007/11/25 15:43:14, 10] auth/auth.c:check_ntlm_password(235) challenge is: [2007/11/25 15:43:14, 5] lib/util.c:dump_data(2264) [000] 8B 08 26 5E 47 AA F8 63 ..&^G..c [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:14, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:14, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: password history, val: 0 [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 10] passdb/pdb_get_set.c:pdb_set_username(581) pdb_set_username: setting username nobody, was [2007/11/25 15:43:14, 10] passdb/pdb_get_set.c:pdb_set_domain(604) pdb_set_domain: setting domain DD-RHES3, was [2007/11/25 15:43:14, 10] passdb/pdb_get_set.c:pdb_set_nt_username(627) pdb_set_nt_username: setting nt username , was [2007/11/25 15:43:14, 10] passdb/pdb_get_set.c:pdb_set_fullname(650) pdb_set_full_name: setting full name Nobody, was [2007/11/25 15:43:14, 4] lib/substitute.c:automount_server(407) Home server: dd-rhes3 [2007/11/25 15:43:14, 10] passdb/pdb_get_set.c:pdb_set_homedir(743) pdb_set_homedir: setting home dir \\dd-rhes3\nobody, was [2007/11/25 15:43:14, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(719) pdb_set_dir_drive: setting dir drive , was NULL [2007/11/25 15:43:14, 10] passdb/pdb_get_set.c:pdb_set_logon_script(673) pdb_set_logon_script: setting logon script , was [2007/11/25 15:43:14, 4] lib/substitute.c:automount_server(407) Home server: dd-rhes3 [2007/11/25 15:43:14, 10] passdb/pdb_get_set.c:pdb_set_profile_path(696) pdb_set_profile_path: setting profile path \\dd-rhes3\nobody\profile, was [2007/11/25 15:43:14, 10] passdb/pdb_get_set.c:pdb_set_workstations(786) pdb_set_workstations: setting workstations , was [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:14, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:14, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: password history, val: 0 [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 10] passdb/pdb_get_set.c:pdb_set_user_sid(510) pdb_set_user_sid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-501 [2007/11/25 15:43:14, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-501 from rid 501 [2007/11/25 15:43:14, 3] auth/auth.c:check_ntlm_password(270) check_ntlm_password: guest authentication for user [] succeeded [2007/11/25 15:43:14, 5] auth/auth.c:check_ntlm_password(309) check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded [2007/11/25 15:43:14, 5] auth/auth_util.c:free_user_info(2058) attempting to free (and zero) a user_info structure [2007/11/25 15:43:14, 10] auth/auth_util.c:free_user_info(2062) structure was created for [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20738) [2007/11/25 15:43:14, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20738]: ping [2007/11/25 15:43:14, 10] auth/auth_util.c:create_local_nt_token(844) Create local NT token for S-1-5-21-641626746-684231166-3284099977-3210-501 [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20738) [2007/11/25 15:43:14, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20738]: sid to gid S-1-5-32-544 [2007/11/25 15:43:14, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-32-544) [2007/11/25 15:43:14, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(682) calling find_domain_from_sid [2007/11/25 15:43:14, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:14, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999979 [2007/11/25 15:43:14, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:14, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20734 [2007/11/25 15:43:14, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-32-544 to a gid [2007/11/25 15:43:14, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:14, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999979 [2007/11/25 15:43:14, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:14, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:14, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:43:14, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-5-32-544 [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20738) [2007/11/25 15:43:14, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20738]: ping [2007/11/25 15:43:14, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-5-32-544 [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20738) [2007/11/25 15:43:14, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20738]: ping [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:14, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:14, 10] groupdb/mapping.c:pdb_create_builtin_alias(702) Trying to create builtin alias 544 [2007/11/25 15:43:14, 10] passdb/lookup_sid.c:check_dom_sid_to_level(663) Accepting SID S-1-5-32 in level 1 [2007/11/25 15:43:14, 10] passdb/lookup_sid.c:lookup_sid(941) Sid S-1-5-32-544 -> BUILTIN\Administrators(4) [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn ALLOCATE_GID (from pid 20738) [2007/11/25 15:43:14, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:14, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999981 [2007/11/25 15:43:14, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:14, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:14, 3] groupdb/mapping.c:pdb_create_builtin_alias(723) pdb_create_builtin_alias: Could not get a gid out of winbind [2007/11/25 15:43:14, 2] auth/auth_util.c:create_builtin_administrators(792) create_builtin_administrators: Failed to create Administrators [2007/11/25 15:43:14, 2] auth/auth_util.c:create_local_nt_token(914) create_local_nt_token: Failed to create BUILTIN\Administrators group! [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1089) fetch gid from cache 10003 -> S-1-5-32-545 [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:14, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-641626746-684231166-3284099977-3210-501] [2007/11/25 15:43:14, 5] lib/privileges.c:get_privileges_for_sids(460) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:43:14, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2007/11/25 15:43:14, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20738) [2007/11/25 15:43:14, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20738]: sid to gid S-1-1-0 [2007/11/25 15:43:14, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-1-0) [2007/11/25 15:43:14, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(689) calling find_our_domain [2007/11/25 15:43:14, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:14, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:14, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:14, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20722 [2007/11/25 15:43:14, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-1-0 to a gid [2007/11/25 15:43:14, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:14, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:14, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:14, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:14, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:43:14, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-1-0 [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20738) [2007/11/25 15:43:14, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20738]: ping [2007/11/25 15:43:14, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-1-0 [2007/11/25 15:43:14, 10] auth/auth_util.c:create_local_token(1043) Could not convert SID S-1-1-0 to gid, ignoring it [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20738) [2007/11/25 15:43:14, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20738]: sid to gid S-1-5-2 [2007/11/25 15:43:14, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-2) [2007/11/25 15:43:14, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(689) calling find_our_domain [2007/11/25 15:43:14, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:14, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999981 [2007/11/25 15:43:14, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:14, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20722 [2007/11/25 15:43:14, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-2 to a gid [2007/11/25 15:43:14, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:14, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999981 [2007/11/25 15:43:14, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:14, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:14, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:43:14, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-5-2 [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20738) [2007/11/25 15:43:14, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20738]: ping [2007/11/25 15:43:14, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-5-2 [2007/11/25 15:43:14, 10] auth/auth_util.c:create_local_token(1043) Could not convert SID S-1-5-2 to gid, ignoring it [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20738) [2007/11/25 15:43:14, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20738]: sid to gid S-1-5-32-546 [2007/11/25 15:43:14, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-32-546) [2007/11/25 15:43:14, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(682) calling find_domain_from_sid [2007/11/25 15:43:14, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:14, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:14, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:14, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20734 [2007/11/25 15:43:14, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-32-546 to a gid [2007/11/25 15:43:14, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:14, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:14, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:14, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:14, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:43:14, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-5-32-546 [2007/11/25 15:43:14, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20738) [2007/11/25 15:43:14, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20738]: ping [2007/11/25 15:43:14, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-5-32-546 [2007/11/25 15:43:14, 10] auth/auth_util.c:create_local_token(1043) Could not convert SID S-1-5-32-546 to gid, ignoring it [2007/11/25 15:43:14, 10] auth/auth_util.c:debug_nt_user_token(454) NT user token of user S-1-5-21-641626746-684231166-3284099977-3210-501 contains 4 SIDs SID[ 0]: S-1-5-21-641626746-684231166-3284099977-3210-501 SID[ 1]: S-1-1-0 SID[ 2]: S-1-5-2 SID[ 3]: S-1-5-32-546 SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:43:14, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(137) Got NT session key of length 16 [2007/11/25 15:43:14, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(144) Got LM session key of length 16 [2007/11/25 15:43:14, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(841) ntlmssp_server_auth: Using unmodified nt session key. [2007/11/25 15:43:14, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338) NTLMSSP Sign/Seal - Initialising with flags: [2007/11/25 15:43:14, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2007/11/25 15:43:14, 10] smbd/password.c:register_vuid(186) register_vuid: allocated vuid = 101 [2007/11/25 15:43:14, 10] lib/util_pw.c:getpwnam_alloc(76) Got nobody from pwnam_cache [2007/11/25 15:43:14, 10] smbd/password.c:register_vuid(277) register_vuid: (99,99) nobody DD-RHES3 guest=1 [2007/11/25 15:43:14, 3] smbd/password.c:register_vuid(280) User name: nobody Real name: Nobody [2007/11/25 15:43:14, 3] smbd/password.c:register_vuid(301) UNIX uid 99 is UNIX user nobody, and will be vuid 101 [2007/11/25 15:43:14, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:43:14, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:14, 5] lib/util.c:show_msg(494) size=140 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=128 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=97 [2007/11/25 15:43:14, 10] lib/util.c:dump_data(2264) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 30 00 2E 00 32 00 37 00 61 00 2D 00 63 ...0...2 .7.a.-.c [030] 00 64 00 63 00 2D 00 34 00 2E 00 30 00 2E 00 30 .d.c.-.4 ...0...0 [040] 00 2D 00 34 00 39 00 32 00 00 00 44 00 44 00 43 .-.4.9.2 ...D.D.C [050] 00 45 00 4E 00 54 00 52 00 49 00 46 00 59 00 00 .E.N.T.R .I.F.Y.. [060] 00 . [2007/11/25 15:43:14, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:14, 5] lib/util.c:show_msg(494) size=140 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=128 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=97 [2007/11/25 15:43:14, 10] lib/util.c:dump_data(2264) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 30 00 2E 00 32 00 37 00 61 00 2D 00 63 ...0...2 .7.a.-.c [030] 00 64 00 63 00 2D 00 34 00 2E 00 30 00 2E 00 30 .d.c.-.4 ...0...0 [040] 00 2D 00 34 00 39 00 32 00 00 00 44 00 44 00 43 .-.4.9.2 ...D.D.C [050] 00 45 00 4E 00 54 00 52 00 49 00 46 00 59 00 00 .E.N.T.R .I.F.Y.. [060] 00 . [2007/11/25 15:43:14, 0] smbd/process.c:process_smb(1083) ERROR: Invalid message response size! 1 140 [2007/11/25 15:43:14, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 94 [2007/11/25 15:43:14, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x5e [2007/11/25 15:43:14, 3] smbd/process.c:process_smb(1068) Transaction 3 of length 98 [2007/11/25 15:43:14, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:14, 5] lib/util.c:show_msg(494) size=94 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=192 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 94 (0x5E) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=51 [2007/11/25 15:43:14, 10] lib/util.c:dump_data(2264) [000] 00 5C 00 5C 00 31 00 39 00 32 00 2E 00 31 00 36 .\.\.1.9 .2...1.6 [010] 00 38 00 2E 00 33 00 31 00 2E 00 31 00 39 00 31 .8...3.1 ...1.9.1 [020] 00 5C 00 49 00 50 00 43 00 24 00 00 00 3F 3F 3F .\.I.P.C .$...??? [030] 3F 3F 00 ??. [2007/11/25 15:43:14, 3] smbd/process.c:switch_message(926) switch message SMBtconX (pid 20738) conn 0x0 [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:14, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:14, 4] smbd/reply.c:reply_tcon_and_X(506) Client requested device type [?????] for share [IPC$] [2007/11/25 15:43:14, 5] smbd/service.c:make_connection(1205) making a connection to 'normal' service ipc$ [2007/11/25 15:43:14, 5] lib/username.c:Get_Pwnam_alloc(131) Finding user nobody [2007/11/25 15:43:14, 5] lib/username.c:Get_Pwnam_internals(75) Trying _Get_Pwnam(), username as lowercase is nobody [2007/11/25 15:43:14, 10] lib/util_pw.c:getpwnam_alloc(76) Got nobody from pwnam_cache [2007/11/25 15:43:14, 5] lib/username.c:Get_Pwnam_internals(108) Get_Pwnam_internals did find user [nobody]! [2007/11/25 15:43:14, 10] smbd/service.c:set_conn_connectpath(156) set_conn_connectpath: service IPC$, connectpath = /tmp [2007/11/25 15:43:14, 3] smbd/service.c:make_connection_snum(806) Connect path is '/tmp' for service [IPC$] [2007/11/25 15:43:14, 4] lib/sharesec.c:get_share_security(132) get_share_security: using default secdesc for IPC$ [2007/11/25 15:43:14, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2007/11/25 15:43:14, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 4 entries and first sid S-1-5-21-641626746-684231166-3284099977-3210-501. [2007/11/25 15:43:14, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:43:14, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-641626746-684231166-3284099977-3210-501 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2007/11/25 15:43:14, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2007/11/25 15:43:14, 3] smbd/vfs.c:vfs_init_default(95) Initialising default vfs hooks [2007/11/25 15:43:14, 5] smbd/vfs.c:smb_register_vfs(85) Successfully added vfs backend '/[Default VFS]/' [2007/11/25 15:43:14, 3] smbd/vfs.c:vfs_init_custom(128) Initialising custom vfs hooks from [/[Default VFS]/] Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #0 (type 0, layer 0) Making operation type 0 opaque [module /[Default VFS]/] Accepting operation type 0 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #1 (type 1, layer 0) Making operation type 1 opaque [module /[Default VFS]/] Accepting operation type 1 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #2 (type 2, layer 0) Making operation type 2 opaque [module /[Default VFS]/] Accepting operation type 2 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #3 (type 3, layer 0) Making operation type 3 opaque [module /[Default VFS]/] Accepting operation type 3 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #4 (type 4, layer 0) Making operation type 4 opaque [module /[Default VFS]/] Accepting operation type 4 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #5 (type 5, layer 0) Making operation type 5 opaque [module /[Default VFS]/] Accepting operation type 5 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #6 (type 6, layer 0) Making operation type 6 opaque [module /[Default VFS]/] Accepting operation type 6 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #7 (type 7, layer 0) Making operation type 7 opaque [module /[Default VFS]/] Accepting operation type 7 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #8 (type 8, layer 0) Making operation type 8 opaque [module /[Default VFS]/] Accepting operation type 8 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #9 (type 9, layer 0) Making operation type 9 opaque [module /[Default VFS]/] Accepting operation type 9 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #10 (type 10, layer 0) Making operation type 10 opaque [module /[Default VFS]/] Accepting operation type 10 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #11 (type 11, layer 0) Making operation type 11 opaque [module /[Default VFS]/] Accepting operation type 11 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #12 (type 12, layer 0) Making operation type 12 opaque [module /[Default VFS]/] Accepting operation type 12 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #13 (type 13, layer 0) Making operation type 13 opaque [module /[Default VFS]/] Accepting operation type 13 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #14 (type 14, layer 0) Making operation type 14 opaque [module /[Default VFS]/] Accepting operation type 14 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #15 (type 15, layer 0) Making operation type 15 opaque [module /[Default VFS]/] Accepting operation type 15 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #16 (type 16, layer 0) Making operation type 16 opaque [module /[Default VFS]/] Accepting operation type 16 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #17 (type 17, layer 0) Making operation type 17 opaque [module /[Default VFS]/] Accepting operation type 17 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #18 (type 18, layer 0) Making operation type 18 opaque [module /[Default VFS]/] Accepting operation type 18 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #19 (type 19, layer 0) Making operation type 19 opaque [module /[Default VFS]/] Accepting operation type 19 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #20 (type 20, layer 0) Making operation type 20 opaque [module /[Default VFS]/] Accepting operation type 20 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #21 (type 21, layer 0) Making operation type 21 opaque [module /[Default VFS]/] Accepting operation type 21 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #22 (type 22, layer 0) Making operation type 22 opaque [module /[Default VFS]/] Accepting operation type 22 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #23 (type 23, layer 0) Making operation type 23 opaque [module /[Default VFS]/] Accepting operation type 23 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #24 (type 24, layer 0) Making operation type 24 opaque [module /[Default VFS]/] Accepting operation type 24 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #25 (type 25, layer 0) Making operation type 25 opaque [module /[Default VFS]/] Accepting operation type 25 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #26 (type 26, layer 0) Making operation type 26 opaque [module /[Default VFS]/] Accepting operation type 26 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #27 (type 27, layer 0) Making operation type 27 opaque [module /[Default VFS]/] Accepting operation type 27 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #28 (type 28, layer 0) Making operation type 28 opaque [module /[Default VFS]/] Accepting operation type 28 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #29 (type 29, layer 0) Making operation type 29 opaque [module /[Default VFS]/] Accepting operation type 29 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #30 (type 30, layer 0) Making operation type 30 opaque [module /[Default VFS]/] Accepting operation type 30 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #31 (type 31, layer 0) Making operation type 31 opaque [module /[Default VFS]/] Accepting operation type 31 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #32 (type 32, layer 0) Making operation type 32 opaque [module /[Default VFS]/] Accepting operation type 32 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #33 (type 33, layer 0) Making operation type 33 opaque [module /[Default VFS]/] Accepting operation type 33 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #34 (type 34, layer 0) Making operation type 34 opaque [module /[Default VFS]/] Accepting operation type 34 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #35 (type 35, layer 0) Making operation type 35 opaque [module /[Default VFS]/] Accepting operation type 35 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #36 (type 36, layer 0) Making operation type 36 opaque [module /[Default VFS]/] Accepting operation type 36 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #37 (type 37, layer 0) Making operation type 37 opaque [module /[Default VFS]/] Accepting operation type 37 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #38 (type 38, layer 0) Making operation type 38 opaque [module /[Default VFS]/] Accepting operation type 38 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #39 (type 39, layer 0) Making operation type 39 opaque [module /[Default VFS]/] Accepting operation type 39 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #40 (type 40, layer 0) Making operation type 40 opaque [module /[Default VFS]/] Accepting operation type 40 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #41 (type 41, layer 0) Making operation type 41 opaque [module /[Default VFS]/] Accepting operation type 41 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #42 (type 42, layer 0) Making operation type 42 opaque [module /[Default VFS]/] Accepting operation type 42 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #43 (type 43, layer 0) Making operation type 43 opaque [module /[Default VFS]/] Accepting operation type 43 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #44 (type 44, layer 0) Making operation type 44 opaque [module /[Default VFS]/] Accepting operation type 44 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #45 (type 45, layer 0) Making operation type 45 opaque [module /[Default VFS]/] Accepting operation type 45 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #46 (type 46, layer 0) Making operation type 46 opaque [module /[Default VFS]/] Accepting operation type 46 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #47 (type 47, layer 0) Making operation type 47 opaque [module /[Default VFS]/] Accepting operation type 47 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #48 (type 48, layer 0) Making operation type 48 opaque [module /[Default VFS]/] Accepting operation type 48 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #49 (type 49, layer 0) Making operation type 49 opaque [module /[Default VFS]/] Accepting operation type 49 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #50 (type 50, layer 0) Making operation type 50 opaque [module /[Default VFS]/] Accepting operation type 50 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #51 (type 51, layer 0) Making operation type 51 opaque [module /[Default VFS]/] Accepting operation type 51 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #52 (type 52, layer 0) Making operation type 52 opaque [module /[Default VFS]/] Accepting operation type 52 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #53 (type 53, layer 0) Making operation type 53 opaque [module /[Default VFS]/] Accepting operation type 53 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #54 (type 54, layer 0) Making operation type 54 opaque [module /[Default VFS]/] Accepting operation type 54 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #55 (type 55, layer 0) Making operation type 55 opaque [module /[Default VFS]/] Accepting operation type 55 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #56 (type 56, layer 0) Making operation type 56 opaque [module /[Default VFS]/] Accepting operation type 56 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #57 (type 57, layer 0) Making operation type 57 opaque [module /[Default VFS]/] Accepting operation type 57 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #58 (type 58, layer 0) Making operation type 58 opaque [module /[Default VFS]/] Accepting operation type 58 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #59 (type 59, layer 0) Making operation type 59 opaque [module /[Default VFS]/] Accepting operation type 59 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #60 (type 60, layer 0) Making operation type 60 opaque [module /[Default VFS]/] Accepting operation type 60 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #61 (type 61, layer 0) Making operation type 61 opaque [module /[Default VFS]/] Accepting operation type 61 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #62 (type 62, layer 0) Making operation type 62 opaque [module /[Default VFS]/] Accepting operation type 62 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #63 (type 63, layer 0) Making operation type 63 opaque [module /[Default VFS]/] Accepting operation type 63 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #64 (type 64, layer 0) Making operation type 64 opaque [module /[Default VFS]/] Accepting operation type 64 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #65 (type 65, layer 0) Making operation type 65 opaque [module /[Default VFS]/] Accepting operation type 65 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #66 (type 66, layer 0) Making operation type 66 opaque [module /[Default VFS]/] Accepting operation type 66 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #67 (type 67, layer 0) Making operation type 67 opaque [module /[Default VFS]/] Accepting operation type 67 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #68 (type 68, layer 0) Making operation type 68 opaque [module /[Default VFS]/] Accepting operation type 68 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #69 (type 69, layer 0) Making operation type 69 opaque [module /[Default VFS]/] Accepting operation type 69 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #70 (type 70, layer 0) Making operation type 70 opaque [module /[Default VFS]/] Accepting operation type 70 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #71 (type 71, layer 0) Making operation type 71 opaque [module /[Default VFS]/] Accepting operation type 71 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #72 (type 72, layer 0) Making operation type 72 opaque [module /[Default VFS]/] Accepting operation type 72 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #73 (type 73, layer 0) Making operation type 73 opaque [module /[Default VFS]/] Accepting operation type 73 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #74 (type 74, layer 0) Making operation type 74 opaque [module /[Default VFS]/] Accepting operation type 74 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #75 (type 75, layer 0) Making operation type 75 opaque [module /[Default VFS]/] Accepting operation type 75 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #76 (type 76, layer 0) Making operation type 76 opaque [module /[Default VFS]/] Accepting operation type 76 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #77 (type 77, layer 0) Making operation type 77 opaque [module /[Default VFS]/] Accepting operation type 77 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #78 (type 78, layer 0) Making operation type 78 opaque [module /[Default VFS]/] Accepting operation type 78 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #79 (type 79, layer 0) Making operation type 79 opaque [module /[Default VFS]/] Accepting operation type 79 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #80 (type 80, layer 0) Making operation type 80 opaque [module /[Default VFS]/] Accepting operation type 80 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #81 (type 81, layer 0) Making operation type 81 opaque [module /[Default VFS]/] Accepting operation type 81 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #82 (type 82, layer 0) Making operation type 82 opaque [module /[Default VFS]/] Accepting operation type 82 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #83 (type 83, layer 0) Making operation type 83 opaque [module /[Default VFS]/] Accepting operation type 83 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #84 (type 84, layer 0) Making operation type 84 opaque [module /[Default VFS]/] Accepting operation type 84 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #85 (type 85, layer 0) Making operation type 85 opaque [module /[Default VFS]/] Accepting operation type 85 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #86 (type 86, layer 0) Making operation type 86 opaque [module /[Default VFS]/] Accepting operation type 86 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #87 (type 87, layer 0) Making operation type 87 opaque [module /[Default VFS]/] Accepting operation type 87 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #88 (type 88, layer 0) Making operation type 88 opaque [module /[Default VFS]/] Accepting operation type 88 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #89 (type 89, layer 0) Making operation type 89 opaque [module /[Default VFS]/] Accepting operation type 89 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #90 (type 90, layer 0) Making operation type 90 opaque [module /[Default VFS]/] Accepting operation type 90 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #91 (type 91, layer 0) Making operation type 91 opaque [module /[Default VFS]/] Accepting operation type 91 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #92 (type 92, layer 0) Making operation type 92 opaque [module /[Default VFS]/] Accepting operation type 92 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #93 (type 93, layer 0) Making operation type 93 opaque [module /[Default VFS]/] Accepting operation type 93 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #94 (type 94, layer 0) Making operation type 94 opaque [module /[Default VFS]/] Accepting operation type 94 from module /[Default VFS]/ [2007/11/25 15:43:14, 5] smbd/connection.c:claim_connection(182) claiming IPC$ 0 [2007/11/25 15:43:14, 10] smbd/share_access.c:user_ok_token(232) user_ok_token: share IPC$ is ok for unix user nobody [2007/11/25 15:43:14, 10] smbd/share_access.c:is_share_read_only_for_token(274) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2007/11/25 15:43:14, 4] lib/sharesec.c:get_share_security(132) get_share_security: using default secdesc for IPC$ [2007/11/25 15:43:14, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2007/11/25 15:43:14, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000001, for NT token with 4 entries and first sid S-1-5-21-641626746-684231166-3284099977-3210-501. [2007/11/25 15:43:14, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:43:14, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-641626746-684231166-3284099977-3210-501 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2007/11/25 15:43:14, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (1) granted. [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_nt_user_token(454) NT user token of user S-1-5-21-641626746-684231166-3284099977-3210-501 contains 4 SIDs SID[ 0]: S-1-5-21-641626746-684231166-3284099977-3210-501 SID[ 1]: S-1-1-0 SID[ 2]: S-1-5-2 SID[ 3]: S-1-5-32-546 SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 99 Primary group is 99 and contains 0 supplementary groups [2007/11/25 15:43:14, 5] smbd/uid.c:change_to_user(273) change_to_user uid=(99,99) gid=(0,99) [2007/11/25 15:43:14, 3] smbd/service.c:make_connection_snum(1033) ddaugherty (192.168.31.1) connect to service IPC$ initially as user nobody (uid=99, gid=99) (pid 20738) [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:14, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:14, 3] smbd/reply.c:reply_tcon_and_X(574) tconX service=IPC$ [2007/11/25 15:43:14, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:14, 5] lib/util.c:show_msg(494) size=56 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=192 smt_wct=7 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 511 (0x1FF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 511 (0x1FF) smb_vwv[ 6]= 0 (0x0) smb_bcc=7 [2007/11/25 15:43:14, 10] lib/util.c:dump_data(2264) [000] 49 50 43 00 00 00 00 IPC.... [2007/11/25 15:43:14, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 120 [2007/11/25 15:43:14, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x78 [2007/11/25 15:43:14, 3] smbd/process.c:process_smb(1068) Transaction 4 of length 124 [2007/11/25 15:43:14, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:14, 5] lib/util.c:show_msg(494) size=120 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=4 smb_uid=101 smb_mid=256 smt_wct=15 smb_vwv[ 0]= 52 (0x34) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 52 (0x34) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 16 (0x10) smb_bcc=55 [2007/11/25 15:43:14, 10] lib/util.c:dump_data(2264) [000] 00 00 00 03 00 5C 00 31 00 39 00 32 00 2E 00 31 .....\.1 .9.2...1 [010] 00 36 00 38 00 2E 00 33 00 31 00 2E 00 31 00 39 .6.8...3 .1...1.9 [020] 00 31 00 5C 00 64 00 64 00 61 00 75 00 67 00 68 .1.\.d.d .a.u.g.h [030] 00 65 00 72 00 00 00 .e.r... [2007/11/25 15:43:14, 3] smbd/process.c:switch_message(926) switch message SMBtrans2 (pid 20738) conn 0x8561d38 [2007/11/25 15:43:14, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_nt_user_token(454) NT user token of user S-1-5-21-641626746-684231166-3284099977-3210-501 contains 4 SIDs SID[ 0]: S-1-5-21-641626746-684231166-3284099977-3210-501 SID[ 1]: S-1-1-0 SID[ 2]: S-1-5-2 SID[ 3]: S-1-5-32-546 SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:43:14, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 99 Primary group is 99 and contains 0 supplementary groups [2007/11/25 15:43:14, 5] smbd/uid.c:change_to_user(273) change_to_user uid=(99,99) gid=(0,99) [2007/11/25 15:43:14, 4] smbd/vfs.c:vfs_ChDir(665) vfs_ChDir to /tmp [2007/11/25 15:43:14, 10] smbd/trans2.c:call_trans2getdfsreferral(6258) call_trans2getdfsreferral [2007/11/25 15:43:14, 10] smbd/msdfs.c:parse_dfs_path(84) parse_dfs_path: temp = |192.168.31.191\ddaugher| after trimming \'s [2007/11/25 15:43:14, 10] smbd/msdfs.c:parse_dfs_path(107) parse_dfs_path: hostname: 192.168.31.191 [2007/11/25 15:43:14, 8] lib/util.c:is_myname(2076) is_myname("192.168.31.191") returns 0 [2007/11/25 15:43:14, 8] lib/util.c:is_myname(2076) is_myname("192.168.31.191") returns 0 [2007/11/25 15:43:14, 7] param/loadparm.c:lp_servicenumber(5209) lp_servicenumber: couldn't find ddaugher [2007/11/25 15:43:14, 7] param/loadparm.c:lp_servicenumber(5209) lp_servicenumber: couldn't find ddaugher [2007/11/25 15:43:14, 5] lib/username.c:Get_Pwnam_alloc(131) Finding user ddaugher [2007/11/25 15:43:14, 5] lib/username.c:Get_Pwnam_internals(75) Trying _Get_Pwnam(), username as lowercase is ddaugher [2007/11/25 15:43:14, 5] lib/username.c:Get_Pwnam_internals(108) Get_Pwnam_internals did find user [ddaugher]! [2007/11/25 15:43:14, 3] smbd/service.c:find_service(286) checking for home directory ddaugher gave /home/ddaugher [2007/11/25 15:43:14, 8] param/loadparm.c:add_a_service(2583) add_a_service: Creating snum = 5 for ddaugher [2007/11/25 15:43:14, 10] param/loadparm.c:hash_a_service(2630) hash_a_service: hashing index 5 for service name ddaugher [2007/11/25 15:43:14, 3] param/loadparm.c:lp_add_home(2676) adding home's share [ddaugher] for user 'ddaugher' at '/home/ddaugher' [2007/11/25 15:43:14, 3] smbd/msdfs.c:get_referred_path(633) get_referred_path: |ddaugher| in dfs path \192.168.31.191\ddaugher is not a dfs root. [2007/11/25 15:43:14, 3] smbd/error.c:error_packet_set(106) error packet at smbd/trans2.c(6271) cmd=50 (SMBtrans2) NT_STATUS_NOT_FOUND [2007/11/25 15:43:14, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:14, 5] lib/util.c:show_msg(494) size=35 smb_com=0x32 smb_rcls=37 smb_reh=2 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=4 smb_uid=101 smb_mid=256 smt_wct=0 smb_bcc=0 [2007/11/25 15:43:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 236 [2007/11/25 15:43:23, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0xec [2007/11/25 15:43:23, 3] smbd/process.c:process_smb(1068) Transaction 5 of length 240 [2007/11/25 15:43:23, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:23, 5] lib/util.c:show_msg(494) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=320 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2007/11/25 15:43:23, 10] lib/util.c:dump_data(2264) [000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* [020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P....... [030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2 [080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [0A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [0B0] 00 . [2007/11/25 15:43:23, 3] smbd/process.c:switch_message(926) switch message SMBsesssetupX (pid 20738) conn 0x0 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:23, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:23, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1244) wct=12 flg2=0xc807 [2007/11/25 15:43:23, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1029) Doing spnego session setup [2007/11/25 15:43:23, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1060) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2007/11/25 15:43:23, 10] smbd/password.c:register_vuid(186) register_vuid: allocated vuid = 102 [2007/11/25 15:43:23, 10] smbd/sesssetup.c:check_spnego_blob_complete(975) check_spnego_blob_complete: needed_len = 74, pblob->length = 74 [2007/11/25 15:43:23, 5] smbd/sesssetup.c:parse_spnego_mechanisms(667) parse_spnego_mechanisms: Got OID 1 3 6 1 4 1 311 2 2 10 [2007/11/25 15:43:23, 3] smbd/sesssetup.c:reply_spnego_negotiate(697) reply_spnego_negotiate: Got secblob of size 40 [2007/11/25 15:43:23, 5] auth/auth.c:make_auth_context_subsystem(512) Using specified auth order [2007/11/25 15:43:23, 5] auth/auth.c:load_auth_module(391) load_auth_module: Attempting to find an auth method to match guest [2007/11/25 15:43:23, 5] auth/auth.c:load_auth_module(416) load_auth_module: auth method guest has a valid init [2007/11/25 15:43:23, 5] auth/auth.c:load_auth_module(391) load_auth_module: Attempting to find an auth method to match sam [2007/11/25 15:43:23, 5] auth/auth.c:load_auth_module(416) load_auth_module: auth method sam has a valid init [2007/11/25 15:43:23, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2007/11/25 15:43:23, 5] auth/auth.c:get_ntlm_challenge(97) auth_get_challenge: module guest did not want to specify a challenge [2007/11/25 15:43:23, 5] auth/auth.c:get_ntlm_challenge(97) auth_get_challenge: module sam did not want to specify a challenge [2007/11/25 15:43:23, 5] auth/auth.c:get_ntlm_challenge(137) auth_context challenge created by random [2007/11/25 15:43:23, 5] auth/auth.c:get_ntlm_challenge(138) challenge is: [2007/11/25 15:43:23, 5] lib/util.c:dump_data(2264) [000] 40 C3 7A 67 80 FF 82 6D @.zg...m [2007/11/25 15:43:23, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:23, 5] lib/util.c:show_msg(494) size=360 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=320 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 229 (0xE5) smb_bcc=317 [2007/11/25 15:43:23, 10] lib/util.c:dump_data(2264) [000] A1 81 E2 30 81 DF A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 C9 04 81 C6 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 14 00 14 00 30 TLMSSP.. .......0 [030] 00 00 00 95 82 89 E2 40 C3 7A 67 80 FF 82 6D 00 .......@ .zg...m. [040] 00 00 00 00 00 00 00 82 00 82 00 44 00 00 00 44 ........ ...D...D [050] 00 44 00 43 00 45 00 4E 00 54 00 52 00 49 00 46 .D.C.E.N .T.R.I.F [060] 00 59 00 02 00 14 00 44 00 44 00 43 00 45 00 4E .Y.....D .D.C.E.N [070] 00 54 00 52 00 49 00 46 00 59 00 01 00 10 00 44 .T.R.I.F .Y.....D [080] 00 44 00 2D 00 52 00 48 00 45 00 53 00 33 00 04 .D.-.R.H .E.S.3.. [090] 00 1C 00 64 00 64 00 63 00 65 00 6E 00 74 00 72 ...d.d.c .e.n.t.r [0A0] 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 00 03 .i.f.y.. .d.e.v.. [0B0] 00 2E 00 44 00 44 00 2D 00 52 00 48 00 45 00 53 ...D.D.- .R.H.E.S [0C0] 00 33 00 2E 00 44 00 44 00 43 00 65 00 6E 00 74 .3...D.D .C.e.n.t [0D0] 00 72 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 .r.i.f.y ...d.e.v [0E0] 00 00 00 00 00 55 00 6E 00 69 00 78 00 00 00 53 .....U.n .i.x...S [0F0] 00 61 00 6D 00 62 00 61 00 20 00 33 00 2E 00 30 .a.m.b.a . .3...0 [100] 00 2E 00 32 00 37 00 61 00 2D 00 63 00 64 00 63 ...2.7.a .-.c.d.c [110] 00 2D 00 34 00 2E 00 30 00 2E 00 30 00 2D 00 34 .-.4...0 ...0.-.4 [120] 00 39 00 32 00 00 00 44 00 44 00 43 00 45 00 4E .9.2...D .D.C.E.N [130] 00 54 00 52 00 49 00 46 00 59 00 00 00 .T.R.I.F .Y... [2007/11/25 15:43:23, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:23, 5] lib/util.c:show_msg(494) size=360 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=320 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 229 (0xE5) smb_bcc=317 [2007/11/25 15:43:23, 10] lib/util.c:dump_data(2264) [000] A1 81 E2 30 81 DF A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 C9 04 81 C6 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 14 00 14 00 30 TLMSSP.. .......0 [030] 00 00 00 95 82 89 E2 40 C3 7A 67 80 FF 82 6D 00 .......@ .zg...m. [040] 00 00 00 00 00 00 00 82 00 82 00 44 00 00 00 44 ........ ...D...D [050] 00 44 00 43 00 45 00 4E 00 54 00 52 00 49 00 46 .D.C.E.N .T.R.I.F [060] 00 59 00 02 00 14 00 44 00 44 00 43 00 45 00 4E .Y.....D .D.C.E.N [070] 00 54 00 52 00 49 00 46 00 59 00 01 00 10 00 44 .T.R.I.F .Y.....D [080] 00 44 00 2D 00 52 00 48 00 45 00 53 00 33 00 04 .D.-.R.H .E.S.3.. [090] 00 1C 00 64 00 64 00 63 00 65 00 6E 00 74 00 72 ...d.d.c .e.n.t.r [0A0] 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 00 03 .i.f.y.. .d.e.v.. [0B0] 00 2E 00 44 00 44 00 2D 00 52 00 48 00 45 00 53 ...D.D.- .R.H.E.S [0C0] 00 33 00 2E 00 44 00 44 00 43 00 65 00 6E 00 74 .3...D.D .C.e.n.t [0D0] 00 72 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 .r.i.f.y ...d.e.v [0E0] 00 00 00 00 00 55 00 6E 00 69 00 78 00 00 00 53 .....U.n .i.x...S [0F0] 00 61 00 6D 00 62 00 61 00 20 00 33 00 2E 00 30 .a.m.b.a . .3...0 [100] 00 2E 00 32 00 37 00 61 00 2D 00 63 00 64 00 63 ...2.7.a .-.c.d.c [110] 00 2D 00 34 00 2E 00 30 00 2E 00 30 00 2D 00 34 .-.4...0 ...0.-.4 [120] 00 39 00 32 00 00 00 44 00 44 00 43 00 45 00 4E .9.2...D .D.C.E.N [130] 00 54 00 52 00 49 00 46 00 59 00 00 00 .T.R.I.F .Y... [2007/11/25 15:43:23, 0] smbd/process.c:process_smb(1083) ERROR: Invalid message response size! 1 360 [2007/11/25 15:43:23, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 362 [2007/11/25 15:43:23, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x16a [2007/11/25 15:43:23, 3] smbd/process.c:process_smb(1068) Transaction 6 of length 366 [2007/11/25 15:43:23, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:23, 5] lib/util.c:show_msg(494) size=362 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=384 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 362 (0x16A) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 200 (0xC8) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=303 [2007/11/25 15:43:23, 10] lib/util.c:dump_data(2264) [000] A1 81 C5 30 81 C2 A2 81 BF 04 81 BC 4E 54 4C 4D ...0.... ....NTLM [010] 53 53 50 00 03 00 00 00 18 00 18 00 7C 00 00 00 SSP..... ....|... [020] 18 00 18 00 94 00 00 00 10 00 10 00 48 00 00 00 ........ ....H... [030] 10 00 10 00 58 00 00 00 14 00 14 00 68 00 00 00 ....X... ....h... [040] 10 00 10 00 AC 00 00 00 15 82 88 E2 05 01 28 0A ........ ......(. [050] 00 00 00 0F 44 00 44 00 2D 00 52 00 48 00 45 00 ....D.D. -.R.H.E. [060] 53 00 33 00 64 00 64 00 61 00 75 00 67 00 68 00 S.3.d.d. a.u.g.h. [070] 65 00 72 00 44 00 44 00 41 00 55 00 47 00 48 00 e.r.D.D. A.U.G.H. [080] 45 00 52 00 54 00 59 00 0C 17 8A D4 86 0E 2C C1 E.R.T.Y. ......,. [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] FE EB 91 97 EF 84 3A CC 06 A1 E1 08 A1 C6 E5 BB ......:. ........ [0B0] 17 76 BC 1B F9 99 33 6E 0D 16 8D 33 FE 47 F6 E2 .v....3n ...3.G.. [0C0] C0 2C 26 BF FC 4C 8E E3 00 57 00 69 00 6E 00 64 .,&..L.. .W.i.n.d [0D0] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 32 .o.w.s. .2.0.0.2 [0E0] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [0F0] 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 00 20 . .P.a.c .k. .2. [100] 00 32 00 36 00 30 00 30 00 00 00 57 00 69 00 6E .2.6.0.0 ...W.i.n [110] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [120] 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 00 .2. .5.. .1..... [2007/11/25 15:43:23, 3] smbd/process.c:switch_message(926) switch message SMBsesssetupX (pid 20738) conn 0x0 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:23, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:23, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1244) wct=12 flg2=0xc807 [2007/11/25 15:43:23, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1029) Doing spnego session setup [2007/11/25 15:43:23, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1060) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2007/11/25 15:43:23, 10] smbd/sesssetup.c:check_spnego_blob_complete(975) check_spnego_blob_complete: needed_len = 200, pblob->length = 200 [2007/11/25 15:43:23, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739) Got user=[ddaugher] domain=[DD-RHES3] workstation=[DDAUGHERTY] len1=24 len2=24 [2007/11/25 15:43:23, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(69) auth_context challenge set by NTLMSSP callback (NTLM2) [2007/11/25 15:43:23, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(70) challenge is: [2007/11/25 15:43:23, 5] lib/util.c:dump_data(2264) [000] 62 3E 9A 24 A0 25 58 93 b>.$.%X. [2007/11/25 15:43:23, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:43:23, 5] auth/auth_util.c:make_user_info_map(161) make_user_info_map: Mapping user [DD-RHES3]\[ddaugher] from workstation [DDAUGHERTY] [2007/11/25 15:43:23, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn DOMAIN_INFO (from pid 20738) [2007/11/25 15:43:23, 3] nsswitch/winbindd_misc.c:winbindd_domain_info(385) [20738]: domain_info [DD-RHES3] [2007/11/25 15:43:23, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83df5f0 [2007/11/25 15:43:23, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999974 [2007/11/25 15:43:23, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83df5f0 "async_request_timeout" [2007/11/25 15:43:23, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20722 [2007/11/25 15:43:23, 10] nsswitch/winbindd_util.c:init_child_getdc_recv(403) Received getdcname response [2007/11/25 15:43:23, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dd728 [2007/11/25 15:43:23, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999928 [2007/11/25 15:43:23, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dd728 "async_request_timeout" [2007/11/25 15:43:23, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20794 [2007/11/25 15:43:23, 5] nsswitch/winbindd_util.c:init_child_recv(425) Received child initialization response for domain DD-RHES3 [2007/11/25 15:43:23, 10] nsswitch/winbindd_misc.c:domain_info_init_recv(440) Got back from child init: 1 [2007/11/25 15:43:23, 5] auth/auth_util.c:make_user_info(75) attempting to make a user_info for ddaugher (ddaugher) [2007/11/25 15:43:23, 5] auth/auth_util.c:make_user_info(85) making strings for ddaugher's user_info struct [2007/11/25 15:43:23, 5] auth/auth_util.c:make_user_info(117) making blobs for ddaugher's user_info struct [2007/11/25 15:43:23, 10] auth/auth_util.c:make_user_info(135) made an encrypted user_info for ddaugher (ddaugher) [2007/11/25 15:43:23, 3] auth/auth.c:check_ntlm_password(221) check_ntlm_password: Checking password for unmapped user [DD-RHES3]\[ddaugher]@[DDAUGHERTY] with the new password interface [2007/11/25 15:43:23, 3] auth/auth.c:check_ntlm_password(224) check_ntlm_password: mapped user is: [DD-RHES3]\[ddaugher]@[DDAUGHERTY] [2007/11/25 15:43:23, 10] auth/auth.c:check_ntlm_password(233) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2007/11/25 15:43:23, 10] auth/auth.c:check_ntlm_password(235) challenge is: [2007/11/25 15:43:23, 5] lib/util.c:dump_data(2264) [000] 62 3E 9A 24 A0 25 58 93 b>.$.%X. [2007/11/25 15:43:23, 10] auth/auth.c:check_ntlm_password(261) check_ntlm_password: guest had nothing to say [2007/11/25 15:43:23, 8] lib/util.c:is_myname(2076) is_myname("DD-RHES3") returns 1 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:23, 4] passdb/pdb_tdb.c:tdbsam_open(869) tdbsam_open: successfully opened /etc/samba/private/passdb.tdb [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_username(581) pdb_set_username: setting username ddaugher, was [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_domain(604) pdb_set_domain: setting domain DD-RHES3, was [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_nt_username(627) pdb_set_nt_username: setting nt username , was [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_fullname(650) pdb_set_full_name: setting full name David Daugherty, was [2007/11/25 15:43:23, 4] lib/substitute.c:automount_server(407) Home server: dd-rhes3 [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_homedir(743) pdb_set_homedir: setting home dir \\dd-rhes3\ddaugher, was [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(719) pdb_set_dir_drive: setting dir drive , was NULL [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_logon_script(673) pdb_set_logon_script: setting logon script , was [2007/11/25 15:43:23, 4] lib/substitute.c:automount_server(407) Home server: dd-rhes3 [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_profile_path(696) pdb_set_profile_path: setting profile path \\dd-rhes3\ddaugher\profile, was [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_workstations(786) pdb_set_workstations: setting workstations , was [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:23, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: password history, val: 0 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_user_sid(510) pdb_set_user_sid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-2024 [2007/11/25 15:43:23, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-2024 from rid 2024 [2007/11/25 15:43:23, 8] passdb/pdb_tdb.c:tdbsam_close(882) tdbsam_close: Reference count is now 0. [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:23, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: maximum password age, val: -1 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 5] lib/username.c:Get_Pwnam_alloc(131) Finding user ddaugher [2007/11/25 15:43:23, 5] lib/username.c:Get_Pwnam_internals(75) Trying _Get_Pwnam(), username as lowercase is ddaugher [2007/11/25 15:43:23, 10] lib/util_pw.c:getpwnam_alloc(76) Got ddaugher from pwnam_cache [2007/11/25 15:43:23, 5] lib/username.c:Get_Pwnam_internals(108) Get_Pwnam_internals did find user [ddaugher]! [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:23, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: password history, val: 0 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_username(581) pdb_set_username: setting username ddaugher, was [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_domain(604) pdb_set_domain: setting domain DD-RHES3, was [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_nt_username(627) pdb_set_nt_username: setting nt username , was [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_fullname(650) pdb_set_full_name: setting full name David Daugherty, was [2007/11/25 15:43:23, 4] lib/substitute.c:automount_server(407) Home server: dd-rhes3 [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_homedir(743) pdb_set_homedir: setting home dir \\dd-rhes3\ddaugher, was [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(719) pdb_set_dir_drive: setting dir drive , was NULL [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_logon_script(673) pdb_set_logon_script: setting logon script , was [2007/11/25 15:43:23, 4] lib/substitute.c:automount_server(407) Home server: dd-rhes3 [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_profile_path(696) pdb_set_profile_path: setting profile path \\dd-rhes3\ddaugher\profile, was [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_workstations(786) pdb_set_workstations: setting workstations , was [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:23, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: password history, val: 0 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 10] passdb/pdb_get_set.c:pdb_set_user_sid(510) pdb_set_user_sid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-2024 [2007/11/25 15:43:23, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-2024 from rid 2024 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:23, 9] passdb/passdb.c:pdb_update_autolock_flag(1420) pdb_update_autolock_flag: Account ddaugher not autolocked, no check needed [2007/11/25 15:43:23, 4] libsmb/ntlm_check.c:ntlm_password_check(326) ntlm_password_check: Checking NT MD4 password [2007/11/25 15:43:23, 3] libsmb/ntlm_check.c:ntlm_password_check(344) ntlm_password_check: NT MD4 password check failed for user ddaugher [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:23, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: bad lockout attempt, val: 0 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:23, 9] passdb/passdb.c:pdb_increment_bad_password_count(1485) No lockout policy, don't track bad passwords [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:23, 4] passdb/pdb_tdb.c:tdbsam_open(869) tdbsam_open: successfully opened /etc/samba/private/passdb.tdb [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:23, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: maximum password age, val: -1 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:23, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:23, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: password history, val: 0 [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:23, 5] passdb/pdb_tdb.c:tdb_update_samacct_only(1259) Storing account ddaugher with RID 2024 [2007/11/25 15:43:23, 8] passdb/pdb_tdb.c:tdbsam_close(882) tdbsam_close: Reference count is now 0. [2007/11/25 15:43:23, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:23, 5] auth/auth.c:check_ntlm_password(273) check_ntlm_password: sam authentication for user [ddaugher] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/11/25 15:43:23, 2] auth/auth.c:check_ntlm_password(319) check_ntlm_password: Authentication for user [ddaugher] -> [ddaugher] FAILED with error NT_STATUS_WRONG_PASSWORD [2007/11/25 15:43:23, 5] auth/auth_util.c:free_user_info(2058) attempting to free (and zero) a user_info structure [2007/11/25 15:43:23, 10] auth/auth_util.c:free_user_info(2062) structure was created for ddaugher [2007/11/25 15:43:23, 3] smbd/error.c:error_packet_set(106) error packet at smbd/sesssetup.c(105) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2007/11/25 15:43:23, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:23, 5] lib/util.c:show_msg(494) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=384 smt_wct=0 smb_bcc=0 [2007/11/25 15:43:23, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:23, 5] lib/util.c:show_msg(494) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=384 smt_wct=0 smb_bcc=0 [2007/11/25 15:43:23, 0] smbd/process.c:process_smb(1083) ERROR: Invalid message response size! 1 35 [2007/11/25 15:43:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 39 [2007/11/25 15:43:24, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x27 [2007/11/25 15:43:24, 3] smbd/process.c:process_smb(1068) Transaction 7 of length 43 [2007/11/25 15:43:24, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:24, 5] lib/util.c:show_msg(494) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=448 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2007/11/25 15:43:24, 3] smbd/process.c:switch_message(926) switch message SMBulogoffX (pid 20738) conn 0x0 [2007/11/25 15:43:24, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:24, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:24, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:24, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:24, 3] smbd/reply.c:reply_ulogoffX(1560) ulogoffX vuid=101 [2007/11/25 15:43:24, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:24, 5] lib/util.c:show_msg(494) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=448 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2007/11/25 15:43:24, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 35 [2007/11/25 15:43:24, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x23 [2007/11/25 15:43:24, 3] smbd/process.c:process_smb(1068) Transaction 8 of length 39 [2007/11/25 15:43:24, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:24, 5] lib/util.c:show_msg(494) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=512 smt_wct=0 smb_bcc=0 [2007/11/25 15:43:24, 3] smbd/process.c:switch_message(926) switch message SMBtdis (pid 20738) conn 0x8561d38 [2007/11/25 15:43:24, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:24, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:24, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:24, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:24, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:24, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:24, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:24, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:24, 3] smbd/service.c:close_cnum(1230) ddaugherty (192.168.31.1) closed connection to service IPC$ [2007/11/25 15:43:24, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2007/11/25 15:43:24, 4] smbd/vfs.c:vfs_ChDir(665) vfs_ChDir to / [2007/11/25 15:43:24, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:24, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:24, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:24, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:24, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:24, 5] lib/util.c:show_msg(494) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=512 smt_wct=0 smb_bcc=0 [2007/11/25 15:43:24, 10] lib/util_sock.c:read_data(525) read_data: read of 4 returned 0. Error = Success [2007/11/25 15:43:24, 10] lib/util_sock.c:receive_smb_raw(672) receive_smb_raw: length < 0! [2007/11/25 15:43:24, 3] smbd/process.c:timeout_processing(1328) timeout_processing: End of file from client (client has disconnected). [2007/11/25 15:43:24, 5] lib/gencache.c:gencache_shutdown(94) Closing cache file [2007/11/25 15:43:24, 5] libsmb/namecache.c:namecache_shutdown(79) namecache_shutdown: netbios namecache closed successfully. [2007/11/25 15:43:24, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:24, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:24, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:24, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:24, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2007/11/25 15:43:24, 3] smbd/server.c:exit_server_common(768) Server exit (normal exit) [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_KEEPALIVE = 1 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_REUSEADDR = 1 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_BROADCAST = 0 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_NODELAY = 1 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPCNT = 9 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPIDLE = 7200 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option TCP_KEEPINTVL = 75 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_LOWDELAY = 0 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option IPTOS_THROUGHPUT = 0 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDBUF = 16384 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVBUF = 87380 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDLOWAT = 1 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVLOWAT = 1 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_SNDTIMEO = 0 [2007/11/25 15:43:27, 5] lib/util_sock.c:print_socket_options(206) socket option SO_RCVTIMEO = 0 [2007/11/25 15:43:27, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:43:27, 3] smbd/oplock.c:init_oplocks(863) init_oplocks: initializing messages. [2007/11/25 15:43:27, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(276) Linux kernel oplocks enabled [2007/11/25 15:43:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 133 [2007/11/25 15:43:27, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x85 [2007/11/25 15:43:27, 3] smbd/process.c:process_smb(1068) Transaction 0 of length 137 [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [060] 32 00 2. [2007/11/25 15:43:27, 3] smbd/process.c:switch_message(926) switch message SMBnegprot (pid 20864) conn 0x0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:27, 3] smbd/negprot.c:reply_negprot(505) Requested protocol [PC NETWORK PROGRAM 1.0] [2007/11/25 15:43:27, 3] smbd/negprot.c:reply_negprot(505) Requested protocol [LANMAN1.0] [2007/11/25 15:43:27, 3] smbd/negprot.c:reply_negprot(505) Requested protocol [Windows for Workgroups 3.1a] [2007/11/25 15:43:27, 3] smbd/negprot.c:reply_negprot(505) Requested protocol [LM1.2X002] [2007/11/25 15:43:27, 3] smbd/negprot.c:reply_negprot(505) Requested protocol [LANMAN2.1] [2007/11/25 15:43:27, 3] smbd/negprot.c:reply_negprot(505) Requested protocol [NT LM 0.12] [2007/11/25 15:43:27, 10] lib/util.c:set_remote_arch(2239) set_remote_arch: Client arch is 'Win2K' [2007/11/25 15:43:27, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:43:27, 5] smbd/connection.c:claim_connection(182) claiming 0 [2007/11/25 15:43:27, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:43:27, 10] lib/util.c:name_to_fqdn(2957) name_to_fqdn: lookup for DD-RHES3 -> DD-RHES3.DDCENTRIFY.DEV. [2007/11/25 15:43:27, 3] smbd/negprot.c:reply_nt1(364) using SPNEGO [2007/11/25 15:43:27, 3] smbd/negprot.c:reply_negprot(606) Selected protocol NT LM 0.12 [2007/11/25 15:43:27, 5] smbd/negprot.c:reply_negprot(612) negprot index=5 [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=188 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=32768 (0x8000) smb_vwv[ 8]= 81 (0x51) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=47097 (0xB7F9) smb_vwv[13]=48377 (0xBCF9) smb_vwv[14]=51247 (0xC82F) smb_vwv[15]=57345 (0xE001) smb_vwv[16]= 1 (0x1) smb_bcc=119 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] 64 64 2D 72 68 65 73 33 00 00 00 00 00 00 00 00 dd-rhes3 ........ [010] 60 65 06 06 2B 06 01 05 05 02 A0 5B 30 59 A0 24 `e..+... ...[0Y.$ [020] 30 22 06 09 2A 86 48 86 F7 12 01 02 02 06 09 2A 0"..*.H. .......* [030] 86 48 82 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H...... ..+..... [040] 37 02 02 0A A3 31 30 2F A0 2D 1B 2B 63 69 66 73 7....10/ .-.+cifs [050] 2F 64 64 2D 72 68 65 73 33 2E 64 64 63 65 6E 74 /dd-rhes 3.ddcent [060] 72 69 66 79 2E 64 65 76 40 44 44 43 45 4E 54 52 rify.dev @DDCENTR [070] 49 46 59 2E 44 45 56 IFY.DEV [2007/11/25 15:43:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 236 [2007/11/25 15:43:27, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0xec [2007/11/25 15:43:27, 3] smbd/process.c:process_smb(1068) Transaction 1 of length 240 [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=64 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* [020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P....... [030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2 [080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [0A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [0B0] 00 . [2007/11/25 15:43:27, 3] smbd/process.c:switch_message(926) switch message SMBsesssetupX (pid 20864) conn 0x0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1244) wct=12 flg2=0xc807 [2007/11/25 15:43:27, 2] smbd/sesssetup.c:setup_new_vc_session(1200) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1029) Doing spnego session setup [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1060) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2007/11/25 15:43:27, 10] lib/util.c:set_remote_arch(2239) set_remote_arch: Client arch is 'WinXP' [2007/11/25 15:43:27, 10] smbd/password.c:register_vuid(186) register_vuid: allocated vuid = 100 [2007/11/25 15:43:27, 10] smbd/sesssetup.c:check_spnego_blob_complete(975) check_spnego_blob_complete: needed_len = 74, pblob->length = 74 [2007/11/25 15:43:27, 5] smbd/sesssetup.c:parse_spnego_mechanisms(667) parse_spnego_mechanisms: Got OID 1 3 6 1 4 1 311 2 2 10 [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_spnego_negotiate(697) reply_spnego_negotiate: Got secblob of size 40 [2007/11/25 15:43:27, 5] auth/auth.c:make_auth_context_subsystem(512) Using specified auth order [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend sam [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'sam' [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend sam_ignoredomain [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'sam_ignoredomain' [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend unix [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'unix' [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend winbind [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'winbind' [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend smbserver [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'smbserver' [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend trustdomain [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'trustdomain' [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend ntdomain [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'ntdomain' [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend guest [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'guest' [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend fixed_challenge [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'fixed_challenge' [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(47) Attempting to register auth backend name_to_ntstatus [2007/11/25 15:43:27, 5] auth/auth.c:smb_register_auth(59) Successfully added auth method 'name_to_ntstatus' [2007/11/25 15:43:27, 5] auth/auth.c:load_auth_module(391) load_auth_module: Attempting to find an auth method to match guest [2007/11/25 15:43:27, 5] auth/auth.c:load_auth_module(416) load_auth_module: auth method guest has a valid init [2007/11/25 15:43:27, 5] auth/auth.c:load_auth_module(391) load_auth_module: Attempting to find an auth method to match sam [2007/11/25 15:43:27, 5] auth/auth.c:load_auth_module(416) load_auth_module: auth method sam has a valid init [2007/11/25 15:43:27, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2007/11/25 15:43:27, 5] auth/auth.c:get_ntlm_challenge(97) auth_get_challenge: module guest did not want to specify a challenge [2007/11/25 15:43:27, 5] auth/auth.c:get_ntlm_challenge(97) auth_get_challenge: module sam did not want to specify a challenge [2007/11/25 15:43:27, 5] auth/auth.c:get_ntlm_challenge(137) auth_context challenge created by random [2007/11/25 15:43:27, 5] auth/auth.c:get_ntlm_challenge(138) challenge is: [2007/11/25 15:43:27, 5] lib/util.c:dump_data(2264) [000] 75 AE 09 2B 69 F8 51 E7 u..+i.Q. [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=360 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=64 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 229 (0xE5) smb_bcc=317 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] A1 81 E2 30 81 DF A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 C9 04 81 C6 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 14 00 14 00 30 TLMSSP.. .......0 [030] 00 00 00 95 82 89 E2 75 AE 09 2B 69 F8 51 E7 00 .......u ..+i.Q.. [040] 00 00 00 00 00 00 00 82 00 82 00 44 00 00 00 44 ........ ...D...D [050] 00 44 00 43 00 45 00 4E 00 54 00 52 00 49 00 46 .D.C.E.N .T.R.I.F [060] 00 59 00 02 00 14 00 44 00 44 00 43 00 45 00 4E .Y.....D .D.C.E.N [070] 00 54 00 52 00 49 00 46 00 59 00 01 00 10 00 44 .T.R.I.F .Y.....D [080] 00 44 00 2D 00 52 00 48 00 45 00 53 00 33 00 04 .D.-.R.H .E.S.3.. [090] 00 1C 00 64 00 64 00 63 00 65 00 6E 00 74 00 72 ...d.d.c .e.n.t.r [0A0] 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 00 03 .i.f.y.. .d.e.v.. [0B0] 00 2E 00 44 00 44 00 2D 00 52 00 48 00 45 00 53 ...D.D.- .R.H.E.S [0C0] 00 33 00 2E 00 44 00 44 00 43 00 65 00 6E 00 74 .3...D.D .C.e.n.t [0D0] 00 72 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 .r.i.f.y ...d.e.v [0E0] 00 00 00 00 00 55 00 6E 00 69 00 78 00 00 00 53 .....U.n .i.x...S [0F0] 00 61 00 6D 00 62 00 61 00 20 00 33 00 2E 00 30 .a.m.b.a . .3...0 [100] 00 2E 00 32 00 37 00 61 00 2D 00 63 00 64 00 63 ...2.7.a .-.c.d.c [110] 00 2D 00 34 00 2E 00 30 00 2E 00 30 00 2D 00 34 .-.4...0 ...0.-.4 [120] 00 39 00 32 00 00 00 44 00 44 00 43 00 45 00 4E .9.2...D .D.C.E.N [130] 00 54 00 52 00 49 00 46 00 59 00 00 00 .T.R.I.F .Y... [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=360 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=64 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 229 (0xE5) smb_bcc=317 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] A1 81 E2 30 81 DF A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 C9 04 81 C6 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 14 00 14 00 30 TLMSSP.. .......0 [030] 00 00 00 95 82 89 E2 75 AE 09 2B 69 F8 51 E7 00 .......u ..+i.Q.. [040] 00 00 00 00 00 00 00 82 00 82 00 44 00 00 00 44 ........ ...D...D [050] 00 44 00 43 00 45 00 4E 00 54 00 52 00 49 00 46 .D.C.E.N .T.R.I.F [060] 00 59 00 02 00 14 00 44 00 44 00 43 00 45 00 4E .Y.....D .D.C.E.N [070] 00 54 00 52 00 49 00 46 00 59 00 01 00 10 00 44 .T.R.I.F .Y.....D [080] 00 44 00 2D 00 52 00 48 00 45 00 53 00 33 00 04 .D.-.R.H .E.S.3.. [090] 00 1C 00 64 00 64 00 63 00 65 00 6E 00 74 00 72 ...d.d.c .e.n.t.r [0A0] 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 00 03 .i.f.y.. .d.e.v.. [0B0] 00 2E 00 44 00 44 00 2D 00 52 00 48 00 45 00 53 ...D.D.- .R.H.E.S [0C0] 00 33 00 2E 00 44 00 44 00 43 00 65 00 6E 00 74 .3...D.D .C.e.n.t [0D0] 00 72 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 .r.i.f.y ...d.e.v [0E0] 00 00 00 00 00 55 00 6E 00 69 00 78 00 00 00 53 .....U.n .i.x...S [0F0] 00 61 00 6D 00 62 00 61 00 20 00 33 00 2E 00 30 .a.m.b.a . .3...0 [100] 00 2E 00 32 00 37 00 61 00 2D 00 63 00 64 00 63 ...2.7.a .-.c.d.c [110] 00 2D 00 34 00 2E 00 30 00 2E 00 30 00 2D 00 34 .-.4...0 ...0.-.4 [120] 00 39 00 32 00 00 00 44 00 44 00 43 00 45 00 4E .9.2...D .D.C.E.N [130] 00 54 00 52 00 49 00 46 00 59 00 00 00 .T.R.I.F .Y... [2007/11/25 15:43:27, 0] smbd/process.c:process_smb(1083) ERROR: Invalid message response size! 1 360 [2007/11/25 15:43:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 278 [2007/11/25 15:43:27, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x116 [2007/11/25 15:43:27, 3] smbd/process.c:process_smb(1068) Transaction 2 of length 282 [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=278 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=128 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 278 (0x116) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 117 (0x75) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=219 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] A1 73 30 71 A2 6F 04 6D 4E 54 4C 4D 53 53 50 00 .s0q.o.m NTLMSSP. [010] 03 00 00 00 01 00 01 00 5C 00 00 00 00 00 00 00 ........ \....... [020] 5D 00 00 00 00 00 00 00 48 00 00 00 00 00 00 00 ]....... H....... [030] 48 00 00 00 14 00 14 00 48 00 00 00 10 00 10 00 H....... H....... [040] 5D 00 00 00 15 8A 88 E2 05 01 28 0A 00 00 00 0F ]....... ..(..... [050] 44 00 44 00 41 00 55 00 47 00 48 00 45 00 52 00 D.D.A.U. G.H.E.R. [060] 54 00 59 00 00 88 F9 E1 D3 4E C7 E5 5A 8F 35 BE T.Y..... .N..Z.5. [070] 63 52 D6 43 CA 57 00 69 00 6E 00 64 00 6F 00 77 cR.C.W.i .n.d.o.w [080] 00 73 00 20 00 32 00 30 00 30 00 32 00 20 00 53 .s. .2.0 .0.2. .S [090] 00 65 00 72 00 76 00 69 00 63 00 65 00 20 00 50 .e.r.v.i .c.e. .P [0A0] 00 61 00 63 00 6B 00 20 00 32 00 20 00 32 00 36 .a.c.k. .2. .2.6 [0B0] 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 00 6F .0.0...W .i.n.d.o [0C0] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. [0D0] 00 35 00 2E 00 31 00 00 00 00 00 .5...1.. ... [2007/11/25 15:43:27, 3] smbd/process.c:switch_message(926) switch message SMBsesssetupX (pid 20864) conn 0x0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1244) wct=12 flg2=0xc807 [2007/11/25 15:43:27, 2] smbd/sesssetup.c:setup_new_vc_session(1200) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1029) Doing spnego session setup [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1060) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2007/11/25 15:43:27, 10] smbd/sesssetup.c:check_spnego_blob_complete(975) check_spnego_blob_complete: needed_len = 117, pblob->length = 117 [2007/11/25 15:43:27, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739) Got user=[] domain=[] workstation=[DDAUGHERTY] len1=1 len2=0 [2007/11/25 15:43:27, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:43:27, 5] auth/auth_util.c:make_user_info_map(161) make_user_info_map: Mapping user []\[] from workstation [DDAUGHERTY] [2007/11/25 15:43:27, 6] nsswitch/winbindd.c:new_connection(630) accepted socket 19 (number of winbind client=1) [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn INTERFACE_VERSION (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(491) [20864]: request interface version [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn WINBINDD_PRIV_PIPE_DIR (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(524) [20864]: request location of privileged pipe [2007/11/25 15:43:27, 6] nsswitch/winbindd.c:new_connection(630) accepted socket 23 (number of winbind client=2) [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn DOMAIN_INFO (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_domain_info(385) [20864]: domain_info [DDCENTRIFY] [2007/11/25 15:43:27, 5] auth/auth_util.c:make_user_info(75) attempting to make a user_info for () [2007/11/25 15:43:27, 5] auth/auth_util.c:make_user_info(85) making strings for 's user_info struct [2007/11/25 15:43:27, 5] auth/auth_util.c:make_user_info(117) making blobs for 's user_info struct [2007/11/25 15:43:27, 10] auth/auth_util.c:make_user_info(135) made an encrypted user_info for () [2007/11/25 15:43:27, 3] auth/auth.c:check_ntlm_password(221) check_ntlm_password: Checking password for unmapped user []\[]@[DDAUGHERTY] with the new password interface [2007/11/25 15:43:27, 3] auth/auth.c:check_ntlm_password(224) check_ntlm_password: mapped user is: [DDCENTRIFY]\[]@[DDAUGHERTY] [2007/11/25 15:43:27, 10] auth/auth.c:check_ntlm_password(233) check_ntlm_password: auth_context challenge created by random [2007/11/25 15:43:27, 10] auth/auth.c:check_ntlm_password(235) challenge is: [2007/11/25 15:43:27, 5] lib/util.c:dump_data(2264) [000] 75 AE 09 2B 69 F8 51 E7 u..+i.Q. [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: password history, val: 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_username(581) pdb_set_username: setting username nobody, was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_domain(604) pdb_set_domain: setting domain DD-RHES3, was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_nt_username(627) pdb_set_nt_username: setting nt username , was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_fullname(650) pdb_set_full_name: setting full name Nobody, was [2007/11/25 15:43:27, 4] lib/substitute.c:automount_server(407) Home server: dd-rhes3 [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_homedir(743) pdb_set_homedir: setting home dir \\dd-rhes3\nobody, was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(719) pdb_set_dir_drive: setting dir drive , was NULL [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_logon_script(673) pdb_set_logon_script: setting logon script , was [2007/11/25 15:43:27, 4] lib/substitute.c:automount_server(407) Home server: dd-rhes3 [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_profile_path(696) pdb_set_profile_path: setting profile path \\dd-rhes3\nobody\profile, was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_workstations(786) pdb_set_workstations: setting workstations , was [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: password history, val: 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_user_sid(510) pdb_set_user_sid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-501 [2007/11/25 15:43:27, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-501 from rid 501 [2007/11/25 15:43:27, 3] auth/auth.c:check_ntlm_password(270) check_ntlm_password: guest authentication for user [] succeeded [2007/11/25 15:43:27, 5] auth/auth.c:check_ntlm_password(309) check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded [2007/11/25 15:43:27, 5] auth/auth_util.c:free_user_info(2058) attempting to free (and zero) a user_info structure [2007/11/25 15:43:27, 10] auth/auth_util.c:free_user_info(2062) structure was created for [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20864]: ping [2007/11/25 15:43:27, 10] auth/auth_util.c:create_local_nt_token(844) Create local NT token for S-1-5-21-641626746-684231166-3284099977-3210-501 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20864]: sid to gid S-1-5-32-544 [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-32-544) [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(682) calling find_domain_from_sid [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20734 [2007/11/25 15:43:27, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-32-544 to a gid [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999343 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:27, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:43:27, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-5-32-544 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20864]: ping [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-5-32-544 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20864]: ping [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 10] groupdb/mapping.c:pdb_create_builtin_alias(702) Trying to create builtin alias 544 [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:check_dom_sid_to_level(663) Accepting SID S-1-5-32 in level 1 [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:lookup_sid(941) Sid S-1-5-32-544 -> BUILTIN\Administrators(4) [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn ALLOCATE_GID (from pid 20864) [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:27, 3] groupdb/mapping.c:pdb_create_builtin_alias(723) pdb_create_builtin_alias: Could not get a gid out of winbind [2007/11/25 15:43:27, 2] auth/auth_util.c:create_builtin_administrators(792) create_builtin_administrators: Failed to create Administrators [2007/11/25 15:43:27, 2] auth/auth_util.c:create_local_nt_token(914) create_local_nt_token: Failed to create BUILTIN\Administrators group! [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1089) fetch gid from cache 10003 -> S-1-5-32-545 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-641626746-684231166-3284099977-3210-501] [2007/11/25 15:43:27, 5] lib/privileges.c:get_privileges_for_sids(460) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:43:27, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2007/11/25 15:43:27, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20864]: sid to gid S-1-1-0 [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-1-0) [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(689) calling find_our_domain [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20722 [2007/11/25 15:43:27, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-1-0 to a gid [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:27, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:43:27, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-1-0 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20864]: ping [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-1-0 [2007/11/25 15:43:27, 10] auth/auth_util.c:create_local_token(1043) Could not convert SID S-1-1-0 to gid, ignoring it [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20864]: sid to gid S-1-5-2 [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-2) [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(689) calling find_our_domain [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999981 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20722 [2007/11/25 15:43:27, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-2 to a gid [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:27, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:43:27, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-5-2 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20864]: ping [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-5-2 [2007/11/25 15:43:27, 10] auth/auth_util.c:create_local_token(1043) Could not convert SID S-1-5-2 to gid, ignoring it [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20864]: sid to gid S-1-5-32-546 [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-32-546) [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(682) calling find_domain_from_sid [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20734 [2007/11/25 15:43:27, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-32-546 to a gid [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999981 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:27, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:43:27, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-5-32-546 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20864]: ping [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-5-32-546 [2007/11/25 15:43:27, 10] auth/auth_util.c:create_local_token(1043) Could not convert SID S-1-5-32-546 to gid, ignoring it [2007/11/25 15:43:27, 10] auth/auth_util.c:debug_nt_user_token(454) NT user token of user S-1-5-21-641626746-684231166-3284099977-3210-501 contains 4 SIDs SID[ 0]: S-1-5-21-641626746-684231166-3284099977-3210-501 SID[ 1]: S-1-1-0 SID[ 2]: S-1-5-2 SID[ 3]: S-1-5-32-546 SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:43:27, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(137) Got NT session key of length 16 [2007/11/25 15:43:27, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(144) Got LM session key of length 16 [2007/11/25 15:43:27, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(841) ntlmssp_server_auth: Using unmodified nt session key. [2007/11/25 15:43:27, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338) NTLMSSP Sign/Seal - Initialising with flags: [2007/11/25 15:43:27, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2007/11/25 15:43:27, 10] smbd/password.c:register_vuid(186) register_vuid: allocated vuid = 101 [2007/11/25 15:43:27, 10] lib/util_pw.c:getpwnam_alloc(76) Got nobody from pwnam_cache [2007/11/25 15:43:27, 10] smbd/password.c:register_vuid(277) register_vuid: (99,99) nobody DD-RHES3 guest=1 [2007/11/25 15:43:27, 3] smbd/password.c:register_vuid(280) User name: nobody Real name: Nobody [2007/11/25 15:43:27, 3] smbd/password.c:register_vuid(301) UNIX uid 99 is UNIX user nobody, and will be vuid 101 [2007/11/25 15:43:27, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=140 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=128 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=97 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 30 00 2E 00 32 00 37 00 61 00 2D 00 63 ...0...2 .7.a.-.c [030] 00 64 00 63 00 2D 00 34 00 2E 00 30 00 2E 00 30 .d.c.-.4 ...0...0 [040] 00 2D 00 34 00 39 00 32 00 00 00 44 00 44 00 43 .-.4.9.2 ...D.D.C [050] 00 45 00 4E 00 54 00 52 00 49 00 46 00 59 00 00 .E.N.T.R .I.F.Y.. [060] 00 . [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=140 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=128 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=97 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 30 00 2E 00 32 00 37 00 61 00 2D 00 63 ...0...2 .7.a.-.c [030] 00 64 00 63 00 2D 00 34 00 2E 00 30 00 2E 00 30 .d.c.-.4 ...0...0 [040] 00 2D 00 34 00 39 00 32 00 00 00 44 00 44 00 43 .-.4.9.2 ...D.D.C [050] 00 45 00 4E 00 54 00 52 00 49 00 46 00 59 00 00 .E.N.T.R .I.F.Y.. [060] 00 . [2007/11/25 15:43:27, 0] smbd/process.c:process_smb(1083) ERROR: Invalid message response size! 1 140 [2007/11/25 15:43:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 94 [2007/11/25 15:43:27, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x5e [2007/11/25 15:43:27, 3] smbd/process.c:process_smb(1068) Transaction 3 of length 98 [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=94 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=192 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 94 (0x5E) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=51 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] 00 5C 00 5C 00 31 00 39 00 32 00 2E 00 31 00 36 .\.\.1.9 .2...1.6 [010] 00 38 00 2E 00 33 00 31 00 2E 00 31 00 39 00 31 .8...3.1 ...1.9.1 [020] 00 5C 00 49 00 50 00 43 00 24 00 00 00 3F 3F 3F .\.I.P.C .$...??? [030] 3F 3F 00 ??. [2007/11/25 15:43:27, 3] smbd/process.c:switch_message(926) switch message SMBtconX (pid 20864) conn 0x0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:27, 4] smbd/reply.c:reply_tcon_and_X(506) Client requested device type [?????] for share [IPC$] [2007/11/25 15:43:27, 5] smbd/service.c:make_connection(1205) making a connection to 'normal' service ipc$ [2007/11/25 15:43:27, 5] lib/username.c:Get_Pwnam_alloc(131) Finding user nobody [2007/11/25 15:43:27, 5] lib/username.c:Get_Pwnam_internals(75) Trying _Get_Pwnam(), username as lowercase is nobody [2007/11/25 15:43:27, 10] lib/util_pw.c:getpwnam_alloc(76) Got nobody from pwnam_cache [2007/11/25 15:43:27, 5] lib/username.c:Get_Pwnam_internals(108) Get_Pwnam_internals did find user [nobody]! [2007/11/25 15:43:27, 10] smbd/service.c:set_conn_connectpath(156) set_conn_connectpath: service IPC$, connectpath = /tmp [2007/11/25 15:43:27, 3] smbd/service.c:make_connection_snum(806) Connect path is '/tmp' for service [IPC$] [2007/11/25 15:43:27, 4] lib/sharesec.c:get_share_security(132) get_share_security: using default secdesc for IPC$ [2007/11/25 15:43:27, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2007/11/25 15:43:27, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 4 entries and first sid S-1-5-21-641626746-684231166-3284099977-3210-501. [2007/11/25 15:43:27, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:43:27, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-641626746-684231166-3284099977-3210-501 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2007/11/25 15:43:27, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2007/11/25 15:43:27, 3] smbd/vfs.c:vfs_init_default(95) Initialising default vfs hooks [2007/11/25 15:43:27, 5] smbd/vfs.c:smb_register_vfs(85) Successfully added vfs backend '/[Default VFS]/' [2007/11/25 15:43:27, 3] smbd/vfs.c:vfs_init_custom(128) Initialising custom vfs hooks from [/[Default VFS]/] Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #0 (type 0, layer 0) Making operation type 0 opaque [module /[Default VFS]/] Accepting operation type 0 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #1 (type 1, layer 0) Making operation type 1 opaque [module /[Default VFS]/] Accepting operation type 1 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #2 (type 2, layer 0) Making operation type 2 opaque [module /[Default VFS]/] Accepting operation type 2 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #3 (type 3, layer 0) Making operation type 3 opaque [module /[Default VFS]/] Accepting operation type 3 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #4 (type 4, layer 0) Making operation type 4 opaque [module /[Default VFS]/] Accepting operation type 4 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #5 (type 5, layer 0) Making operation type 5 opaque [module /[Default VFS]/] Accepting operation type 5 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #6 (type 6, layer 0) Making operation type 6 opaque [module /[Default VFS]/] Accepting operation type 6 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #7 (type 7, layer 0) Making operation type 7 opaque [module /[Default VFS]/] Accepting operation type 7 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #8 (type 8, layer 0) Making operation type 8 opaque [module /[Default VFS]/] Accepting operation type 8 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #9 (type 9, layer 0) Making operation type 9 opaque [module /[Default VFS]/] Accepting operation type 9 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #10 (type 10, layer 0) Making operation type 10 opaque [module /[Default VFS]/] Accepting operation type 10 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #11 (type 11, layer 0) Making operation type 11 opaque [module /[Default VFS]/] Accepting operation type 11 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #12 (type 12, layer 0) Making operation type 12 opaque [module /[Default VFS]/] Accepting operation type 12 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #13 (type 13, layer 0) Making operation type 13 opaque [module /[Default VFS]/] Accepting operation type 13 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #14 (type 14, layer 0) Making operation type 14 opaque [module /[Default VFS]/] Accepting operation type 14 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #15 (type 15, layer 0) Making operation type 15 opaque [module /[Default VFS]/] Accepting operation type 15 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #16 (type 16, layer 0) Making operation type 16 opaque [module /[Default VFS]/] Accepting operation type 16 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #17 (type 17, layer 0) Making operation type 17 opaque [module /[Default VFS]/] Accepting operation type 17 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #18 (type 18, layer 0) Making operation type 18 opaque [module /[Default VFS]/] Accepting operation type 18 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #19 (type 19, layer 0) Making operation type 19 opaque [module /[Default VFS]/] Accepting operation type 19 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #20 (type 20, layer 0) Making operation type 20 opaque [module /[Default VFS]/] Accepting operation type 20 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #21 (type 21, layer 0) Making operation type 21 opaque [module /[Default VFS]/] Accepting operation type 21 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #22 (type 22, layer 0) Making operation type 22 opaque [module /[Default VFS]/] Accepting operation type 22 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #23 (type 23, layer 0) Making operation type 23 opaque [module /[Default VFS]/] Accepting operation type 23 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #24 (type 24, layer 0) Making operation type 24 opaque [module /[Default VFS]/] Accepting operation type 24 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #25 (type 25, layer 0) Making operation type 25 opaque [module /[Default VFS]/] Accepting operation type 25 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #26 (type 26, layer 0) Making operation type 26 opaque [module /[Default VFS]/] Accepting operation type 26 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #27 (type 27, layer 0) Making operation type 27 opaque [module /[Default VFS]/] Accepting operation type 27 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #28 (type 28, layer 0) Making operation type 28 opaque [module /[Default VFS]/] Accepting operation type 28 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #29 (type 29, layer 0) Making operation type 29 opaque [module /[Default VFS]/] Accepting operation type 29 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #30 (type 30, layer 0) Making operation type 30 opaque [module /[Default VFS]/] Accepting operation type 30 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #31 (type 31, layer 0) Making operation type 31 opaque [module /[Default VFS]/] Accepting operation type 31 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #32 (type 32, layer 0) Making operation type 32 opaque [module /[Default VFS]/] Accepting operation type 32 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #33 (type 33, layer 0) Making operation type 33 opaque [module /[Default VFS]/] Accepting operation type 33 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #34 (type 34, layer 0) Making operation type 34 opaque [module /[Default VFS]/] Accepting operation type 34 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #35 (type 35, layer 0) Making operation type 35 opaque [module /[Default VFS]/] Accepting operation type 35 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #36 (type 36, layer 0) Making operation type 36 opaque [module /[Default VFS]/] Accepting operation type 36 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #37 (type 37, layer 0) Making operation type 37 opaque [module /[Default VFS]/] Accepting operation type 37 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #38 (type 38, layer 0) Making operation type 38 opaque [module /[Default VFS]/] Accepting operation type 38 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #39 (type 39, layer 0) Making operation type 39 opaque [module /[Default VFS]/] Accepting operation type 39 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #40 (type 40, layer 0) Making operation type 40 opaque [module /[Default VFS]/] Accepting operation type 40 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #41 (type 41, layer 0) Making operation type 41 opaque [module /[Default VFS]/] Accepting operation type 41 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #42 (type 42, layer 0) Making operation type 42 opaque [module /[Default VFS]/] Accepting operation type 42 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #43 (type 43, layer 0) Making operation type 43 opaque [module /[Default VFS]/] Accepting operation type 43 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #44 (type 44, layer 0) Making operation type 44 opaque [module /[Default VFS]/] Accepting operation type 44 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #45 (type 45, layer 0) Making operation type 45 opaque [module /[Default VFS]/] Accepting operation type 45 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #46 (type 46, layer 0) Making operation type 46 opaque [module /[Default VFS]/] Accepting operation type 46 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #47 (type 47, layer 0) Making operation type 47 opaque [module /[Default VFS]/] Accepting operation type 47 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #48 (type 48, layer 0) Making operation type 48 opaque [module /[Default VFS]/] Accepting operation type 48 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #49 (type 49, layer 0) Making operation type 49 opaque [module /[Default VFS]/] Accepting operation type 49 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #50 (type 50, layer 0) Making operation type 50 opaque [module /[Default VFS]/] Accepting operation type 50 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #51 (type 51, layer 0) Making operation type 51 opaque [module /[Default VFS]/] Accepting operation type 51 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #52 (type 52, layer 0) Making operation type 52 opaque [module /[Default VFS]/] Accepting operation type 52 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #53 (type 53, layer 0) Making operation type 53 opaque [module /[Default VFS]/] Accepting operation type 53 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #54 (type 54, layer 0) Making operation type 54 opaque [module /[Default VFS]/] Accepting operation type 54 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #55 (type 55, layer 0) Making operation type 55 opaque [module /[Default VFS]/] Accepting operation type 55 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #56 (type 56, layer 0) Making operation type 56 opaque [module /[Default VFS]/] Accepting operation type 56 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #57 (type 57, layer 0) Making operation type 57 opaque [module /[Default VFS]/] Accepting operation type 57 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #58 (type 58, layer 0) Making operation type 58 opaque [module /[Default VFS]/] Accepting operation type 58 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #59 (type 59, layer 0) Making operation type 59 opaque [module /[Default VFS]/] Accepting operation type 59 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #60 (type 60, layer 0) Making operation type 60 opaque [module /[Default VFS]/] Accepting operation type 60 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #61 (type 61, layer 0) Making operation type 61 opaque [module /[Default VFS]/] Accepting operation type 61 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #62 (type 62, layer 0) Making operation type 62 opaque [module /[Default VFS]/] Accepting operation type 62 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #63 (type 63, layer 0) Making operation type 63 opaque [module /[Default VFS]/] Accepting operation type 63 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #64 (type 64, layer 0) Making operation type 64 opaque [module /[Default VFS]/] Accepting operation type 64 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #65 (type 65, layer 0) Making operation type 65 opaque [module /[Default VFS]/] Accepting operation type 65 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #66 (type 66, layer 0) Making operation type 66 opaque [module /[Default VFS]/] Accepting operation type 66 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #67 (type 67, layer 0) Making operation type 67 opaque [module /[Default VFS]/] Accepting operation type 67 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #68 (type 68, layer 0) Making operation type 68 opaque [module /[Default VFS]/] Accepting operation type 68 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #69 (type 69, layer 0) Making operation type 69 opaque [module /[Default VFS]/] Accepting operation type 69 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #70 (type 70, layer 0) Making operation type 70 opaque [module /[Default VFS]/] Accepting operation type 70 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #71 (type 71, layer 0) Making operation type 71 opaque [module /[Default VFS]/] Accepting operation type 71 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #72 (type 72, layer 0) Making operation type 72 opaque [module /[Default VFS]/] Accepting operation type 72 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #73 (type 73, layer 0) Making operation type 73 opaque [module /[Default VFS]/] Accepting operation type 73 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #74 (type 74, layer 0) Making operation type 74 opaque [module /[Default VFS]/] Accepting operation type 74 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #75 (type 75, layer 0) Making operation type 75 opaque [module /[Default VFS]/] Accepting operation type 75 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #76 (type 76, layer 0) Making operation type 76 opaque [module /[Default VFS]/] Accepting operation type 76 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #77 (type 77, layer 0) Making operation type 77 opaque [module /[Default VFS]/] Accepting operation type 77 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #78 (type 78, layer 0) Making operation type 78 opaque [module /[Default VFS]/] Accepting operation type 78 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #79 (type 79, layer 0) Making operation type 79 opaque [module /[Default VFS]/] Accepting operation type 79 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #80 (type 80, layer 0) Making operation type 80 opaque [module /[Default VFS]/] Accepting operation type 80 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #81 (type 81, layer 0) Making operation type 81 opaque [module /[Default VFS]/] Accepting operation type 81 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #82 (type 82, layer 0) Making operation type 82 opaque [module /[Default VFS]/] Accepting operation type 82 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #83 (type 83, layer 0) Making operation type 83 opaque [module /[Default VFS]/] Accepting operation type 83 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #84 (type 84, layer 0) Making operation type 84 opaque [module /[Default VFS]/] Accepting operation type 84 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #85 (type 85, layer 0) Making operation type 85 opaque [module /[Default VFS]/] Accepting operation type 85 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #86 (type 86, layer 0) Making operation type 86 opaque [module /[Default VFS]/] Accepting operation type 86 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #87 (type 87, layer 0) Making operation type 87 opaque [module /[Default VFS]/] Accepting operation type 87 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #88 (type 88, layer 0) Making operation type 88 opaque [module /[Default VFS]/] Accepting operation type 88 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #89 (type 89, layer 0) Making operation type 89 opaque [module /[Default VFS]/] Accepting operation type 89 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #90 (type 90, layer 0) Making operation type 90 opaque [module /[Default VFS]/] Accepting operation type 90 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #91 (type 91, layer 0) Making operation type 91 opaque [module /[Default VFS]/] Accepting operation type 91 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #92 (type 92, layer 0) Making operation type 92 opaque [module /[Default VFS]/] Accepting operation type 92 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #93 (type 93, layer 0) Making operation type 93 opaque [module /[Default VFS]/] Accepting operation type 93 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #94 (type 94, layer 0) Making operation type 94 opaque [module /[Default VFS]/] Accepting operation type 94 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/connection.c:claim_connection(182) claiming IPC$ 0 [2007/11/25 15:43:27, 10] smbd/share_access.c:user_ok_token(232) user_ok_token: share IPC$ is ok for unix user nobody [2007/11/25 15:43:27, 10] smbd/share_access.c:is_share_read_only_for_token(274) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2007/11/25 15:43:27, 4] lib/sharesec.c:get_share_security(132) get_share_security: using default secdesc for IPC$ [2007/11/25 15:43:27, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2007/11/25 15:43:27, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000001, for NT token with 4 entries and first sid S-1-5-21-641626746-684231166-3284099977-3210-501. [2007/11/25 15:43:27, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:43:27, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-641626746-684231166-3284099977-3210-501 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2007/11/25 15:43:27, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (1) granted. [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(454) NT user token of user S-1-5-21-641626746-684231166-3284099977-3210-501 contains 4 SIDs SID[ 0]: S-1-5-21-641626746-684231166-3284099977-3210-501 SID[ 1]: S-1-1-0 SID[ 2]: S-1-5-2 SID[ 3]: S-1-5-32-546 SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 99 Primary group is 99 and contains 0 supplementary groups [2007/11/25 15:43:27, 5] smbd/uid.c:change_to_user(273) change_to_user uid=(99,99) gid=(0,99) [2007/11/25 15:43:27, 3] smbd/service.c:make_connection_snum(1033) ddaugherty (192.168.31.1) connect to service IPC$ initially as user nobody (uid=99, gid=99) (pid 20864) [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:27, 3] smbd/reply.c:reply_tcon_and_X(574) tconX service=IPC$ [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=56 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=192 smt_wct=7 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 511 (0x1FF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 511 (0x1FF) smb_vwv[ 6]= 0 (0x0) smb_bcc=7 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] 49 50 43 00 00 00 00 IPC.... [2007/11/25 15:43:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 120 [2007/11/25 15:43:27, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x78 [2007/11/25 15:43:27, 3] smbd/process.c:process_smb(1068) Transaction 4 of length 124 [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=120 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=4 smb_uid=101 smb_mid=256 smt_wct=15 smb_vwv[ 0]= 52 (0x34) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 52 (0x34) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 16 (0x10) smb_bcc=55 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] 00 00 00 03 00 5C 00 31 00 39 00 32 00 2E 00 31 .....\.1 .9.2...1 [010] 00 36 00 38 00 2E 00 33 00 31 00 2E 00 31 00 39 .6.8...3 .1...1.9 [020] 00 31 00 5C 00 64 00 64 00 61 00 75 00 67 00 68 .1.\.d.d .a.u.g.h [030] 00 65 00 72 00 00 00 .e.r... [2007/11/25 15:43:27, 3] smbd/process.c:switch_message(926) switch message SMBtrans2 (pid 20864) conn 0x8561d38 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(454) NT user token of user S-1-5-21-641626746-684231166-3284099977-3210-501 contains 4 SIDs SID[ 0]: S-1-5-21-641626746-684231166-3284099977-3210-501 SID[ 1]: S-1-1-0 SID[ 2]: S-1-5-2 SID[ 3]: S-1-5-32-546 SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 99 Primary group is 99 and contains 0 supplementary groups [2007/11/25 15:43:27, 5] smbd/uid.c:change_to_user(273) change_to_user uid=(99,99) gid=(0,99) [2007/11/25 15:43:27, 4] smbd/vfs.c:vfs_ChDir(665) vfs_ChDir to /tmp [2007/11/25 15:43:27, 10] smbd/trans2.c:call_trans2getdfsreferral(6258) call_trans2getdfsreferral [2007/11/25 15:43:27, 10] smbd/msdfs.c:parse_dfs_path(84) parse_dfs_path: temp = |192.168.31.191\ddaugher| after trimming \'s [2007/11/25 15:43:27, 10] smbd/msdfs.c:parse_dfs_path(107) parse_dfs_path: hostname: 192.168.31.191 [2007/11/25 15:43:27, 8] lib/util.c:is_myname(2076) is_myname("192.168.31.191") returns 0 [2007/11/25 15:43:27, 8] lib/util.c:is_myname(2076) is_myname("192.168.31.191") returns 0 [2007/11/25 15:43:27, 7] param/loadparm.c:lp_servicenumber(5209) lp_servicenumber: couldn't find ddaugher [2007/11/25 15:43:27, 7] param/loadparm.c:lp_servicenumber(5209) lp_servicenumber: couldn't find ddaugher [2007/11/25 15:43:27, 5] lib/username.c:Get_Pwnam_alloc(131) Finding user ddaugher [2007/11/25 15:43:27, 5] lib/username.c:Get_Pwnam_internals(75) Trying _Get_Pwnam(), username as lowercase is ddaugher [2007/11/25 15:43:27, 5] lib/username.c:Get_Pwnam_internals(108) Get_Pwnam_internals did find user [ddaugher]! [2007/11/25 15:43:27, 3] smbd/service.c:find_service(286) checking for home directory ddaugher gave /home/ddaugher [2007/11/25 15:43:27, 8] param/loadparm.c:add_a_service(2583) add_a_service: Creating snum = 5 for ddaugher [2007/11/25 15:43:27, 10] param/loadparm.c:hash_a_service(2630) hash_a_service: hashing index 5 for service name ddaugher [2007/11/25 15:43:27, 3] param/loadparm.c:lp_add_home(2676) adding home's share [ddaugher] for user 'ddaugher' at '/home/ddaugher' [2007/11/25 15:43:27, 3] smbd/msdfs.c:get_referred_path(633) get_referred_path: |ddaugher| in dfs path \192.168.31.191\ddaugher is not a dfs root. [2007/11/25 15:43:27, 3] smbd/error.c:error_packet_set(106) error packet at smbd/trans2.c(6271) cmd=50 (SMBtrans2) NT_STATUS_NOT_FOUND [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=35 smb_com=0x32 smb_rcls=37 smb_reh=2 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=4 smb_uid=101 smb_mid=256 smt_wct=0 smb_bcc=0 [2007/11/25 15:43:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 236 [2007/11/25 15:43:27, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0xec [2007/11/25 15:43:27, 3] smbd/process.c:process_smb(1068) Transaction 5 of length 240 [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=236 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=320 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 236 (0xEC) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=177 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* [020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P....... [030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 05 01 28 0A 00 00 00 0F 00 57 00 69 00 6E ....(... ...W.i.n [050] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [060] 00 32 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .2. .S.e .r.v.i.c [070] 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 .e. .P.a .c.k. .2 [080] 00 20 00 32 00 36 00 30 00 30 00 00 00 57 00 69 . .2.6.0 .0...W.i [090] 00 6E 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 .n.d.o.w .s. .2.0 [0A0] 00 30 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 .0.2. .5 ...1.... [0B0] 00 . [2007/11/25 15:43:27, 3] smbd/process.c:switch_message(926) switch message SMBsesssetupX (pid 20864) conn 0x0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1244) wct=12 flg2=0xc807 [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1029) Doing spnego session setup [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1060) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2007/11/25 15:43:27, 10] smbd/password.c:register_vuid(186) register_vuid: allocated vuid = 102 [2007/11/25 15:43:27, 10] smbd/sesssetup.c:check_spnego_blob_complete(975) check_spnego_blob_complete: needed_len = 74, pblob->length = 74 [2007/11/25 15:43:27, 5] smbd/sesssetup.c:parse_spnego_mechanisms(667) parse_spnego_mechanisms: Got OID 1 3 6 1 4 1 311 2 2 10 [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_spnego_negotiate(697) reply_spnego_negotiate: Got secblob of size 40 [2007/11/25 15:43:27, 5] auth/auth.c:make_auth_context_subsystem(512) Using specified auth order [2007/11/25 15:43:27, 5] auth/auth.c:load_auth_module(391) load_auth_module: Attempting to find an auth method to match guest [2007/11/25 15:43:27, 5] auth/auth.c:load_auth_module(416) load_auth_module: auth method guest has a valid init [2007/11/25 15:43:27, 5] auth/auth.c:load_auth_module(391) load_auth_module: Attempting to find an auth method to match sam [2007/11/25 15:43:27, 5] auth/auth.c:load_auth_module(416) load_auth_module: auth method sam has a valid init [2007/11/25 15:43:27, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2007/11/25 15:43:27, 5] auth/auth.c:get_ntlm_challenge(97) auth_get_challenge: module guest did not want to specify a challenge [2007/11/25 15:43:27, 5] auth/auth.c:get_ntlm_challenge(97) auth_get_challenge: module sam did not want to specify a challenge [2007/11/25 15:43:27, 5] auth/auth.c:get_ntlm_challenge(137) auth_context challenge created by random [2007/11/25 15:43:27, 5] auth/auth.c:get_ntlm_challenge(138) challenge is: [2007/11/25 15:43:27, 5] lib/util.c:dump_data(2264) [000] 7E ED CF 8E 54 E5 B7 BA ~...T... [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=360 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=320 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 229 (0xE5) smb_bcc=317 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] A1 81 E2 30 81 DF A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 C9 04 81 C6 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 14 00 14 00 30 TLMSSP.. .......0 [030] 00 00 00 95 82 89 E2 7E ED CF 8E 54 E5 B7 BA 00 .......~ ...T.... [040] 00 00 00 00 00 00 00 82 00 82 00 44 00 00 00 44 ........ ...D...D [050] 00 44 00 43 00 45 00 4E 00 54 00 52 00 49 00 46 .D.C.E.N .T.R.I.F [060] 00 59 00 02 00 14 00 44 00 44 00 43 00 45 00 4E .Y.....D .D.C.E.N [070] 00 54 00 52 00 49 00 46 00 59 00 01 00 10 00 44 .T.R.I.F .Y.....D [080] 00 44 00 2D 00 52 00 48 00 45 00 53 00 33 00 04 .D.-.R.H .E.S.3.. [090] 00 1C 00 64 00 64 00 63 00 65 00 6E 00 74 00 72 ...d.d.c .e.n.t.r [0A0] 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 00 03 .i.f.y.. .d.e.v.. [0B0] 00 2E 00 44 00 44 00 2D 00 52 00 48 00 45 00 53 ...D.D.- .R.H.E.S [0C0] 00 33 00 2E 00 44 00 44 00 43 00 65 00 6E 00 74 .3...D.D .C.e.n.t [0D0] 00 72 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 .r.i.f.y ...d.e.v [0E0] 00 00 00 00 00 55 00 6E 00 69 00 78 00 00 00 53 .....U.n .i.x...S [0F0] 00 61 00 6D 00 62 00 61 00 20 00 33 00 2E 00 30 .a.m.b.a . .3...0 [100] 00 2E 00 32 00 37 00 61 00 2D 00 63 00 64 00 63 ...2.7.a .-.c.d.c [110] 00 2D 00 34 00 2E 00 30 00 2E 00 30 00 2D 00 34 .-.4...0 ...0.-.4 [120] 00 39 00 32 00 00 00 44 00 44 00 43 00 45 00 4E .9.2...D .D.C.E.N [130] 00 54 00 52 00 49 00 46 00 59 00 00 00 .T.R.I.F .Y... [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=360 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=320 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 229 (0xE5) smb_bcc=317 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] A1 81 E2 30 81 DF A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 C9 04 81 C6 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 14 00 14 00 30 TLMSSP.. .......0 [030] 00 00 00 95 82 89 E2 7E ED CF 8E 54 E5 B7 BA 00 .......~ ...T.... [040] 00 00 00 00 00 00 00 82 00 82 00 44 00 00 00 44 ........ ...D...D [050] 00 44 00 43 00 45 00 4E 00 54 00 52 00 49 00 46 .D.C.E.N .T.R.I.F [060] 00 59 00 02 00 14 00 44 00 44 00 43 00 45 00 4E .Y.....D .D.C.E.N [070] 00 54 00 52 00 49 00 46 00 59 00 01 00 10 00 44 .T.R.I.F .Y.....D [080] 00 44 00 2D 00 52 00 48 00 45 00 53 00 33 00 04 .D.-.R.H .E.S.3.. [090] 00 1C 00 64 00 64 00 63 00 65 00 6E 00 74 00 72 ...d.d.c .e.n.t.r [0A0] 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 00 03 .i.f.y.. .d.e.v.. [0B0] 00 2E 00 44 00 44 00 2D 00 52 00 48 00 45 00 53 ...D.D.- .R.H.E.S [0C0] 00 33 00 2E 00 44 00 44 00 43 00 65 00 6E 00 74 .3...D.D .C.e.n.t [0D0] 00 72 00 69 00 66 00 79 00 2E 00 64 00 65 00 76 .r.i.f.y ...d.e.v [0E0] 00 00 00 00 00 55 00 6E 00 69 00 78 00 00 00 53 .....U.n .i.x...S [0F0] 00 61 00 6D 00 62 00 61 00 20 00 33 00 2E 00 30 .a.m.b.a . .3...0 [100] 00 2E 00 32 00 37 00 61 00 2D 00 63 00 64 00 63 ...2.7.a .-.c.d.c [110] 00 2D 00 34 00 2E 00 30 00 2E 00 30 00 2D 00 34 .-.4...0 ...0.-.4 [120] 00 39 00 32 00 00 00 44 00 44 00 43 00 45 00 4E .9.2...D .D.C.E.N [130] 00 54 00 52 00 49 00 46 00 59 00 00 00 .T.R.I.F .Y... [2007/11/25 15:43:27, 0] smbd/process.c:process_smb(1083) ERROR: Invalid message response size! 1 360 [2007/11/25 15:43:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 362 [2007/11/25 15:43:27, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x16a [2007/11/25 15:43:27, 3] smbd/process.c:process_smb(1068) Transaction 6 of length 366 [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=362 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=102 smb_mid=384 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 362 (0x16A) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 200 (0xC8) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=303 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] A1 81 C5 30 81 C2 A2 81 BF 04 81 BC 4E 54 4C 4D ...0.... ....NTLM [010] 53 53 50 00 03 00 00 00 18 00 18 00 7C 00 00 00 SSP..... ....|... [020] 18 00 18 00 94 00 00 00 10 00 10 00 48 00 00 00 ........ ....H... [030] 10 00 10 00 58 00 00 00 14 00 14 00 68 00 00 00 ....X... ....h... [040] 10 00 10 00 AC 00 00 00 15 82 88 E2 05 01 28 0A ........ ......(. [050] 00 00 00 0F 44 00 44 00 2D 00 52 00 48 00 45 00 ....D.D. -.R.H.E. [060] 53 00 33 00 64 00 64 00 61 00 75 00 67 00 68 00 S.3.d.d. a.u.g.h. [070] 65 00 72 00 44 00 44 00 41 00 55 00 47 00 48 00 e.r.D.D. A.U.G.H. [080] 45 00 52 00 54 00 59 00 35 A0 38 CC 2F D4 F6 76 E.R.T.Y. 5.8./..v [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0A0] DA 71 0E 4D 00 12 C6 93 2F 73 23 D8 60 DF 19 D5 .q.M.... /s#.`... [0B0] E2 49 88 18 A5 9C 54 31 3E FB BA E3 A0 AB 07 7D .I....T1 >......} [0C0] 5B 8C 20 D4 4E 48 E5 69 00 57 00 69 00 6E 00 64 [. .NH.i .W.i.n.d [0D0] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 32 .o.w.s. .2.0.0.2 [0E0] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [0F0] 00 20 00 50 00 61 00 63 00 6B 00 20 00 32 00 20 . .P.a.c .k. .2. [100] 00 32 00 36 00 30 00 30 00 00 00 57 00 69 00 6E .2.6.0.0 ...W.i.n [110] 00 64 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 .d.o.w.s . .2.0.0 [120] 00 32 00 20 00 35 00 2E 00 31 00 00 00 00 00 .2. .5.. .1..... [2007/11/25 15:43:27, 3] smbd/process.c:switch_message(926) switch message SMBsesssetupX (pid 20864) conn 0x0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1244) wct=12 flg2=0xc807 [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1029) Doing spnego session setup [2007/11/25 15:43:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1060) NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2007/11/25 15:43:27, 10] smbd/sesssetup.c:check_spnego_blob_complete(975) check_spnego_blob_complete: needed_len = 200, pblob->length = 200 [2007/11/25 15:43:27, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739) Got user=[ddaugher] domain=[DD-RHES3] workstation=[DDAUGHERTY] len1=24 len2=24 [2007/11/25 15:43:27, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(69) auth_context challenge set by NTLMSSP callback (NTLM2) [2007/11/25 15:43:27, 5] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(70) challenge is: [2007/11/25 15:43:27, 5] lib/util.c:dump_data(2264) [000] 77 15 9D 9D 1B 19 1B D6 w....... [2007/11/25 15:43:27, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:43:27, 5] auth/auth_util.c:make_user_info_map(161) make_user_info_map: Mapping user [DD-RHES3]\[ddaugher] from workstation [DDAUGHERTY] [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn DOMAIN_INFO (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_domain_info(385) [20864]: domain_info [DD-RHES3] [2007/11/25 15:43:27, 5] auth/auth_util.c:make_user_info(75) attempting to make a user_info for ddaugher (ddaugher) [2007/11/25 15:43:27, 5] auth/auth_util.c:make_user_info(85) making strings for ddaugher's user_info struct [2007/11/25 15:43:27, 5] auth/auth_util.c:make_user_info(117) making blobs for ddaugher's user_info struct [2007/11/25 15:43:27, 10] auth/auth_util.c:make_user_info(135) made an encrypted user_info for ddaugher (ddaugher) [2007/11/25 15:43:27, 3] auth/auth.c:check_ntlm_password(221) check_ntlm_password: Checking password for unmapped user [DD-RHES3]\[ddaugher]@[DDAUGHERTY] with the new password interface [2007/11/25 15:43:27, 3] auth/auth.c:check_ntlm_password(224) check_ntlm_password: mapped user is: [DD-RHES3]\[ddaugher]@[DDAUGHERTY] [2007/11/25 15:43:27, 10] auth/auth.c:check_ntlm_password(233) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2007/11/25 15:43:27, 10] auth/auth.c:check_ntlm_password(235) challenge is: [2007/11/25 15:43:27, 5] lib/util.c:dump_data(2264) [000] 77 15 9D 9D 1B 19 1B D6 w....... [2007/11/25 15:43:27, 10] auth/auth.c:check_ntlm_password(261) check_ntlm_password: guest had nothing to say [2007/11/25 15:43:27, 8] lib/util.c:is_myname(2076) is_myname("DD-RHES3") returns 1 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 4] passdb/pdb_tdb.c:tdbsam_open(869) tdbsam_open: successfully opened /etc/samba/private/passdb.tdb [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_username(581) pdb_set_username: setting username ddaugher, was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_domain(604) pdb_set_domain: setting domain DD-RHES3, was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_nt_username(627) pdb_set_nt_username: setting nt username , was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_fullname(650) pdb_set_full_name: setting full name David Daugherty, was [2007/11/25 15:43:27, 4] lib/substitute.c:automount_server(407) Home server: dd-rhes3 [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_homedir(743) pdb_set_homedir: setting home dir \\dd-rhes3\ddaugher, was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(719) pdb_set_dir_drive: setting dir drive , was NULL [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_logon_script(673) pdb_set_logon_script: setting logon script , was [2007/11/25 15:43:27, 4] lib/substitute.c:automount_server(407) Home server: dd-rhes3 [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_profile_path(696) pdb_set_profile_path: setting profile path \\dd-rhes3\ddaugher\profile, was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_workstations(786) pdb_set_workstations: setting workstations , was [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: password history, val: 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_user_sid(510) pdb_set_user_sid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-2024 [2007/11/25 15:43:27, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-2024 from rid 2024 [2007/11/25 15:43:27, 8] passdb/pdb_tdb.c:tdbsam_close(882) tdbsam_close: Reference count is now 0. [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: maximum password age, val: -1 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 5] lib/username.c:Get_Pwnam_alloc(131) Finding user ddaugher [2007/11/25 15:43:27, 5] lib/username.c:Get_Pwnam_internals(75) Trying _Get_Pwnam(), username as lowercase is ddaugher [2007/11/25 15:43:27, 10] lib/util_pw.c:getpwnam_alloc(76) Got ddaugher from pwnam_cache [2007/11/25 15:43:27, 5] lib/username.c:Get_Pwnam_internals(108) Get_Pwnam_internals did find user [ddaugher]! [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: password history, val: 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_username(581) pdb_set_username: setting username ddaugher, was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_domain(604) pdb_set_domain: setting domain DD-RHES3, was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_nt_username(627) pdb_set_nt_username: setting nt username , was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_fullname(650) pdb_set_full_name: setting full name David Daugherty, was [2007/11/25 15:43:27, 4] lib/substitute.c:automount_server(407) Home server: dd-rhes3 [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_homedir(743) pdb_set_homedir: setting home dir \\dd-rhes3\ddaugher, was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(719) pdb_set_dir_drive: setting dir drive , was NULL [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_logon_script(673) pdb_set_logon_script: setting logon script , was [2007/11/25 15:43:27, 4] lib/substitute.c:automount_server(407) Home server: dd-rhes3 [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_profile_path(696) pdb_set_profile_path: setting profile path \\dd-rhes3\ddaugher\profile, was [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_workstations(786) pdb_set_workstations: setting workstations , was [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: password history, val: 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 10] passdb/pdb_get_set.c:pdb_set_user_sid(510) pdb_set_user_sid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-2024 [2007/11/25 15:43:27, 10] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-641626746-684231166-3284099977-3210-2024 from rid 2024 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 9] passdb/passdb.c:pdb_update_autolock_flag(1420) pdb_update_autolock_flag: Account ddaugher not autolocked, no check needed [2007/11/25 15:43:27, 4] libsmb/ntlm_check.c:ntlm_password_check(326) ntlm_password_check: Checking NT MD4 password [2007/11/25 15:43:27, 4] auth/auth_sam.c:sam_account_ok(138) sam_account_ok: Checking SMB password for user ddaugher [2007/11/25 15:43:27, 5] auth/auth_sam.c:logon_hours_ok(120) logon_hours_ok: user ddaugher allowed to logon at this time (Sun Nov 25 23:43:27 2007 ) [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 10] lib/account_pol.c:account_policy_get(294) account_policy_get: name: maximum password age, val: -1 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 10] lib/util_pw.c:getpwnam_alloc(76) Got ddaugher from pwnam_cache [2007/11/25 15:43:27, 10] lib/util_pw.c:getpwnam_alloc(76) Got ddaugher from pwnam_cache [2007/11/25 15:43:27, 10] lib/system_smbd.c:sys_getgrouplist(125) sys_getgrouplist: user [ddaugher] [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn GID_TO_SID (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_sid.c:winbindd_gid_to_sid(477) [20864]: gid to sid 512 [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999333 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:27, 10] nsswitch/winbindd_sid.c:gid2sid_recv(462) gid2sid: gid 512 has sid S-1-22-2-512 [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:gid_to_sid(1360) gid 512 -> sid S-1-22-2-512 [2007/11/25 15:43:27, 5] auth/auth_util.c:make_server_info_sam(623) make_server_info_sam: made server info for user ddaugher -> ddaugher [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] auth/auth.c:check_ntlm_password(270) check_ntlm_password: sam authentication for user [ddaugher] succeeded [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 5] auth/auth.c:check_ntlm_password(296) check_ntlm_password: PAM Account for user [ddaugher] succeeded [2007/11/25 15:43:27, 2] auth/auth.c:check_ntlm_password(309) check_ntlm_password: authentication for user [ddaugher] -> [ddaugher] -> [ddaugher] succeeded [2007/11/25 15:43:27, 5] auth/auth_util.c:free_user_info(2058) attempting to free (and zero) a user_info structure [2007/11/25 15:43:27, 10] auth/auth_util.c:free_user_info(2062) structure was created for ddaugher [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20864]: ping [2007/11/25 15:43:27, 10] auth/auth_util.c:create_local_nt_token(844) Create local NT token for S-1-5-21-641626746-684231166-3284099977-3210-2024 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20864]: sid to gid S-1-5-32-544 [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-32-544) [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(682) calling find_domain_from_sid [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20734 [2007/11/25 15:43:27, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-32-544 to a gid [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:27, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:43:27, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-5-32-544 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20864]: ping [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-5-32-544 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20864]: ping [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 10] groupdb/mapping.c:pdb_create_builtin_alias(702) Trying to create builtin alias 544 [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:check_dom_sid_to_level(663) Accepting SID S-1-5-32 in level 1 [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:lookup_sid(941) Sid S-1-5-32-544 -> BUILTIN\Administrators(4) [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn ALLOCATE_GID (from pid 20864) [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:27, 3] groupdb/mapping.c:pdb_create_builtin_alias(723) pdb_create_builtin_alias: Could not get a gid out of winbind [2007/11/25 15:43:27, 2] auth/auth_util.c:create_builtin_administrators(792) create_builtin_administrators: Failed to create Administrators [2007/11/25 15:43:27, 2] auth/auth_util.c:create_local_nt_token(914) create_local_nt_token: Failed to create BUILTIN\Administrators group! [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1089) fetch gid from cache 10003 -> S-1-5-32-545 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:push_sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 3] smbd/uid.c:push_conn_ctx(358) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-21-641626746-684231166-3284099977-3210-2024] [2007/11/25 15:43:27, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-22-2-512] [2007/11/25 15:43:27, 5] lib/privileges.c:get_privileges_for_sids(460) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:43:27, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-2] [2007/11/25 15:43:27, 3] lib/privileges.c:get_privileges(261) get_privileges: No privileges assigned to SID [S-1-5-11] [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:sid_to_gid(1438) sid S-1-22-2-512 -> gid 512 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20864]: sid to gid S-1-1-0 [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-1-0) [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(689) calling find_our_domain [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20722 [2007/11/25 15:43:27, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-1-0 to a gid [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999981 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:27, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:43:27, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-1-0 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20864]: ping [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-1-0 [2007/11/25 15:43:27, 10] auth/auth_util.c:create_local_token(1043) Could not convert SID S-1-1-0 to gid, ignoring it [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20864]: sid to gid S-1-5-2 [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-2) [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(689) calling find_our_domain [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20722 [2007/11/25 15:43:27, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-2 to a gid [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999981 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:27, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:43:27, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-5-2 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20864]: ping [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-5-2 [2007/11/25 15:43:27, 10] auth/auth_util.c:create_local_token(1043) Could not convert SID S-1-5-2 to gid, ignoring it [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn SID_TO_GID (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308) [20864]: sid to gid S-1-5-11 [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679) find_lookup_domain_from_sid(S-1-5-11) [2007/11/25 15:43:27, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(689) calling find_our_domain [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999975 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20722 [2007/11/25 15:43:27, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545) winbindd_sid2gid_async: Resolving S-1-5-11 to a gid [2007/11/25 15:43:27, 10] lib/events.c:event_add_timed(129) Added timed event "async_request_timeout": 83dfff8 [2007/11/25 15:43:27, 10] lib/events.c:get_timed_events_timeout(295) timed_events_timeout: 299/999980 [2007/11/25 15:43:27, 10] lib/events.c:timed_event_destructor(66) Destroying timed event 83dfff8 "async_request_timeout" [2007/11/25 15:43:27, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300) Retrieving response for pid 20733 [2007/11/25 15:43:27, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527) sid2gid returned an error [2007/11/25 15:43:27, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254) Could not convert sid S-1-5-11 [2007/11/25 15:43:27, 10] nsswitch/winbindd.c:process_request(316) process_request: request fn PING (from pid 20864) [2007/11/25 15:43:27, 3] nsswitch/winbindd_misc.c:winbindd_ping(470) [20864]: ping [2007/11/25 15:43:27, 10] passdb/lookup_sid.c:sid_to_gid(1451) winbind failed to find a gid for sid S-1-5-11 [2007/11/25 15:43:27, 10] auth/auth_util.c:create_local_token(1043) Could not convert SID S-1-5-11 to gid, ignoring it [2007/11/25 15:43:27, 10] auth/auth_util.c:debug_nt_user_token(454) NT user token of user S-1-5-21-641626746-684231166-3284099977-3210-2024 contains 5 SIDs SID[ 0]: S-1-5-21-641626746-684231166-3284099977-3210-2024 SID[ 1]: S-1-22-2-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:43:27, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(137) Got NT session key of length 16 [2007/11/25 15:43:27, 10] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(144) Got LM session key of length 16 [2007/11/25 15:43:27, 10] libsmb/ntlmssp.c:ntlmssp_server_auth(805) ntlmssp_server_auth: Created NTLM2 session key. [2007/11/25 15:43:27, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(338) NTLMSSP Sign/Seal - Initialising with flags: [2007/11/25 15:43:27, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63) Got NTLMSSP neg_flags=0xe2088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2007/11/25 15:43:27, 10] smbd/password.c:register_vuid(186) register_vuid: allocated vuid = 103 [2007/11/25 15:43:27, 10] lib/util_pw.c:getpwnam_alloc(76) Got ddaugher from pwnam_cache [2007/11/25 15:43:27, 10] smbd/password.c:register_vuid(277) register_vuid: (512,512) ddaugher ddaugher DD-RHES3 guest=0 [2007/11/25 15:43:27, 3] smbd/password.c:register_vuid(280) User name: ddaugher Real name: David Daugherty [2007/11/25 15:43:27, 3] smbd/password.c:register_vuid(301) UNIX uid 512 is UNIX user ddaugher, and will be vuid 103 [2007/11/25 15:43:27, 3] smbd/password.c:register_vuid(341) Using static (or previously created) service for user 'ddaugher'; path = '/home/ddaugher' [2007/11/25 15:43:27, 6] param/loadparm.c:lp_file_list_changed(3086) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Nov 23 11:29:49 2007 [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=140 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=103 smb_mid=384 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=97 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 30 00 2E 00 32 00 37 00 61 00 2D 00 63 ...0...2 .7.a.-.c [030] 00 64 00 63 00 2D 00 34 00 2E 00 30 00 2E 00 30 .d.c.-.4 ...0...0 [040] 00 2D 00 34 00 39 00 32 00 00 00 44 00 44 00 43 .-.4.9.2 ...D.D.C [050] 00 45 00 4E 00 54 00 52 00 49 00 46 00 59 00 00 .E.N.T.R .I.F.Y.. [060] 00 . [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=140 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=103 smb_mid=384 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=97 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 30 00 2E 00 32 00 37 00 61 00 2D 00 63 ...0...2 .7.a.-.c [030] 00 64 00 63 00 2D 00 34 00 2E 00 30 00 2E 00 30 .d.c.-.4 ...0...0 [040] 00 2D 00 34 00 39 00 32 00 00 00 44 00 44 00 43 .-.4.9.2 ...D.D.C [050] 00 45 00 4E 00 54 00 52 00 49 00 46 00 59 00 00 .E.N.T.R .I.F.Y.. [060] 00 . [2007/11/25 15:43:27, 0] smbd/process.c:process_smb(1083) ERROR: Invalid message response size! 1 140 [2007/11/25 15:43:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 102 [2007/11/25 15:43:27, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x66 [2007/11/25 15:43:27, 3] smbd/process.c:process_smb(1068) Transaction 7 of length 106 [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=102 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=103 smb_mid=448 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 102 (0x66) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=59 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] 00 5C 00 5C 00 31 00 39 00 32 00 2E 00 31 00 36 .\.\.1.9 .2...1.6 [010] 00 38 00 2E 00 33 00 31 00 2E 00 31 00 39 00 31 .8...3.1 ...1.9.1 [020] 00 5C 00 44 00 44 00 41 00 55 00 47 00 48 00 45 .\.D.D.A .U.G.H.E [030] 00 52 00 00 00 3F 3F 3F 3F 3F 00 .R...??? ??. [2007/11/25 15:43:27, 3] smbd/process.c:switch_message(926) switch message SMBtconX (pid 20864) conn 0x0 [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:27, 4] smbd/reply.c:reply_tcon_and_X(506) Client requested device type [?????] for share [DDAUGHER] [2007/11/25 15:43:27, 5] smbd/service.c:make_connection(1170) making a connection to 'homes' service [DDAUGHER] created at session setup time [2007/11/25 15:43:27, 10] smbd/share_access.c:user_ok_token(232) user_ok_token: share ddaugher is ok for unix user ddaugher [2007/11/25 15:43:27, 5] lib/username.c:Get_Pwnam_alloc(131) Finding user ddaugher [2007/11/25 15:43:27, 5] lib/username.c:Get_Pwnam_internals(75) Trying _Get_Pwnam(), username as lowercase is ddaugher [2007/11/25 15:43:27, 10] lib/util_pw.c:getpwnam_alloc(76) Got ddaugher from pwnam_cache [2007/11/25 15:43:27, 5] lib/username.c:Get_Pwnam_internals(108) Get_Pwnam_internals did find user [ddaugher]! [2007/11/25 15:43:27, 10] smbd/service.c:set_conn_connectpath(156) set_conn_connectpath: service ddaugher, connectpath = /home/ddaugher [2007/11/25 15:43:27, 3] smbd/service.c:make_connection_snum(806) Connect path is '/home/ddaugher' for service [ddaugher] [2007/11/25 15:43:27, 4] lib/sharesec.c:get_share_security(132) get_share_security: using default secdesc for ddaugher [2007/11/25 15:43:27, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2007/11/25 15:43:27, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 5 entries and first sid S-1-5-21-641626746-684231166-3284099977-3210-2024. [2007/11/25 15:43:27, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:43:27, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-641626746-684231166-3284099977-3210-2024 se_access_check: also S-1-22-2-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2007/11/25 15:43:27, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2007/11/25 15:43:27, 3] smbd/vfs.c:vfs_init_default(95) Initialising default vfs hooks [2007/11/25 15:43:27, 3] smbd/vfs.c:vfs_init_custom(128) Initialising custom vfs hooks from [/[Default VFS]/] Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #0 (type 0, layer 0) Making operation type 0 opaque [module /[Default VFS]/] Accepting operation type 0 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #1 (type 1, layer 0) Making operation type 1 opaque [module /[Default VFS]/] Accepting operation type 1 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #2 (type 2, layer 0) Making operation type 2 opaque [module /[Default VFS]/] Accepting operation type 2 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #3 (type 3, layer 0) Making operation type 3 opaque [module /[Default VFS]/] Accepting operation type 3 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #4 (type 4, layer 0) Making operation type 4 opaque [module /[Default VFS]/] Accepting operation type 4 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #5 (type 5, layer 0) Making operation type 5 opaque [module /[Default VFS]/] Accepting operation type 5 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #6 (type 6, layer 0) Making operation type 6 opaque [module /[Default VFS]/] Accepting operation type 6 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #7 (type 7, layer 0) Making operation type 7 opaque [module /[Default VFS]/] Accepting operation type 7 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #8 (type 8, layer 0) Making operation type 8 opaque [module /[Default VFS]/] Accepting operation type 8 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #9 (type 9, layer 0) Making operation type 9 opaque [module /[Default VFS]/] Accepting operation type 9 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #10 (type 10, layer 0) Making operation type 10 opaque [module /[Default VFS]/] Accepting operation type 10 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #11 (type 11, layer 0) Making operation type 11 opaque [module /[Default VFS]/] Accepting operation type 11 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #12 (type 12, layer 0) Making operation type 12 opaque [module /[Default VFS]/] Accepting operation type 12 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #13 (type 13, layer 0) Making operation type 13 opaque [module /[Default VFS]/] Accepting operation type 13 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #14 (type 14, layer 0) Making operation type 14 opaque [module /[Default VFS]/] Accepting operation type 14 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #15 (type 15, layer 0) Making operation type 15 opaque [module /[Default VFS]/] Accepting operation type 15 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #16 (type 16, layer 0) Making operation type 16 opaque [module /[Default VFS]/] Accepting operation type 16 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #17 (type 17, layer 0) Making operation type 17 opaque [module /[Default VFS]/] Accepting operation type 17 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #18 (type 18, layer 0) Making operation type 18 opaque [module /[Default VFS]/] Accepting operation type 18 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #19 (type 19, layer 0) Making operation type 19 opaque [module /[Default VFS]/] Accepting operation type 19 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #20 (type 20, layer 0) Making operation type 20 opaque [module /[Default VFS]/] Accepting operation type 20 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #21 (type 21, layer 0) Making operation type 21 opaque [module /[Default VFS]/] Accepting operation type 21 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #22 (type 22, layer 0) Making operation type 22 opaque [module /[Default VFS]/] Accepting operation type 22 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #23 (type 23, layer 0) Making operation type 23 opaque [module /[Default VFS]/] Accepting operation type 23 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #24 (type 24, layer 0) Making operation type 24 opaque [module /[Default VFS]/] Accepting operation type 24 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #25 (type 25, layer 0) Making operation type 25 opaque [module /[Default VFS]/] Accepting operation type 25 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #26 (type 26, layer 0) Making operation type 26 opaque [module /[Default VFS]/] Accepting operation type 26 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #27 (type 27, layer 0) Making operation type 27 opaque [module /[Default VFS]/] Accepting operation type 27 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #28 (type 28, layer 0) Making operation type 28 opaque [module /[Default VFS]/] Accepting operation type 28 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #29 (type 29, layer 0) Making operation type 29 opaque [module /[Default VFS]/] Accepting operation type 29 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #30 (type 30, layer 0) Making operation type 30 opaque [module /[Default VFS]/] Accepting operation type 30 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #31 (type 31, layer 0) Making operation type 31 opaque [module /[Default VFS]/] Accepting operation type 31 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #32 (type 32, layer 0) Making operation type 32 opaque [module /[Default VFS]/] Accepting operation type 32 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #33 (type 33, layer 0) Making operation type 33 opaque [module /[Default VFS]/] Accepting operation type 33 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #34 (type 34, layer 0) Making operation type 34 opaque [module /[Default VFS]/] Accepting operation type 34 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #35 (type 35, layer 0) Making operation type 35 opaque [module /[Default VFS]/] Accepting operation type 35 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #36 (type 36, layer 0) Making operation type 36 opaque [module /[Default VFS]/] Accepting operation type 36 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #37 (type 37, layer 0) Making operation type 37 opaque [module /[Default VFS]/] Accepting operation type 37 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #38 (type 38, layer 0) Making operation type 38 opaque [module /[Default VFS]/] Accepting operation type 38 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #39 (type 39, layer 0) Making operation type 39 opaque [module /[Default VFS]/] Accepting operation type 39 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #40 (type 40, layer 0) Making operation type 40 opaque [module /[Default VFS]/] Accepting operation type 40 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #41 (type 41, layer 0) Making operation type 41 opaque [module /[Default VFS]/] Accepting operation type 41 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #42 (type 42, layer 0) Making operation type 42 opaque [module /[Default VFS]/] Accepting operation type 42 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #43 (type 43, layer 0) Making operation type 43 opaque [module /[Default VFS]/] Accepting operation type 43 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #44 (type 44, layer 0) Making operation type 44 opaque [module /[Default VFS]/] Accepting operation type 44 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #45 (type 45, layer 0) Making operation type 45 opaque [module /[Default VFS]/] Accepting operation type 45 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #46 (type 46, layer 0) Making operation type 46 opaque [module /[Default VFS]/] Accepting operation type 46 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #47 (type 47, layer 0) Making operation type 47 opaque [module /[Default VFS]/] Accepting operation type 47 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #48 (type 48, layer 0) Making operation type 48 opaque [module /[Default VFS]/] Accepting operation type 48 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #49 (type 49, layer 0) Making operation type 49 opaque [module /[Default VFS]/] Accepting operation type 49 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #50 (type 50, layer 0) Making operation type 50 opaque [module /[Default VFS]/] Accepting operation type 50 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #51 (type 51, layer 0) Making operation type 51 opaque [module /[Default VFS]/] Accepting operation type 51 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #52 (type 52, layer 0) Making operation type 52 opaque [module /[Default VFS]/] Accepting operation type 52 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #53 (type 53, layer 0) Making operation type 53 opaque [module /[Default VFS]/] Accepting operation type 53 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #54 (type 54, layer 0) Making operation type 54 opaque [module /[Default VFS]/] Accepting operation type 54 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #55 (type 55, layer 0) Making operation type 55 opaque [module /[Default VFS]/] Accepting operation type 55 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #56 (type 56, layer 0) Making operation type 56 opaque [module /[Default VFS]/] Accepting operation type 56 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #57 (type 57, layer 0) Making operation type 57 opaque [module /[Default VFS]/] Accepting operation type 57 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #58 (type 58, layer 0) Making operation type 58 opaque [module /[Default VFS]/] Accepting operation type 58 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #59 (type 59, layer 0) Making operation type 59 opaque [module /[Default VFS]/] Accepting operation type 59 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #60 (type 60, layer 0) Making operation type 60 opaque [module /[Default VFS]/] Accepting operation type 60 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #61 (type 61, layer 0) Making operation type 61 opaque [module /[Default VFS]/] Accepting operation type 61 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #62 (type 62, layer 0) Making operation type 62 opaque [module /[Default VFS]/] Accepting operation type 62 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #63 (type 63, layer 0) Making operation type 63 opaque [module /[Default VFS]/] Accepting operation type 63 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #64 (type 64, layer 0) Making operation type 64 opaque [module /[Default VFS]/] Accepting operation type 64 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #65 (type 65, layer 0) Making operation type 65 opaque [module /[Default VFS]/] Accepting operation type 65 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #66 (type 66, layer 0) Making operation type 66 opaque [module /[Default VFS]/] Accepting operation type 66 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #67 (type 67, layer 0) Making operation type 67 opaque [module /[Default VFS]/] Accepting operation type 67 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #68 (type 68, layer 0) Making operation type 68 opaque [module /[Default VFS]/] Accepting operation type 68 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #69 (type 69, layer 0) Making operation type 69 opaque [module /[Default VFS]/] Accepting operation type 69 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #70 (type 70, layer 0) Making operation type 70 opaque [module /[Default VFS]/] Accepting operation type 70 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #71 (type 71, layer 0) Making operation type 71 opaque [module /[Default VFS]/] Accepting operation type 71 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #72 (type 72, layer 0) Making operation type 72 opaque [module /[Default VFS]/] Accepting operation type 72 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #73 (type 73, layer 0) Making operation type 73 opaque [module /[Default VFS]/] Accepting operation type 73 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #74 (type 74, layer 0) Making operation type 74 opaque [module /[Default VFS]/] Accepting operation type 74 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #75 (type 75, layer 0) Making operation type 75 opaque [module /[Default VFS]/] Accepting operation type 75 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #76 (type 76, layer 0) Making operation type 76 opaque [module /[Default VFS]/] Accepting operation type 76 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #77 (type 77, layer 0) Making operation type 77 opaque [module /[Default VFS]/] Accepting operation type 77 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #78 (type 78, layer 0) Making operation type 78 opaque [module /[Default VFS]/] Accepting operation type 78 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #79 (type 79, layer 0) Making operation type 79 opaque [module /[Default VFS]/] Accepting operation type 79 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #80 (type 80, layer 0) Making operation type 80 opaque [module /[Default VFS]/] Accepting operation type 80 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #81 (type 81, layer 0) Making operation type 81 opaque [module /[Default VFS]/] Accepting operation type 81 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #82 (type 82, layer 0) Making operation type 82 opaque [module /[Default VFS]/] Accepting operation type 82 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #83 (type 83, layer 0) Making operation type 83 opaque [module /[Default VFS]/] Accepting operation type 83 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #84 (type 84, layer 0) Making operation type 84 opaque [module /[Default VFS]/] Accepting operation type 84 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #85 (type 85, layer 0) Making operation type 85 opaque [module /[Default VFS]/] Accepting operation type 85 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #86 (type 86, layer 0) Making operation type 86 opaque [module /[Default VFS]/] Accepting operation type 86 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #87 (type 87, layer 0) Making operation type 87 opaque [module /[Default VFS]/] Accepting operation type 87 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #88 (type 88, layer 0) Making operation type 88 opaque [module /[Default VFS]/] Accepting operation type 88 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #89 (type 89, layer 0) Making operation type 89 opaque [module /[Default VFS]/] Accepting operation type 89 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #90 (type 90, layer 0) Making operation type 90 opaque [module /[Default VFS]/] Accepting operation type 90 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #91 (type 91, layer 0) Making operation type 91 opaque [module /[Default VFS]/] Accepting operation type 91 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #92 (type 92, layer 0) Making operation type 92 opaque [module /[Default VFS]/] Accepting operation type 92 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #93 (type 93, layer 0) Making operation type 93 opaque [module /[Default VFS]/] Accepting operation type 93 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/vfs.c:vfs_init_custom(174) Checking operation #94 (type 94, layer 0) Making operation type 94 opaque [module /[Default VFS]/] Accepting operation type 94 from module /[Default VFS]/ [2007/11/25 15:43:27, 5] smbd/connection.c:claim_connection(182) claiming ddaugher 0 [2007/11/25 15:43:27, 10] smbd/share_access.c:user_ok_token(232) user_ok_token: share ddaugher is ok for unix user ddaugher [2007/11/25 15:43:27, 10] smbd/share_access.c:is_share_read_only_for_token(274) is_share_read_only_for_user: share ddaugher is read-write for unix user ddaugher [2007/11/25 15:43:27, 4] lib/sharesec.c:get_share_security(132) get_share_security: using default secdesc for ddaugher [2007/11/25 15:43:27, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2007/11/25 15:43:27, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 5 entries and first sid S-1-5-21-641626746-684231166-3284099977-3210-2024. [2007/11/25 15:43:27, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:43:27, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-641626746-684231166-3284099977-3210-2024 se_access_check: also S-1-22-2-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2007/11/25 15:43:27, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2007/11/25 15:43:27, 4] lib/sharesec.c:get_share_security(132) get_share_security: using default secdesc for ddaugher [2007/11/25 15:43:27, 10] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2007/11/25 15:43:27, 10] lib/util_seaccess.c:se_access_check(233) se_access_check: requested access 0x00000002, for NT token with 5 entries and first sid S-1-5-21-641626746-684231166-3284099977-3210-2024. [2007/11/25 15:43:27, 3] lib/util_seaccess.c:se_access_check(250) [2007/11/25 15:43:27, 3] lib/util_seaccess.c:se_access_check(251) se_access_check: user sid is S-1-5-21-641626746-684231166-3284099977-3210-2024 se_access_check: also S-1-22-2-512 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2007/11/25 15:43:27, 5] lib/util_seaccess.c:se_access_check(308) se_access_check: access (2) granted. [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (512, 512) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(454) NT user token of user S-1-5-21-641626746-684231166-3284099977-3210-2024 contains 5 SIDs SID[ 0]: S-1-5-21-641626746-684231166-3284099977-3210-2024 SID[ 1]: S-1-22-2-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 512 Primary group is 512 and contains 1 supplementary groups Group[ 0]: 512 [2007/11/25 15:43:27, 5] smbd/uid.c:change_to_user(273) change_to_user uid=(512,512) gid=(0,512) [2007/11/25 15:43:27, 1] smbd/service.c:make_connection_snum(1033) ddaugherty (192.168.31.1) connect to service ddaugher initially as user ddaugher (uid=512, gid=512) (pid 20864) [2007/11/25 15:43:27, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:27, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:27, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:27, 3] smbd/reply.c:reply_tcon_and_X(574) tconX service=DDAUGHER [2007/11/25 15:43:27, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:27, 5] lib/util.c:show_msg(494) size=62 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=103 smb_mid=448 smt_wct=7 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 511 (0x1FF) smb_vwv[ 4]= 31 (0x1F) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_bcc=13 [2007/11/25 15:43:27, 10] lib/util.c:dump_data(2264) [000] 41 3A 00 4E 00 54 00 46 00 53 00 00 00 A:.N.T.F .S... [2007/11/25 15:43:28, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 76 [2007/11/25 15:43:28, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x4c [2007/11/25 15:43:28, 3] smbd/process.c:process_smb(1068) Transaction 8 of length 80 [2007/11/25 15:43:28, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:28, 5] lib/util.c:show_msg(494) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=3932 smb_uid=103 smb_mid=512 smt_wct=15 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8 (0x8) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=11 [2007/11/25 15:43:28, 10] lib/util.c:dump_data(2264) [000] 00 00 00 EC 03 00 00 00 00 00 00 ........ ... [2007/11/25 15:43:28, 3] smbd/process.c:switch_message(926) switch message SMBtrans2 (pid 20864) conn 0x8563c20 [2007/11/25 15:43:28, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (512, 512) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:28, 5] auth/auth_util.c:debug_nt_user_token(454) NT user token of user S-1-5-21-641626746-684231166-3284099977-3210-2024 contains 5 SIDs SID[ 0]: S-1-5-21-641626746-684231166-3284099977-3210-2024 SID[ 1]: S-1-22-2-512 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SE_PRIV 0x0 0x0 0x0 0x0 [2007/11/25 15:43:28, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 512 Primary group is 512 and contains 1 supplementary groups Group[ 0]: 512 [2007/11/25 15:43:28, 5] smbd/uid.c:change_to_user(273) change_to_user uid=(512,512) gid=(0,512) [2007/11/25 15:43:28, 4] smbd/vfs.c:vfs_ChDir(665) vfs_ChDir to /home/ddaugher [2007/11/25 15:43:28, 3] smbd/trans2.c:call_trans2qfilepathinfo(3256) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2007/11/25 15:43:28, 10] smbd/trans2.c:call_trans2qfilepathinfo(3262) Calling srvstr_get_path... [2007/11/25 15:43:28, 10] smbd/trans2.c:call_trans2qfilepathinfo(3269) Calling resolve_dfspath... [2007/11/25 15:43:28, 10] smbd/msdfs.c:parse_dfs_path(64) parse_dfs_path: path doesn't start with \ [2007/11/25 15:43:28, 10] smbd/msdfs.c:parse_dfs_path(77) parse_dfs_path: trying to convert to a local path [2007/11/25 15:43:28, 10] smbd/msdfs.c:parse_dfs_path(164) parse_dfs_path: rest of the path: [2007/11/25 15:43:28, 5] smbd/msdfs.c:dfs_redirect(506) dfs_redirect: self-referral. [2007/11/25 15:43:28, 3] smbd/trans2.c:call_trans2qfilepathinfo(3279) Calling unix_convert ... [2007/11/25 15:43:28, 5] smbd/filename.c:unix_convert(147) unix_convert called on file "" [2007/11/25 15:43:28, 5] smbd/filename.c:unix_convert(176) conversion finished "" -> . [2007/11/25 15:43:28, 3] smbd/trans2.c:call_trans2qfilepathinfo(3287) Calling check_name... [2007/11/25 15:43:28, 3] smbd/trans2.c:call_trans2qfilepathinfo(3329) call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 [2007/11/25 15:43:28, 8] smbd/dosmode.c:dos_mode(371) dos_mode: . [2007/11/25 15:43:28, 8] smbd/dosmode.c:dos_mode_from_sbuf(188) dos_mode_from_sbuf returning d [2007/11/25 15:43:28, 8] smbd/dosmode.c:dos_mode(409) dos_mode returning d [2007/11/25 15:43:28, 10] smbd/trans2.c:call_trans2qfilepathinfo(3554) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2007/11/25 15:43:28, 5] smbd/trans2.c:call_trans2qfilepathinfo(3564) SMB_QFBI - create: Mon Nov 19 16:59:53 2007 access: Sun Nov 25 15:34:10 2007 write: Mon Nov 19 16:59:53 2007 change: Mon Nov 19 16:59:53 2007 mode: 10 [2007/11/25 15:43:28, 9] smbd/trans2.c:send_trans2_replies(712) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2007/11/25 15:43:28, 9] smbd/trans2.c:send_trans2_replies(714) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2007/11/25 15:43:28, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:28, 5] lib/util.c:show_msg(494) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=3932 smb_uid=103 smb_mid=512 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=45 [2007/11/25 15:43:28, 10] lib/util.c:dump_data(2264) [000] 00 00 00 00 00 80 8A B5 A8 10 2B C8 01 00 85 B8 ........ ..+..... [010] AD BB 2F C8 01 80 8A B5 A8 10 2B C8 01 80 8A B5 ../..... ..+..... [020] A8 10 2B C8 01 10 00 00 00 00 00 00 00 ..+..... ..... [2007/11/25 15:43:28, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 70 [2007/11/25 15:43:28, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x46 [2007/11/25 15:43:28, 3] smbd/process.c:process_smb(1068) Transaction 9 of length 74 [2007/11/25 15:43:28, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:28, 5] lib/util.c:show_msg(494) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=3932 smb_uid=103 smb_mid=576 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2007/11/25 15:43:28, 10] lib/util.c:dump_data(2264) [000] 00 00 00 02 01 ..... [2007/11/25 15:43:28, 3] smbd/process.c:switch_message(926) switch message SMBtrans2 (pid 20864) conn 0x8563c20 [2007/11/25 15:43:28, 4] smbd/uid.c:change_to_user(183) change_to_user: Skipping user change - already user [2007/11/25 15:43:28, 3] smbd/trans2.c:call_trans2qfsinfo(2250) call_trans2qfsinfo: level = 258 [2007/11/25 15:43:28, 5] smbd/trans2.c:call_trans2qfsinfo(2366) call_trans2qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = 8, vol=ddaugher serv=ddaugher [2007/11/25 15:43:28, 9] smbd/trans2.c:send_trans2_replies(712) t2_rep: params_sent_thistime = 0, data_sent_thistime = 34, useable_space = 131012 [2007/11/25 15:43:28, 9] smbd/trans2.c:send_trans2_replies(714) t2_rep: params_to_send = 0, data_to_send = 34, paramsize = 0, datasize = 34 [2007/11/25 15:43:28, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:28, 5] lib/util.c:show_msg(494) size=90 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=3932 smb_uid=103 smb_mid=576 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 34 (0x22) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 34 (0x22) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=35 [2007/11/25 15:43:28, 10] lib/util.c:dump_data(2264) [000] 00 00 00 00 00 00 00 00 00 B0 29 E8 0C 10 00 00 ........ ..)..... [010] 00 00 00 64 00 64 00 61 00 75 00 67 00 68 00 65 ...d.d.a .u.g.h.e [020] 00 72 00 .r. [2007/11/25 15:43:28, 4] smbd/trans2.c:call_trans2qfsinfo(2697) SMBtrans2 info_level = 258 [2007/11/25 15:43:28, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 70 [2007/11/25 15:43:28, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x46 [2007/11/25 15:43:28, 3] smbd/process.c:process_smb(1068) Transaction 10 of length 74 [2007/11/25 15:43:28, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:28, 5] lib/util.c:show_msg(494) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=3932 smb_uid=103 smb_mid=640 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2007/11/25 15:43:28, 10] lib/util.c:dump_data(2264) [000] 00 00 00 05 01 ..... [2007/11/25 15:43:28, 3] smbd/process.c:switch_message(926) switch message SMBtrans2 (pid 20864) conn 0x8563c20 [2007/11/25 15:43:28, 4] smbd/uid.c:change_to_user(183) change_to_user: Skipping user change - already user [2007/11/25 15:43:28, 3] smbd/trans2.c:call_trans2qfsinfo(2250) call_trans2qfsinfo: level = 261 [2007/11/25 15:43:28, 9] smbd/trans2.c:send_trans2_replies(712) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2007/11/25 15:43:28, 9] smbd/trans2.c:send_trans2_replies(714) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2007/11/25 15:43:28, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:28, 5] lib/util.c:show_msg(494) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51265 smb_tid=2 smb_pid=3932 smb_uid=103 smb_mid=640 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 20 (0x14) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 20 (0x14) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=21 [2007/11/25 15:43:28, 10] lib/util.c:dump_data(2264) [000] 00 2B 00 00 00 FF 00 00 00 08 00 00 00 4E 00 54 .+...... .....N.T [010] 00 46 00 53 00 .F.S. [2007/11/25 15:43:28, 4] smbd/trans2.c:call_trans2qfsinfo(2697) SMBtrans2 info_level = 261 [2007/11/25 15:43:37, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 39 [2007/11/25 15:43:37, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x27 [2007/11/25 15:43:37, 3] smbd/process.c:process_smb(1068) Transaction 11 of length 43 [2007/11/25 15:43:37, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:37, 5] lib/util.c:show_msg(494) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=704 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2007/11/25 15:43:37, 3] smbd/process.c:switch_message(926) switch message SMBulogoffX (pid 20864) conn 0x0 [2007/11/25 15:43:37, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:37, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:37, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:37, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:37, 3] smbd/reply.c:reply_ulogoffX(1560) ulogoffX vuid=101 [2007/11/25 15:43:37, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:37, 5] lib/util.c:show_msg(494) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=101 smb_mid=704 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2007/11/25 15:43:37, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 35 [2007/11/25 15:43:37, 6] smbd/process.c:process_smb(1067) got message type 0x0 of len 0x23 [2007/11/25 15:43:37, 3] smbd/process.c:process_smb(1068) Transaction 12 of length 39 [2007/11/25 15:43:37, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:37, 5] lib/util.c:show_msg(494) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=768 smt_wct=0 smb_bcc=0 [2007/11/25 15:43:37, 3] smbd/process.c:switch_message(926) switch message SMBtdis (pid 20864) conn 0x8561d38 [2007/11/25 15:43:37, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:37, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:37, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:37, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:37, 4] smbd/vfs.c:vfs_ChDir(665) vfs_ChDir to /tmp [2007/11/25 15:43:37, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:37, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:37, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:37, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:37, 3] smbd/service.c:close_cnum(1230) ddaugherty (192.168.31.1) closed connection to service IPC$ [2007/11/25 15:43:37, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2007/11/25 15:43:37, 4] smbd/vfs.c:vfs_ChDir(665) vfs_ChDir to / [2007/11/25 15:43:37, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:37, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:37, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:37, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:37, 5] lib/util.c:show_msg(484) [2007/11/25 15:43:37, 5] lib/util.c:show_msg(494) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=101 smb_mid=768 smt_wct=0 smb_bcc=0 [2007/11/25 15:43:48, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:48, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:48, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:48, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:48, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2007/11/25 15:43:48, 3] smbd/server.c:exit_server_common(768) Server exit (normal exit) [2007/11/25 15:43:48, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:48, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:48, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:48, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:48, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2007/11/25 15:43:48, 3] smbd/connection.c:yield_connection(76) yield_connection: tdb_delete for name failed with error Record does not exist. [2007/11/25 15:43:48, 3] smbd/server.c:exit_server_common(768) Server exit (normal exit) [2007/11/25 15:43:48, 10] smbd/process.c:async_processing(292) async_processing: Doing async processing. [2007/11/25 15:43:48, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:48, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:48, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:48, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:48, 4] smbd/vfs.c:vfs_ChDir(665) vfs_ChDir to /home/ddaugher [2007/11/25 15:43:48, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:48, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:48, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:48, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:48, 1] smbd/service.c:close_cnum(1230) ddaugherty (192.168.31.1) closed connection to service ddaugher [2007/11/25 15:43:48, 3] smbd/connection.c:yield_connection(69) Yielding connection to ddaugher [2007/11/25 15:43:48, 4] smbd/vfs.c:vfs_ChDir(665) vfs_ChDir to / [2007/11/25 15:43:48, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/11/25 15:43:48, 5] auth/auth_util.c:debug_nt_user_token(448) NT user token: (NULL) [2007/11/25 15:43:48, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/11/25 15:43:48, 5] smbd/uid.c:change_to_root_user(288) change_to_root_user: now uid=(0,0) gid=(0,0) [2007/11/25 15:43:48, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2007/11/25 15:43:48, 3] smbd/server.c:exit_server_common(768) Server exit (termination signal) [2007/11/25 15:43:48, 5] lib/gencache.c:gencache_shutdown(94) Closing cache file