Initialising global parameters
lp_load: refreshing parameters from /usr/local/samba/etc/smb.conf
params.c:pm_process() - Processing configuration file "/usr/local/samba/etc/smb.conf"
Processing section "[globals]"
Processing section "[netlogon]"
Processing section "[sysvol]"
pm_process() returned Yes
adding hidden service IPC$
adding hidden service ADMIN$
smbd version 4.0.0alpha2-SVN-build-26193 started.
Copyright Andrew Tridgell and the Samba Team 1992-2007
SHARE backend [ldb] registered.
SHARE backend [classic] registered.
AUTH backend 'winbind_samba3' registered
AUTH backend 'winbind' registered
AUTH backend 'name_to_ntstatus' registered
AUTH backend 'fixed_challenge' registered
AUTH backend 'unix' registered
AUTH backend 'anonymous' registered
AUTH backend 'sam' registered
AUTH backend 'sam_ignoredomain' registered
GENSEC backend 'krb5' registered
gensec subsystem fake_gssapi_krb5 is disabled
GENSEC backend 'schannel' registered
GENSEC backend 'spnego' registered
gensec subsystem gssapi_spnego is disabled
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'ntlmssp' registered
NTPTR backend 'simple_ldb'
NTVFS backend 'simple' for type 0 registered
NTVFS backend 'cifs' for type 0 registered
NTVFS backend 'nbench' for type 0 registered
NTVFS backend 'unixuid' for type 0 registered
NTVFS backend 'unixuid' for type 1 registered
NTVFS backend 'unixuid' for type 2 registered
NTVFS backend 'cifsposix' for type 0 registered
NTVFS backend 'default' for type 2 registered
NTVFS backend 'xattr' registered
NTVFS backend 'nfs4acl' registered
NTVFS backend 'default' for type 1 registered
NTVFS backend 'default' for type 0 registered
NTVFS backend 'posix' for type 0 registered
PROCESS_MODEL 'standard' registered
PROCESS_MODEL 'single' registered
DCERPC endpoint server 'wkssvc' registered
DCERPC endpoint server 'drsuapi' registered
DCERPC endpoint server 'spoolss' registered
DCERPC endpoint server 'winreg' registered
DCERPC endpoint server 'epmapper' registered
DCERPC endpoint server 'srvsvc' registered
DCERPC endpoint server 'netlogon' registered
DCERPC endpoint server 'rpcecho' registered
DCERPC endpoint server 'unixinfo' registered
DCERPC endpoint server 'samr' registered
DCERPC endpoint server 'remote' registered
DCERPC endpoint server 'dssetup' registered
DCERPC endpoint server 'lsarpc' registered
smbd: using 'single' process model
ldb: trying to load partition from /usr/local/samba/modules/ldb/partition.so

ldb: trying to load show_deleted from /usr/local/samba/modules/ldb/show_deleted.so

ldb: trying to load linked_attributes from /usr/local/samba/modules/ldb/linked_attributes.so

ldb: trying to load subtree_delete from /usr/local/samba/modules/ldb/subtree_delete.so

ldb: trying to load subtree_rename from /usr/local/samba/modules/ldb/subtree_rename.so

ldb: trying to load kludge_acl from /usr/local/samba/modules/ldb/kludge_acl.so

ldb: trying to load objectclass from /usr/local/samba/modules/ldb/objectclass.so

ldb: trying to load samldb from /usr/local/samba/modules/ldb/samldb.so

ldb: trying to load extended_dn from /usr/local/samba/modules/ldb/extended_dn.so

ldb: trying to load rootdse from /usr/local/samba/modules/ldb/rootdse.so

ldb: trying to load objectguid from /usr/local/samba/modules/ldb/objectguid.so

ldb: trying to load schema_fsmo from /usr/local/samba/modules/ldb/schema_fsmo.so

ldb: schema_fsmo_init: we are master: yes
ldb: trying to load naming_fsmo from /usr/local/samba/modules/ldb/naming_fsmo.so

ldb: naming_fsmo_init: we are master: yes
ldb: trying to load password_hash from /usr/local/samba/modules/ldb/password_hash.so

ldb: trying to load pdc_fsmo from /usr/local/samba/modules/ldb/pdc_fsmo.so

ldb: pdc_fsmo_init: we are master: yes
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
added interface ip=192.168.2.10 nmask=255.255.255.0
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
dreplsrv_partition[CN=Schema,CN=Configuration,DC=wallnoefer2,DC=local] loaded
dreplsrv_partition[CN=Configuration,DC=wallnoefer2,DC=local] loaded
dreplsrv_partition[DC=wallnoefer2,DC=local] loaded
dreplsrv_refresh_partition(DC=wallnoefer2,DC=local)
dreplsrv_refresh_partition(CN=Configuration,DC=wallnoefer2,DC=local)
dreplsrv_refresh_partition(CN=Schema,CN=Configuration,DC=wallnoefer2,DC=local)
dreplsrv_periodic_schedule(15) scheduled for: Thu Nov 29 23:11:06 2007 CET
ldb: trying to load update_keytab from /usr/local/samba/modules/ldb/update_keytab.so

Registered VMWARE-SAMBA4<00> with 192.168.2.10 on interface 192.168.2.255
Registered VMWARE-SAMBA4<03> with 192.168.2.10 on interface 192.168.2.255
Registered VMWARE-SAMBA4<20> with 192.168.2.10 on interface 192.168.2.255
Registered WALLNOEFER2<1b> with 192.168.2.10 on interface 192.168.2.255
Registered WALLNOEFER2<1c> with 192.168.2.10 on interface 192.168.2.255
Registered WALLNOEFER2<00> with 192.168.2.10 on interface 192.168.2.255
dreplsrv_periodic_run(): schedule pull replication
dreplsrv_periodic_run(): run pending_ops
dreplsrv_periodic_schedule(300) scheduled for: Thu Nov 29 23:16:06 2007 CET
using SPNEGO
Selected protocol [5][NT LM 0.12]
Got NTLMSSP neg_flags=0xe208b297
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_NEGOTIATE_OEM
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_LM_KEY
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED
  NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
  NTLMSSP_NEGOTIATE_56
Got user=[Administrator] domain=[VMWARE-WIN2K2] workstation=[VMWARE-WIN2K2] len1=24 len2=24
auth_check_password_send:  Checking password for unmapped user [VMWARE-WIN2K2]\[Administrator]@[VMWARE-WIN2K2]
auth_check_password_send:  mapped user is: [VMWARE-WIN2K2]\[Administrator]@[VMWARE-WIN2K2]
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
ntlm_password_check: Checking NT MD4 password
authsam_account_ok: Checking SMB password for user Administrator
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
Received cldap packet of length 219 from 192.168.2.9:1543
Received cldap packet of length 219 from 192.168.2.9:1543
Received cldap packet of length 219 from 192.168.2.9:1545
Received cldap packet of length 219 from 192.168.2.9:1545
Received cldap packet of length 219 from 192.168.2.9:1546
Received cldap packet of length 219 from 192.168.2.9:1546
Received cldap packet of length 219 from 192.168.2.9:1547
Received cldap packet of length 219 from 192.168.2.9:1547
Received cldap packet of length 219 from 192.168.2.9:1548
Received cldap packet of length 219 from 192.168.2.9:1548
Received cldap packet of length 219 from 192.168.2.9:1549
Received cldap packet of length 219 from 192.168.2.9:1549
Received cldap packet of length 219 from 192.168.2.9:1550
Received cldap packet of length 219 from 192.168.2.9:1550
Received cldap packet of length 219 from 192.168.2.9:1551
Received cldap packet of length 219 from 192.168.2.9:1551
dreplsrv_periodic_run(): schedule pull replication
dreplsrv_periodic_run(): run pending_ops
dreplsrv_periodic_schedule(300) scheduled for: Thu Nov 29 23:21:06 2007 CET
Received dgram packet of length 183 from 192.168.2.9:138
Browse MasterAnnouncement (Op 13) on 'VMWARE-SAMBA4<00>' '\MAILSLOT\BROWSE' from 192.168.2.9:138
Got NTLMSSP neg_flags=0xe208b297
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_NEGOTIATE_OEM
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_LM_KEY
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED
  NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
  NTLMSSP_NEGOTIATE_56
Got user=[] domain=[] workstation=[VMWARE-WIN2K2] len1=1 len2=0
auth_check_password_send:  Checking password for unmapped user []\[]@[VMWARE-WIN2K2]
auth_check_password_send:  mapped user is: [WALLNOEFER2]\[]@[VMWARE-WIN2K2]
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
192.168.2.9 closed connection to service IPC$
Got NTLMSSP neg_flags=0xe208b297
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_NEGOTIATE_OEM
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_LM_KEY
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED
  NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
  NTLMSSP_NEGOTIATE_56
Got user=[] domain=[] workstation=[VMWARE-WIN2K2] len1=1 len2=0
auth_check_password_send:  Checking password for unmapped user []\[]@[VMWARE-WIN2K2]
auth_check_password_send:  mapped user is: [WALLNOEFER2]\[]@[VMWARE-WIN2K2]
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
192.168.2.9 closed connection to service IPC$
Found account name from PAC: VMWARE-WIN2K2$ [VMWARE-WIN2K2$]
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
192.168.2.9 closed connection to service IPC$
Found account name from PAC: VMWARE-WIN2K2$ [VMWARE-WIN2K2$]
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
192.168.2.9 closed connection to service IPC$
Received dgram packet of length 201 from 192.168.2.9:138
Browse LocalMasterAnnouncement (Op 15) on 'WALLNOEFER2<1e>' '\MAILSLOT\BROWSE' from 192.168.2.9:138
Received dgram packet of length 201 from 192.168.2.9:138
Browse LocalMasterAnnouncement (Op 15) on 'WALLNOEFER2<1e>' '\MAILSLOT\BROWSE' from 192.168.2.9:138
Received dgram packet of length 214 from 192.168.2.9:138
Browse DomainAnnouncement (Op 12) on '%01%02__MSBROWSE__%02<01>' '\MAILSLOT\BROWSE' from 192.168.2.9:138
Received dgram packet of length 214 from 192.168.2.9:138
Browse DomainAnnouncement (Op 12) on '%01%02__MSBROWSE__%02<01>' '\MAILSLOT\BROWSE' from 192.168.2.9:138
Received cldap packet of length 219 from 192.168.2.9:1552
Received cldap packet of length 219 from 192.168.2.9:1552
Received cldap packet of length 219 from 192.168.2.9:1554
Received cldap packet of length 219 from 192.168.2.9:1554
Received cldap packet of length 219 from 192.168.2.9:1555
Received cldap packet of length 219 from 192.168.2.9:1555
Received cldap packet of length 219 from 192.168.2.9:1556
Received cldap packet of length 219 from 192.168.2.9:1556
Received cldap packet of length 219 from 192.168.2.9:1557
Received cldap packet of length 219 from 192.168.2.9:1557
Received cldap packet of length 219 from 192.168.2.9:1558
Received cldap packet of length 219 from 192.168.2.9:1558
Received cldap packet of length 219 from 192.168.2.9:1559
Received cldap packet of length 219 from 192.168.2.9:1559
Received cldap packet of length 219 from 192.168.2.9:1560
Received cldap packet of length 219 from 192.168.2.9:1560
using SPNEGO
Selected protocol [5][NT LM 0.12]
single_terminate: reason[NT_STATUS_END_OF_FILE]
Found account name from PAC: VMWARE-WIN2K2$ [VMWARE-WIN2K2$]
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
Received cldap packet of length 174 from 192.168.2.9:1564
192.168.2.9 closed connection to service IPC$
single_terminate: reason[NT_STATUS_END_OF_FILE]
dreplsrv_periodic_run(): schedule pull replication
dreplsrv_periodic_run(): run pending_ops
dreplsrv_periodic_schedule(300) scheduled for: Thu Nov 29 23:26:06 2007 CET
Received dgram packet of length 201 from 192.168.2.1:138
Browse HostAnnouncement (Op 1) on 'WORKGROUP<1d>' '\MAILSLOT\BROWSE' from 192.168.2.1:138
Received dgram packet of length 201 from 192.168.2.1:138
Browse HostAnnouncement (Op 1) on 'WORKGROUP<1d>' '\MAILSLOT\BROWSE' from 192.168.2.1:138
192.168.2.9 closed connection to service netlogon
Received cldap packet of length 262 from 192.168.2.9:1566
Kerberos: AS-REQ Administrator@WALLNOEFER2 from 192.168.2.9 for krbtgt/WALLNOEFER2@WALLNOEFER2
LDB_lookup_spn_alias: no alias for service krbtgt applicable
authsam_account_ok: Checking SMB password for user Administrator@WALLNOEFER2.LOCAL
Kerberos: Client sent patypes: encrypted-timestamp, 128
Kerberos: Looking for PKINIT pa-data -- Administrator@WALLNOEFER2
Kerberos: Looking for ENC-TS pa-data -- Administrator@WALLNOEFER2
Kerberos: ENC-TS Pre-authentication succeeded -- Administrator@WALLNOEFER2 using arcfour-hmac-md5
Kerberos: Client supported enctypes: arcfour-hmac-md5, -133, -128, des-cbc-md5, des-cbc-crc, 24, -135
Kerberos: Using arcfour-hmac-md5/arcfour-hmac-md5
Kerberos: Requested flags: renewable_ok, canonicalize, renewable, forwardable
Kerberos: AS-REQ authtime: 2007-11-29T23:21:52 starttime: unset endtime: 2037-09-13T04:48:05 renew till: 2037-09-13T04:48:05
Kerberos: AS-REQ Administrator@WALLNOEFER2 from 192.168.2.9 for krbtgt/WALLNOEFER2@WALLNOEFER2
LDB_lookup_spn_alias: no alias for service krbtgt applicable
authsam_account_ok: Checking SMB password for user Administrator@WALLNOEFER2.LOCAL
Kerberos: Client sent patypes: encrypted-timestamp, 128
Kerberos: Looking for PKINIT pa-data -- Administrator@WALLNOEFER2
Kerberos: Looking for ENC-TS pa-data -- Administrator@WALLNOEFER2
Kerberos: ENC-TS Pre-authentication succeeded -- Administrator@WALLNOEFER2 using arcfour-hmac-md5
Kerberos: Client supported enctypes: arcfour-hmac-md5, -133, -128, des-cbc-md5, des-cbc-crc, 24, -135
Kerberos: Using arcfour-hmac-md5/arcfour-hmac-md5
Kerberos: Requested flags: renewable_ok, canonicalize, renewable, forwardable
Kerberos: AS-REQ authtime: 2007-11-29T23:21:53 starttime: unset endtime: 2037-09-13T04:48:05 renew till: 2037-09-13T04:48:05
single_terminate: reason[NT_STATUS_END_OF_FILE]
Kerberos: TGS-REQ Administrator@WALLNOEFER2.LOCAL from 192.168.2.9 for host/vmware-win2k2.wallnoefer2.local@WALLNOEFER2.LOCAL [renewable_ok, canonicalize, renewable, forwardable]
Kerberos: TGS-REQ authtime: 2007-11-29T23:21:53 starttime: 2007-11-29T23:21:53 endtime: 2037-09-13T04:48:05 renew till: unset
single_terminate: reason[NT_STATUS_END_OF_FILE]
Received cldap packet of length 218 from 192.168.2.9:1572
Received cldap packet of length 218 from 192.168.2.9:1572
Received cldap packet of length 218 from 192.168.2.9:1573
Received cldap packet of length 218 from 192.168.2.9:1573
Received cldap packet of length 218 from 192.168.2.9:1574
Received cldap packet of length 218 from 192.168.2.9:1574
Received cldap packet of length 218 from 192.168.2.9:1575
Received cldap packet of length 218 from 192.168.2.9:1575
Received cldap packet of length 218 from 192.168.2.9:1576
Received cldap packet of length 218 from 192.168.2.9:1576
Received cldap packet of length 218 from 192.168.2.9:1577
Received cldap packet of length 218 from 192.168.2.9:1577
Received cldap packet of length 218 from 192.168.2.9:1578
Received cldap packet of length 218 from 192.168.2.9:1578
Received cldap packet of length 218 from 192.168.2.9:1579
Received cldap packet of length 218 from 192.168.2.9:1579
Received cldap packet of length 218 from 192.168.2.9:1580
Received cldap packet of length 218 from 192.168.2.9:1580
Received cldap packet of length 218 from 192.168.2.9:1581
Received cldap packet of length 218 from 192.168.2.9:1581
Received cldap packet of length 218 from 192.168.2.9:1582
Received cldap packet of length 218 from 192.168.2.9:1582
Received cldap packet of length 218 from 192.168.2.9:1583
Received cldap packet of length 218 from 192.168.2.9:1583
Received cldap packet of length 218 from 192.168.2.9:1584
Received cldap packet of length 218 from 192.168.2.9:1584
Received cldap packet of length 218 from 192.168.2.9:1585
Received cldap packet of length 218 from 192.168.2.9:1585
Received cldap packet of length 218 from 192.168.2.9:1586
Received cldap packet of length 218 from 192.168.2.9:1586
Received cldap packet of length 218 from 192.168.2.9:1587
Received cldap packet of length 218 from 192.168.2.9:1587
Received cldap packet of length 218 from 192.168.2.9:1588
Received cldap packet of length 218 from 192.168.2.9:1588
Received cldap packet of length 218 from 192.168.2.9:1589
Received cldap packet of length 218 from 192.168.2.9:1589
Received cldap packet of length 218 from 192.168.2.9:1590
Received cldap packet of length 218 from 192.168.2.9:1590
Received cldap packet of length 218 from 192.168.2.9:1591
Received cldap packet of length 218 from 192.168.2.9:1591
Received cldap packet of length 218 from 192.168.2.9:1592
Received cldap packet of length 218 from 192.168.2.9:1592
Received cldap packet of length 218 from 192.168.2.9:1593
Received cldap packet of length 218 from 192.168.2.9:1593
Received cldap packet of length 218 from 192.168.2.9:1594
Received cldap packet of length 218 from 192.168.2.9:1594
Received cldap packet of length 218 from 192.168.2.9:1595
Received cldap packet of length 218 from 192.168.2.9:1595
Received cldap packet of length 218 from 192.168.2.9:1597
Received cldap packet of length 219 from 192.168.2.9:1598
Received cldap packet of length 218 from 192.168.2.9:1597
Received cldap packet of length 219 from 192.168.2.9:1598
Received cldap packet of length 218 from 192.168.2.9:1599
Received cldap packet of length 219 from 192.168.2.9:1600
Received cldap packet of length 218 from 192.168.2.9:1599
Received cldap packet of length 219 from 192.168.2.9:1600
Received cldap packet of length 218 from 192.168.2.9:1601
Received cldap packet of length 219 from 192.168.2.9:1602
Received cldap packet of length 218 from 192.168.2.9:1601
Received cldap packet of length 219 from 192.168.2.9:1602
Received cldap packet of length 218 from 192.168.2.9:1603
Received cldap packet of length 219 from 192.168.2.9:1604
Received cldap packet of length 218 from 192.168.2.9:1603
Received cldap packet of length 219 from 192.168.2.9:1604
Received cldap packet of length 218 from 192.168.2.9:1605
Received cldap packet of length 219 from 192.168.2.9:1606
Received cldap packet of length 218 from 192.168.2.9:1605
Received cldap packet of length 219 from 192.168.2.9:1606
Received cldap packet of length 218 from 192.168.2.9:1607
Received cldap packet of length 219 from 192.168.2.9:1608
Received cldap packet of length 218 from 192.168.2.9:1607
Received cldap packet of length 219 from 192.168.2.9:1608
Received cldap packet of length 218 from 192.168.2.9:1609
Received cldap packet of length 218 from 192.168.2.9:1609
Received cldap packet of length 219 from 192.168.2.9:1610
Received cldap packet of length 219 from 192.168.2.9:1610
Received cldap packet of length 218 from 192.168.2.9:1611
Received cldap packet of length 218 from 192.168.2.9:1611
Received cldap packet of length 219 from 192.168.2.9:1612
Received cldap packet of length 219 from 192.168.2.9:1612
Received cldap packet of length 262 from 192.168.2.9:1614
Received cldap packet of length 262 from 192.168.2.9:1624
dreplsrv_periodic_run(): schedule pull replication
dreplsrv_periodic_run(): run pending_ops
dreplsrv_periodic_schedule(300) scheduled for: Thu Nov 29 23:31:06 2007 CET
Received dgram packet of length 183 from 192.168.2.9:138
Browse MasterAnnouncement (Op 13) on 'VMWARE-SAMBA4<00>' '\MAILSLOT\BROWSE' from 192.168.2.9:138
Got NTLMSSP neg_flags=0xe208b297
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_NEGOTIATE_OEM
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_LM_KEY
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED
  NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
  NTLMSSP_NEGOTIATE_56
Got user=[] domain=[] workstation=[VMWARE-WIN2K2] len1=1 len2=0
auth_check_password_send:  Checking password for unmapped user []\[]@[VMWARE-WIN2K2]
auth_check_password_send:  mapped user is: [WALLNOEFER2]\[]@[VMWARE-WIN2K2]
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
192.168.2.9 closed connection to service IPC$
Got NTLMSSP neg_flags=0xe208b297
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_NEGOTIATE_OEM
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_LM_KEY
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED
  NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
  NTLMSSP_NEGOTIATE_56
Got user=[] domain=[] workstation=[VMWARE-WIN2K2] len1=1 len2=0
auth_check_password_send:  Checking password for unmapped user []\[]@[VMWARE-WIN2K2]
auth_check_password_send:  mapped user is: [WALLNOEFER2]\[]@[VMWARE-WIN2K2]
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
192.168.2.9 closed connection to service IPC$
Found account name from PAC: VMWARE-WIN2K2$ [VMWARE-WIN2K2$]
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
192.168.2.9 closed connection to service IPC$
Found account name from PAC: VMWARE-WIN2K2$ [VMWARE-WIN2K2$]
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
192.168.2.9 closed connection to service IPC$
Received dgram packet of length 201 from 192.168.2.9:138
Browse LocalMasterAnnouncement (Op 15) on 'WALLNOEFER2<1e>' '\MAILSLOT\BROWSE' from 192.168.2.9:138
Received dgram packet of length 201 from 192.168.2.9:138
Browse LocalMasterAnnouncement (Op 15) on 'WALLNOEFER2<1e>' '\MAILSLOT\BROWSE' from 192.168.2.9:138
dreplsrv_periodic_run(): schedule pull replication
dreplsrv_periodic_run(): run pending_ops
dreplsrv_periodic_schedule(300) scheduled for: Thu Nov 29 23:36:06 2007 CET
Received cldap packet of length 218 from 192.168.2.9:1629
Received cldap packet of length 219 from 192.168.2.9:1630
Received cldap packet of length 218 from 192.168.2.9:1629
Received cldap packet of length 219 from 192.168.2.9:1630
Received cldap packet of length 218 from 192.168.2.9:1631
Received cldap packet of length 219 from 192.168.2.9:1632
Received cldap packet of length 218 from 192.168.2.9:1631
Received cldap packet of length 219 from 192.168.2.9:1632
Received cldap packet of length 218 from 192.168.2.9:1633
Received cldap packet of length 219 from 192.168.2.9:1634
Received cldap packet of length 218 from 192.168.2.9:1633
Received cldap packet of length 219 from 192.168.2.9:1634
Received cldap packet of length 218 from 192.168.2.9:1635
Received cldap packet of length 219 from 192.168.2.9:1636
Received cldap packet of length 218 from 192.168.2.9:1635
Received cldap packet of length 219 from 192.168.2.9:1636
Received cldap packet of length 218 from 192.168.2.9:1637
Received cldap packet of length 219 from 192.168.2.9:1638
Received cldap packet of length 218 from 192.168.2.9:1637
Received cldap packet of length 219 from 192.168.2.9:1638
Received cldap packet of length 218 from 192.168.2.9:1639
Received cldap packet of length 219 from 192.168.2.9:1640
Received cldap packet of length 218 from 192.168.2.9:1639
Received cldap packet of length 219 from 192.168.2.9:1640
Received cldap packet of length 218 from 192.168.2.9:1641
Received cldap packet of length 219 from 192.168.2.9:1642
Received cldap packet of length 218 from 192.168.2.9:1641
Received cldap packet of length 219 from 192.168.2.9:1642
Received cldap packet of length 218 from 192.168.2.9:1643
Received cldap packet of length 219 from 192.168.2.9:1644
Received cldap packet of length 218 from 192.168.2.9:1643
Received cldap packet of length 219 from 192.168.2.9:1644
Received dgram packet of length 214 from 192.168.2.9:138
Browse DomainAnnouncement (Op 12) on '%01%02__MSBROWSE__%02<01>' '\MAILSLOT\BROWSE' from 192.168.2.9:138
Received dgram packet of length 214 from 192.168.2.9:138
Browse DomainAnnouncement (Op 12) on '%01%02__MSBROWSE__%02<01>' '\MAILSLOT\BROWSE' from 192.168.2.9:138
Received dgram packet of length 201 from 192.168.2.1:138
Browse HostAnnouncement (Op 1) on 'WORKGROUP<1d>' '\MAILSLOT\BROWSE' from 192.168.2.1:138
Received dgram packet of length 201 from 192.168.2.1:138
Browse HostAnnouncement (Op 1) on 'WORKGROUP<1d>' '\MAILSLOT\BROWSE' from 192.168.2.1:138
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
auth_check_password_send:  Checking password for unmapped user []\[]@[(null)]
auth_check_password_send:  mapped user is: []\[]@[(null)]
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
single_terminate: reason[NT_STATUS_END_OF_FILE]
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
auth_check_password_send:  Checking password for unmapped user []\[]@[(null)]
auth_check_password_send:  mapped user is: []\[]@[(null)]
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
using SPNEGO
Selected protocol [5][NT LM 0.12]
Found account name from PAC: VMWARE-WIN2K2$ [VMWARE-WIN2K2$]
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
192.168.2.9 closed connection to service IPC$
single_terminate: reason[NT_STATUS_END_OF_FILE]
dreplsrv_periodic_run(): schedule pull replication
dreplsrv_periodic_run(): run pending_ops
dreplsrv_periodic_schedule(300) scheduled for: Thu Nov 29 23:41:06 2007 CET
single_terminate: reason[NT_STATUS_END_OF_FILE]
Received dgram packet of length 183 from 192.168.2.9:138
Browse MasterAnnouncement (Op 13) on 'VMWARE-SAMBA4<00>' '\MAILSLOT\BROWSE' from 192.168.2.9:138
Got NTLMSSP neg_flags=0xe208b297
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_NEGOTIATE_OEM
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_LM_KEY
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED
  NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
  NTLMSSP_NEGOTIATE_56
Got user=[] domain=[] workstation=[VMWARE-WIN2K2] len1=1 len2=0
auth_check_password_send:  Checking password for unmapped user []\[]@[VMWARE-WIN2K2]
auth_check_password_send:  mapped user is: [WALLNOEFER2]\[]@[VMWARE-WIN2K2]
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
192.168.2.9 closed connection to service IPC$
Got NTLMSSP neg_flags=0xe208b297
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_NEGOTIATE_OEM
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_LM_KEY
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED
  NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
  NTLMSSP_NEGOTIATE_56
Got user=[] domain=[] workstation=[VMWARE-WIN2K2] len1=1 len2=0
auth_check_password_send:  Checking password for unmapped user []\[]@[VMWARE-WIN2K2]
auth_check_password_send:  mapped user is: [WALLNOEFER2]\[]@[VMWARE-WIN2K2]
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
192.168.2.9 closed connection to service IPC$
Found account name from PAC: VMWARE-WIN2K2$ [VMWARE-WIN2K2$]
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
192.168.2.9 closed connection to service IPC$
Found account name from PAC: VMWARE-WIN2K2$ [VMWARE-WIN2K2$]
ldb: naming_fsmo_init: we are master: yes
ldb: pdc_fsmo_init: we are master: yes
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]'
dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:'
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:'
192.168.2.9 closed connection to service IPC$
Received dgram packet of length 201 from 192.168.2.9:138
Browse LocalMasterAnnouncement (Op 15) on 'WALLNOEFER2<1e>' '\MAILSLOT\BROWSE' from 192.168.2.9:138
Received dgram packet of length 201 from 192.168.2.9:138
Browse LocalMasterAnnouncement (Op 15) on 'WALLNOEFER2<1e>' '\MAILSLOT\BROWSE' from 192.168.2.9:138
dreplsrv_periodic_run(): schedule pull replication
dreplsrv_periodic_run(): run pending_ops
dreplsrv_periodic_schedule(300) scheduled for: Thu Nov 29 23:46:06 2007 CET
Received cldap packet of length 262 from 192.168.2.9:1700
Received dgram packet of length 201 from 192.168.2.1:138
Browse HostAnnouncement (Op 1) on 'WORKGROUP<1d>' '\MAILSLOT\BROWSE' from 192.168.2.1:138
Received dgram packet of length 201 from 192.168.2.1:138
Browse HostAnnouncement (Op 1) on 'WORKGROUP<1d>' '\MAILSLOT\BROWSE' from 192.168.2.1:138