lp_load: refreshing parameters from /usr/local/samba/etc/smb.conf params.c:pm_process() - Processing configuration file "/usr/local/samba/etc/smb.conf" Processing section "[globals]" Processing section "[netlogon]" Processing section "[sysvol]" Processing section "[pub]" pm_process() returned Yes adding hidden service IPC$ adding hidden service ADMIN$ smbd version 4.0.0alpha2 started. Copyright Andrew Tridgell and the Samba Team 1992-2007 SHARE backend [ldb] registered. SHARE backend [classic] registered. AUTH backend 'winbind_samba3' registered AUTH backend 'winbind' registered AUTH backend 'name_to_ntstatus' registered AUTH backend 'fixed_challenge' registered AUTH backend 'unix' registered AUTH backend 'anonymous' registered AUTH backend 'sam' registered AUTH backend 'sam_ignoredomain' registered GENSEC backend 'krb5' registered gensec subsystem fake_gssapi_krb5 is disabled GENSEC backend 'schannel' registered GENSEC backend 'spnego' registered gensec subsystem gssapi_spnego is disabled GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'ntlmssp' registered NTPTR backend 'simple_ldb' NTVFS backend 'simple' for type 0 registered NTVFS backend 'cifs' for type 0 registered NTVFS backend 'nbench' for type 0 registered NTVFS backend 'unixuid' for type 0 registered NTVFS backend 'unixuid' for type 1 registered NTVFS backend 'unixuid' for type 2 registered NTVFS backend 'cifsposix' for type 0 registered NTVFS backend 'default' for type 2 registered NTVFS backend 'xattr' registered NTVFS backend 'nfs4acl' registered NTVFS backend 'default' for type 1 registered NTVFS backend 'default' for type 0 registered NTVFS backend 'posix' for type 0 registered PROCESS_MODEL 'standard' registered PROCESS_MODEL 'single' registered DCERPC endpoint server 'wkssvc' registered DCERPC endpoint server 'drsuapi' registered DCERPC endpoint server 'spoolss' registered DCERPC endpoint server 'winreg' registered DCERPC endpoint server 'epmapper' registered DCERPC endpoint server 'srvsvc' registered DCERPC endpoint server 'netlogon' registered DCERPC endpoint server 'rpcecho' registered DCERPC endpoint server 'unixinfo' registered DCERPC endpoint server 'samr' registered DCERPC endpoint server 'remote' registered DCERPC endpoint server 'dssetup' registered DCERPC endpoint server 'lsarpc' registered smbd: using 'standard' process model ldb: trying to load partition from /usr/local/samba/modules/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/modules/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/modules/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/modules/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/modules/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/modules/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/modules/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/modules/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/modules/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/modules/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/modules/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/modules/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/modules/ldb/schema_fsmo.so dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:' added interface ip=192.168.0.130 nmask=255.255.255.0 ldb: trying to load partition from /usr/local/samba/modules/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/modules/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/modules/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/modules/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/modules/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/modules/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/modules/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/modules/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/modules/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/modules/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/modules/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/modules/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/modules/ldb/schema_fsmo.so added interface ip=192.168.0.130 nmask=255.255.255.0 ldb: trying to load partition from /usr/local/samba/modules/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/modules/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/modules/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/modules/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/modules/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/modules/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/modules/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/modules/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/modules/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/modules/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/modules/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/modules/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/modules/ldb/schema_fsmo.so Attempting to autogenerate TLS self-signed keys for https Generating private key added interface ip=192.168.0.130 nmask=255.255.255.0 ldb: trying to load partition from /usr/local/samba/modules/ldb/partition.so ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/modules/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/modules/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/modules/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes Attempting to autogenerate TLS self-signed keys for https Generating private key ldb: trying to load partition from /usr/local/samba/modules/ldb/partition.so ldb: trying to load show_deleted from /usr/local/samba/modules/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/modules/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/modules/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/modules/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/modules/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/modules/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/modules/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/modules/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/modules/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/modules/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/modules/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/modules/ldb/schema_fsmo.so ldb: trying to load show_deleted from /usr/local/samba/modules/ldb/show_deleted.so ldb: trying to load linked_attributes from /usr/local/samba/modules/ldb/linked_attributes.so ldb: trying to load subtree_delete from /usr/local/samba/modules/ldb/subtree_delete.so ldb: trying to load subtree_rename from /usr/local/samba/modules/ldb/subtree_rename.so ldb: trying to load kludge_acl from /usr/local/samba/modules/ldb/kludge_acl.so ldb: trying to load objectclass from /usr/local/samba/modules/ldb/objectclass.so ldb: trying to load samldb from /usr/local/samba/modules/ldb/samldb.so ldb: trying to load extended_dn from /usr/local/samba/modules/ldb/extended_dn.so ldb: trying to load ranged_results from /usr/local/samba/modules/ldb/ranged_results.so ldb: trying to load rootdse from /usr/local/samba/modules/ldb/rootdse.so ldb: trying to load objectguid from /usr/local/samba/modules/ldb/objectguid.so ldb: trying to load schema_fsmo from /usr/local/samba/modules/ldb/schema_fsmo.so ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/modules/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/modules/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/modules/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/modules/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/modules/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/modules/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/modules/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/modules/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/modules/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes ldb: schema_fsmo_init: we are master: yes ldb: trying to load naming_fsmo from /usr/local/samba/modules/ldb/naming_fsmo.so ldb: naming_fsmo_init: we are master: yes ldb: trying to load password_hash from /usr/local/samba/modules/ldb/password_hash.so ldb: trying to load pdc_fsmo from /usr/local/samba/modules/ldb/pdc_fsmo.so ldb: pdc_fsmo_init: we are master: yes dreplsrv_partition[CN=Schema,CN=Configuration,DC=test,DC=org] loaded dreplsrv_partition[CN=Configuration,DC=test,DC=org] loaded dreplsrv_partition[DC=test,DC=org] loaded dreplsrv_refresh_partition(DC=test,DC=org) dreplsrv_refresh_partition(CN=Configuration,DC=test,DC=org) dreplsrv_refresh_partition(CN=Schema,CN=Configuration,DC=test,DC=org) dreplsrv_periodic_schedule(15) scheduled for: Sun Jan 13 16:19:27 2008 MSK Registered GENTOOLINUX<00> with 192.168.0.130 on interface 192.168.0.255 Registered GENTOOLINUX<03> with 192.168.0.130 on interface 192.168.0.255 Registered GENTOOLINUX<20> with 192.168.0.130 on interface 192.168.0.255 Registered TEST<1b> with 192.168.0.130 on interface 192.168.0.255 Registered TEST<1c> with 192.168.0.130 on interface 192.168.0.255 Registered TEST<00> with 192.168.0.130 on interface 192.168.0.255 Received cldap packet of length 122 from 192.168.0.131:1065 cldap netlogon query domain=test.org host=WINXP-P4 user=(null) version=6 guid=(null) dreplsrv_periodic_run(): schedule pull replication dreplsrv_periodic_run(): run pending_ops dreplsrv_periodic_schedule(300) scheduled for: Sun Jan 13 16:24:27 2008 MSK Received cldap packet of length 122 from 192.168.0.131:1067 cldap netlogon query domain=test.org host=WINXP-P4 user=(null) version=6 guid=(null) Received cldap packet of length 162 from 192.168.0.131:1068 cldap netlogon query domain=test.org host=WINXP-P4 user=WINXP-P4$ version=6 guid=(null) Received cldap packet of length 162 from 192.168.0.131:1069 cldap netlogon query domain=test.org host=WINXP-P4 user=WINXP-P4$ version=6 guid=(null) smbsrv_accept Shutdown SMB signing switch message SMBnegprot (task_id 20457) Requested protocol [0][PC NETWORK PROGRAM 1.0] Requested protocol [1][LANMAN1.0] Requested protocol [2][Windows for Workgroups 3.1a] Requested protocol [3][LM1.2X002] Requested protocol [4][LANMAN2.1] Requested protocol [5][NT LM 0.12] Starting GENSEC mechanism spnego Starting GENSEC submechanism gssapi_krb5 using SPNEGO Selected protocol [5][NT LM 0.12] Kerberos: AS-REQ administrator@test.org from 192.168.0.131 for krbtgt/test.org@test.org LDB_lookup_spn_alias: no alias for service krbtgt applicable authsam_account_ok: Checking SMB password for user administrator@TEST.ORG logon_hours_ok: No hours restrictions for user administrator@TEST.ORG Kerberos: Client sent patypes: encrypted-timestamp, 128 Kerberos: Looking for PKINIT pa-data -- administrator@test.org Kerberos: Looking for ENC-TS pa-data -- administrator@test.org Kerberos: ENC-TS Pre-authentication succeeded -- administrator@test.org using arcfour-hmac-md5 Kerberos: Client supported enctypes: arcfour-hmac-md5, -133, -128, des-cbc-md5, des-cbc-crc, 24, -135 Kerberos: Using arcfour-hmac-md5/arcfour-hmac-md5 Kerberos: Requested flags: renewable_ok, canonicalize, renewable, forwardable Kerberos: AS-REQ authtime: 2008-01-13T16:19:31 starttime: unset endtime: 2037-09-13T06:48:05 renew till: 2037-09-13T06:48:05 Kerberos: AS-REQ administrator@test.org from 192.168.0.131 for krbtgt/test.org@test.org LDB_lookup_spn_alias: no alias for service krbtgt applicable authsam_account_ok: Checking SMB password for user administrator@TEST.ORG logon_hours_ok: No hours restrictions for user administrator@TEST.ORG Kerberos: Client sent patypes: encrypted-timestamp, 128 Kerberos: Looking for PKINIT pa-data -- administrator@test.org Kerberos: Looking for ENC-TS pa-data -- administrator@test.org Kerberos: ENC-TS Pre-authentication succeeded -- administrator@test.org using arcfour-hmac-md5 Kerberos: Client supported enctypes: arcfour-hmac-md5, -133, -128, des-cbc-md5, des-cbc-crc, 24, -135 Kerberos: Using arcfour-hmac-md5/arcfour-hmac-md5 Kerberos: Requested flags: renewable_ok, canonicalize, renewable, forwardable Kerberos: AS-REQ authtime: 2008-01-13T16:19:31 starttime: unset endtime: 2037-09-13T06:48:05 renew till: 2037-09-13T06:48:05 single_terminate: reason[NT_STATUS_END_OF_FILE] Kerberos: TGS-REQ administrator@TEST.ORG from 192.168.0.131 for cifs/gentoolinux.test.org@TEST.ORG [renewable, forwardable] Kerberos: TGS-REQ authtime: 2008-01-13T16:19:31 starttime: 2008-01-13T16:19:31 endtime: 2037-09-13T06:48:05 renew till: unset Kerberos: TGS-REQ administrator@TEST.ORG from 192.168.0.131 for krbtgt/TEST.ORG@TEST.ORG [renewable_ok, canonicalize, renewable, forwarded, forwardable] LDB_lookup_spn_alias: no alias for service krbtgt applicable Kerberos: TGS-REQ authtime: 2008-01-13T16:19:31 starttime: 2008-01-13T16:19:31 endtime: 2037-09-13T06:48:05 renew till: unset switch message SMBsesssetupX (task_id 20457) Starting GENSEC mechanism spnego Starting GENSEC submechanism gssapi_krb5 gensec_gssapi: credentials were delegated GSSAPI Connection will be cryptographicly signed Found account name from PAC: Administrator [] ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes SMB signing enabled! check_signed_incoming_message: BAD SIG (seq: 0): wanted SMB signature of [0000] B9 1E 87 AB 24 22 04 B5 ....$".. check_signed_incoming_message: BAD SIG (seq: 0): got SMB signature of [0000] 42 53 52 53 50 59 4C 20 BSRSPYL signing_good: signing negotiated but not required and peer isn't sending correct signatures. Turning off. Shutdown SMB signing Client did not send a valid signature on SPNEGO session setup - ignored, expect good next time SMB signing enabled! sign_outgoing_message: SENT SIG (seq: 1): sent SMB signature of [0000] 85 47 2E 47 E3 7D 06 04 .G.G.}.. [0000] 06 C8 7D 40 57 EB 98 FE ..}@W... Seen valid packet, so turning signing on Seen valid packet, so marking signing as 'seen valid' switch message SMBtconX (task_id 20457) dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:' sign_outgoing_message: SENT SIG (seq: 3): sent SMB signature of [0000] 54 94 00 E4 D7 D7 69 46 T.....iF [0000] 02 73 9F EA D3 74 B0 5D .s...t.] switch message SMBntcreateX (task_id 20457) sign_outgoing_message: SENT SIG (seq: 5): sent SMB signature of [0000] 05 59 92 A1 EC 43 42 BD .Y...CB. [0000] 34 B4 23 3B 4E 0D 3E A9 4.#;N.>. switch message SMBwriteX (task_id 20457) sign_outgoing_message: SENT SIG (seq: 7): sent SMB signature of [0000] 23 A9 0E 8A A4 69 38 D2 #....i8. [0000] FF 8B DD 96 07 6C 2C 5B .....l,[ switch message SMBreadX (task_id 20457) sign_outgoing_message: SENT SIG (seq: 9): sent SMB signature of [0000] 66 F7 C4 DD D5 E6 2D 8E f.....-. [0000] 8B EE F9 3C C8 66 51 75 ...<.fQu switch message SMBtrans (task_id 20457) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 11): sent SMB signature of [0000] 22 33 36 E7 F6 48 76 3D "36..Hv= [0000] F9 1F 3C FF 00 3E 25 9C ..<..>%. switch message SMBtrans (task_id 20457) sign_outgoing_message: SENT SIG (seq: 13): sent SMB signature of [0000] 57 82 9C 38 23 F8 29 33 W..8#.)3 [0000] 4A B6 3E 0A C9 7F EA 45 J.>....E switch message SMBtrans (task_id 20457) sign_outgoing_message: SENT SIG (seq: 15): sent SMB signature of [0000] 9F 3D 15 D7 47 5B DD 09 .=..G[.. [0000] 5D 9D F4 E5 7E E4 C5 8D ]...~... switch message SMBntcreateX (task_id 20457) sign_outgoing_message: SENT SIG (seq: 17): sent SMB signature of [0000] AF B0 6E B4 7B 83 FF 9A ..n.{... [0000] E7 11 C4 09 82 18 22 9F ......". switch message SMBwriteX (task_id 20457) sign_outgoing_message: SENT SIG (seq: 19): sent SMB signature of [0000] 58 AB 8E 38 D3 A6 71 52 X..8..qR [0000] B7 8D 4C D6 80 DD BB D1 ..L..... switch message SMBreadX (task_id 20457) sign_outgoing_message: SENT SIG (seq: 21): sent SMB signature of [0000] 03 0B 5A 08 C3 CE 93 15 ..Z..... [0000] 05 C5 35 2E 1A C5 8A F4 ..5..... switch message SMBtrans (task_id 20457) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 23): sent SMB signature of [0000] 3C 7D C1 ED B3 DB B0 06 <}...... [0000] 60 92 96 EE 1F D1 D7 9C `....... switch message SMBtrans (task_id 20457) sign_outgoing_message: SENT SIG (seq: 25): sent SMB signature of [0000] 52 21 3A AA 7D 12 A3 B2 R!:.}... [0000] 4D 11 75 B7 5C C6 D7 02 M.u.\... switch message SMBtrans (task_id 20457) sign_outgoing_message: SENT SIG (seq: 27): sent SMB signature of [0000] F7 82 9E 9F ED F9 27 3D ......'= [0000] 03 16 17 5D FE 33 0A DE ...].3.. switch message SMBtrans (task_id 20457) sign_outgoing_message: SENT SIG (seq: 29): sent SMB signature of [0000] E0 4E D1 D6 0C A4 B4 34 .N.....4 [0000] AC 22 D3 AD 51 B5 FA AC ."..Q... switch message SMBtrans (task_id 20457) sign_outgoing_message: SENT SIG (seq: 31): sent SMB signature of [0000] 67 AD D8 EA BD A7 2E 78 g......x [0000] 3F 9E 9B DA 10 D6 C0 D6 ?....... switch message SMBtrans (task_id 20457) ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record sign_outgoing_message: SENT SIG (seq: 33): sent SMB signature of [0000] 69 C2 E6 8C 11 30 9E B8 i....0.. [0000] 57 C7 64 94 C8 33 F3 74 W.d..3.t switch message SMBtrans (task_id 20457) ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record sign_outgoing_message: SENT SIG (seq: 35): sent SMB signature of [0000] 4E 62 66 C3 C0 BD 9F 95 Nbf..... [0000] BD 12 5E 63 D8 14 8C 7D ..^c...} switch message SMBtrans (task_id 20457) ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record sign_outgoing_message: SENT SIG (seq: 37): sent SMB signature of [0000] 51 11 14 5C 9D 40 D6 14 Q..\.@.. [0000] 3F 0D 2B 20 14 B5 1C A9 ?.+ .... switch message SMBtrans (task_id 20457) sign_outgoing_message: SENT SIG (seq: 39): sent SMB signature of [0000] BF 12 6C A8 2A ED 3D F0 ..l.*.=. [0000] A1 0C 2D 59 38 B2 B3 5A ..-Y8..Z switch message SMBtrans (task_id 20457) ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record sign_outgoing_message: SENT SIG (seq: 41): sent SMB signature of [0000] B8 F7 66 0A 9C 63 1C 59 ..f..c.Y [0000] CB 6F E9 AE 8F 64 9E 44 .o...d.D switch message SMBtrans (task_id 20457) sign_outgoing_message: SENT SIG (seq: 43): sent SMB signature of [0000] 05 78 2E C3 AC FC 61 65 .x....ae [0000] F8 66 96 28 A2 C8 19 BA .f.(.... switch message SMBtrans (task_id 20457) sign_outgoing_message: SENT SIG (seq: 45): sent SMB signature of [0000] EF E6 B8 A8 B8 CA 04 6D .......m [0000] 16 36 44 7D EB 36 F8 BF .6D}.6.. switch message SMBtrans (task_id 20457) sign_outgoing_message: SENT SIG (seq: 47): sent SMB signature of [0000] 9D 5A BC 31 06 94 24 FF .Z.1..$. [0000] B5 0F B5 88 50 9D 4C C5 ....P.L. switch message SMBclose (task_id 20457) sign_outgoing_message: SENT SIG (seq: 49): sent SMB signature of [0000] 7F 65 9F D5 EC 33 79 4D .e...3yM [0000] 22 83 13 F4 F5 1B 1B 10 "....... switch message SMBtrans (task_id 20457) sign_outgoing_message: SENT SIG (seq: 51): sent SMB signature of [0000] 0B 6E 6F BB E2 8F 31 3E .no...1> [0000] 2E 5A A0 EB 45 73 0B 10 .Z..Es.. switch message SMBclose (task_id 20457) sign_outgoing_message: SENT SIG (seq: 53): sent SMB signature of [0000] E6 7F 7D B2 F5 F1 D0 A9 ..}..... [0000] 80 92 32 12 D5 3B C9 ED ..2..;.. switch message SMBulogoffX (task_id 20457) sign_outgoing_message: SENT SIG (seq: 55): sent SMB signature of [0000] 78 99 47 AF 37 16 E9 25 x.G.7..% [0000] 78 38 9F BD 5A 82 D3 DC x8..Z... switch message SMBtdis (task_id 20457) 192.168.0.131 closed connection to service IPC$ sign_outgoing_message: SENT SIG (seq: 57): sent SMB signature of [0000] 2F 88 82 CD E0 DC 5F 47 /....._G standard_terminate: reason[NT_STATUS_END_OF_FILE] Received cldap packet of length 122 from 192.168.0.131:1078 cldap netlogon query domain=test.org host=WINXP-P4 user=(null) version=6 guid=(null) Received cldap packet of length 162 from 192.168.0.131:1079 cldap netlogon query domain=test.org host=WINXP-P4 user=WINXP-P4$ version=6 guid=(null) Received cldap packet of length 162 from 192.168.0.131:1080 cldap netlogon query domain=test.org host=WINXP-P4 user=WINXP-P4$ version=6 guid=(null) smbsrv_accept Shutdown SMB signing switch message SMBnegprot (task_id 20458) Requested protocol [0][PC NETWORK PROGRAM 1.0] Requested protocol [1][LANMAN1.0] Requested protocol [2][Windows for Workgroups 3.1a] Requested protocol [3][LM1.2X002] Requested protocol [4][LANMAN2.1] Requested protocol [5][NT LM 0.12] Starting GENSEC mechanism spnego Starting GENSEC submechanism gssapi_krb5 using SPNEGO Selected protocol [5][NT LM 0.12] Kerberos: AS-REQ administrator@test.org from 192.168.0.131 for krbtgt/test.org@test.org LDB_lookup_spn_alias: no alias for service krbtgt applicable authsam_account_ok: Checking SMB password for user administrator@TEST.ORG logon_hours_ok: No hours restrictions for user administrator@TEST.ORG Kerberos: Client sent patypes: encrypted-timestamp, 128 Kerberos: Looking for PKINIT pa-data -- administrator@test.org Kerberos: Looking for ENC-TS pa-data -- administrator@test.org Kerberos: ENC-TS Pre-authentication succeeded -- administrator@test.org using arcfour-hmac-md5 Kerberos: Client supported enctypes: arcfour-hmac-md5, -133, -128, des-cbc-md5, des-cbc-crc, 24, -135 Kerberos: Using arcfour-hmac-md5/arcfour-hmac-md5 Kerberos: Requested flags: renewable_ok, canonicalize, renewable, forwardable Kerberos: AS-REQ authtime: 2008-01-13T16:19:36 starttime: unset endtime: 2037-09-13T06:48:05 renew till: 2037-09-13T06:48:05 Kerberos: AS-REQ administrator@test.org from 192.168.0.131 for krbtgt/test.org@test.org LDB_lookup_spn_alias: no alias for service krbtgt applicable authsam_account_ok: Checking SMB password for user administrator@TEST.ORG logon_hours_ok: No hours restrictions for user administrator@TEST.ORG Kerberos: Client sent patypes: encrypted-timestamp, 128 Kerberos: Looking for PKINIT pa-data -- administrator@test.org Kerberos: Looking for ENC-TS pa-data -- administrator@test.org Kerberos: ENC-TS Pre-authentication succeeded -- administrator@test.org using arcfour-hmac-md5 Kerberos: Client supported enctypes: arcfour-hmac-md5, -133, -128, des-cbc-md5, des-cbc-crc, 24, -135 Kerberos: Using arcfour-hmac-md5/arcfour-hmac-md5 Kerberos: Requested flags: renewable_ok, canonicalize, renewable, forwardable Kerberos: AS-REQ authtime: 2008-01-13T16:19:36 starttime: unset endtime: 2037-09-13T06:48:05 renew till: 2037-09-13T06:48:05 single_terminate: reason[NT_STATUS_END_OF_FILE] Kerberos: TGS-REQ administrator@TEST.ORG from 192.168.0.131 for cifs/gentoolinux.test.org@TEST.ORG [renewable, forwardable] Kerberos: TGS-REQ authtime: 2008-01-13T16:19:36 starttime: 2008-01-13T16:19:36 endtime: 2037-09-13T06:48:05 renew till: unset Kerberos: TGS-REQ administrator@TEST.ORG from 192.168.0.131 for krbtgt/TEST.ORG@TEST.ORG [renewable_ok, canonicalize, renewable, forwarded, forwardable] LDB_lookup_spn_alias: no alias for service krbtgt applicable Kerberos: TGS-REQ authtime: 2008-01-13T16:19:36 starttime: 2008-01-13T16:19:36 endtime: 2037-09-13T06:48:05 renew till: unset switch message SMBsesssetupX (task_id 20458) Starting GENSEC mechanism spnego Starting GENSEC submechanism gssapi_krb5 gensec_gssapi: credentials were delegated GSSAPI Connection will be cryptographicly signed Found account name from PAC: Administrator [] ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes SMB signing enabled! check_signed_incoming_message: BAD SIG (seq: 0): wanted SMB signature of [0000] 52 6D C9 C1 CE 80 4A FD Rm....J. check_signed_incoming_message: BAD SIG (seq: 0): got SMB signature of [0000] 42 53 52 53 50 59 4C 20 BSRSPYL signing_good: signing negotiated but not required and peer isn't sending correct signatures. Turning off. Shutdown SMB signing Client did not send a valid signature on SPNEGO session setup - ignored, expect good next time SMB signing enabled! sign_outgoing_message: SENT SIG (seq: 1): sent SMB signature of [0000] F7 D2 E4 22 03 E1 74 D5 ..."..t. [0000] 26 F9 8A FC 5E 9E 55 CE &...^.U. Seen valid packet, so turning signing on Seen valid packet, so marking signing as 'seen valid' switch message SMBtconX (task_id 20458) dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_np:[\pipe\epmapper]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncacn_ip_tcp:[135]' dcesrv_interface_register: interface 'epmapper' registered on endpoint 'ncalrpc:[EPMAPPER]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_np:[\pipe\srvsvc]' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'srvsvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_np:[\pipe\wkssvc]' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'wkssvc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_np:[\pipe\rpcecho]' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'rpcecho' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_np:[\pipe\samr]' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'samr' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'netlogon' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\netlogon]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'lsarpc' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'spoolss' registered on endpoint 'ncacn_np:[\pipe\spoolss]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_np:[\pipe\protected_storage]' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'drsuapi' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_np:[\pipe\winreg]' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'winreg' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsarpc]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_np:[\pipe\lsass]' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'dssetup' registered on endpoint 'ncalrpc:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_np:[\pipe\unixinfo]' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncacn_ip_tcp:' dcesrv_interface_register: interface 'unixinfo' registered on endpoint 'ncalrpc:' sign_outgoing_message: SENT SIG (seq: 3): sent SMB signature of [0000] 28 A6 1D 16 44 F4 D7 01 (...D... [0000] B1 25 DC 45 F6 A1 16 48 .%.E...H switch message SMBntcreateX (task_id 20458) sign_outgoing_message: SENT SIG (seq: 5): sent SMB signature of [0000] FB 04 24 1A 3D 74 69 11 ..$.=ti. [0000] 3C F4 F6 19 2E CB 45 5A <.....EZ switch message SMBwriteX (task_id 20458) sign_outgoing_message: SENT SIG (seq: 7): sent SMB signature of [0000] 2E F5 F9 E8 84 9D 5A A7 ......Z. [0000] 60 FA B8 03 E4 C5 88 B8 `....... switch message SMBreadX (task_id 20458) sign_outgoing_message: SENT SIG (seq: 9): sent SMB signature of [0000] AE 68 EA F3 D3 A5 4F 67 .h....Og [0000] A2 E0 42 F1 EE 1E 9E 17 ..B..... switch message SMBtrans (task_id 20458) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 11): sent SMB signature of [0000] B5 5A 60 8F F0 AE 48 09 .Z`...H. [0000] 33 6B D2 98 0E BA B4 09 3k...... switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 13): sent SMB signature of [0000] DF C5 6D F6 9B 23 F6 13 ..m..#.. [0000] 14 7C 40 5C 44 A1 24 7E .|@\D.$~ switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 15): sent SMB signature of [0000] CF BB 3D 2A E2 F8 59 51 ..=*..YQ [0000] 04 CD DC 46 57 51 6D A2 ...FWQm. switch message SMBntcreateX (task_id 20458) sign_outgoing_message: SENT SIG (seq: 17): sent SMB signature of [0000] 4F 75 B3 F9 DC 3E 5B 20 Ou...>[ [0000] FB D3 FA DD 34 EC F6 99 ....4... switch message SMBwriteX (task_id 20458) sign_outgoing_message: SENT SIG (seq: 19): sent SMB signature of [0000] EE 2A E5 47 8E C4 F6 B1 .*.G.... [0000] 21 9D 62 1D 14 5F AE DA !.b.._.. switch message SMBreadX (task_id 20458) sign_outgoing_message: SENT SIG (seq: 21): sent SMB signature of [0000] 02 4D D3 39 18 C9 AA B3 .M.9.... [0000] E9 C9 9A 44 4F 64 23 88 ...DOd#. switch message SMBtrans (task_id 20458) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 23): sent SMB signature of [0000] 3D 87 A4 AF A5 61 2D 09 =....a-. [0000] EC 9B BA 8D 08 26 CD DE .....&.. switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 25): sent SMB signature of [0000] C7 42 F2 0B 36 8A 8C 9E .B..6... [0000] 60 D2 0A 18 97 C1 77 00 `.....w. switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 27): sent SMB signature of [0000] AD 99 3E 85 96 FE 7C 99 ..>...|. [0000] 4A 37 CE CC A9 15 32 85 J7....2. switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 29): sent SMB signature of [0000] D2 F3 D5 71 52 1B CA 87 ...qR... [0000] F4 42 D5 1C A2 A1 F5 75 .B.....u switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 31): sent SMB signature of [0000] 3A 21 13 59 20 89 32 43 :!.Y .2C [0000] B3 C0 37 2E 26 95 40 C6 ..7.&.@. switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 33): sent SMB signature of [0000] A2 7A 5C F8 52 FE 65 31 .z\.R.e1 [0000] 44 CB 42 7A 8B 2A 20 06 D.Bz.* . switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 35): sent SMB signature of [0000] D4 E5 19 64 BA B8 FF CC ...d.... [0000] B2 44 EE F2 56 E6 30 43 .D..V.0C switch message SMBclose (task_id 20458) sign_outgoing_message: SENT SIG (seq: 37): sent SMB signature of [0000] 29 D9 12 7E 37 39 C7 DD )..~79.. [0000] 2E C3 34 70 4F 44 97 8F ..4pOD.. switch message SMBntcreateX (task_id 20458) sign_outgoing_message: SENT SIG (seq: 39): sent SMB signature of [0000] 88 7E AA A2 B9 A2 89 66 .~.....f [0000] 86 3B FA BD E6 CE 1B A6 .;...... switch message SMBwriteX (task_id 20458) sign_outgoing_message: SENT SIG (seq: 41): sent SMB signature of [0000] 0C D0 FD 1E DB C0 AF 45 .......E [0000] CF 42 78 2A 16 95 DA 2B .Bx*...+ switch message SMBreadX (task_id 20458) sign_outgoing_message: SENT SIG (seq: 43): sent SMB signature of [0000] ED 19 DE 1E 86 3D EF 45 .....=.E [0000] 58 F6 04 D6 AF A9 22 B5 X.....". switch message SMBtrans (task_id 20458) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 45): sent SMB signature of [0000] FC 86 C5 36 20 C4 A5 CF ...6 ... [0000] 3D E2 08 24 E1 7C 1A 23 =..$.|.# switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 47): sent SMB signature of [0000] F1 D9 75 20 56 DC 7B 23 ..u V.{# [0000] 12 18 56 A8 9F 4E 65 34 ..V..Ne4 switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 49): sent SMB signature of [0000] 20 9C 36 1C C4 4F 28 EF .6..O(. [0000] D1 44 E9 6B 8C D4 02 B6 .D.k.... switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 51): sent SMB signature of [0000] 83 7C 59 85 11 28 69 F0 .|Y..(i. [0000] B1 AA A5 80 87 54 8D D3 .....T.. switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 53): sent SMB signature of [0000] 17 77 0C 5C F1 30 9D D9 .w.\.0.. [0000] 1B BD 5C FF 28 C3 4B 86 ..\.(.K. switch message SMBtrans (task_id 20458) ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record sign_outgoing_message: SENT SIG (seq: 55): sent SMB signature of [0000] E4 98 CB 68 B6 D3 C5 5B ...h...[ [0000] 4D D1 E1 46 86 FB 19 5E M..F...^ switch message SMBtrans (task_id 20458) ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record sign_outgoing_message: SENT SIG (seq: 57): sent SMB signature of [0000] 2E D9 30 4D 15 C6 4D 7A ..0M..Mz [0000] B8 75 80 AB A4 B1 9F B9 .u...... switch message SMBtrans (task_id 20458) ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record sign_outgoing_message: SENT SIG (seq: 59): sent SMB signature of [0000] 96 C2 48 38 C1 19 F9 81 ..H8.... [0000] CA A4 F6 1B C1 70 A5 FD .....p.. switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 61): sent SMB signature of [0000] E6 B9 62 00 A7 EF B9 61 ..b....a [0000] A7 7E F5 C7 BE AE 9E 6C .~.....l switch message SMBtrans (task_id 20458) ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record sign_outgoing_message: SENT SIG (seq: 63): sent SMB signature of [0000] 50 BA C1 86 91 78 E8 05 P....x.. [0000] 62 A0 60 B9 B1 EC 7D 60 b.`...}` switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 65): sent SMB signature of [0000] 4F EC 14 7B ED 9F A6 03 O..{.... [0000] C6 84 08 0F 73 3F F6 E8 ....s?.. switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 67): sent SMB signature of [0000] FC 4C CE 20 6B D1 CB D0 .L. k... [0000] 16 42 A7 B9 19 83 7C 06 .B....|. switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 69): sent SMB signature of [0000] 57 D4 CC 40 29 83 31 CA W..@).1. [0000] FA 75 BB B5 93 F8 F7 48 .u.....H switch message SMBclose (task_id 20458) sign_outgoing_message: SENT SIG (seq: 71): sent SMB signature of [0000] 38 CA 1D E8 8B C3 91 F1 8....... [0000] 3D 65 3B 54 D2 E6 C1 38 =e;T...8 switch message SMBtrans (task_id 20458) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 73): sent SMB signature of [0000] CF 57 1F AD 3E 09 1C 06 .W..>... [0000] 2A 48 6E 4A 36 70 7F D1 *HnJ6p.. switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 75): sent SMB signature of [0000] C1 BB 05 2E 42 F8 AF DA ....B... [0000] E6 DE 92 43 CA 54 71 2E ...C.Tq. switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 77): sent SMB signature of [0000] 7A 34 AD 55 66 EC 03 AF z4.Uf... [0000] FE A8 33 1F 85 73 43 6E ..3..sCn switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 79): sent SMB signature of [0000] 38 CE 67 13 44 38 9F 4B 8.g.D8.K [0000] 0D 3D B2 D9 00 D1 71 A0 .=....q. switch message SMBntcreateX (task_id 20458) sign_outgoing_message: SENT SIG (seq: 81): sent SMB signature of [0000] D7 31 09 B2 8E 57 5C C1 .1...W\. [0000] 17 39 3E 29 35 31 BD DD .9>)51.. switch message SMBwriteX (task_id 20458) sign_outgoing_message: SENT SIG (seq: 83): sent SMB signature of [0000] 89 22 9F 89 FC B5 1B 55 .".....U [0000] B7 54 4B DD 3F EF E5 2E .TK.?... switch message SMBreadX (task_id 20458) sign_outgoing_message: SENT SIG (seq: 85): sent SMB signature of [0000] 41 41 CF F2 E4 C6 04 EC AA...... [0000] 4B D8 D0 E3 5E 44 F5 D4 K...^D.. switch message SMBtrans (task_id 20458) ldb: naming_fsmo_init: we are master: yes ldb: pdc_fsmo_init: we are master: yes sign_outgoing_message: SENT SIG (seq: 87): sent SMB signature of [0000] DC 36 D6 5C D1 69 2B 4A .6.\.i+J [0000] DE A0 88 69 44 FC 89 9B ...iD... switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 89): sent SMB signature of [0000] F7 43 E9 B2 F9 C4 80 D8 .C...... [0000] EB 4C 02 F7 26 71 71 87 .L..&qq. switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 91): sent SMB signature of [0000] 85 B4 94 C1 78 E5 60 71 ....x.`q [0000] A8 52 D7 AF E8 BA E6 E7 .R...... switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 93): sent SMB signature of [0000] 90 66 96 82 AB 04 11 92 .f...... [0000] 64 33 9D C2 56 F8 33 8F d3..V.3. switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 95): sent SMB signature of [0000] A4 E0 AD 52 F9 22 00 95 ...R.".. [0000] F2 5E A2 39 45 9C 53 88 .^.9E.S. switch message SMBtrans (task_id 20458) ldb: objectclass_modify ldb: password_hash_modify ldb: objectguid_add_record sign_outgoing_message: SENT SIG (seq: 97): sent SMB signature of [0000] BC C3 DB 48 89 FD FE 90 ...H.... [0000] AD AD AB 57 FC 37 52 37 ...W.7R7 switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 99): sent SMB signature of [0000] 6A AE 0C 5A 50 38 78 7A j..ZP8xz [0000] BC E3 AE A6 C4 B9 E4 E7 ........ switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 101): sent SMB signature of [0000] 72 66 FC 4A F2 7D 2C 93 rf.J.},. [0000] 43 B3 2C 8D DD 5D C6 1B C.,..].. switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 103): sent SMB signature of [0000] FB 9E 2A C3 45 7E 34 FF ..*.E~4. [0000] C9 36 DC C8 D5 5B E7 3C .6...[.< switch message SMBclose (task_id 20458) sign_outgoing_message: SENT SIG (seq: 105): sent SMB signature of [0000] AE D5 07 37 9C BF 09 40 ...7...@ [0000] 7F 2E B2 E1 36 1D E1 AE ....6... switch message SMBtrans (task_id 20458) sign_outgoing_message: SENT SIG (seq: 107): sent SMB signature of [0000] 36 6D C7 1A 16 78 26 E7 6m...x&. [0000] 34 9D A8 15 24 7C 65 B3 4...$|e. switch message SMBclose (task_id 20458) sign_outgoing_message: SENT SIG (seq: 109): sent SMB signature of [0000] E6 64 04 6E 84 0B F5 A1 .d.n.... [0000] F2 8F AB 7A EB D5 7D E3 ...z..}. switch message SMBulogoffX (task_id 20458) sign_outgoing_message: SENT SIG (seq: 111): sent SMB signature of [0000] 39 E7 C5 00 DA E8 62 99 9.....b. [0000] 24 3C A4 8C 4D B9 D8 0B $<..M... switch message SMBtdis (task_id 20458) 192.168.0.131 closed connection to service IPC$ sign_outgoing_message: SENT SIG (seq: 113): sent SMB signature of [0000] A7 BF 28 73 4E E0 F2 CD ..(sN... standard_terminate: reason[NT_STATUS_END_OF_FILE]