The Samba-Bugzilla – Attachment 3758 Details for
Bug 5917
Samba does not work on site with Read Only Domain Controller
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
Output when run net ads join to domain from RODC site
netAdsJoinRODC.log (text/x-log), 183.69 KB, created by
Yen Liew
on 2008-11-24 04:13:28 UTC
(
hide
)
Description:
Output when run net ads join to domain from RODC site
Filename:
MIME Type:
Creator:
Yen Liew
Created:
2008-11-24 04:13:28 UTC
Size:
183.69 KB
patch
obsolete
>[2008/11/24 13:49:44, 5] lib/debug.c:debug_dump_status(391) > INFO: Current debug levels: > all: True/10 > tdb: False/0 > printdrivers: False/0 > lanman: False/0 > smb: False/0 > rpc_parse: False/0 > rpc_srv: False/0 > rpc_cli: False/0 > passdb: False/0 > sam: False/0 > auth: False/0 > winbind: False/0 > vfs: False/0 > idmap: False/0 > quota: False/0 > acls: False/0 > locking: False/0 > msdfs: False/0 > dmapi: False/0 >[2008/11/24 13:49:44, 3] param/loadparm.c:lp_load(5055) > lp_load: refreshing parameters >[2008/11/24 13:49:44, 3] param/loadparm.c:init_globals(1440) > Initialising global parameters >[2008/11/24 13:49:44, 3] param/params.c:pm_process(572) > params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" >[2008/11/24 13:49:44, 3] param/loadparm.c:do_section(3794) > Processing section "[global]" > doing parameter security = ADS > doing parameter realm = SMOKE2K8.CENTRIFY.TEST > doing parameter workgroup = SMOKE2K8 > doing parameter netbios name = rhel4-test >[2008/11/24 13:49:44, 4] param/loadparm.c:handle_netbios_name(3144) > handle_netbios_name: set global_myname to: RHEL4-TEST > doing parameter server string = Samba-CDC > doing parameter auth methods = guest, sam, winbind, ntdomain > doing parameter machine password timeout = 0 > doing parameter passdb backend = tdbsam:/etc/samba/private/passdb.tdb > doing parameter use kerberos keytab = No > doing parameter server signing = auto > doing parameter idmap backend = cdc:/usr/share/centrifydc/lib64/libcapi.so > doing parameter idmap standard mappers = No >[2008/11/24 13:49:44, 0] param/loadparm.c:map_parameter(2786) > Unknown parameter encountered: "idmap standard mappers" >[2008/11/24 13:49:44, 0] param/loadparm.c:lp_do_parameter(3527) > Ignoring unknown parameter "idmap standard mappers" > doing parameter template shell = /bin/bash > doing parameter winbind use default domain = Yes > doing parameter winbind enum users = No > doing parameter winbind enum groups = No > doing parameter winbind nested groups = Yes > doing parameter enable core files = true > doing parameter syslog = 0 >[2008/11/24 13:49:44, 4] param/loadparm.c:lp_load(5086) > pm_process() returned Yes >[2008/11/24 13:49:44, 7] param/loadparm.c:lp_servicenumber(5224) > lp_servicenumber: couldn't find homes >[2008/11/24 13:49:44, 10] param/loadparm.c:set_server_role(4330) > set_server_role: role = ROLE_DOMAIN_MEMBER >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UCS-2LE >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UCS-2LE >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UTF-16LE >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UTF-16LE >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UCS-2BE >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UCS-2BE >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UTF-16BE >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UTF-16BE >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UTF8 >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UTF8 >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UTF-8 >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UTF-8 >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset ASCII >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(113) > Registered charset ASCII >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset 646 >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(113) > Registered charset 646 >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset ISO-8859-1 >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(113) > Registered charset ISO-8859-1 >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(105) > Attempting to register new charset UCS2-HEX >[2008/11/24 13:49:44, 5] lib/iconv.c:smb_register_charset(113) > Registered charset UCS2-HEX >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/charcnv.c:charset_name(82) > Substituting charset 'UTF-8' for LOCALE >[2008/11/24 13:49:44, 5] lib/util.c:init_names(287) > Netbios name list:- > my_netbios_names[0]="RHEL4-TEST" >[2008/11/24 13:49:44, 2] lib/interface.c:add_interface(81) > added interface ip=192.168.3.241 bcast=192.168.3.255 nmask=255.255.252.0 >[2008/11/24 13:49:44, 5] lib/gencache.c:gencache_init(61) > Opening cache file at /var/lib/samba/gencache.tdb >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = AD_SITENAME/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = HKRDONLY, timeout = Sun Feb 7 14:28:15 2106 >[2008/11/24 13:49:44, 5] libads/dns.c:sitename_fetch(709) > sitename_fetch: Returning sitename for SMOKE2K8.CENTRIFY.TEST: "HKRDONLY" >[2008/11/24 13:49:44, 4] libsmb/namequery_dc.c:ads_dc_name(73) > ads_dc_name: domain=SMOKE2K8 >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = AD_SITENAME/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = HKRDONLY, timeout = Sun Feb 7 14:28:15 2106 >[2008/11/24 13:49:44, 5] libads/dns.c:sitename_fetch(709) > sitename_fetch: Returning sitename for SMOKE2K8.CENTRIFY.TEST: "HKRDONLY" >[2008/11/24 13:49:44, 6] libads/ldap.c:ads_find_dc(294) > ads_find_dc: looking for realm 'SMOKE2K8.CENTRIFY.TEST' >[2008/11/24 13:49:44, 8] libsmb/namequery.c:get_sorted_dc_list(1644) > get_sorted_dc_list: attempting lookup for name SMOKE2K8.CENTRIFY.TEST (sitename HKRDONLY) using [ads] >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = SAF/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = 192.168.0.113, timeout = Mon Nov 24 14:04:40 2008 >[2008/11/24 13:49:44, 5] libsmb/namequery.c:saf_fetch(136) > saf_fetch: Returning "192.168.0.113" for "SMOKE2K8.CENTRIFY.TEST" domain >[2008/11/24 13:49:44, 3] libsmb/namequery.c:get_dc_list(1495) > get_dc_list: preferred server list: "192.168.0.113, *" >[2008/11/24 13:49:44, 10] libsmb/namequery.c:internal_resolve_name(1166) > internal_resolve_name: looking up SMOKE2K8.CENTRIFY.TEST#1c (sitename HKRDONLY) >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = NBT/SMOKE2K8.CENTRIFY.TEST#1C, value = 192.168.0.113:389, timeout = Mon Nov 24 14:00:40 2008 >[2008/11/24 13:49:44, 5] libsmb/namecache.c:namecache_fetch(214) > name SMOKE2K8.CENTRIFY.TEST#1C found. >[2008/11/24 13:49:44, 8] libsmb/namequery.c:get_dc_list(1511) > Adding 1 DC's from auto lookup >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = AD_SITENAME/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = HKRDONLY, timeout = Sun Feb 7 14:28:15 2106 >[2008/11/24 13:49:44, 5] libads/dns.c:sitename_fetch(709) > sitename_fetch: Returning sitename for SMOKE2K8.CENTRIFY.TEST: "HKRDONLY" >[2008/11/24 13:49:44, 10] libsmb/namequery.c:remove_duplicate_addrs2(435) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2008/11/24 13:49:44, 4] libsmb/namequery.c:get_dc_list(1605) > get_dc_list: returning 1 ip addresses in an ordered list >[2008/11/24 13:49:44, 4] libsmb/namequery.c:get_dc_list(1606) > get_dc_list: 192.168.0.113:389 >[2008/11/24 13:49:44, 5] libads/ldap.c:ads_try_connect(180) > ads_try_connect: sending CLDAP request to 192.168.0.113 (realm: SMOKE2K8.CENTRIFY.TEST) >[2008/11/24 13:49:44, 10] libads/dns.c:sitename_store(670) > sitename_store: realm = [SMOKE2K8.CENTRIFY.TEST], sitename = [HKRDONLY], expire = [4294967295] >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_set(140) > Adding cache entry with key = AD_SITENAME/DOMAIN/SMOKE2K8.CENTRIFY.TEST; value = HKRDONLY and timeout = (null) (-1227505785 seconds ahead) >[2008/11/24 13:49:44, 3] libads/ldap.c:ads_connect(394) > Connected to LDAP server 192.168.0.113 >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = AD_SITENAME/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = HKRDONLY, timeout = Sun Feb 7 14:28:15 2106 >[2008/11/24 13:49:44, 5] libads/dns.c:sitename_fetch(709) > sitename_fetch: Returning sitename for SMOKE2K8.CENTRIFY.TEST: "HKRDONLY" >[2008/11/24 13:49:44, 10] libads/ldap.c:ads_closest_dc(149) > ads_closest_dc: ADS_CLOSEST flag set >[2008/11/24 13:49:44, 10] libads/kerberos.c:create_local_private_krb5_conf_for_domain(673) > create_local_private_krb5_conf_for_domain: fname = /var/lib/samba/smb_krb5/krb5.conf.SMOKE2K8, realm = SMOKE2K8.CENTRIFY.TEST, domain = SMOKE2K8 >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = SAF/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = 192.168.0.113, timeout = Mon Nov 24 14:04:40 2008 >[2008/11/24 13:49:44, 5] libsmb/namequery.c:saf_fetch(136) > saf_fetch: Returning "192.168.0.113" for "SMOKE2K8.CENTRIFY.TEST" domain >[2008/11/24 13:49:44, 3] libsmb/namequery.c:get_dc_list(1495) > get_dc_list: preferred server list: "192.168.0.113, *" >[2008/11/24 13:49:44, 10] libsmb/namequery.c:internal_resolve_name(1166) > internal_resolve_name: looking up SMOKE2K8.CENTRIFY.TEST#1c (sitename HKRDONLY) >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = NBT/SMOKE2K8.CENTRIFY.TEST#1C, value = 192.168.0.113:389, timeout = Mon Nov 24 14:00:40 2008 >[2008/11/24 13:49:44, 5] libsmb/namecache.c:namecache_fetch(214) > name SMOKE2K8.CENTRIFY.TEST#1C found. >[2008/11/24 13:49:44, 8] libsmb/namequery.c:get_dc_list(1511) > Adding 1 DC's from auto lookup >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = AD_SITENAME/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = HKRDONLY, timeout = Sun Feb 7 14:28:15 2106 >[2008/11/24 13:49:44, 5] libads/dns.c:sitename_fetch(709) > sitename_fetch: Returning sitename for SMOKE2K8.CENTRIFY.TEST: "HKRDONLY" >[2008/11/24 13:49:44, 10] libsmb/namequery.c:remove_duplicate_addrs2(435) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2008/11/24 13:49:44, 4] libsmb/namequery.c:get_dc_list(1605) > get_dc_list: returning 1 ip addresses in an ordered list >[2008/11/24 13:49:44, 4] libsmb/namequery.c:get_dc_list(1606) > get_dc_list: 192.168.0.113:389 >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = SAF/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = 192.168.0.113, timeout = Mon Nov 24 14:04:40 2008 >[2008/11/24 13:49:44, 5] libsmb/namequery.c:saf_fetch(136) > saf_fetch: Returning "192.168.0.113" for "SMOKE2K8.CENTRIFY.TEST" domain >[2008/11/24 13:49:44, 3] libsmb/namequery.c:get_dc_list(1495) > get_dc_list: preferred server list: "192.168.0.113, *" >[2008/11/24 13:49:44, 10] libsmb/namequery.c:internal_resolve_name(1166) > internal_resolve_name: looking up SMOKE2K8.CENTRIFY.TEST#1c (sitename (null)) >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = NBT/SMOKE2K8.CENTRIFY.TEST#1C, value = 192.168.0.113:389, timeout = Mon Nov 24 14:00:40 2008 >[2008/11/24 13:49:44, 5] libsmb/namecache.c:namecache_fetch(214) > name SMOKE2K8.CENTRIFY.TEST#1C found. >[2008/11/24 13:49:44, 8] libsmb/namequery.c:get_dc_list(1511) > Adding 1 DC's from auto lookup >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = AD_SITENAME/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = HKRDONLY, timeout = Sun Feb 7 14:28:15 2106 >[2008/11/24 13:49:44, 5] libads/dns.c:sitename_fetch(709) > sitename_fetch: Returning sitename for SMOKE2K8.CENTRIFY.TEST: "HKRDONLY" >[2008/11/24 13:49:44, 10] libsmb/namequery.c:remove_duplicate_addrs2(435) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2008/11/24 13:49:44, 4] libsmb/namequery.c:get_dc_list(1605) > get_dc_list: returning 1 ip addresses in an ordered list >[2008/11/24 13:49:44, 4] libsmb/namequery.c:get_dc_list(1606) > get_dc_list: 192.168.0.113:389 >[2008/11/24 13:49:44, 10] libads/kerberos.c:get_kdc_ip_string(624) > get_kdc_ip_string: Returning kdc = 192.168.0.113 > >[2008/11/24 13:49:44, 5] libads/kerberos.c:create_local_private_krb5_conf_for_domain(746) > create_local_private_krb5_conf_for_domain: wrote file /var/lib/samba/smb_krb5/krb5.conf.SMOKE2K8 with realm SMOKE2K8.CENTRIFY.TEST KDC = 192.168.0.113 >[2008/11/24 13:49:44, 4] libsmb/namequery_dc.c:ads_dc_name(139) > ads_dc_name: using server='SMK2K8-HK-RDC1.SMOKE2K8.CENTRIFY.TEST' IP=192.168.0.113 >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = AD_SITENAME/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = HKRDONLY, timeout = Sun Feb 7 14:28:15 2106 >[2008/11/24 13:49:44, 5] libads/dns.c:sitename_fetch(709) > sitename_fetch: Returning sitename for SMOKE2K8.CENTRIFY.TEST: "HKRDONLY" >[2008/11/24 13:49:44, 6] libads/ldap.c:ads_find_dc(294) > ads_find_dc: looking for realm 'SMOKE2K8.CENTRIFY.TEST' >[2008/11/24 13:49:44, 8] libsmb/namequery.c:get_sorted_dc_list(1644) > get_sorted_dc_list: attempting lookup for name SMOKE2K8.CENTRIFY.TEST (sitename HKRDONLY) using [ads] >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = SAF/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = 192.168.0.113, timeout = Mon Nov 24 14:04:40 2008 >[2008/11/24 13:49:44, 5] libsmb/namequery.c:saf_fetch(136) > saf_fetch: Returning "192.168.0.113" for "SMOKE2K8.CENTRIFY.TEST" domain >[2008/11/24 13:49:44, 3] libsmb/namequery.c:get_dc_list(1495) > get_dc_list: preferred server list: "192.168.0.113, *" >[2008/11/24 13:49:44, 10] libsmb/namequery.c:internal_resolve_name(1166) > internal_resolve_name: looking up SMOKE2K8.CENTRIFY.TEST#1c (sitename HKRDONLY) >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = NBT/SMOKE2K8.CENTRIFY.TEST#1C, value = 192.168.0.113:389, timeout = Mon Nov 24 14:00:40 2008 >[2008/11/24 13:49:44, 5] libsmb/namecache.c:namecache_fetch(214) > name SMOKE2K8.CENTRIFY.TEST#1C found. >[2008/11/24 13:49:44, 8] libsmb/namequery.c:get_dc_list(1511) > Adding 1 DC's from auto lookup >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = AD_SITENAME/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = HKRDONLY, timeout = Sun Feb 7 14:28:15 2106 >[2008/11/24 13:49:44, 5] libads/dns.c:sitename_fetch(709) > sitename_fetch: Returning sitename for SMOKE2K8.CENTRIFY.TEST: "HKRDONLY" >[2008/11/24 13:49:44, 10] libsmb/namequery.c:remove_duplicate_addrs2(435) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2008/11/24 13:49:44, 4] libsmb/namequery.c:get_dc_list(1605) > get_dc_list: returning 1 ip addresses in an ordered list >[2008/11/24 13:49:44, 4] libsmb/namequery.c:get_dc_list(1606) > get_dc_list: 192.168.0.113:389 >[2008/11/24 13:49:44, 5] libads/ldap.c:ads_try_connect(180) > ads_try_connect: sending CLDAP request to 192.168.0.113 (realm: SMOKE2K8.CENTRIFY.TEST) >[2008/11/24 13:49:44, 10] libads/dns.c:sitename_store(670) > sitename_store: realm = [SMOKE2K8.CENTRIFY.TEST], sitename = [HKRDONLY], expire = [4294967295] >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_set(140) > Adding cache entry with key = AD_SITENAME/DOMAIN/SMOKE2K8.CENTRIFY.TEST; value = HKRDONLY and timeout = (null) (-1227505785 seconds ahead) >[2008/11/24 13:49:44, 3] libads/ldap.c:ads_connect(394) > Connected to LDAP server 192.168.0.113 >[2008/11/24 13:49:44, 10] libads/ldap.c:ads_closest_dc(149) > ads_closest_dc: ADS_CLOSEST flag set >[2008/11/24 13:49:44, 10] libsmb/namequery.c:saf_store(74) > saf_store: domain = [SMOKE2K8], server = [192.168.0.113], expire = [1227506684] >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_set(140) > Adding cache entry with key = SAF/DOMAIN/SMOKE2K8; value = 192.168.0.113 and timeout = Mon Nov 24 14:04:44 2008 > (900 seconds ahead) >[2008/11/24 13:49:44, 10] libsmb/namequery.c:saf_store(74) > saf_store: domain = [SMOKE2K8.CENTRIFY.TEST], server = [192.168.0.113], expire = [1227506684] >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_set(140) > Adding cache entry with key = SAF/DOMAIN/SMOKE2K8.CENTRIFY.TEST; value = 192.168.0.113 and timeout = Mon Nov 24 14:04:44 2008 > (900 seconds ahead) >[2008/11/24 13:49:44, 4] libads/ldap.c:ads_current_time(2436) > time offset is -108 seconds >[2008/11/24 13:49:44, 4] libads/sasl.c:ads_sasl_bind(587) > Found SASL mechanism GSS-SPNEGO >[2008/11/24 13:49:44, 3] libads/sasl.c:ads_sasl_spnego_bind(291) > ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2 >[2008/11/24 13:49:44, 3] libads/sasl.c:ads_sasl_spnego_bind(291) > ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 >[2008/11/24 13:49:44, 3] libads/sasl.c:ads_sasl_spnego_bind(291) > ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3 >[2008/11/24 13:49:44, 3] libads/sasl.c:ads_sasl_spnego_bind(291) > ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10 >[2008/11/24 13:49:44, 3] libads/sasl.c:ads_sasl_spnego_bind(300) > ads_sasl_spnego_bind: got server principal name = not_defined_in_RFC4178@please_ignore >[2008/11/24 13:49:44, 3] libsmb/clikrb5.c:ads_krb5_mk_req(593) > ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found) >[2008/11/24 13:49:44, 10] libads/sasl.c:ads_sasl_spnego_bind(321) > ads_sasl_spnego_krb5_bind failed with: No credentials cache found, calling kinit >[2008/11/24 13:49:44, 10] libads/kerberos.c:kerberos_kinit_password_ext(91) > kerberos_kinit_password: using [MEMORY:net_ads] as ccache and config [/var/lib/samba/smb_krb5/krb5.conf.SMOKE2K8] >[2008/11/24 13:49:44, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(528) > ads_cleanup_expired_creds: Ticket in ccache[MEMORY:net_ads] expiration Mon, 24 Nov 2008 23:47:56 HKT >[2008/11/24 13:49:44, 10] libsmb/clikrb5.c:ads_krb5_mk_req(624) > ads_krb5_mk_req: Ticket (ldap/smk2k8-hk-rdc1.smoke2k8.centrify.test@SMOKE2K8.CENTRIFY.TEST) in ccache (MEMORY:net_ads) is valid until: (Mon, 24 Nov 2008 23:47:56 HKT - 1227541676) >[2008/11/24 13:49:44, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(735) > Got KRB5 session key of length 16 >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_del(173) > Deleting cache entry (key = NBT/SMOKE2K8.CENTRIFY.TEST#1C) >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_del(173) > Deleting cache entry (key = NBT/SMOKE2K8#1C) >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = AD_SITENAME/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = HKRDONLY, timeout = Sun Feb 7 14:28:15 2106 >[2008/11/24 13:49:44, 5] libads/dns.c:sitename_fetch(709) > sitename_fetch: Returning sitename for SMOKE2K8.CENTRIFY.TEST: "HKRDONLY" >[2008/11/24 13:49:44, 6] libads/ldap.c:ads_find_dc(294) > ads_find_dc: looking for realm 'SMOKE2K8.CENTRIFY.TEST' >[2008/11/24 13:49:44, 8] libsmb/namequery.c:get_sorted_dc_list(1644) > get_sorted_dc_list: attempting lookup for name SMOKE2K8.CENTRIFY.TEST (sitename HKRDONLY) using [ads] >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = SAF/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = 192.168.0.113, timeout = Mon Nov 24 14:04:44 2008 >[2008/11/24 13:49:44, 5] libsmb/namequery.c:saf_fetch(136) > saf_fetch: Returning "192.168.0.113" for "SMOKE2K8.CENTRIFY.TEST" domain >[2008/11/24 13:49:44, 3] libsmb/namequery.c:get_dc_list(1495) > get_dc_list: preferred server list: "192.168.0.113, *" >[2008/11/24 13:49:44, 10] libsmb/namequery.c:internal_resolve_name(1166) > internal_resolve_name: looking up SMOKE2K8.CENTRIFY.TEST#1c (sitename HKRDONLY) >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(212) > Cache entry with key = NBT/SMOKE2K8.CENTRIFY.TEST#1C couldn't be found >[2008/11/24 13:49:44, 5] libsmb/namecache.c:namecache_fetch(210) > no entry for SMOKE2K8.CENTRIFY.TEST#1C found. >[2008/11/24 13:49:44, 5] libsmb/namequery.c:resolve_ads(1066) > resolve_ads: Attempting to resolve DC's for SMOKE2K8.CENTRIFY.TEST using DNS >[2008/11/24 13:49:44, 4] libads/dns.c:ads_dns_lookup_srv(380) > ads_dns_lookup_srv: 1 records returned in the answer section. >[2008/11/24 13:49:44, 10] libads/dns.c:ads_dns_parse_rr_srv(205) > ads_dns_parse_rr_srv: Parsed smk2k8-hk-rdc1.smoke2k8.centrify.test [0, 100, 389] >[2008/11/24 13:49:44, 10] libsmb/namequery.c:remove_duplicate_addrs2(435) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2008/11/24 13:49:44, 5] libsmb/namecache.c:namecache_store(135) > namecache_store: storing 1 address for SMOKE2K8.CENTRIFY.TEST#1c: 192.168.0.113:389 >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_set(140) > Adding cache entry with key = NBT/SMOKE2K8.CENTRIFY.TEST#1C; value = 192.168.0.113:389 and timeout = Mon Nov 24 14:00:44 2008 > (660 seconds ahead) >[2008/11/24 13:49:44, 10] libsmb/namequery.c:internal_resolve_name(1293) > internal_resolve_name: returning 1 addresses: 192.168.0.113:389 >[2008/11/24 13:49:44, 8] libsmb/namequery.c:get_dc_list(1511) > Adding 1 DC's from auto lookup >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_get(226) > Returning valid cache entry: key = AD_SITENAME/DOMAIN/SMOKE2K8.CENTRIFY.TEST, value = HKRDONLY, timeout = Sun Feb 7 14:28:15 2106 >[2008/11/24 13:49:44, 5] libads/dns.c:sitename_fetch(709) > sitename_fetch: Returning sitename for SMOKE2K8.CENTRIFY.TEST: "HKRDONLY" >[2008/11/24 13:49:44, 10] libsmb/namequery.c:remove_duplicate_addrs2(435) > remove_duplicate_addrs2: looking for duplicate address/port pairs >[2008/11/24 13:49:44, 4] libsmb/namequery.c:get_dc_list(1605) > get_dc_list: returning 1 ip addresses in an ordered list >[2008/11/24 13:49:44, 4] libsmb/namequery.c:get_dc_list(1606) > get_dc_list: 192.168.0.113:389 >[2008/11/24 13:49:44, 5] libads/ldap.c:ads_try_connect(180) > ads_try_connect: sending CLDAP request to 192.168.0.113 (realm: SMOKE2K8.CENTRIFY.TEST) >[2008/11/24 13:49:44, 10] libads/dns.c:sitename_store(670) > sitename_store: realm = [SMOKE2K8.CENTRIFY.TEST], sitename = [HKRDONLY], expire = [4294967295] >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_set(140) > Adding cache entry with key = AD_SITENAME/DOMAIN/SMOKE2K8.CENTRIFY.TEST; value = HKRDONLY and timeout = (null) (-1227505785 seconds ahead) >[2008/11/24 13:49:44, 3] libads/ldap.c:ads_connect(394) > Connected to LDAP server 192.168.0.113 >[2008/11/24 13:49:44, 10] libads/ldap.c:ads_closest_dc(149) > ads_closest_dc: ADS_CLOSEST flag set >[2008/11/24 13:49:44, 10] libsmb/namequery.c:saf_store(74) > saf_store: domain = [SMOKE2K8], server = [192.168.0.113], expire = [1227506684] >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_set(140) > Adding cache entry with key = SAF/DOMAIN/SMOKE2K8; value = 192.168.0.113 and timeout = Mon Nov 24 14:04:44 2008 > (900 seconds ahead) >[2008/11/24 13:49:44, 10] libsmb/namequery.c:saf_store(74) > saf_store: domain = [SMOKE2K8.CENTRIFY.TEST], server = [192.168.0.113], expire = [1227506684] >[2008/11/24 13:49:44, 10] lib/gencache.c:gencache_set(140) > Adding cache entry with key = SAF/DOMAIN/SMOKE2K8.CENTRIFY.TEST; value = 192.168.0.113 and timeout = Mon Nov 24 14:04:44 2008 > (900 seconds ahead) >[2008/11/24 13:49:44, 4] libads/ldap.c:ads_current_time(2436) > time offset is -108 seconds >[2008/11/24 13:49:44, 4] libads/sasl.c:ads_sasl_bind(587) > Found SASL mechanism GSS-SPNEGO >[2008/11/24 13:49:44, 3] libads/sasl.c:ads_sasl_spnego_bind(291) > ads_sasl_spnego_bind: got OID=1 2 840 48018 1 2 2 >[2008/11/24 13:49:44, 3] libads/sasl.c:ads_sasl_spnego_bind(291) > ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 >[2008/11/24 13:49:44, 3] libads/sasl.c:ads_sasl_spnego_bind(291) > ads_sasl_spnego_bind: got OID=1 2 840 113554 1 2 2 3 >[2008/11/24 13:49:44, 3] libads/sasl.c:ads_sasl_spnego_bind(291) > ads_sasl_spnego_bind: got OID=1 3 6 1 4 1 311 2 2 10 >[2008/11/24 13:49:44, 3] libads/sasl.c:ads_sasl_spnego_bind(300) > ads_sasl_spnego_bind: got server principal name = not_defined_in_RFC4178@please_ignore >[2008/11/24 13:49:44, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(528) > ads_cleanup_expired_creds: Ticket in ccache[MEMORY:net_ads] expiration Mon, 24 Nov 2008 23:47:56 HKT >[2008/11/24 13:49:44, 10] libsmb/clikrb5.c:ads_krb5_mk_req(624) > ads_krb5_mk_req: Ticket (ldap/smk2k8-hk-rdc1.smoke2k8.centrify.test@SMOKE2K8.CENTRIFY.TEST) in ccache (MEMORY:net_ads) is valid until: (Mon, 24 Nov 2008 23:47:56 HKT - 1227541676) >[2008/11/24 13:49:44, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(735) > Got KRB5 session key of length 16 >[2008/11/24 13:49:44, 3] libsmb/cliconnect.c:cli_start_connection(1563) > Connecting to host=smk2k8-hk-rdc1.smoke2k8.centrify.test >[2008/11/24 13:49:44, 3] lib/util_sock.c:open_socket_out(866) > Connecting to 192.168.0.113 at port 445 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_KEEPALIVE = 0 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_REUSEADDR = 0 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_BROADCAST = 0 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_NODELAY = 1 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPCNT = 9 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPIDLE = 7200 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option TCP_KEEPINTVL = 75 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_LOWDELAY = 0 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option IPTOS_THROUGHPUT = 0 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDBUF = 16384 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVBUF = 87380 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDLOWAT = 1 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVLOWAT = 1 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_SNDTIMEO = 0 >[2008/11/24 13:49:45, 5] lib/util_sock.c:print_socket_options(206) > socket option SO_RCVTIMEO = 0 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,194) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,194) wrote 194 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 193 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=193 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=27822 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 9 (0x9) > smb_vwv[ 1]=12815 (0x320F) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 499 (0x1F3) > smb_vwv[11]=28544 (0x6F80) > smb_vwv[12]=22712 (0x58B8) > smb_vwv[13]=63539 (0xF833) > smb_vwv[14]=51533 (0xC94D) > smb_vwv[15]= 8193 (0x2001) > smb_vwv[16]= 254 (0xFE) > smb_bcc=124 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 42 31 C0 6D 4D 0F 1C 42 A5 5B D7 63 99 58 D8 13 B1.mM..B .[.c.X.. > [010] 60 6A 06 06 2B 06 01 05 05 02 A0 60 30 5E A0 30 `j..+... ...`0^.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 2A 30 28 A0 26 1B 24 6E 6F 74 5F 64 65 66 69 .*0(.&.$ not_defi > [060] 6E 65 64 5F 69 6E 5F 52 46 43 34 31 37 38 40 70 ned_in_R FC4178@p > [070] 6C 65 61 73 65 5F 69 67 6E 6F 72 65 lease_ig nore >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=193 > smb_com=0x72 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51201 > smb_tid=0 > smb_pid=27822 > smb_uid=0 > smb_mid=1 > smt_wct=17 > smb_vwv[ 0]= 9 (0x9) > smb_vwv[ 1]=12815 (0x320F) > smb_vwv[ 2]= 256 (0x100) > smb_vwv[ 3]= 1024 (0x400) > smb_vwv[ 4]= 65 (0x41) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 256 (0x100) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]=64768 (0xFD00) > smb_vwv[10]= 499 (0x1F3) > smb_vwv[11]=28544 (0x6F80) > smb_vwv[12]=22712 (0x58B8) > smb_vwv[13]=63539 (0xF833) > smb_vwv[14]=51533 (0xC94D) > smb_vwv[15]= 8193 (0x2001) > smb_vwv[16]= 254 (0xFE) > smb_bcc=124 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 42 31 C0 6D 4D 0F 1C 42 A5 5B D7 63 99 58 D8 13 B1.mM..B .[.c.X.. > [010] 60 6A 06 06 2B 06 01 05 05 02 A0 60 30 5E A0 30 `j..+... ...`0^.0 > [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. .......* > [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H...... ..*.H... > [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... > [050] A3 2A 30 28 A0 26 1B 24 6E 6F 74 5F 64 65 66 69 .*0(.&.$ not_defi > [060] 6E 65 64 5F 69 6E 5F 52 46 43 34 31 37 38 40 70 ned_in_R FC4178@p > [070] 6C 65 61 73 65 5F 69 67 6E 6F 72 65 lease_ig nore >[2008/11/24 13:49:45, 3] libsmb/cliconnect.c:cli_session_setup_spnego(805) > Doing spnego session setup (blob length=124) >[2008/11/24 13:49:45, 3] libsmb/cliconnect.c:cli_session_setup_spnego(832) > got OID=1 2 840 48018 1 2 2 >[2008/11/24 13:49:45, 3] libsmb/cliconnect.c:cli_session_setup_spnego(832) > got OID=1 2 840 113554 1 2 2 >[2008/11/24 13:49:45, 3] libsmb/cliconnect.c:cli_session_setup_spnego(832) > got OID=1 2 840 113554 1 2 2 3 >[2008/11/24 13:49:45, 3] libsmb/cliconnect.c:cli_session_setup_spnego(832) > got OID=1 3 6 1 4 1 311 2 2 10 >[2008/11/24 13:49:45, 3] libsmb/cliconnect.c:cli_session_setup_spnego(840) > got principal=not_defined_in_RFC4178@please_ignore >[2008/11/24 13:49:45, 10] libads/kerberos.c:kerberos_kinit_password_ext(91) > kerberos_kinit_password: using [MEMORY:cliconnect] as ccache and config [/var/lib/samba/smb_krb5/krb5.conf.SMOKE2K8] >[2008/11/24 13:49:45, 3] libsmb/cliconnect.c:cli_session_setup_spnego(880) > cli_session_setup_spnego: got a bad server principal, trying to guess ... >[2008/11/24 13:49:45, 5] libads/kerberos.c:kerberos_get_default_realm_from_ccache(384) > kerberos_get_default_realm_from_ccache: Trying to read krb5 cache: MEMORY:cliconnect >[2008/11/24 13:49:45, 3] libsmb/cliconnect.c:cli_session_setup_spnego(908) > cli_session_setup_spnego: guessed server principal=smk2k8-hk-rdc1$@SMOKE2K8.CENTRIFY.TEST >[2008/11/24 13:49:45, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(621) > Doing kerberos session setup >[2008/11/24 13:49:45, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(528) > ads_cleanup_expired_creds: Ticket in ccache[MEMORY:cliconnect] expiration Mon, 24 Nov 2008 23:47:56 HKT >[2008/11/24 13:49:45, 10] libsmb/clikrb5.c:ads_krb5_mk_req(624) > ads_krb5_mk_req: Ticket (smk2k8-hk-rdc1$@SMOKE2K8.CENTRIFY.TEST) in ccache (MEMORY:cliconnect) is valid until: (Mon, 24 Nov 2008 23:47:56 HKT - 1227541676) >[2008/11/24 13:49:45, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(735) > Got KRB5 session key of length 16 >[2008/11/24 13:49:45, 5] libsmb/smb_signing.c:set_smb_signing_real_common(141) > Mandatory SMB signing enabled! >[2008/11/24 13:49:45, 5] libsmb/smb_signing.c:set_smb_signing_real_common(145) > SMB signing enabled! >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:cli_simple_set_signing(490) > cli_simple_set_signing: user_session_key >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] C7 1E CF 37 22 21 17 1A A4 29 B3 9D 3E FE E0 AC ...7"!.. .)..>... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:cli_simple_set_signing(498) > cli_simple_set_signing: NULL response_data >[2008/11/24 13:49:45, 10] libsmb/cliconnect.c:cli_session_setup_blob(580) > cli_session_setup_blob: Remaining (0) sending (1480) current (1480) >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 0 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 42 06 34 69 C9 EF 77 07 B.4i..w. >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 1 mid = 2 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,1566) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,1566) wrote 1566 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 245 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=245 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=0 > smb_pid=27822 > smb_uid=6146 > smb_mid=2 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 245 (0xF5) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 22 (0x16) > smb_bcc=202 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] A1 14 30 12 A0 03 0A 01 00 A1 0B 06 09 2A 86 48 ..0..... .....*.H > [010] 82 F7 12 01 02 02 00 57 00 69 00 6E 00 64 00 6F .......W .i.n.d.o > [020] 00 77 00 73 00 20 00 53 00 65 00 72 00 76 00 65 .w.s. .S .e.r.v.e > [030] 00 72 00 20 00 28 00 52 00 29 00 20 00 32 00 30 .r. .(.R .). .2.0 > [040] 00 30 00 38 00 20 00 53 00 74 00 61 00 6E 00 64 .0.8. .S .t.a.n.d > [050] 00 61 00 72 00 64 00 20 00 36 00 30 00 30 00 31 .a.r.d. .6.0.0.1 > [060] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e > [070] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. > [080] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. > [090] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 28 .S.e.r.v .e.r. .( > [0A0] 00 52 00 29 00 20 00 32 00 30 00 30 00 38 00 20 .R.). .2 .0.0.8. > [0B0] 00 53 00 74 00 61 00 6E 00 64 00 61 00 72 00 64 .S.t.a.n .d.a.r.d > [0C0] 00 20 00 36 00 2E 00 30 00 00 . .6...0 .. >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 1 mid = 2 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 1 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 1: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] FF 29 09 BB 7C 18 B3 55 .)..|..U >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=245 > smb_com=0x73 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=0 > smb_pid=27822 > smb_uid=6146 > smb_mid=2 > smt_wct=4 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 245 (0xF5) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 22 (0x16) > smb_bcc=202 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] A1 14 30 12 A0 03 0A 01 00 A1 0B 06 09 2A 86 48 ..0..... .....*.H > [010] 82 F7 12 01 02 02 00 57 00 69 00 6E 00 64 00 6F .......W .i.n.d.o > [020] 00 77 00 73 00 20 00 53 00 65 00 72 00 76 00 65 .w.s. .S .e.r.v.e > [030] 00 72 00 20 00 28 00 52 00 29 00 20 00 32 00 30 .r. .(.R .). .2.0 > [040] 00 30 00 38 00 20 00 53 00 74 00 61 00 6E 00 64 .0.8. .S .t.a.n.d > [050] 00 61 00 72 00 64 00 20 00 36 00 30 00 30 00 31 .a.r.d. .6.0.0.1 > [060] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e > [070] 00 20 00 50 00 61 00 63 00 6B 00 20 00 31 00 00 . .P.a.c .k. .1.. > [080] 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. > [090] 00 53 00 65 00 72 00 76 00 65 00 72 00 20 00 28 .S.e.r.v .e.r. .( > [0A0] 00 52 00 29 00 20 00 32 00 30 00 30 00 38 00 20 .R.). .2 .0.0.8. > [0B0] 00 53 00 74 00 61 00 6E 00 64 00 61 00 72 00 64 .S.t.a.n .d.a.r.d > [0C0] 00 20 00 36 00 2E 00 30 00 00 . .6...0 .. >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 2 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] AE D1 78 D8 0D 5A C2 CD ..x..Z.. >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 3 mid = 3 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,142) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,142) wrote 142 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 56 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=56 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=3 > smt_wct=7 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 56 (0x38) > smb_vwv[ 2]= 1 (0x1) > smb_vwv[ 3]=65535 (0xFFFF) > smb_vwv[ 4]= 31 (0x1F) > smb_vwv[ 5]=65535 (0xFFFF) > smb_vwv[ 6]= 31 (0x1F) > smb_bcc=7 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 49 50 43 00 00 00 00 IPC.... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 3 mid = 3 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 3 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 3: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 16 68 15 07 38 32 1B 44 .h..82.D >[2008/11/24 13:49:45, 10] libsmb/clientgen.c:cli_init_creds(253) > cli_init_creds: user administrator@SMOKE2K8.CENTRIFY.TEST domain SMOKE2K8 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 4 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] D8 87 C8 D2 D3 65 2B 79 .....e+y >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 5 mid = 4 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,104) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,104) wrote 104 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 103 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=4 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 103 (0x67) > smb_vwv[ 2]= 2304 (0x900) > smb_vwv[ 3]= 320 (0x140) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 16 (0x10) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 5 mid = 4 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 5 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 5: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 88 FB 2C 6D 5E F4 78 94 ..,m^.x. >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2045) > Bind RPC Pipe[4009]: \lsarpc auth_type 0, auth_level 0 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) > Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. > [010] 00 00 00 00 .... >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) > Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [010] 02 00 00 00 .... >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 0b >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0048 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000001 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_rb >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0010 max_tsize: 10b8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0012 max_rsize: 10b8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 assoc_gid: 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0018 num_contexts: 01 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 001c context_id : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 001e num_transfer_syntaxes: 01 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00001f smb_io_rpc_iface >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0020 data : 12345778 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0024 data : 1234 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0026 data : abcd >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 0028 data : ef 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 002a data : 01 23 45 67 89 ab >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 version: 00000000 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_rpc_iface >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0034 data : 8a885d04 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0038 data : 1ceb >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 003a data : 11c9 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 003c data : 9f e8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 003e data : 08 00 2b 10 48 60 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0044 version: 00000002 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \lsarpc fnum 0x4009 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=5 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16393 (0x4009) > smb_bcc=87 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x > [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 .H`.... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 6 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 7A 7F 5F 2A 0D 44 DD 73 z._*.D.s >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 7 mid = 5 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,158) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,158) wrote 158 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 124 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... > [010] 00 B8 10 B8 10 28 78 02 00 0C 00 5C 70 69 70 65 .....(x. ...\pipe > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 7 mid = 5 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 7 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 7: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 46 69 1B 73 D9 5A AA FF Fi.s.Z.. >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=5 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... > [010] 00 B8 10 B8 10 28 78 02 00 0C 00 5C 70 69 70 65 .....(x. ...\pipe > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 7 mid = 5 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 0c >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0044 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000001 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 68 at offset 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \lsarpc fnum 0x4009 returned 68 bytes. >[2008/11/24 13:49:45, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2082) > rpc_pipe_bind: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \lsarpc fnum 0x4009 bind request returned ok. >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 0c >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0044 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000001 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_ba >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0010 max_tsize: 10b8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0012 max_rsize: 10b8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 assoc_gid: 00027828 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_rpc_addr_str >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0018 len: 000c >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 001a str: \pipe\lsass. >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000026 smb_io_rpc_results >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0028 num_results: 01 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 002c result : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 002e reason : 0000 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_rpc_iface >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 data : 8a885d04 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0034 data : 1ceb >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0036 data : 11c9 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 0038 data : 9f e8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 003a data : 08 00 2b 10 48 60 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0040 version: 00000002 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:check_bind_response(1701) > check_bind_response: accepted! >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2278) > cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine smk2k8-hk-rdc1.smoke2k8.centrify.test and bound anonymously. >[2008/11/24 13:49:45, 5] rpc_parse/parse_lsa.c:init_lsa_sec_qos(185) > init_lsa_sec_qos >[2008/11/24 13:49:45, 5] rpc_parse/parse_lsa.c:init_q_open_pol(304) > init_open_pol: attr:0 da:33554432 >[2008/11/24 13:49:45, 5] rpc_parse/parse_lsa.c:init_lsa_obj_attr(236) > init_lsa_obj_attr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_q_open_pol >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 ptr : 00000001 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0004 system_name: 005c >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000008 lsa_io_obj_attr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0008 len : 00000018 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c ptr_root_dir: 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 ptr_obj_name: 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 attributes : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0018 ptr_sec_desc: 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 001c ptr_sec_qos : 00000001 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 lsa_io_obj_qos sec_qos >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0020 len : 0000000c >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0024 sec_imp_level : 0002 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0026 sec_ctxt_mode : 01 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0027 effective_only: 00 >[2008/11/24 13:49:45, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(224) > lsa_io_sec_qos: length c does not match size 8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0028 des_access: 02000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0044 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000002 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 0000002c >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 opnum : 0006 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \lsarpc fnum 0x4009 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=150 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=6 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 68 (0x44) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16393 (0x4009) > smb_bcc=83 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 44 00 00 00 02 00 00 00 2C .......D ......., > [020] 00 00 00 00 00 06 00 01 00 00 00 5C 00 00 00 18 ........ ...\.... > [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [040] 00 00 00 01 00 00 00 0C 00 00 00 02 00 01 00 00 ........ ........ > [050] 00 00 02 ... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 8 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] F8 58 E9 E0 34 41 5B 6B .X..4A[k >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 9 mid = 6 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,154) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,154) wrote 154 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 104 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 09 89 A0 ........ ........ > [020] C4 3B 8E BB 4B A5 FC 2D 47 59 6B A6 81 00 00 00 .;..K..- GYk..... > [030] 00 . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 9 mid = 6 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 9 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 9: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 1C 10 3D D8 B4 8D 1E D8 ..=..... >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=6 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 02 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 09 89 A0 ........ ........ > [020] C4 3B 8E BB 4B A5 FC 2D 47 59 6B A6 81 00 00 00 .;..K..- GYk..... > [030] 00 . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 9 mid = 6 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 02 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0030 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000002 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000018 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0016 cancel_ct : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0017 reserved : 00 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 48 at offset 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \lsarpc fnum 0x4009 returned 48 bytes. >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_r_open_pol >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : c4a08909 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : 8e3b >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 4bbb >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : a5 fc >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : 2d 47 59 6b a6 81 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > 0014 status: NT_STATUS_OK >[2008/11/24 13:49:45, 5] rpc_parse/parse_lsa.c:init_q_query(488) > init_q_query >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_q_query >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : c4a08909 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : 8e3b >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 4bbb >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : a5 fc >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : 2d 47 59 6b a6 81 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 info_class: 0005 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 002e >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000003 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000016 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 opnum : 0007 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \lsarpc fnum 0x4009 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=128 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=7 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 46 (0x2E) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 46 (0x2E) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16393 (0x4009) > smb_bcc=61 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 2E 00 00 00 03 00 00 00 16 ........ ........ > [020] 00 00 00 00 00 07 00 00 00 00 00 09 89 A0 C4 3B ........ .......; > [030] 8E BB 4B A5 FC 2D 47 59 6B A6 81 05 00 ..K..-GY k.... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 10 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 72 81 5C 9F A2 55 3D 1A r.\..U=. >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 11 mid = 7 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,132) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,132) wrote 132 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 160 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=160 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 104 (0x68) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 104 (0x68) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=105 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 68 00 00 00 03 00 00 ........ .h...... > [010] 00 50 00 00 00 00 00 00 00 00 00 02 00 05 00 00 .P...... ........ > [020] 00 10 00 12 00 04 00 02 00 08 00 02 00 09 00 00 ........ ........ > [030] 00 00 00 00 00 08 00 00 00 53 00 4D 00 4F 00 4B ........ .S.M.O.K > [040] 00 45 00 32 00 4B 00 38 00 04 00 00 00 01 04 00 .E.2.K.8 ........ > [050] 00 00 00 00 05 15 00 00 00 4A 83 58 FD A6 B5 D9 ........ .J.X.... > [060] 43 44 C5 25 6C 00 00 00 00 CD.%l... . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 11 mid = 7 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 11 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 11: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 9D A6 06 CC 7E E0 FB 9D ....~... >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=160 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=7 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 104 (0x68) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 104 (0x68) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=105 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 68 00 00 00 03 00 00 ........ .h...... > [010] 00 50 00 00 00 00 00 00 00 00 00 02 00 05 00 00 .P...... ........ > [020] 00 10 00 12 00 04 00 02 00 08 00 02 00 09 00 00 ........ ........ > [030] 00 00 00 00 00 08 00 00 00 53 00 4D 00 4F 00 4B ........ .S.M.O.K > [040] 00 45 00 32 00 4B 00 38 00 04 00 00 00 01 04 00 .E.2.K.8 ........ > [050] 00 00 00 00 05 15 00 00 00 4A 83 58 FD A6 B5 D9 ........ .J.X.... > [060] 43 44 C5 25 6C 00 00 00 00 CD.%l... . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 11 mid = 7 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 02 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0068 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000003 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000050 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0016 cancel_ct : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0017 reserved : 00 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 104, data_len 80, ss_len 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 104 at offset 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \lsarpc fnum 0x4009 returned 160 bytes. >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_r_query >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 dom_ptr: 00020000 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000004 lsa_io_query_info_ctr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0004 info_class: 0005 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000008 lsa_io_dom_query_3 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 uni_dom_max_len: 0010 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a uni_dom_str_len: 0012 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c buffer_dom_name: 00020004 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 buffer_dom_sid : 00020008 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000014 smb_io_unistr2 unistr2 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 uni_max_len: 00000009 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0018 offset : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 001c uni_str_len: 00000008 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) > 0020 buffer : S.M.O.K.E.2.K.8. >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_dom_sid2 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 num_auths: 00000004 >[2008/11/24 13:49:45, 9] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_dom_sid sid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0034 sid_rev_num: 01 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0035 num_auths : 04 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0036 id_auth[0] : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0037 id_auth[1] : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0038 id_auth[2] : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0039 id_auth[3] : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 003a id_auth[4] : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 003b id_auth[5] : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32s(997) > 003c sub_auths : 00000015 fd58834a 43d9b5a6 6c25c544 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > 004c status: NT_STATUS_OK >[2008/11/24 13:49:45, 5] rpc_parse/parse_lsa.c:init_lsa_q_close(2148) > init_lsa_q_close >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_q_close >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : c4a08909 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : 8e3b >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 4bbb >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : a5 fc >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : 2d 47 59 6b a6 81 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 002c >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000004 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000014 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 opnum : 0000 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \lsarpc fnum 0x4009 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=126 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=8 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 44 (0x2C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 44 (0x2C) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16393 (0x4009) > smb_bcc=59 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 2C 00 00 00 04 00 00 00 14 ......., ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 09 89 A0 C4 3B ........ .......; > [030] 8E BB 4B A5 FC 2D 47 59 6B A6 81 ..K..-GY k.. >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 12 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 35 D5 16 21 D8 40 0B 84 5..!.@.. >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 13 mid = 8 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,130) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,130) wrote 130 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 104 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=8 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 13 mid = 8 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 13 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 13: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 72 A2 AA BE 34 39 92 BB r...49.. >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=8 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 13 mid = 8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 02 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0030 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000004 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000018 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0016 cancel_ct : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0017 reserved : 00 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 48 at offset 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \lsarpc fnum 0x4009 returned 48 bytes. >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 lsa_io_r_close >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : 00 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : 00 00 00 00 00 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > 0014 status: NT_STATUS_OK >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 14 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] C4 49 C4 2C A2 F5 8D F0 .I.,.... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 15 mid = 9 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,45) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,45) wrote 45 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 35 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=9 > smt_wct=0 > smb_bcc=0 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 15 mid = 9 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 15 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 15: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 0A 23 F4 11 5C E0 D7 3B .#..\..; >[2008/11/24 13:49:45, 10] libsmb/clientgen.c:cli_rpc_pipe_close(394) > cli_rpc_pipe_close: closed pipe \lsarpc to machine smk2k8-hk-rdc1.smoke2k8.centrify.test >[2008/11/24 13:49:45, 10] libsmb/namequery.c:saf_store(74) > saf_store: domain = [SMOKE2K8], server = [smk2k8-hk-rdc1.smoke2k8.centrify.test], expire = [1227506685] >[2008/11/24 13:49:45, 10] lib/gencache.c:gencache_set(140) > Adding cache entry with key = SAF/DOMAIN/SMOKE2K8; value = smk2k8-hk-rdc1.smoke2k8.centrify.test and timeout = Mon Nov 24 14:04:45 2008 > (900 seconds ahead) >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 16 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 09 EE 8F 84 CC BF 37 99 ......7. >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 17 mid = 10 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,100) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,100) wrote 100 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 103 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=103 > smb_com=0xa2 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=10 > smt_wct=34 > smb_vwv[ 0]= 255 (0xFF) > smb_vwv[ 1]= 103 (0x67) > smb_vwv[ 2]= 2560 (0xA00) > smb_vwv[ 3]= 320 (0x140) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 0 (0x0) > smb_vwv[11]= 0 (0x0) > smb_vwv[12]= 0 (0x0) > smb_vwv[13]= 0 (0x0) > smb_vwv[14]= 0 (0x0) > smb_vwv[15]= 0 (0x0) > smb_vwv[16]= 0 (0x0) > smb_vwv[17]= 0 (0x0) > smb_vwv[18]= 0 (0x0) > smb_vwv[19]= 0 (0x0) > smb_vwv[20]= 0 (0x0) > smb_vwv[21]=32768 (0x8000) > smb_vwv[22]= 0 (0x0) > smb_vwv[23]= 0 (0x0) > smb_vwv[24]= 16 (0x10) > smb_vwv[25]= 0 (0x0) > smb_vwv[26]= 0 (0x0) > smb_vwv[27]= 0 (0x0) > smb_vwv[28]= 0 (0x0) > smb_vwv[29]= 0 (0x0) > smb_vwv[30]= 0 (0x0) > smb_vwv[31]= 512 (0x200) > smb_vwv[32]=65280 (0xFF00) > smb_vwv[33]= 5 (0x5) > smb_bcc=0 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 17 mid = 10 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 17 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 17: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 2B 2D CE 88 37 DD 79 A5 +-..7.y. >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2045) > Bind RPC Pipe[400a]: \samr auth_type 0, auth_level 0 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:valid_pipe_name(1647) > Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AC xW4.4... ...#Eg.. > [010] 01 00 00 00 .... >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) > Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` > [010] 02 00 00 00 .... >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 0b >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0048 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000005 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_rb >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0010 max_tsize: 10b8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0012 max_rsize: 10b8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 assoc_gid: 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0018 num_contexts: 01 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 001c context_id : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 001e num_transfer_syntaxes: 01 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00001f smb_io_rpc_iface >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0020 data : 12345778 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0024 data : 1234 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0026 data : abcd >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 0028 data : ef 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 002a data : 01 23 45 67 89 ac >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 version: 00000001 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_rpc_iface >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000034 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0034 data : 8a885d04 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0038 data : 1ceb >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 003a data : 11c9 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 003c data : 9f e8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 003e data : 08 00 2b 10 48 60 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0044 version: 00000002 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=154 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=11 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 72 (0x48) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 72 (0x48) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16394 (0x400A) > smb_bcc=87 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 0B 03 10 00 00 00 48 00 00 00 05 00 00 00 B8 .......H ........ > [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x > [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AC 01 W4.4.... ..#Eg... > [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ > [050] 10 48 60 02 00 00 00 .H`.... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 18 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 35 2B 4A 79 92 B3 94 85 5+Jy.... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 19 mid = 11 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,158) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,158) wrote 158 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 124 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=11 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 05 00 00 ........ .D...... > [010] 00 B8 10 B8 10 29 78 02 00 0C 00 5C 70 69 70 65 .....)x. ...\pipe > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 19 mid = 11 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 19 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 19: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 04 5A B0 5F AF 06 61 1A .Z._..a. >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=124 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=11 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 68 (0x44) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 68 (0x44) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=69 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 05 00 00 ........ .D...... > [010] 00 B8 10 B8 10 29 78 02 00 0C 00 5C 70 69 70 65 .....)x. ...\pipe > [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ > [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H > [040] 60 02 00 00 00 `.... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 19 mid = 11 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 0c >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0044 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000005 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 68 at offset 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a returned 68 bytes. >[2008/11/24 13:49:45, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2082) > rpc_pipe_bind: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a bind request returned ok. >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 0c >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0044 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000005 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_ba >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_bba >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0010 max_tsize: 10b8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0012 max_rsize: 10b8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 assoc_gid: 00027829 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_rpc_addr_str >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0018 len: 000c >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 001a str: \pipe\lsass. >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000026 smb_io_rpc_results >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0028 num_results: 01 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 002c result : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 002e reason : 0000 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_rpc_iface >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 data : 8a885d04 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0034 data : 1ceb >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0036 data : 11c9 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 0038 data : 9f e8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 003a data : 08 00 2b 10 48 60 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0040 version: 00000002 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:check_bind_response(1701) > check_bind_response: accepted! >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2278) > cli_rpc_pipe_open_noauth: opened pipe \samr to machine smk2k8-hk-rdc1.smoke2k8.centrify.test and bound anonymously. >[2008/11/24 13:49:45, 10] rpc_client/cli_samr.c:rpccli_samr_connect(36) > cli_samr_connect to smk2k8-hk-rdc1.smoke2k8.centrify.test >[2008/11/24 13:49:45, 5] rpc_parse/parse_samr.c:init_samr_q_connect(7120) > init_samr_q_connect >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 samr_io_q_connect >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 ptr_srv_name: 00000001 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_unistr2 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 uni_max_len: 00000026 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0008 offset : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c uni_str_len: 00000026 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) > 0010 buffer : s.m.k.2.k.8.-.h.k.-.r.d.c.1...s.m.o.k.e.2.k.8...c.e.n.t.r.i.f.y...t.e.s.t... >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 005c access_mask: 02000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0078 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000006 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000060 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 opnum : 0039 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=202 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=12 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 120 (0x78) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 120 (0x78) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16394 (0x400A) > smb_bcc=135 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 78 00 00 00 06 00 00 00 60 .......x .......` > [020] 00 00 00 00 00 39 00 01 00 00 00 26 00 00 00 00 .....9.. ...&.... > [030] 00 00 00 26 00 00 00 73 00 6D 00 6B 00 32 00 6B ...&...s .m.k.2.k > [040] 00 38 00 2D 00 68 00 6B 00 2D 00 72 00 64 00 63 .8.-.h.k .-.r.d.c > [050] 00 31 00 2E 00 73 00 6D 00 6F 00 6B 00 65 00 32 .1...s.m .o.k.e.2 > [060] 00 6B 00 38 00 2E 00 63 00 65 00 6E 00 74 00 72 .k.8...c .e.n.t.r > [070] 00 69 00 66 00 79 00 2E 00 74 00 65 00 73 00 74 .i.f.y.. .t.e.s.t > [080] 00 00 00 00 00 00 02 ....... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 20 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 09 D5 7D 99 2A 82 59 29 ..}.*.Y) >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 21 mid = 12 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,206) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,206) wrote 206 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 104 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=12 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 06 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 EC AA 73 ........ .......s > [020] 20 C3 72 AC 45 8E AE 3E DF EC 53 9C DD 00 00 00 .r.E..> ..S..... > [030] 00 . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 21 mid = 12 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 21 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 21: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 7D 02 05 26 B0 E2 4C 00 }..&..L. >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=12 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 06 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 EC AA 73 ........ .......s > [020] 20 C3 72 AC 45 8E AE 3E DF EC 53 9C DD 00 00 00 .r.E..> ..S..... > [030] 00 . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 21 mid = 12 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 02 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0030 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000006 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000018 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0016 cancel_ct : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0017 reserved : 00 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 48 at offset 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a returned 48 bytes. >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 samr_io_r_connect >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd connect_pol >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : 2073aaec >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : 72c3 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 45ac >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : 8e ae >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : 3e df ec 53 9c dd >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > 0014 status: NT_STATUS_OK >[2008/11/24 13:49:45, 10] rpc_client/cli_samr.c:rpccli_samr_open_domain(149) > cli_samr_open_domain with sid S-1-5-21-4250436426-1138341286-1814414660 >[2008/11/24 13:49:45, 5] rpc_parse/parse_samr.c:init_samr_q_open_domain(248) > samr_init_samr_q_open_domain >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 samr_io_q_open_domain >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd pol >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : 2073aaec >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : 72c3 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 45ac >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : 8e ae >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : 3e df ec 53 9c dd >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 flags: 02000000 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_dom_sid2 sid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0018 num_auths: 00000004 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 00001c smb_io_dom_sid sid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 001c sid_rev_num: 01 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 001d num_auths : 04 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 001e id_auth[0] : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 001f id_auth[1] : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0020 id_auth[2] : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0021 id_auth[3] : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0022 id_auth[4] : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0023 id_auth[5] : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32s(997) > 0024 sub_auths : 00000015 fd58834a 43d9b5a6 6c25c544 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 004c >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000007 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000034 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 opnum : 0007 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=158 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=13 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 76 (0x4C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 76 (0x4C) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16394 (0x400A) > smb_bcc=91 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 4C 00 00 00 07 00 00 00 34 .......L .......4 > [020] 00 00 00 00 00 07 00 00 00 00 00 EC AA 73 20 C3 ........ .....s . > [030] 72 AC 45 8E AE 3E DF EC 53 9C DD 00 00 00 02 04 r.E..>.. S....... > [040] 00 00 00 01 04 00 00 00 00 00 05 15 00 00 00 4A ........ .......J > [050] 83 58 FD A6 B5 D9 43 44 C5 25 6C .X....CD .%l >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 22 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 05 52 F8 0C ED B0 01 C3 .R...... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 23 mid = 13 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,162) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,162) wrote 162 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 104 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=13 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 07 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 81 F5 C5 ........ ........ > [020] A3 B8 F8 50 42 8C 02 E1 DC 1D 38 4D E6 00 00 00 ...PB... ..8M.... > [030] 00 . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 23 mid = 13 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 23 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 23: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 2E EC 46 52 31 26 6D E5 ..FR1&m. >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=13 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 07 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 81 F5 C5 ........ ........ > [020] A3 B8 F8 50 42 8C 02 E1 DC 1D 38 4D E6 00 00 00 ...PB... ..8M.... > [030] 00 . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 23 mid = 13 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 02 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0030 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000007 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000018 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0016 cancel_ct : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0017 reserved : 00 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 48 at offset 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a returned 48 bytes. >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 samr_io_r_open_domain >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd domain_pol >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : a3c5f581 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : f8b8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 4250 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : 8c 02 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : e1 dc 1d 38 4d e6 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > 0014 status: NT_STATUS_OK >[2008/11/24 13:49:45, 10] utils/net_domain.c:netdom_join_domain(255) > Creating account with flags: -536543056 >[2008/11/24 13:49:45, 10] rpc_client/cli_samr.c:rpccli_samr_create_dom_user(1654) > cli_samr_create_dom_user rhel4-test$ >[2008/11/24 13:49:45, 5] rpc_parse/parse_samr.c:init_samr_q_create_user(5268) > samr_init_samr_q_create_user >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 samr_io_q_create_user >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd domain_pol >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : a3c5f581 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : f8b8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 4250 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : 8c 02 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : e1 dc 1d 38 4d e6 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000014 smb_io_unihdr hdr_name >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 uni_str_len: 0016 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 uni_max_len: 0016 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0018 buffer : 00000001 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00001c smb_io_unistr2 uni_name >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 001c uni_max_len: 0000000b >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0020 offset : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0024 uni_str_len: 0000000b >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) > 0028 buffer : r.h.e.l.4.-.t.e.s.t.$. >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0040 acb_info : 00000080 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0044 acct_flags: e00500b0 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0060 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000008 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000048 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 opnum : 0032 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=178 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=14 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 96 (0x60) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 96 (0x60) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16394 (0x400A) > smb_bcc=111 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 60 00 00 00 08 00 00 00 48 .......` .......H > [020] 00 00 00 00 00 32 00 00 00 00 00 81 F5 C5 A3 B8 .....2.. ........ > [030] F8 50 42 8C 02 E1 DC 1D 38 4D E6 16 00 16 00 01 .PB..... 8M...... > [040] 00 00 00 0B 00 00 00 00 00 00 00 0B 00 00 00 72 ........ .......r > [050] 00 68 00 65 00 6C 00 34 00 2D 00 74 00 65 00 73 .h.e.l.4 .-.t.e.s > [060] 00 74 00 24 00 00 00 80 00 00 00 B0 00 05 E0 .t.$.... ....... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 24 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 49 E3 FA F6 60 54 4F 9C I...`TO. >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 25 mid = 14 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,182) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,182) wrote 182 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 112 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=112 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=14 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 56 (0x38) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 56 (0x38) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=57 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 38 00 00 00 08 00 00 ........ .8...... > [010] 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 . ...... ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 00 00 63 00 00 C0 .....c.. . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 25 mid = 14 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 25 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 25: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] E2 04 4A EA 2B E0 34 89 ..J.+.4. >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=112 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=14 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 56 (0x38) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 56 (0x38) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=57 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 38 00 00 00 08 00 00 ........ .8...... > [010] 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 . ...... ........ > [020] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [030] 00 00 00 00 00 63 00 00 C0 .....c.. . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 25 mid = 14 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 02 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0038 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000008 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000020 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0016 cancel_ct : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0017 reserved : 00 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 56, data_len 32, ss_len 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 56 at offset 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a returned 64 bytes. >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 samr_io_r_create_user >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd user_pol >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : 00 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : 00 00 00 00 00 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 access_granted: 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0018 user_rid : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > 001c status: NT_STATUS_USER_EXISTS >[2008/11/24 13:49:45, 10] rpc_client/cli_samr.c:rpccli_samr_lookup_names(1594) > cli_samr_lookup_names >[2008/11/24 13:49:45, 5] rpc_parse/parse_samr.c:init_samr_q_lookup_names(4905) > init_samr_q_lookup_names >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 samr_io_q_lookup_names >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd pol >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : a3c5f581 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : f8b8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 4250 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : 8c 02 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : e1 dc 1d 38 4d e6 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 num_names1: 00000001 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0018 flags : 000003e8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 001c ptr : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0020 num_names2: 00000001 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000024 smb_io_unihdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0024 uni_str_len: 0016 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0026 uni_max_len: 0016 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0028 buffer : 00000001 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 00002c smb_io_unistr2 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 002c uni_max_len: 0000000b >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 offset : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0034 uni_str_len: 0000000b >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:dbg_rw_punival(942) > 0038 buffer : r.h.e.l.4.-.t.e.s.t.$. >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0066 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000009 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 0000004e >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 opnum : 0011 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=184 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=15 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 102 (0x66) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 102 (0x66) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16394 (0x400A) > smb_bcc=117 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 66 00 00 00 09 00 00 00 4E .......f .......N > [020] 00 00 00 00 00 11 00 00 00 00 00 81 F5 C5 A3 B8 ........ ........ > [030] F8 50 42 8C 02 E1 DC 1D 38 4D E6 01 00 00 00 E8 .PB..... 8M...... > [040] 03 00 00 00 00 00 00 01 00 00 00 16 00 16 00 01 ........ ........ > [050] 00 00 00 0B 00 00 00 00 00 00 00 0B 00 00 00 72 ........ .......r > [060] 00 68 00 65 00 6C 00 34 00 2D 00 74 00 65 00 73 .h.e.l.4 .-.t.e.s > [070] 00 74 00 24 00 .t.$. >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 26 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] BD C0 0A 8B 18 CE 2E 64 .......d >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 27 mid = 15 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,188) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,188) wrote 188 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 116 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=116 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=15 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 60 (0x3C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 60 (0x3C) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=61 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 3C 00 00 00 09 00 00 ........ .<...... > [010] 00 24 00 00 00 00 00 00 00 01 00 00 00 00 00 02 .$...... ........ > [020] 00 01 00 00 00 CA 1B 00 00 01 00 00 00 04 00 02 ........ ........ > [030] 00 01 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 27 mid = 15 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 27 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 27: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] A2 88 D6 3C D0 9B 64 33 ...<..d3 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=116 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=15 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 60 (0x3C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 60 (0x3C) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=61 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 3C 00 00 00 09 00 00 ........ .<...... > [010] 00 24 00 00 00 00 00 00 00 01 00 00 00 00 00 02 .$...... ........ > [020] 00 01 00 00 00 CA 1B 00 00 01 00 00 00 04 00 02 ........ ........ > [030] 00 01 00 00 00 01 00 00 00 00 00 00 00 ........ ..... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 27 mid = 15 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 02 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 003c >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 00000009 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000024 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0016 cancel_ct : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0017 reserved : 00 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 60, data_len 36, ss_len 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 60 at offset 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a returned 72 bytes. >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 samr_io_r_lookup_names >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 num_rids1: 00000001 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 ptr_rids : 00020000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0008 num_rids2: 00000001 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c rid[00] : 00001bca >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 num_types1: 00000001 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 ptr_types : 00020004 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0018 num_types2: 00000001 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 001c type[00] : 00000001 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > 0020 status: NT_STATUS_OK >[2008/11/24 13:49:45, 10] rpc_client/cli_samr.c:rpccli_samr_open_user(187) > cli_samr_open_user with rid 0x1bca >[2008/11/24 13:49:45, 5] rpc_parse/parse_samr.c:init_samr_q_open_user(5199) > samr_init_samr_q_open_user >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 samr_io_q_open_user >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd domain_pol >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : a3c5f581 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : f8b8 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 4250 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : 8c 02 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : e1 dc 1d 38 4d e6 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0014 access_mask: 02000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0018 user_rid : 00001bca >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0034 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 0000000a >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 0000001c >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 opnum : 0022 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=134 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=16 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 52 (0x34) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 52 (0x34) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16394 (0x400A) > smb_bcc=67 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 34 00 00 00 0A 00 00 00 1C .......4 ........ > [020] 00 00 00 00 00 22 00 00 00 00 00 81 F5 C5 A3 B8 .....".. ........ > [030] F8 50 42 8C 02 E1 DC 1D 38 4D E6 00 00 00 02 CA .PB..... 8M...... > [040] 1B 00 00 ... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 28 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] AA 71 F4 54 53 A7 81 9B .q.TS... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 29 mid = 16 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,138) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,138) wrote 138 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 104 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=16 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 0A 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 EA F5 CE ........ ........ > [020] 6D 66 E8 35 4C A7 08 8A 1B B9 8C 39 29 00 00 00 mf.5L... ...9)... > [030] 00 . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 29 mid = 16 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 29 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 29: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] E2 09 05 94 80 08 6A 16 ......j. >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=104 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=16 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 48 (0x30) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 48 (0x30) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=49 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 0A 00 00 ........ .0...... > [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 EA F5 CE ........ ........ > [020] 6D 66 E8 35 4C A7 08 8A 1B B9 8C 39 29 00 00 00 mf.5L... ...9)... > [030] 00 . >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 29 mid = 16 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 02 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0030 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 0000000a >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000018 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0016 cancel_ct : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0017 reserved : 00 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 48 at offset 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a returned 48 bytes. >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 samr_io_r_open_user >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd user_pol >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : 6dcef5ea >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : e866 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 4c35 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : a7 08 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : 8a 1b b9 8c 39 29 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > 0014 status: NT_STATUS_OK >[2008/11/24 13:49:45, 10] rpc_client/cli_samr.c:rpccli_samr_set_userinfo2(1749) > cli_samr_set_userinfo2 >[2008/11/24 13:49:45, 5] rpc_parse/parse_samr.c:init_samr_q_set_userinfo2(7034) > init_samr_q_set_userinfo2 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 samr_io_q_set_userinfo2 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_pol_hnd pol >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0000 handle_type: 00000000 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000004 smb_io_uuid uuid >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0004 data : 6dcef5ea >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 data : e866 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a data : 4c35 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000c data : a7 08 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 000e data : 8a 1b b9 8c 39 29 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 switch_value: 0019 >[2008/11/24 13:49:45, 6] rpc_parse/parse_prs.c:prs_debug(84) > 000016 samr_io_userinfo_ctr ctr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 switch_value: 0019 >[2008/11/24 13:49:45, 7] rpc_parse/parse_prs.c:prs_debug(84) > 000018 sam_io_user_info25 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000018 smb_io_time logon_time >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0018 low : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 001c high: 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000020 smb_io_time logoff_time >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0020 low : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0024 high: 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000028 smb_io_time kickoff_time >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0028 low : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 002c high: 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000030 smb_io_time pass_last_set_time >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0030 low : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0034 high: 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000038 smb_io_time pass_can_change_time >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0038 low : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 003c high: 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000040 smb_io_time pass_must_change_time >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0040 low : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0044 high: 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000048 smb_io_unihdr hdr_user_name >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0048 uni_str_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 004a uni_max_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 004c buffer : 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000050 smb_io_unihdr hdr_full_name >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0050 uni_str_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0052 uni_max_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0054 buffer : 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000058 smb_io_unihdr hdr_home_dir >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0058 uni_str_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 005a uni_max_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 005c buffer : 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000060 smb_io_unihdr hdr_dir_drive >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0060 uni_str_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0062 uni_max_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0064 buffer : 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000068 smb_io_unihdr hdr_logon_script >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0068 uni_str_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 006a uni_max_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 006c buffer : 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000070 smb_io_unihdr hdr_profile_path >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0070 uni_str_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0072 uni_max_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0074 buffer : 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000078 smb_io_unihdr hdr_acct_desc >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0078 uni_str_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 007a uni_max_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 007c buffer : 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000080 smb_io_unihdr hdr_workstations >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0080 uni_str_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0082 uni_max_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0084 buffer : 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000088 smb_io_unihdr hdr_comment >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0088 uni_str_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 008a uni_max_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 008c buffer : 00000000 >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 000090 smb_io_unihdr hdr_munged_dial >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0090 uni_str_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0092 uni_max_len: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0094 buffer : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 0098 lm_pwd : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 00a8 nt_pwd : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 00b8 user_rid : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 00bc group_rid : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 00c0 acb_info : 00000280 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 00c4 fields_present : 03100000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 00c8 logon_divs : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 00cc ptr_logon_hrs : 00000000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 00d0 bad_password_count : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 00d2 logon_count : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 00d4 padding1 : 00 00 00 00 00 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 00da passmustchange : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 00db padding2 : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8s(857) > 00dc password : aa bc ac 59 23 4f d4 ff 36 c8 57 04 2f 6a 2c 40 69 54 9e 5f 92 1c 82 a1 82 ed 40 ce c3 6c b4 82 43 93 13 44 68 7d b0 41 3a f5 59 5f 49 23 14 1b 19 68 12 82 45 98 57 e6 ff ee f5 8c d0 b4 3d 2e 2a 7a f8 d3 67 7c db 26 82 37 8f 63 f5 dc 21 4a 7d 16 b3 2e d8 0e 11 b2 a7 2d f6 c5 5e 1b 79 c8 70 03 1f 5f c0 29 21 4d c1 44 b1 f6 c4 2d f5 6b bd 6e 96 93 14 d8 b4 4a 1c c0 57 bf ef f7 dd b8 07 ff c2 8d 2c 8b aa 8b 67 fa df 67 94 c5 86 c5 0d 14 1a 14 2c 2b 84 b8 13 f8 88 f2 50 2d 29 0c 65 7c 10 c3 3e f8 9a 59 1d 3d 0c 3a ea 96 67 23 3e d3 1c e7 81 01 07 0a be 61 15 3c 18 32 46 fc d8 22 4a 3d eb 40 11 54 56 89 8e b9 1c 23 c9 76 13 6b ce 48 23 5c 65 b8 f0 b9 33 b8 5c 61 01 47 3a cf d5 57 37 f9 05 b6 03 e6 15 91 b9 ac 20 09 3c 1e ab 19 98 c8 7e b7 53 65 c4 9e 02 62 77 cb 67 f0 b1 f6 67 89 7f 13 5c e0 e6 6c 03 b7 dc a5 65 36 dc 29 7c 92 3e 3b de de b2 ee 8a 4b e3 93 c4 b9 24 31 c0 58 e0 ca f3 67 9a 85 6c 1b 9a 3d 16 b0 f8 f1 fa 07 68 94 78 1d 2f de 6a 03 51 cf 6c 87 d3 3a e1 88 da 1c bf 5 +> > 8 37 f8 2a d2 01 b6 ff 11 de 54 ae cc 65 bd 9e ff cf 1d 6e 17 89 25 df c9 9b 37 12 96 52 8d 24 65 91 ac bd c2 6b 0a e1 39 ac 7e bd f7 0c 36 f9 08 9a 43 b1 1f c9 30 c5 d7 91 a3 68 c6 72 6c 8d c8 08 9f cd 59 06 60 cc 3a ca 7a 82 46 dd f7 0a 89 72 3b 8a e6 e7 86 aa 26 a7 c8 3a c2 4d 1d f2 5d 09 85 3d 45 e2 49 89 e0 a4 62 1e 73 70 24 1c 5d 91 70 a8 d6 33 c0 de 69 1e 15 91 7b e1 a7 de d5 f4 e9 f9 bb be 89 70 89 a9 af d9 6a e8 ce 1d be ea f1 05 a5 a9 a2 23 7e 43 e5 d2 91 d5 25 2e c6 e4 a2 58 e4 cf 51 08 0b f8 d8 bd f7 9b 46 b8 e6 89 e2 72 b4 92 44 4e 5b bd c6 ba fb c8 49 0f a6 ef c7 5d 62 9c a9 cc e5 02 fb >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002f0 smb_io_unistr2 - NULL uni_user_name >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002f0 smb_io_unistr2 - NULL uni_full_name >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002f0 smb_io_unistr2 - NULL uni_home_dir >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002f0 smb_io_unistr2 - NULL uni_dir_drive >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002f0 smb_io_unistr2 - NULL uni_logon_script >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002f0 smb_io_unistr2 - NULL uni_profile_path >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002f0 smb_io_unistr2 - NULL uni_acct_desc >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002f0 smb_io_unistr2 - NULL uni_workstations >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002f0 smb_io_unistr2 - NULL uni_comment >[2008/11/24 13:49:45, 8] rpc_parse/parse_prs.c:prs_debug(84) > 0002f0 smb_io_unistr2 - NULL uni_munged_dial >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 0308 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 0000000b >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_req hdr_req >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 000002f0 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0016 opnum : 0025 >[2008/11/24 13:49:45, 5] rpc_client/cli_pipe.c:rpc_api_pipe(770) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=858 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=8 > smb_flg2=51201 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=17 > smt_wct=16 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 776 (0x308) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 4280 (0x10B8) > smb_vwv[ 4]= 0 (0x0) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 0 (0x0) > smb_vwv[ 7]= 0 (0x0) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_vwv[10]= 82 (0x52) > smb_vwv[11]= 776 (0x308) > smb_vwv[12]= 82 (0x52) > smb_vwv[13]= 2 (0x2) > smb_vwv[14]= 38 (0x26) > smb_vwv[15]=16394 (0x400A) > smb_bcc=791 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... > [010] 00 00 03 10 00 00 00 08 03 00 00 0B 00 00 00 F0 ........ ........ > [020] 02 00 00 00 00 25 00 00 00 00 00 EA F5 CE 6D 66 .....%.. ......mf > [030] E8 35 4C A7 08 8A 1B B9 8C 39 29 19 00 19 00 00 .5L..... .9)..... > [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [050] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [060] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [070] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [080] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [090] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0A0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0B0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0C0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0D0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0E0] 00 00 00 00 00 00 00 80 02 00 00 00 00 10 03 00 ........ ........ > [0F0] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [100] 00 00 00 AA BC AC 59 23 4F D4 FF 36 C8 57 04 2F ......Y# O..6.W./ > [110] 6A 2C 40 69 54 9E 5F 92 1C 82 A1 82 ED 40 CE C3 j,@iT._. .....@.. > [120] 6C B4 82 43 93 13 44 68 7D B0 41 3A F5 59 5F 49 l..C..Dh }.A:.Y_I > [130] 23 14 1B 19 68 12 82 45 98 57 E6 FF EE F5 8C D0 #...h..E .W...... > [140] B4 3D 2E 2A 7A F8 D3 67 7C DB 26 82 37 8F 63 F5 .=.*z..g |.&.7.c. > [150] DC 21 4A 7D 16 B3 2E D8 0E 11 B2 A7 2D F6 C5 5E .!J}.... ....-..^ > [160] 1B 79 C8 70 03 1F 5F C0 29 21 4D C1 44 B1 F6 C4 .y.p.._. )!M.D... > [170] 2D F5 6B BD 6E 96 93 14 D8 B4 4A 1C C0 57 BF EF -.k.n... ..J..W.. > [180] F7 DD B8 07 FF C2 8D 2C 8B AA 8B 67 FA DF 67 94 ......., ...g..g. > [190] C5 86 C5 0D 14 1A 14 2C 2B 84 B8 13 F8 88 F2 50 ......., +......P > [1A0] 2D 29 0C 65 7C 10 C3 3E F8 9A 59 1D 3D 0C 3A EA -).e|..> ..Y.=.:. > [1B0] 96 67 23 3E D3 1C E7 81 01 07 0A BE 61 15 3C 18 .g#>.... ....a.<. > [1C0] 32 46 FC D8 22 4A 3D EB 40 11 54 56 89 8E B9 1C 2F.."J=. @.TV.... > [1D0] 23 C9 76 13 6B CE 48 23 5C 65 B8 F0 B9 33 B8 5C #.v.k.H# \e...3.\ > [1E0] 61 01 47 3A CF D5 57 37 F9 05 B6 03 E6 15 91 B9 a.G:..W7 ........ > [1F0] AC 20 09 3C 1E AB 19 98 C8 7E B7 53 65 C4 9E 02 . .<.... .~.Se... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 30 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 93 71 19 09 E3 1D DA 5B .q.....[ >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 31 mid = 17 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,862) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,862) wrote 862 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 84 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=84 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=17 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 28 (0x1C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 28 (0x1C) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 1C 00 00 00 0B 00 00 ........ ........ > [010] 00 04 00 00 00 00 00 00 00 BB 00 00 C0 ........ ..... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 31 mid = 17 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 31 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 31: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 92 A4 B3 69 A4 02 80 A7 ...i.... >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=84 > smb_com=0x25 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=17 > smt_wct=10 > smb_vwv[ 0]= 0 (0x0) > smb_vwv[ 1]= 28 (0x1C) > smb_vwv[ 2]= 0 (0x0) > smb_vwv[ 3]= 0 (0x0) > smb_vwv[ 4]= 56 (0x38) > smb_vwv[ 5]= 0 (0x0) > smb_vwv[ 6]= 28 (0x1C) > smb_vwv[ 7]= 56 (0x38) > smb_vwv[ 8]= 0 (0x0) > smb_vwv[ 9]= 0 (0x0) > smb_bcc=29 >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 00 05 00 02 03 10 00 00 00 1C 00 00 00 0B 00 00 ........ ........ > [010] 00 04 00 00 00 00 00 00 00 BB 00 00 C0 ........ ..... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 31 mid = 17 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 smb_io_rpc_hdr rpc_hdr >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0000 major : 05 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0001 minor : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0002 pkt_type : 02 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0003 flags : 03 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0004 pack_type0: 10 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0005 pack_type1: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0006 pack_type2: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0007 pack_type3: 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0008 frag_len : 001c >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 000a auth_len : 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 000c call_id : 0000000b >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000010 smb_io_rpc_hdr_resp rpc_hdr_resp >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint32(710) > 0010 alloc_hint: 00000004 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint16(681) > 0014 context_id: 0000 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0016 cancel_ct : 00 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_uint8(616) > 0017 reserved : 00 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(577) > cli_pipe_validate_current_pdu: got pdu len 28, data_len 4, ss_len 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) > rpc_api_pipe: got PDU len of 28 at offset 0 >[2008/11/24 13:49:45, 10] rpc_client/cli_pipe.c:rpc_api_pipe(894) > rpc_api_pipe: Remote machine smk2k8-hk-rdc1.smoke2k8.centrify.test pipe \samr fnum 0x400a returned 8 bytes. >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_debug(84) > 000000 samr_io_r_set_userinfo2 >[2008/11/24 13:49:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(769) > 0000 status: NT_STATUS_NOT_SUPPORTED >[2008/11/24 13:49:45, 10] intl/lang_tdb.c:lang_tdb_init(138) > lang_tdb_init: /opt/centrify/samba/lib/samba/en_US.UTF-8.msg: No such file or directory >Failed to set password for machine account (NT_STATUS_NOT_SUPPORTED) >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 32 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 15 0A 36 A8 11 5D 0C 2C ..6..]., >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 33 mid = 18 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,45) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,45) wrote 45 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 35 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=35 > smb_com=0x4 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=18 > smt_wct=0 > smb_bcc=0 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 33 mid = 18 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 33 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 33: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 13 E1 FA 9F 89 B8 84 5F ......._ >[2008/11/24 13:49:45, 10] libsmb/clientgen.c:cli_rpc_pipe_close(394) > cli_rpc_pipe_close: closed pipe \samr to machine smk2k8-hk-rdc1.smoke2k8.centrify.test >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 34 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_sign_outgoing_message(349) > client_sign_outgoing_message: sent SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 2D F1 0A 12 AC BA F1 0B -....... >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:store_sequence_for_reply(68) > store_sequence_for_reply: stored seq = 35 mid = 19 >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(152) > write_socket(8,39) >[2008/11/24 13:49:45, 6] libsmb/clientgen.c:write_socket(155) > write_socket(8,39) wrote 39 >[2008/11/24 13:49:45, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) > got smb length of 35 >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(484) >[2008/11/24 13:49:45, 5] lib/util.c:show_msg(494) > size=35 > smb_com=0x71 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=51205 > smb_tid=4098 > smb_pid=27822 > smb_uid=6146 > smb_mid=19 > smt_wct=0 > smb_bcc=0 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:get_sequence_for_reply(81) > get_sequence_for_reply: found seq = 35 mid = 19 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:simple_packet_signature(283) > simple_packet_signature: sequence number 35 >[2008/11/24 13:49:45, 10] libsmb/smb_signing.c:client_check_incoming_message(430) > client_check_incoming_message: seq 35: got good SMB signature of >[2008/11/24 13:49:45, 10] lib/util.c:dump_data(2264) > [000] 28 71 41 D8 CC 4D 91 CE (qA..M.. >[2008/11/24 13:49:45, 1] utils/net_ads.c:net_ads_join(1548) > call of net_join_domain failed: NT_STATUS_NOT_SUPPORTED >[2008/11/24 13:49:45, 2] utils/net.c:main(1075) > return code = -1 >Failed to join domain: NT_STATUS_NOT_SUPPORTED
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=3758">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 5917
:
3756
|
3757
| 3758 |
3759
|
3760
|
3761
|
3762
|
9178
|
9179
|
9182
|
9183
|
9184
|
9186
|
9187