[2009/03/10 11:49:57, 5] lib/debug.c:debug_dump_status(407) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 registry: False/0 [2009/03/10 11:49:57, 0] winbindd/winbindd.c:main(1137) winbindd version 3.2.8-0.27.fc5 started. Copyright Andrew Tridgell and the Samba Team 1992-2009 [2009/03/10 11:49:57, 3] param/loadparm.c:lp_load_ex(8753) lp_load_ex: refreshing parameters [2009/03/10 11:49:57, 3] param/loadparm.c:init_globals(4597) Initialising global parameters [2009/03/10 11:49:57, 3] param/params.c:pm_process(569) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2009/03/10 11:49:57, 3] param/loadparm.c:do_section(7416) Processing section "[global]" doing parameter workgroup = RK_KLBG doing parameter server string = Monster doing parameter log file = /var/log/samba/log.%m doing parameter log level = 1 doing parameter max log size = 10240 doing parameter security = domain doing parameter passdb backend = ldapsam:ldap://ldap-master.intern.rk-klosterneuburg.at/ doing parameter password server = * doing parameter os level = 40 doing parameter wins server = 192.168.60.3 doing parameter load printers = yes doing parameter cups options = raw doing parameter printing = cups doing parameter preserve case = yes doing parameter short preserve case = yes doing parameter case sensitive = no doing parameter default case = lower doing parameter ldap suffix = dc=rk-klbg,dc=at doing parameter ldap user suffix = ou=Users doing parameter ldap group suffix = ou=Groups doing parameter ldap machine suffix = ou=Computers doing parameter ldap idmap suffix = ou=Idmap doing parameter ldap admin dn = cn=Manager,dc=rk-klbg,dc=at doing parameter ldap ssl = no doing parameter ldap passwd sync = yes doing parameter ldap delete dn = yes doing parameter admin users = RK_KLBG\smbadmin doing parameter enable privileges = yes doing parameter idmap domains = ALLDOMAINS doing parameter idmap config ALLDOMAINS:default = yes doing parameter idmap config ALLDOMAINS:backend = ldap doing parameter idmap config ALLDOMAINS:ldap_url = ldap://ldap.intern.rk-klosterneuburg.at/ doing parameter idmap config ALLDOMAINS:range = 16777216-33554431 doing parameter idmap alloc backend = ldap doing parameter idmap alloc config:ldap_url = ldap://ldap-master.intern.rk-klosterneuburg.at/ doing parameter idmap alloc config:range = 16777216-33554431 doing parameter winbind trusted domains only = Yes doing parameter unix charset = ISO-8859-15 [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UCS-2LE [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UCS-2LE [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UTF-16LE [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UTF-16LE [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UCS-2BE [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UCS-2BE [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UTF-16BE [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UTF-16BE [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UTF8 [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UTF8 [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UTF-8 [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UTF-8 [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset ASCII [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset ASCII [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset 646 [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset 646 [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset ISO-8859-1 [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset ISO-8859-1 [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UCS2-HEX [2009/03/10 11:49:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UCS2-HEX [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE doing parameter display charset = ISO-8859-15 doing parameter dos charset = 850 doing parameter deadtime = 15 doing parameter socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 doing parameter include = /etc/samba/smb-%m.conf [2009/03/10 11:49:57, 2] param/loadparm.c:handle_include(6843) Can't find include file /etc/samba/smb-winbindd.conf [2009/03/10 11:49:57, 4] param/loadparm.c:lp_load_ex(8797) pm_process() returned Yes [2009/03/10 11:49:57, 7] param/loadparm.c:lp_servicenumber(9002) lp_servicenumber: couldn't find homes [2009/03/10 11:49:57, 10] param/loadparm.c:set_server_role(7975) set_server_role: role = ROLE_DOMAIN_MEMBER [2009/03/10 11:49:57, 2] lib/tallocmsg.c:register_msg_pool_usage(106) Registered MSG_REQ_POOL_USAGE [2009/03/10 11:49:57, 2] lib/dmallocmsg.c:register_dmalloc_msgs(77) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2009/03/10 11:49:57, 3] param/loadparm.c:lp_load_ex(8753) lp_load_ex: refreshing parameters Initialising global parameters [2009/03/10 11:49:57, 3] param/params.c:pm_process(569) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2009/03/10 11:49:57, 3] param/loadparm.c:do_section(7416) Processing section "[global]" doing parameter workgroup = RK_KLBG doing parameter server string = Monster doing parameter log file = /var/log/samba/log.%m doing parameter log level = 1 doing parameter max log size = 10240 doing parameter security = domain doing parameter passdb backend = ldapsam:ldap://ldap-master.intern.rk-klosterneuburg.at/ doing parameter password server = * doing parameter os level = 40 doing parameter wins server = 192.168.60.3 doing parameter load printers = yes doing parameter cups options = raw doing parameter printing = cups doing parameter preserve case = yes doing parameter short preserve case = yes doing parameter case sensitive = no doing parameter default case = lower doing parameter ldap suffix = dc=rk-klbg,dc=at doing parameter ldap user suffix = ou=Users doing parameter ldap group suffix = ou=Groups doing parameter ldap machine suffix = ou=Computers doing parameter ldap idmap suffix = ou=Idmap doing parameter ldap admin dn = cn=Manager,dc=rk-klbg,dc=at doing parameter ldap ssl = no doing parameter ldap passwd sync = yes doing parameter ldap delete dn = yes doing parameter admin users = RK_KLBG\smbadmin doing parameter enable privileges = yes doing parameter idmap domains = ALLDOMAINS doing parameter idmap config ALLDOMAINS:default = yes doing parameter idmap config ALLDOMAINS:backend = ldap doing parameter idmap config ALLDOMAINS:ldap_url = ldap://ldap.intern.rk-klosterneuburg.at/ doing parameter idmap config ALLDOMAINS:range = 16777216-33554431 doing parameter idmap alloc backend = ldap doing parameter idmap alloc config:ldap_url = ldap://ldap-master.intern.rk-klosterneuburg.at/ doing parameter idmap alloc config:range = 16777216-33554431 doing parameter winbind trusted domains only = Yes doing parameter unix charset = ISO-8859-15 [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:49:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE doing parameter display charset = ISO-8859-15 doing parameter dos charset = 850 doing parameter deadtime = 15 doing parameter socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 doing parameter include = /etc/samba/smb-%m.conf [2009/03/10 11:49:57, 2] param/loadparm.c:handle_include(6843) Can't find include file /etc/samba/smb-winbindd.conf [2009/03/10 11:49:57, 2] param/loadparm.c:do_section(7433) Processing section "[homes]" [2009/03/10 11:49:57, 8] param/loadparm.c:add_a_service(5760) add_a_service: Creating snum = 0 for homes [2009/03/10 11:49:57, 10] param/loadparm.c:hash_a_service(5798) hash_a_service: creating servicehash [2009/03/10 11:49:57, 10] param/loadparm.c:hash_a_service(5807) hash_a_service: hashing index 0 for service name homes doing parameter comment = Home Directories doing parameter browseable = no doing parameter writable = yes [2009/03/10 11:49:57, 2] param/loadparm.c:do_section(7433) Processing section "[printers]" [2009/03/10 11:49:57, 8] param/loadparm.c:add_a_service(5760) add_a_service: Creating snum = 1 for printers [2009/03/10 11:49:57, 10] param/loadparm.c:hash_a_service(5807) hash_a_service: hashing index 1 for service name printers doing parameter comment = All Printers doing parameter path = /var/spool/samba doing parameter browseable = no doing parameter guest ok = no doing parameter writable = no doing parameter printable = yes [2009/03/10 11:49:57, 2] param/loadparm.c:do_section(7433) Processing section "[home]" [2009/03/10 11:49:57, 8] param/loadparm.c:add_a_service(5760) add_a_service: Creating snum = 2 for home [2009/03/10 11:49:57, 10] param/loadparm.c:hash_a_service(5807) hash_a_service: hashing index 2 for service name home doing parameter comment = User homes doing parameter path = /home doing parameter public = no doing parameter writeable = yes doing parameter printable = no [2009/03/10 11:49:57, 2] param/loadparm.c:do_section(7433) Processing section "[data]" [2009/03/10 11:49:57, 8] param/loadparm.c:add_a_service(5760) add_a_service: Creating snum = 3 for data [2009/03/10 11:49:57, 10] param/loadparm.c:hash_a_service(5807) hash_a_service: hashing index 3 for service name data doing parameter comment = Data doing parameter path = /home/samba/data doing parameter public = no doing parameter writeable = yes doing parameter printable = no [2009/03/10 11:49:57, 2] param/loadparm.c:do_section(7433) Processing section "[backup]" [2009/03/10 11:49:57, 8] param/loadparm.c:add_a_service(5760) add_a_service: Creating snum = 4 for backup [2009/03/10 11:49:57, 10] param/loadparm.c:hash_a_service(5807) hash_a_service: hashing index 4 for service name backup doing parameter comment = Backup doing parameter path = /backup doing parameter public = no doing parameter writeable = yes doing parameter printable = no [2009/03/10 11:49:57, 4] param/loadparm.c:lp_load_ex(8797) pm_process() returned Yes [2009/03/10 11:49:57, 8] param/loadparm.c:add_a_service(5760) add_a_service: Creating snum = 5 for IPC$ [2009/03/10 11:49:57, 10] param/loadparm.c:hash_a_service(5807) hash_a_service: hashing index 5 for service name IPC$ [2009/03/10 11:49:57, 3] param/loadparm.c:lp_add_ipc(5904) adding IPC service [2009/03/10 11:49:57, 10] param/loadparm.c:set_server_role(7975) set_server_role: role = ROLE_DOMAIN_MEMBER [2009/03/10 11:49:57, 2] lib/interface.c:add_interface(337) added interface eth0 ip=fe80::202:a5ff:fe41:a01e%eth0 bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff:: [2009/03/10 11:49:57, 2] lib/interface.c:add_interface(337) added interface eth0 ip=192.168.60.4 bcast=192.168.60.255 netmask=255.255.255.0 [2009/03/10 11:49:57, 5] lib/util.c:init_names(271) Netbios name list:- my_netbios_names[0]="MONSTER" [2009/03/10 11:49:57, 2] lib/interface.c:add_interface(337) added interface eth0 ip=fe80::202:a5ff:fe41:a01e%eth0 bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff:: [2009/03/10 11:49:57, 2] lib/interface.c:add_interface(337) added interface eth0 ip=192.168.60.4 bcast=192.168.60.255 netmask=255.255.255.0 [2009/03/10 11:49:57, 5] lib/gencache.c:gencache_init(61) Opening cache file at /var/lib/samba/gencache.tdb [2009/03/10 11:49:57, 5] libsmb/namecache.c:namecache_enable(59) namecache_enable: enabling netbios namecache, timeout 660 seconds [2009/03/10 11:49:57, 10] winbindd/idmap_cache.c:idmap_cache_init(59) Opening cache file at /var/lib/samba/idmap_cache.tdb [2009/03/10 11:49:57, 8] lib/util.c:fcntl_lock(2021) fcntl_lock fd=9 op=13 offset=0 count=1 type=1 [2009/03/10 11:49:57, 8] lib/util.c:fcntl_lock(2040) fcntl_lock: Lock call successful [2009/03/10 11:49:57, 4] lib/time.c:TimeInit(1347) TimeInit: Serverzone is -3600 [2009/03/10 11:49:57, 0] winbindd/winbindd_cache.c:initialize_winbindd_cache(2379) initialize_winbindd_cache: clearing cache and re-creating with version number 1 [2009/03/10 11:49:57, 5] smbd/connection.c:claim_connection(142) claiming [] [2009/03/10 11:49:57, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key CE270000FFFFFFFF0000 [2009/03/10 11:49:57, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0x80fbc3a8 [2009/03/10 11:49:57, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key CE270000FFFFFFFF0000 [2009/03/10 11:49:57, 10] winbindd/winbindd_cache.c:wcache_tdc_add_domain(3827) wcache_tdc_add_domain: Adding domain BUILTIN (), SID S-1-5-32, flags = 0x0, attributes = 0x0, type = 0x0 [2009/03/10 11:49:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3636) pack_tdc_domains: Packing 1 trusted domains [2009/03/10 11:49:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3655) pack_tdc_domains: Packing domain BUILTIN () [2009/03/10 11:49:57, 2] winbindd/winbindd_util.c:add_trusted_domain(201) Added domain BUILTIN S-1-5-32 [2009/03/10 11:49:57, 10] winbindd/winbindd_cache.c:wcache_tdc_add_domain(3827) wcache_tdc_add_domain: Adding domain MONSTER (), SID S-1-5-21-264317539-4085856039-3162983169, flags = 0x0, attributes = 0x0, type = 0x0 [2009/03/10 11:49:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3636) pack_tdc_domains: Packing 2 trusted domains [2009/03/10 11:49:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3655) pack_tdc_domains: Packing domain BUILTIN () [2009/03/10 11:49:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3655) pack_tdc_domains: Packing domain MONSTER () [2009/03/10 11:49:57, 2] winbindd/winbindd_util.c:add_trusted_domain(201) Added domain MONSTER S-1-5-21-264317539-4085856039-3162983169 [2009/03/10 11:49:57, 10] winbindd/winbindd_cache.c:wcache_tdc_add_domain(3827) wcache_tdc_add_domain: Adding domain RK_KLBG (), SID S-1-5-21-181998944-1107627502-2274996074, flags = 0x0, attributes = 0x0, type = 0x0 [2009/03/10 11:49:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3636) pack_tdc_domains: Packing 3 trusted domains [2009/03/10 11:49:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3655) pack_tdc_domains: Packing domain BUILTIN () [2009/03/10 11:49:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3655) pack_tdc_domains: Packing domain MONSTER () [2009/03/10 11:49:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3655) pack_tdc_domains: Packing domain RK_KLBG () [2009/03/10 11:49:57, 2] winbindd/winbindd_util.c:add_trusted_domain(201) Added domain RK_KLBG S-1-5-21-181998944-1107627502-2274996074 [2009/03/10 11:49:57, 10] winbindd/winbindd_cm.c:set_domain_online_request(467) set_domain_online_request: called for domain RK_KLBG [2009/03/10 11:49:57, 10] winbindd/winbindd_cm.c:set_domain_online_request(493) set_domain_online_request: domain RK_KLBG was globally offline. [2009/03/10 11:49:57, 10] lib/events.c:event_add_timed(130) Added timed event "check_domain_online_handler": 80fb6ab0 [2009/03/10 11:49:57, 10] winbindd/winbindd_util.c:open_winbindd_socket(1259) open_winbindd_socket: opened socket fd 14 [2009/03/10 11:49:57, 10] winbindd/winbindd_util.c:open_winbindd_priv_socket(1271) open_winbindd_priv_socket: opened socket fd 15 [2009/03/10 11:49:57, 10] winbindd/winbindd_dual.c:async_request(125) Sending request to child pid 0 (domain=RK_KLBG) [2009/03/10 11:49:57, 10] winbindd/winbindd_dual.c:fork_domain_child(1141) fork_domain_child called for domain 'RK_KLBG' [2009/03/10 11:49:57, 10] lib/events.c:get_timed_events_timeout(304) timed_events_timeout: 4/995778 [2009/03/10 11:49:57, 10] lib/events.c:event_add_timed(130) Added timed event "async_request_timeout": 80fb9cd8 [2009/03/10 11:49:57, 10] lib/events.c:get_timed_events_timeout(304) timed_events_timeout: 4/995433 [2009/03/10 11:49:57, 10] lib/events.c:timed_event_destructor(65) Destroying timed event 80fb9cd8 "async_request_timeout" [2009/03/10 11:49:57, 10] winbindd/winbindd_cache.c:cache_retrieve_response(2468) Retrieving response for pid 10191 [2009/03/10 11:49:57, 5] winbindd/winbindd_util.c:init_child_recv(638) Received child initialization response for domain RK_KLBG [2009/03/10 11:49:57, 8] winbindd/winbindd_cm.c:connection_ok(1564) connection_ok: Connection to for domain RK_KLBG has NULL cli! [2009/03/10 11:49:57, 10] lib/gencache.c:gencache_get(194) Cache entry with key = SAFJOIN/DOMAIN/RK_KLBG couldn't be found [2009/03/10 11:49:57, 10] lib/gencache.c:gencache_get(208) Returning valid cache entry: key = SAF/DOMAIN/RK_KLBG, value = SAMBA, timeout = Tue Mar 10 12:04:57 2009 [2009/03/10 11:49:57, 5] libsmb/namequery.c:saf_fetch(200) saf_fetch: Returning "SAMBA" for "RK_KLBG" domain [2009/03/10 11:49:57, 10] winbindd/winbindd_cm.c:cm_open_connection(1399) cm_open_connection: saf_servername is 'SAMBA' for domain RK_KLBG [2009/03/10 11:49:57, 10] winbindd/winbindd_cm.c:cm_open_connection(1431) cm_open_connection: dcname is 'SAMBA' for domain RK_KLBG [2009/03/10 11:49:57, 10] lib/gencache.c:gencache_get(194) Cache entry with key = AD_SITENAME/DOMAIN/ couldn't be found [2009/03/10 11:49:57, 5] libads/dns.c:sitename_fetch(814) sitename_fetch: No stored sitename for [2009/03/10 11:49:57, 10] libsmb/namequery.c:internal_resolve_name(1505) internal_resolve_name: looking up SAMBA#20 (sitename (null)) [2009/03/10 11:49:57, 10] lib/gencache.c:gencache_get(208) Returning valid cache entry: key = NBT/SAMBA#20, value = 192.168.60.3:0, timeout = Tue Mar 10 11:57:52 2009 [2009/03/10 11:49:57, 5] libsmb/namecache.c:namecache_fetch(233) name SAMBA#20 found. [2009/03/10 11:49:57, 10] winbindd/winbindd_cm.c:cm_prepare_connection(754) cm_prepare_connection: connecting to DC SAMBA for domain RK_KLBG [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,194) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,194) wrote 194 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 127 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=10190 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=45824 (0xB300) smb_vwv[ 8]= 55 (0x37) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 243 (0xF3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=23759 (0x5CCF) smb_vwv[13]=28148 (0x6DF4) smb_vwv[14]=51617 (0xC9A1) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 73 61 6D 62 61 00 00 00 00 00 00 00 00 00 00 00 samba... ........ [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=10190 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=45824 (0xB300) smb_vwv[ 8]= 55 (0x37) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 243 (0xF3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=23759 (0x5CCF) smb_vwv[13]=28148 (0x6DF4) smb_vwv[14]=51617 (0xC9A1) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 73 61 6D 62 61 00 00 00 00 00 00 00 00 00 00 00 samba... ........ [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2009/03/10 11:49:58, 5] winbindd/winbindd_cm.c:cm_prepare_connection(860) connecting to SAMBA from MONSTER with username [RK_KLBG]\[MONSTER$] [2009/03/10 11:49:58, 3] libsmb/cliconnect.c:cli_session_setup_spnego(823) Doing spnego session setup (blob length=58) [2009/03/10 11:49:58, 3] libsmb/cliconnect.c:cli_session_setup_spnego(850) got OID=1 3 6 1 4 1 311 2 2 10 [2009/03/10 11:49:58, 3] libsmb/cliconnect.c:cli_session_setup_spnego(858) got principal=NONE [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,166) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,166) wrote 166 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 376 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=376 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=10190 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 257 (0x101) smb_bcc=333 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] A1 81 FE 30 81 FB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 E5 04 81 E2 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 0E 00 0E 00 30 TLMSSP.. .......0 [030] 00 00 00 15 82 89 60 03 76 48 CF 7A 49 4F 6A 00 ......`. vH.zIOj. [040] 00 00 00 00 00 00 00 A4 00 A4 00 3E 00 00 00 52 ........ ...>...R [050] 00 4B 00 5F 00 4B 00 4C 00 42 00 47 00 02 00 0E .K._.K.L .B.G.... [060] 00 52 00 4B 00 5F 00 4B 00 4C 00 42 00 47 00 01 .R.K._.K .L.B.G.. [070] 00 0A 00 53 00 41 00 4D 00 42 00 41 00 04 00 36 ...S.A.M .B.A...6 [080] 00 69 00 6E 00 74 00 65 00 72 00 6E 00 2E 00 72 .i.n.t.e .r.n...r [090] 00 6B 00 2D 00 6B 00 6C 00 6F 00 73 00 74 00 65 .k.-.k.l .o.s.t.e [0A0] 00 72 00 6E 00 65 00 75 00 62 00 75 00 72 00 67 .r.n.e.u .b.u.r.g [0B0] 00 2E 00 61 00 74 00 03 00 42 00 73 00 61 00 6D ...a.t.. .B.s.a.m [0C0] 00 62 00 61 00 2E 00 69 00 6E 00 74 00 65 00 72 .b.a...i .n.t.e.r [0D0] 00 6E 00 2E 00 72 00 6B 00 2D 00 6B 00 6C 00 6F .n...r.k .-.k.l.o [0E0] 00 73 00 74 00 65 00 72 00 6E 00 65 00 75 00 62 .s.t.e.r .n.e.u.b [0F0] 00 75 00 72 00 67 00 2E 00 61 00 74 00 00 00 00 .u.r.g.. .a.t.... [100] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [110] 00 62 00 61 00 20 00 33 00 2E 00 32 00 2E 00 38 .b.a. .3 ...2...8 [120] 00 2D 00 30 00 2E 00 32 00 36 00 6C 00 65 00 6F .-.0...2 .6.l.e.o [130] 00 2E 00 66 00 63 00 31 00 30 00 00 00 52 00 4B ...f.c.1 .0...R.K [140] 00 5F 00 4B 00 4C 00 42 00 47 00 00 00 ._.K.L.B .G... [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=376 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=10190 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 257 (0x101) smb_bcc=333 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] A1 81 FE 30 81 FB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 E5 04 81 E2 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 0E 00 0E 00 30 TLMSSP.. .......0 [030] 00 00 00 15 82 89 60 03 76 48 CF 7A 49 4F 6A 00 ......`. vH.zIOj. [040] 00 00 00 00 00 00 00 A4 00 A4 00 3E 00 00 00 52 ........ ...>...R [050] 00 4B 00 5F 00 4B 00 4C 00 42 00 47 00 02 00 0E .K._.K.L .B.G.... [060] 00 52 00 4B 00 5F 00 4B 00 4C 00 42 00 47 00 01 .R.K._.K .L.B.G.. [070] 00 0A 00 53 00 41 00 4D 00 42 00 41 00 04 00 36 ...S.A.M .B.A...6 [080] 00 69 00 6E 00 74 00 65 00 72 00 6E 00 2E 00 72 .i.n.t.e .r.n...r [090] 00 6B 00 2D 00 6B 00 6C 00 6F 00 73 00 74 00 65 .k.-.k.l .o.s.t.e [0A0] 00 72 00 6E 00 65 00 75 00 62 00 75 00 72 00 67 .r.n.e.u .b.u.r.g [0B0] 00 2E 00 61 00 74 00 03 00 42 00 73 00 61 00 6D ...a.t.. .B.s.a.m [0C0] 00 62 00 61 00 2E 00 69 00 6E 00 74 00 65 00 72 .b.a...i .n.t.e.r [0D0] 00 6E 00 2E 00 72 00 6B 00 2D 00 6B 00 6C 00 6F .n...r.k .-.k.l.o [0E0] 00 73 00 74 00 65 00 72 00 6E 00 65 00 75 00 62 .s.t.e.r .n.e.u.b [0F0] 00 75 00 72 00 67 00 2E 00 61 00 74 00 00 00 00 .u.r.g.. .a.t.... [100] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [110] 00 62 00 61 00 20 00 33 00 2E 00 32 00 2E 00 38 .b.a. .3 ...2...8 [120] 00 2D 00 30 00 2E 00 32 00 36 00 6C 00 65 00 6F .-.0...2 .6.l.e.o [130] 00 2E 00 66 00 63 00 31 00 30 00 00 00 52 00 4B ...f.c.1 .0...R.K [140] 00 5F 00 4B 00 4C 00 42 00 47 00 00 00 ._.K.L.B .G... [2009/03/10 11:49:58, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(1025) Got challenge flags: [2009/03/10 11:49:58, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60898215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_CHAL_TARGET_INFO NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2009/03/10 11:49:58, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(1047) NTLMSSP: Set final flags: [2009/03/10 11:49:58, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2009/03/10 11:49:58, 5] libsmb/ntlmssp.c:ntlmssp_client_challenge(1121) NTLMSSP challenge set by NTLM2 [2009/03/10 11:49:58, 5] libsmb/ntlmssp.c:ntlmssp_client_challenge(1122) challenge is: [2009/03/10 11:49:58, 5] lib/util.c:dump_data(2230) [000] 7C DD A1 AC B2 9A E0 1E |....... [2009/03/10 11:49:58, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(337) NTLMSSP Sign/Seal - Initialising with flags: [2009/03/10 11:49:58, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,270) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,270) wrote 270 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 128 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=128 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=10190 smb_uid=100 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=85 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 32 00 2E 00 38 00 2D 00 30 00 2E 00 32 ...2...8 .-.0...2 [030] 00 36 00 6C 00 65 00 6F 00 2E 00 66 00 63 00 31 .6.l.e.o ...f.c.1 [040] 00 30 00 00 00 52 00 4B 00 5F 00 4B 00 4C 00 42 .0...R.K ._.K.L.B [050] 00 47 00 00 00 .G... [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=128 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=10190 smb_uid=100 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=85 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 32 00 2E 00 38 00 2D 00 30 00 2E 00 32 ...2...8 .-.0...2 [030] 00 36 00 6C 00 65 00 6F 00 2E 00 66 00 63 00 31 .6.l.e.o ...f.c.1 [040] 00 30 00 00 00 52 00 4B 00 5F 00 4B 00 4C 00 42 .0...R.K ._.K.L.B [050] 00 47 00 00 00 .G... [2009/03/10 11:49:58, 10] libsmb/clientgen.c:cli_init_creds(415) cli_init_creds: user MONSTER$ domain RK_KLBG [2009/03/10 11:49:58, 10] libsmb/namequery.c:saf_store(86) saf_store: domain = [RK_KLBG], server = [SAMBA], expire = [1236683098] [2009/03/10 11:49:58, 10] lib/gencache.c:gencache_set(131) Adding cache entry with key = SAF/DOMAIN/RK_KLBG; value = SAMBA and timeout = Tue Mar 10 12:04:58 2009 (900 seconds ahead) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,78) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,78) wrote 78 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 56 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=56 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=4 smt_wct=7 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 511 (0x1FF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 511 (0x1FF) smb_vwv[ 6]= 0 (0x0) smb_bcc=7 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 49 50 43 00 00 00 00 IPC.... [2009/03/10 11:49:58, 10] winbindd/winbindd_cache.c:set_global_winbindd_state_online(2864) set_global_winbindd_state_online: online requested. [2009/03/10 11:49:58, 10] winbindd/winbindd_cache.c:set_global_winbindd_state_online(2867) set_global_winbindd_state_online: rejecting. [2009/03/10 11:49:58, 10] winbindd/winbindd_cm.c:set_domain_online(390) set_domain_online: called for domain RK_KLBG [2009/03/10 11:49:58, 10] lib/events.c:timed_event_destructor(65) Destroying timed event 80fb6ab0 "check_domain_online_handler" [2009/03/10 11:49:58, 10] winbindd/winbindd_cm.c:set_dc_type_and_flags(1918) set_dc_type_and_flags: setting up flags for primary domain [2009/03/10 11:49:58, 5] winbindd/winbindd_cm.c:set_dc_type_and_flags_connect(1766) set_dc_type_and_flags_connect: domain RK_KLBG [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,104) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,104) wrote 104 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 103 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=5 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=25856 (0x6500) smb_vwv[ 3]= 370 (0x172) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2049) Bind RPC Pipe[7265]: \lsarpc auth_type 0, auth_level 0 [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) Bind Abstract Syntax: [000] 6A 28 19 39 0C B1 D0 11 9B A8 00 C0 4F D9 2E F5 j(.9.... ....O... [010] 00 00 00 00 .... [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:valid_pipe_name(1653) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 0b [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0048 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000001 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_rb [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_bba [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0010 max_tsize: 10b8 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0012 max_rsize: 10b8 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0014 assoc_gid: 00000000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0018 num_contexts: 01 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 001c context_id : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 001e num_transfer_syntaxes: 01 [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 00001f smb_io_rpc_iface [2009/03/10 11:49:58, 7] rpc_parse/parse_prs.c:prs_debug(88) 000020 smb_io_uuid uuid [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0020 data : 3919286a [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0024 data : b10c [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0026 data : 11d0 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 0028 data : 9b a8 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 002a data : 00 c0 4f d9 2e f5 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0030 version: 00000000 [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 000034 smb_io_rpc_iface [2009/03/10 11:49:58, 7] rpc_parse/parse_prs.c:prs_debug(88) 000034 smb_io_uuid uuid [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0034 data : 8a885d04 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0038 data : 1ceb [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 003a data : 11c9 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 003c data : 9f e8 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 003e data : 08 00 2b 10 48 60 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0044 version: 00000002 [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x7265 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29285 (0x7265) smb_bcc=87 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 6A ........ .......j [030] 28 19 39 0C B1 D0 11 9B A8 00 C0 4F D9 2E F5 00 (.9..... ...O.... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,158) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,158) wrote 158 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 124 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6C 73 61 72 70 63 00 00 01 00 00 00 00 00 00 \lsarpc. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6C 73 61 72 70 63 00 00 01 00 00 00 00 00 00 \lsarpc. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 0c [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0044 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000001 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 68 at offset 0 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:rpc_api_pipe(893) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x7265 returned 68 bytes. [2009/03/10 11:49:58, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2086) rpc_pipe_bind: Remote machine SAMBA pipe \lsarpc fnum 0x7265 bind request returned ok. [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 0c [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0044 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000001 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_ba [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_bba [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0010 max_tsize: 10b8 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0012 max_rsize: 10b8 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0014 assoc_gid: 000053f0 [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 000018 smb_io_rpc_addr_str [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0018 len: 000d [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 001a str: \PIPE\lsarpc. [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 000027 smb_io_rpc_results [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0028 num_results: 01 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 002c result : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 002e reason : 0000 [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 000030 smb_io_rpc_iface [2009/03/10 11:49:58, 7] rpc_parse/parse_prs.c:prs_debug(88) 000030 smb_io_uuid uuid [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0030 data : 8a885d04 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0034 data : 1ceb [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0036 data : 11c9 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 0038 data : 9f e8 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 003a data : 08 00 2b 10 48 60 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0040 version: 00000002 [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:check_bind_response(1704) check_bind_response: accepted! [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2282) cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine SAMBA and bound anonymously. dssetup_DsRoleGetPrimaryDomainInformation: struct dssetup_DsRoleGetPrimaryDomainInformation in: struct dssetup_DsRoleGetPrimaryDomainInformation level : DS_ROLE_BASIC_INFORMATION (1) [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 001a [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000002 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_req hdr_req [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000002 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0016 opnum : 0000 [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x7265 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=108 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 26 (0x1A) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 26 (0x1A) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29285 (0x7265) smb_bcc=41 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 1A 00 00 00 02 00 00 00 02 ........ ........ [020] 00 00 00 00 00 00 00 01 00 ........ . [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,112) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,112) wrote 112 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 156 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=156 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=101 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 64 00 00 00 02 00 00 ........ .d...... [010] 00 4C 00 00 00 00 00 00 00 00 00 02 00 01 00 00 .L...... ........ [020] 00 05 00 00 00 00 00 00 01 04 00 02 00 00 00 00 ........ ........ [030] 00 00 00 00 00 12 F6 45 AE 89 4B CC 4A 95 84 EF .......E ..K.J... [040] D6 B3 B8 D3 B2 08 00 00 00 00 00 00 00 08 00 00 ........ ........ [050] 00 52 00 4B 00 5F 00 4B 00 4C 00 42 00 47 00 00 .R.K._.K .L.B.G.. [060] 00 00 00 00 00 ..... [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=156 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=101 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 64 00 00 00 02 00 00 ........ .d...... [010] 00 4C 00 00 00 00 00 00 00 00 00 02 00 01 00 00 .L...... ........ [020] 00 05 00 00 00 00 00 00 01 04 00 02 00 00 00 00 ........ ........ [030] 00 00 00 00 00 12 F6 45 AE 89 4B CC 4A 95 84 EF .......E ..K.J... [040] D6 B3 B8 D3 B2 08 00 00 00 00 00 00 00 08 00 00 ........ ........ [050] 00 52 00 4B 00 5F 00 4B 00 4C 00 42 00 47 00 00 .R.K._.K .L.B.G.. [060] 00 00 00 00 00 ..... [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 02 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0064 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000002 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 0000004c [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0016 cancel_ct : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0017 reserved : 00 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(576) cli_pipe_validate_current_pdu: got pdu len 100, data_len 76, ss_len 0 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 100 at offset 0 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:rpc_api_pipe(893) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x7265 returned 152 bytes. dssetup_DsRoleGetPrimaryDomainInformation: struct dssetup_DsRoleGetPrimaryDomainInformation out: struct dssetup_DsRoleGetPrimaryDomainInformation info : * info : union dssetup_DsRoleInfo(case 1) basic: struct dssetup_DsRolePrimaryDomInfoBasic role : DS_ROLE_PRIMARY_DC (5) flags : 0x01000000 (16777216) 0: DS_ROLE_PRIMARY_DS_RUNNING 0: DS_ROLE_PRIMARY_DS_MIXED_MODE 0: DS_ROLE_UPGRADE_IN_PROGRESS 1: DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT domain : * domain : 'RK_KLBG' dns_domain : NULL forest : NULL domain_guid : ae45f612-4b89-4acc-9584-efd6b3b8d3b2 result : WERR_OK [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,45) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,45) wrote 45 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 35 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=8 smt_wct=0 smb_bcc=0 [2009/03/10 11:49:58, 10] libsmb/clientgen.c:cli_rpc_pipe_close(553) cli_rpc_pipe_close: closed pipe \lsarpc to machine SAMBA [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,104) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,104) wrote 104 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 103 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=9 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=26112 (0x6600) smb_vwv[ 3]= 370 (0x172) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2049) Bind RPC Pipe[7266]: \lsarpc auth_type 0, auth_level 0 [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. [010] 00 00 00 00 .... [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:valid_pipe_name(1653) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 0b [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0048 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000003 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_rb [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_bba [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0010 max_tsize: 10b8 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0012 max_rsize: 10b8 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0014 assoc_gid: 00000000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0018 num_contexts: 01 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 001c context_id : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 001e num_transfer_syntaxes: 01 [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 00001f smb_io_rpc_iface [2009/03/10 11:49:58, 7] rpc_parse/parse_prs.c:prs_debug(88) 000020 smb_io_uuid uuid [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0020 data : 12345778 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0024 data : 1234 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0026 data : abcd [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 0028 data : ef 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 002a data : 01 23 45 67 89 ab [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0030 version: 00000000 [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 000034 smb_io_rpc_iface [2009/03/10 11:49:58, 7] rpc_parse/parse_prs.c:prs_debug(88) 000034 smb_io_uuid uuid [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0034 data : 8a885d04 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0038 data : 1ceb [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 003a data : 11c9 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 003c data : 9f e8 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 003e data : 08 00 2b 10 48 60 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0044 version: 00000002 [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x7266 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=10 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29286 (0x7266) smb_bcc=87 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 03 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,158) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,158) wrote 158 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 124 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=10 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 03 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6C 73 61 72 70 63 00 00 01 00 00 00 00 00 00 \lsarpc. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=10 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 03 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6C 73 61 72 70 63 00 00 01 00 00 00 00 00 00 \lsarpc. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 0c [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0044 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000003 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 68 at offset 0 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:rpc_api_pipe(893) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x7266 returned 68 bytes. [2009/03/10 11:49:58, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2086) rpc_pipe_bind: Remote machine SAMBA pipe \lsarpc fnum 0x7266 bind request returned ok. [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 0c [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0044 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000003 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_ba [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_bba [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0010 max_tsize: 10b8 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0012 max_rsize: 10b8 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0014 assoc_gid: 000053f0 [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 000018 smb_io_rpc_addr_str [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0018 len: 000d [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 001a str: \PIPE\lsarpc. [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 000027 smb_io_rpc_results [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0028 num_results: 01 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 002c result : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 002e reason : 0000 [2009/03/10 11:49:58, 6] rpc_parse/parse_prs.c:prs_debug(88) 000030 smb_io_rpc_iface [2009/03/10 11:49:58, 7] rpc_parse/parse_prs.c:prs_debug(88) 000030 smb_io_uuid uuid [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0030 data : 8a885d04 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0034 data : 1ceb [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0036 data : 11c9 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 0038 data : 9f e8 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 003a data : 08 00 2b 10 48 60 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0040 version: 00000002 [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:check_bind_response(1704) check_bind_response: accepted! [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2282) cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine SAMBA and bound anonymously. [2009/03/10 11:49:58, 5] rpc_client/init_lsa.c:init_lsa_sec_qos(70) init_lsa_sec_qos [2009/03/10 11:49:58, 5] rpc_client/init_lsa.c:init_lsa_obj_attr(90) init_lsa_obj_attr lsa_OpenPolicy2: struct lsa_OpenPolicy2 in: struct lsa_OpenPolicy2 system_name : * system_name : '' attr : * attr: struct lsa_ObjectAttribute len : 0x00000018 (24) root_dir : NULL object_name : NULL attributes : 0x00000000 (0) sec_desc : NULL sec_qos : * sec_qos: struct lsa_QosInfo len : 0x0000000c (12) impersonation_level : 0x0002 (2) context_mode : 0x01 (1) effective_only : 0x00 (0) access_mask : 0x02000000 (33554432) 0: LSA_POLICY_VIEW_LOCAL_INFORMATION 0: LSA_POLICY_VIEW_AUDIT_INFORMATION 0: LSA_POLICY_GET_PRIVATE_INFORMATION 0: LSA_POLICY_TRUST_ADMIN 0: LSA_POLICY_CREATE_ACCOUNT 0: LSA_POLICY_CREATE_SECRET 0: LSA_POLICY_CREATE_PRIVILEGE 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS 0: LSA_POLICY_AUDIT_LOG_ADMIN 0: LSA_POLICY_SERVER_ADMIN 0: LSA_POLICY_LOOKUP_NAMES [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0050 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000004 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_req hdr_req [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000038 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0016 opnum : 002c [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x7266 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=162 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=11 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 80 (0x50) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 80 (0x50) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29286 (0x7266) smb_bcc=95 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 50 00 00 00 04 00 00 00 38 .......P .......8 [020] 00 00 00 00 00 2C 00 00 00 02 00 01 00 00 00 00 .....,.. ........ [030] 00 00 00 01 00 00 00 00 00 00 00 18 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 ........ ........ [050] 00 02 00 0C 00 00 00 02 00 01 00 00 00 00 02 ........ ....... [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,166) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,166) wrote 166 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 104 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=11 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ [020] 00 00 00 00 00 B6 49 D6 45 B3 37 00 00 00 00 00 ......I. E.7..... [030] 00 . [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=11 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ [020] 00 00 00 00 00 B6 49 D6 45 B3 37 00 00 00 00 00 ......I. E.7..... [030] 00 . [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 02 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0030 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000004 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000018 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0016 cancel_ct : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0017 reserved : 00 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(576) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 48 at offset 0 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:rpc_api_pipe(893) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x7266 returned 48 bytes. lsa_OpenPolicy2: struct lsa_OpenPolicy2 out: struct lsa_OpenPolicy2 handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-b649-d645b3370000 result : NT_STATUS_OK lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2 in: struct lsa_QueryInfoPolicy2 handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-b649-d645b3370000 level : LSA_POLICY_INFO_DNS (12) [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 002e [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000005 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_req hdr_req [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000016 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0016 opnum : 002e [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x7266 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=12 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 46 (0x2E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 46 (0x2E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29286 (0x7266) smb_bcc=61 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 2E 00 00 00 05 00 00 00 16 ........ ........ [020] 00 00 00 00 00 2E 00 00 00 00 00 01 00 00 00 00 ........ ........ [030] 00 00 00 B6 49 D6 45 B3 37 00 00 0C 00 ....I.E. 7.... [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,132) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,132) wrote 132 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 88 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=12 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 03 23 10 00 00 00 20 00 00 00 05 00 00 ....#... . ...... [010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [020] 00 . [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=12 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 03 23 10 00 00 00 20 00 00 00 05 00 00 ....#... . ...... [010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [020] 00 . [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 23 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0020 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000005 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0016 cancel_ct : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0017 reserved : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000018 smb_io_rpc_hdr_fault fault [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_dcerpc_status(807) 0018 status : DCERPC_FAULT_OP_RNG_ERROR [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 001c reserved: 00000000 [2009/03/10 11:49:58, 1] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(624) cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR received from remote machine SAMBA pipe \lsarpc fnum 0x7266! [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 32 at offset 0 [2009/03/10 11:49:58, 5] rpc_client/init_lsa.c:init_lsa_sec_qos(70) init_lsa_sec_qos [2009/03/10 11:49:58, 5] rpc_client/init_lsa.c:init_lsa_obj_attr(90) init_lsa_obj_attr lsa_OpenPolicy: struct lsa_OpenPolicy in: struct lsa_OpenPolicy system_name : * system_name : 0x005c (92) attr : * attr: struct lsa_ObjectAttribute len : 0x00000018 (24) root_dir : NULL object_name : NULL attributes : 0x00000000 (0) sec_desc : NULL sec_qos : * sec_qos: struct lsa_QosInfo len : 0x0000000c (12) impersonation_level : 0x0002 (2) context_mode : 0x01 (1) effective_only : 0x00 (0) access_mask : 0x02000000 (33554432) 0: LSA_POLICY_VIEW_LOCAL_INFORMATION 0: LSA_POLICY_VIEW_AUDIT_INFORMATION 0: LSA_POLICY_GET_PRIVATE_INFORMATION 0: LSA_POLICY_TRUST_ADMIN 0: LSA_POLICY_CREATE_ACCOUNT 0: LSA_POLICY_CREATE_SECRET 0: LSA_POLICY_CREATE_PRIVILEGE 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS 0: LSA_POLICY_AUDIT_LOG_ADMIN 0: LSA_POLICY_SERVER_ADMIN 0: LSA_POLICY_LOOKUP_NAMES [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0044 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000006 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_req hdr_req [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 0000002c [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0016 opnum : 0006 [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x7266 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=150 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=13 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 68 (0x44) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29286 (0x7266) smb_bcc=83 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 44 00 00 00 06 00 00 00 2C .......D ......., [020] 00 00 00 00 00 06 00 00 00 02 00 5C 00 00 00 18 ........ ...\.... [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 04 00 02 00 0C 00 00 00 02 00 01 00 00 ........ ........ [050] 00 00 02 ... [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,154) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,154) wrote 154 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 104 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=13 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 06 00 00 ........ .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 02 00 00 ........ ........ [020] 00 00 00 00 00 B6 49 D6 45 B3 37 00 00 00 00 00 ......I. E.7..... [030] 00 . [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=13 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 06 00 00 ........ .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 02 00 00 ........ ........ [020] 00 00 00 00 00 B6 49 D6 45 B3 37 00 00 00 00 00 ......I. E.7..... [030] 00 . [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 02 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0030 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000006 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000018 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0016 cancel_ct : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0017 reserved : 00 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(576) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 48 at offset 0 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:rpc_api_pipe(893) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x7266 returned 48 bytes. lsa_OpenPolicy: struct lsa_OpenPolicy out: struct lsa_OpenPolicy handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-b649-d645b3370000 result : NT_STATUS_OK lsa_QueryInfoPolicy: struct lsa_QueryInfoPolicy in: struct lsa_QueryInfoPolicy handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-b649-d645b3370000 level : LSA_POLICY_INFO_ACCOUNT_DOMAIN (5) [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 002e [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000007 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_req hdr_req [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000016 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0016 opnum : 0007 [2009/03/10 11:49:58, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x7266 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=14 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 46 (0x2E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 46 (0x2E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29286 (0x7266) smb_bcc=61 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 2E 00 00 00 07 00 00 00 16 ........ ........ [020] 00 00 00 00 00 07 00 00 00 00 00 02 00 00 00 00 ........ ........ [030] 00 00 00 B6 49 D6 45 B3 37 00 00 05 00 ....I.E. 7.... [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,132) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,132) wrote 132 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=160 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=14 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 104 (0x68) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 104 (0x68) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 68 00 00 00 07 00 00 ........ .h...... [010] 00 50 00 00 00 00 00 00 00 00 00 02 00 05 00 00 .P...... ........ [020] 00 0E 00 10 00 04 00 02 00 08 00 02 00 08 00 00 ........ ........ [030] 00 00 00 00 00 07 00 00 00 52 00 4B 00 5F 00 4B ........ .R.K._.K [040] 00 4C 00 42 00 47 00 00 00 04 00 00 00 01 04 00 .L.B.G.. ........ [050] 00 00 00 00 05 15 00 00 00 60 15 D9 0A EE 0D 05 ........ .`...... [060] 42 6A AF 99 87 00 00 00 00 Bj...... . [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=160 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=14 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 104 (0x68) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 104 (0x68) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2009/03/10 11:49:58, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 68 00 00 00 07 00 00 ........ .h...... [010] 00 50 00 00 00 00 00 00 00 00 00 02 00 05 00 00 .P...... ........ [020] 00 0E 00 10 00 04 00 02 00 08 00 02 00 08 00 00 ........ ........ [030] 00 00 00 00 00 07 00 00 00 52 00 4B 00 5F 00 4B ........ .R.K._.K [040] 00 4C 00 42 00 47 00 00 00 04 00 00 00 01 04 00 .L.B.G.. ........ [050] 00 00 00 00 05 15 00 00 00 60 15 D9 0A EE 0D 05 ........ .`...... [060] 42 6A AF 99 87 00 00 00 00 Bj...... . [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 02 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0068 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000007 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000050 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0016 cancel_ct : 00 [2009/03/10 11:49:58, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0017 reserved : 00 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(576) cli_pipe_validate_current_pdu: got pdu len 104, data_len 80, ss_len 0 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 104 at offset 0 [2009/03/10 11:49:58, 10] rpc_client/cli_pipe.c:rpc_api_pipe(893) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x7266 returned 160 bytes. lsa_QueryInfoPolicy: struct lsa_QueryInfoPolicy out: struct lsa_QueryInfoPolicy info : * info : * info : union lsa_PolicyInformation(case 5) account_domain: struct lsa_DomainInfo name: struct lsa_StringLarge length : 0x000e (14) size : 0x0010 (16) string : * string : 'RK_KLBG' sid : * sid : S-1-5-21-181998944-1107627502-2274996074 result : NT_STATUS_OK [2009/03/10 11:49:58, 5] winbindd/winbindd_cm.c:set_dc_type_and_flags_connect(1896) set_dc_type_and_flags_connect: domain RK_KLBG is NOT in native mode. [2009/03/10 11:49:58, 5] winbindd/winbindd_cm.c:set_dc_type_and_flags_connect(1899) set_dc_type_and_flags_connect: domain RK_KLBG is NOT running active directory. [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,45) [2009/03/10 11:49:58, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,45) wrote 45 [2009/03/10 11:49:58, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 35 [2009/03/10 11:49:58, 5] lib/util.c:show_msg(642) [2009/03/10 11:49:58, 5] lib/util.c:show_msg(652) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10190 smb_uid=100 smb_mid=15 smt_wct=0 smb_bcc=0 [2009/03/10 11:49:58, 10] libsmb/clientgen.c:cli_rpc_pipe_close(553) cli_rpc_pipe_close: closed pipe \lsarpc to machine SAMBA [2009/03/10 11:49:58, 10] winbindd/winbindd_dual.c:async_request(125) Sending request to child pid 10191 (domain=RK_KLBG) [2009/03/10 11:49:58, 10] lib/events.c:event_add_timed(130) Added timed event "async_request_timeout": 80f89640 [2009/03/10 11:49:58, 10] lib/events.c:get_timed_events_timeout(304) timed_events_timeout: 299/999914 [2009/03/10 11:49:58, 10] lib/events.c:timed_event_destructor(65) Destroying timed event 80f89640 "async_request_timeout" [2009/03/10 11:49:58, 10] winbindd/winbindd_cache.c:cache_retrieve_response(2468) Retrieving response for pid 10191 [2009/03/10 11:50:32, 5] lib/gencache.c:gencache_shutdown(93) Closing cache file [2009/03/10 11:50:57, 5] lib/debug.c:debug_dump_status(407) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 registry: False/0 [2009/03/10 11:50:57, 0] winbindd/winbindd.c:main(1137) winbindd version 3.2.8-0.27.fc5 started. Copyright Andrew Tridgell and the Samba Team 1992-2009 [2009/03/10 11:50:57, 3] param/loadparm.c:lp_load_ex(8753) lp_load_ex: refreshing parameters [2009/03/10 11:50:57, 3] param/loadparm.c:init_globals(4597) Initialising global parameters [2009/03/10 11:50:57, 3] param/params.c:pm_process(569) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2009/03/10 11:50:57, 3] param/loadparm.c:do_section(7416) Processing section "[global]" doing parameter workgroup = RK_KLBG doing parameter server string = Monster doing parameter log file = /var/log/samba/log.%m doing parameter log level = 1 doing parameter max log size = 10240 doing parameter security = domain doing parameter passdb backend = ldapsam:ldap://ldap-master.intern.rk-klosterneuburg.at/ doing parameter password server = * doing parameter os level = 40 doing parameter wins server = 192.168.60.3 doing parameter load printers = yes doing parameter cups options = raw doing parameter printing = cups doing parameter preserve case = yes doing parameter short preserve case = yes doing parameter case sensitive = no doing parameter default case = lower doing parameter ldap suffix = dc=rk-klbg,dc=at doing parameter ldap user suffix = ou=Users doing parameter ldap group suffix = ou=Groups doing parameter ldap machine suffix = ou=Computers doing parameter ldap idmap suffix = ou=Idmap doing parameter ldap admin dn = cn=Manager,dc=rk-klbg,dc=at doing parameter ldap ssl = no doing parameter ldap passwd sync = yes doing parameter ldap delete dn = yes doing parameter admin users = RK_KLBG\smbadmin doing parameter enable privileges = yes doing parameter idmap domains = ALLDOMAINS doing parameter idmap config ALLDOMAINS:default = yes doing parameter idmap config ALLDOMAINS:backend = ldap doing parameter idmap config ALLDOMAINS:ldap_url = ldap://ldap.intern.rk-klosterneuburg.at/ doing parameter idmap config ALLDOMAINS:range = 16777216-33554431 doing parameter idmap alloc backend = ldap doing parameter idmap alloc config:ldap_url = ldap://ldap-master.intern.rk-klosterneuburg.at/ doing parameter idmap alloc config:range = 16777216-33554431 doing parameter winbind trusted domains only = Yes doing parameter unix charset = ISO-8859-15 [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UCS-2LE [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UCS-2LE [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UTF-16LE [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UTF-16LE [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UCS-2BE [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UCS-2BE [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UTF-16BE [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UTF-16BE [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UTF8 [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UTF8 [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UTF-8 [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UTF-8 [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset ASCII [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset ASCII [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset 646 [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset 646 [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset ISO-8859-1 [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset ISO-8859-1 [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(104) Attempting to register new charset UCS2-HEX [2009/03/10 11:50:57, 5] lib/iconv.c:smb_register_charset(112) Registered charset UCS2-HEX [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE doing parameter display charset = ISO-8859-15 doing parameter dos charset = 850 doing parameter deadtime = 15 doing parameter socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 doing parameter include = /etc/samba/smb-%m.conf [2009/03/10 11:50:57, 2] param/loadparm.c:handle_include(6843) Can't find include file /etc/samba/smb-winbindd.conf [2009/03/10 11:50:57, 4] param/loadparm.c:lp_load_ex(8797) pm_process() returned Yes [2009/03/10 11:50:57, 7] param/loadparm.c:lp_servicenumber(9002) lp_servicenumber: couldn't find homes [2009/03/10 11:50:57, 10] param/loadparm.c:set_server_role(7975) set_server_role: role = ROLE_DOMAIN_MEMBER [2009/03/10 11:50:57, 2] lib/tallocmsg.c:register_msg_pool_usage(106) Registered MSG_REQ_POOL_USAGE [2009/03/10 11:50:57, 2] lib/dmallocmsg.c:register_dmalloc_msgs(77) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2009/03/10 11:50:57, 3] param/loadparm.c:lp_load_ex(8753) lp_load_ex: refreshing parameters Initialising global parameters [2009/03/10 11:50:57, 3] param/params.c:pm_process(569) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2009/03/10 11:50:57, 3] param/loadparm.c:do_section(7416) Processing section "[global]" doing parameter workgroup = RK_KLBG doing parameter server string = Monster doing parameter log file = /var/log/samba/log.%m doing parameter log level = 1 doing parameter max log size = 10240 doing parameter security = domain doing parameter passdb backend = ldapsam:ldap://ldap-master.intern.rk-klosterneuburg.at/ doing parameter password server = * doing parameter os level = 40 doing parameter wins server = 192.168.60.3 doing parameter load printers = yes doing parameter cups options = raw doing parameter printing = cups doing parameter preserve case = yes doing parameter short preserve case = yes doing parameter case sensitive = no doing parameter default case = lower doing parameter ldap suffix = dc=rk-klbg,dc=at doing parameter ldap user suffix = ou=Users doing parameter ldap group suffix = ou=Groups doing parameter ldap machine suffix = ou=Computers doing parameter ldap idmap suffix = ou=Idmap doing parameter ldap admin dn = cn=Manager,dc=rk-klbg,dc=at doing parameter ldap ssl = no doing parameter ldap passwd sync = yes doing parameter ldap delete dn = yes doing parameter admin users = RK_KLBG\smbadmin doing parameter enable privileges = yes doing parameter idmap domains = ALLDOMAINS doing parameter idmap config ALLDOMAINS:default = yes doing parameter idmap config ALLDOMAINS:backend = ldap doing parameter idmap config ALLDOMAINS:ldap_url = ldap://ldap.intern.rk-klosterneuburg.at/ doing parameter idmap config ALLDOMAINS:range = 16777216-33554431 doing parameter idmap alloc backend = ldap doing parameter idmap alloc config:ldap_url = ldap://ldap-master.intern.rk-klosterneuburg.at/ doing parameter idmap alloc config:range = 16777216-33554431 doing parameter winbind trusted domains only = Yes doing parameter unix charset = ISO-8859-15 [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE [2009/03/10 11:50:57, 5] lib/charcnv.c:charset_name(82) Substituting charset 'UTF-8' for LOCALE doing parameter display charset = ISO-8859-15 doing parameter dos charset = 850 doing parameter deadtime = 15 doing parameter socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 doing parameter include = /etc/samba/smb-%m.conf [2009/03/10 11:50:57, 2] param/loadparm.c:handle_include(6843) Can't find include file /etc/samba/smb-winbindd.conf [2009/03/10 11:50:57, 2] param/loadparm.c:do_section(7433) Processing section "[homes]" [2009/03/10 11:50:57, 8] param/loadparm.c:add_a_service(5760) add_a_service: Creating snum = 0 for homes [2009/03/10 11:50:57, 10] param/loadparm.c:hash_a_service(5798) hash_a_service: creating servicehash [2009/03/10 11:50:57, 10] param/loadparm.c:hash_a_service(5807) hash_a_service: hashing index 0 for service name homes doing parameter comment = Home Directories doing parameter browseable = no doing parameter writable = yes [2009/03/10 11:50:57, 2] param/loadparm.c:do_section(7433) Processing section "[printers]" [2009/03/10 11:50:57, 8] param/loadparm.c:add_a_service(5760) add_a_service: Creating snum = 1 for printers [2009/03/10 11:50:57, 10] param/loadparm.c:hash_a_service(5807) hash_a_service: hashing index 1 for service name printers doing parameter comment = All Printers doing parameter path = /var/spool/samba doing parameter browseable = no doing parameter guest ok = no doing parameter writable = no doing parameter printable = yes [2009/03/10 11:50:57, 2] param/loadparm.c:do_section(7433) Processing section "[home]" [2009/03/10 11:50:57, 8] param/loadparm.c:add_a_service(5760) add_a_service: Creating snum = 2 for home [2009/03/10 11:50:57, 10] param/loadparm.c:hash_a_service(5807) hash_a_service: hashing index 2 for service name home doing parameter comment = User homes doing parameter path = /home doing parameter public = no doing parameter writeable = yes doing parameter printable = no [2009/03/10 11:50:57, 2] param/loadparm.c:do_section(7433) Processing section "[data]" [2009/03/10 11:50:57, 8] param/loadparm.c:add_a_service(5760) add_a_service: Creating snum = 3 for data [2009/03/10 11:50:57, 10] param/loadparm.c:hash_a_service(5807) hash_a_service: hashing index 3 for service name data doing parameter comment = Data doing parameter path = /home/samba/data doing parameter public = no doing parameter writeable = yes doing parameter printable = no [2009/03/10 11:50:57, 2] param/loadparm.c:do_section(7433) Processing section "[backup]" [2009/03/10 11:50:57, 8] param/loadparm.c:add_a_service(5760) add_a_service: Creating snum = 4 for backup [2009/03/10 11:50:57, 10] param/loadparm.c:hash_a_service(5807) hash_a_service: hashing index 4 for service name backup doing parameter comment = Backup doing parameter path = /backup doing parameter public = no doing parameter writeable = yes doing parameter printable = no [2009/03/10 11:50:57, 4] param/loadparm.c:lp_load_ex(8797) pm_process() returned Yes [2009/03/10 11:50:57, 8] param/loadparm.c:add_a_service(5760) add_a_service: Creating snum = 5 for IPC$ [2009/03/10 11:50:57, 10] param/loadparm.c:hash_a_service(5807) hash_a_service: hashing index 5 for service name IPC$ [2009/03/10 11:50:57, 3] param/loadparm.c:lp_add_ipc(5904) adding IPC service [2009/03/10 11:50:57, 10] param/loadparm.c:set_server_role(7975) set_server_role: role = ROLE_DOMAIN_MEMBER [2009/03/10 11:50:57, 2] lib/interface.c:add_interface(337) added interface eth0 ip=fe80::202:a5ff:fe41:a01e%eth0 bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff:: [2009/03/10 11:50:57, 2] lib/interface.c:add_interface(337) added interface eth0 ip=192.168.60.4 bcast=192.168.60.255 netmask=255.255.255.0 [2009/03/10 11:50:57, 5] lib/util.c:init_names(271) Netbios name list:- my_netbios_names[0]="MONSTER" [2009/03/10 11:50:57, 2] lib/interface.c:add_interface(337) added interface eth0 ip=fe80::202:a5ff:fe41:a01e%eth0 bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff:: [2009/03/10 11:50:57, 2] lib/interface.c:add_interface(337) added interface eth0 ip=192.168.60.4 bcast=192.168.60.255 netmask=255.255.255.0 [2009/03/10 11:50:57, 5] lib/gencache.c:gencache_init(61) Opening cache file at /var/lib/samba/gencache.tdb [2009/03/10 11:50:57, 5] libsmb/namecache.c:namecache_enable(59) namecache_enable: enabling netbios namecache, timeout 660 seconds [2009/03/10 11:50:57, 10] winbindd/idmap_cache.c:idmap_cache_init(59) Opening cache file at /var/lib/samba/idmap_cache.tdb [2009/03/10 11:50:57, 8] lib/util.c:fcntl_lock(2021) fcntl_lock fd=9 op=13 offset=0 count=1 type=1 [2009/03/10 11:50:57, 8] lib/util.c:fcntl_lock(2040) fcntl_lock: Lock call successful [2009/03/10 11:50:57, 4] lib/time.c:TimeInit(1347) TimeInit: Serverzone is -3600 [2009/03/10 11:50:57, 0] winbindd/winbindd_cache.c:initialize_winbindd_cache(2379) initialize_winbindd_cache: clearing cache and re-creating with version number 1 [2009/03/10 11:50:57, 5] smbd/connection.c:claim_connection(142) claiming [] [2009/03/10 11:50:57, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(100) Locking key D6270000FFFFFFFF0000 [2009/03/10 11:50:57, 10] lib/dbwrap_tdb.c:db_tdb_fetch_locked(129) Allocated locked data 0x0x8163d3a8 [2009/03/10 11:50:57, 10] lib/dbwrap_tdb.c:db_tdb_record_destr(42) Unlocking key D6270000FFFFFFFF0000 [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:wcache_tdc_add_domain(3827) wcache_tdc_add_domain: Adding domain BUILTIN (), SID S-1-5-32, flags = 0x0, attributes = 0x0, type = 0x0 [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3636) pack_tdc_domains: Packing 1 trusted domains [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3655) pack_tdc_domains: Packing domain BUILTIN () [2009/03/10 11:50:57, 2] winbindd/winbindd_util.c:add_trusted_domain(201) Added domain BUILTIN S-1-5-32 [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:wcache_tdc_add_domain(3827) wcache_tdc_add_domain: Adding domain MONSTER (), SID S-1-5-21-264317539-4085856039-3162983169, flags = 0x0, attributes = 0x0, type = 0x0 [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3636) pack_tdc_domains: Packing 2 trusted domains [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3655) pack_tdc_domains: Packing domain BUILTIN () [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3655) pack_tdc_domains: Packing domain MONSTER () [2009/03/10 11:50:57, 2] winbindd/winbindd_util.c:add_trusted_domain(201) Added domain MONSTER S-1-5-21-264317539-4085856039-3162983169 [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:wcache_tdc_add_domain(3827) wcache_tdc_add_domain: Adding domain RK_KLBG (), SID S-1-5-21-181998944-1107627502-2274996074, flags = 0x0, attributes = 0x0, type = 0x0 [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3636) pack_tdc_domains: Packing 3 trusted domains [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3655) pack_tdc_domains: Packing domain BUILTIN () [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3655) pack_tdc_domains: Packing domain MONSTER () [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:pack_tdc_domains(3655) pack_tdc_domains: Packing domain RK_KLBG () [2009/03/10 11:50:57, 2] winbindd/winbindd_util.c:add_trusted_domain(201) Added domain RK_KLBG S-1-5-21-181998944-1107627502-2274996074 [2009/03/10 11:50:57, 10] winbindd/winbindd_cm.c:set_domain_online_request(467) set_domain_online_request: called for domain RK_KLBG [2009/03/10 11:50:57, 10] winbindd/winbindd_cm.c:set_domain_online_request(493) set_domain_online_request: domain RK_KLBG was globally offline. [2009/03/10 11:50:57, 10] lib/events.c:event_add_timed(130) Added timed event "check_domain_online_handler": 81637ab0 [2009/03/10 11:50:57, 10] winbindd/winbindd_util.c:open_winbindd_socket(1259) open_winbindd_socket: opened socket fd 14 [2009/03/10 11:50:57, 10] winbindd/winbindd_util.c:open_winbindd_priv_socket(1271) open_winbindd_priv_socket: opened socket fd 15 [2009/03/10 11:50:57, 10] winbindd/winbindd_dual.c:async_request(125) Sending request to child pid 0 (domain=RK_KLBG) [2009/03/10 11:50:57, 10] winbindd/winbindd_dual.c:fork_domain_child(1141) fork_domain_child called for domain 'RK_KLBG' [2009/03/10 11:50:57, 10] lib/events.c:get_timed_events_timeout(304) timed_events_timeout: 4/995985 [2009/03/10 11:50:57, 10] lib/events.c:event_add_timed(130) Added timed event "async_request_timeout": 8163acd8 [2009/03/10 11:50:57, 10] lib/events.c:get_timed_events_timeout(304) timed_events_timeout: 4/995636 [2009/03/10 11:50:57, 10] lib/events.c:timed_event_destructor(65) Destroying timed event 8163acd8 "async_request_timeout" [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:cache_retrieve_response(2468) Retrieving response for pid 10199 [2009/03/10 11:50:57, 5] winbindd/winbindd_util.c:init_child_recv(638) Received child initialization response for domain RK_KLBG [2009/03/10 11:50:57, 8] winbindd/winbindd_cm.c:connection_ok(1564) connection_ok: Connection to for domain RK_KLBG has NULL cli! [2009/03/10 11:50:57, 10] lib/gencache.c:gencache_get(194) Cache entry with key = SAFJOIN/DOMAIN/RK_KLBG couldn't be found [2009/03/10 11:50:57, 10] lib/gencache.c:gencache_get(208) Returning valid cache entry: key = SAF/DOMAIN/RK_KLBG, value = SAMBA, timeout = Tue Mar 10 12:05:57 2009 [2009/03/10 11:50:57, 5] libsmb/namequery.c:saf_fetch(200) saf_fetch: Returning "SAMBA" for "RK_KLBG" domain [2009/03/10 11:50:57, 10] winbindd/winbindd_cm.c:cm_open_connection(1399) cm_open_connection: saf_servername is 'SAMBA' for domain RK_KLBG [2009/03/10 11:50:57, 10] winbindd/winbindd_cm.c:cm_open_connection(1431) cm_open_connection: dcname is 'SAMBA' for domain RK_KLBG [2009/03/10 11:50:57, 10] lib/gencache.c:gencache_get(194) Cache entry with key = AD_SITENAME/DOMAIN/ couldn't be found [2009/03/10 11:50:57, 5] libads/dns.c:sitename_fetch(814) sitename_fetch: No stored sitename for [2009/03/10 11:50:57, 10] libsmb/namequery.c:internal_resolve_name(1505) internal_resolve_name: looking up SAMBA#20 (sitename (null)) [2009/03/10 11:50:57, 10] lib/gencache.c:gencache_get(208) Returning valid cache entry: key = NBT/SAMBA#20, value = 192.168.60.3:0, timeout = Tue Mar 10 11:57:52 2009 [2009/03/10 11:50:57, 5] libsmb/namecache.c:namecache_fetch(233) name SAMBA#20 found. [2009/03/10 11:50:57, 10] winbindd/winbindd_cm.c:cm_prepare_connection(754) cm_prepare_connection: connecting to DC SAMBA for domain RK_KLBG [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,194) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,194) wrote 194 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 127 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=10198 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=57344 (0xE000) smb_vwv[ 8]= 55 (0x37) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 243 (0xF3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=34686 (0x877E) smb_vwv[13]=28183 (0x6E17) smb_vwv[14]=51617 (0xC9A1) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 73 61 6D 62 61 00 00 00 00 00 00 00 00 00 00 00 samba... ........ [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=10198 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=57344 (0xE000) smb_vwv[ 8]= 55 (0x37) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 243 (0xF3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=34686 (0x877E) smb_vwv[13]=28183 (0x6E17) smb_vwv[14]=51617 (0xC9A1) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 73 61 6D 62 61 00 00 00 00 00 00 00 00 00 00 00 samba... ........ [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2009/03/10 11:50:57, 5] winbindd/winbindd_cm.c:cm_prepare_connection(860) connecting to SAMBA from MONSTER with username [RK_KLBG]\[MONSTER$] [2009/03/10 11:50:57, 3] libsmb/cliconnect.c:cli_session_setup_spnego(823) Doing spnego session setup (blob length=58) [2009/03/10 11:50:57, 3] libsmb/cliconnect.c:cli_session_setup_spnego(850) got OID=1 3 6 1 4 1 311 2 2 10 [2009/03/10 11:50:57, 3] libsmb/cliconnect.c:cli_session_setup_spnego(858) got principal=NONE [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,166) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,166) wrote 166 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 376 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=376 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=10198 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 257 (0x101) smb_bcc=333 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] A1 81 FE 30 81 FB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 E5 04 81 E2 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 0E 00 0E 00 30 TLMSSP.. .......0 [030] 00 00 00 15 82 89 60 D4 B5 FC D0 09 EA 1B 00 00 ......`. ........ [040] 00 00 00 00 00 00 00 A4 00 A4 00 3E 00 00 00 52 ........ ...>...R [050] 00 4B 00 5F 00 4B 00 4C 00 42 00 47 00 02 00 0E .K._.K.L .B.G.... [060] 00 52 00 4B 00 5F 00 4B 00 4C 00 42 00 47 00 01 .R.K._.K .L.B.G.. [070] 00 0A 00 53 00 41 00 4D 00 42 00 41 00 04 00 36 ...S.A.M .B.A...6 [080] 00 69 00 6E 00 74 00 65 00 72 00 6E 00 2E 00 72 .i.n.t.e .r.n...r [090] 00 6B 00 2D 00 6B 00 6C 00 6F 00 73 00 74 00 65 .k.-.k.l .o.s.t.e [0A0] 00 72 00 6E 00 65 00 75 00 62 00 75 00 72 00 67 .r.n.e.u .b.u.r.g [0B0] 00 2E 00 61 00 74 00 03 00 42 00 73 00 61 00 6D ...a.t.. .B.s.a.m [0C0] 00 62 00 61 00 2E 00 69 00 6E 00 74 00 65 00 72 .b.a...i .n.t.e.r [0D0] 00 6E 00 2E 00 72 00 6B 00 2D 00 6B 00 6C 00 6F .n...r.k .-.k.l.o [0E0] 00 73 00 74 00 65 00 72 00 6E 00 65 00 75 00 62 .s.t.e.r .n.e.u.b [0F0] 00 75 00 72 00 67 00 2E 00 61 00 74 00 00 00 00 .u.r.g.. .a.t.... [100] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [110] 00 62 00 61 00 20 00 33 00 2E 00 32 00 2E 00 38 .b.a. .3 ...2...8 [120] 00 2D 00 30 00 2E 00 32 00 36 00 6C 00 65 00 6F .-.0...2 .6.l.e.o [130] 00 2E 00 66 00 63 00 31 00 30 00 00 00 52 00 4B ...f.c.1 .0...R.K [140] 00 5F 00 4B 00 4C 00 42 00 47 00 00 00 ._.K.L.B .G... [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=376 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=10198 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 257 (0x101) smb_bcc=333 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] A1 81 FE 30 81 FB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [010] 06 01 04 01 82 37 02 02 0A A2 81 E5 04 81 E2 4E .....7.. .......N [020] 54 4C 4D 53 53 50 00 02 00 00 00 0E 00 0E 00 30 TLMSSP.. .......0 [030] 00 00 00 15 82 89 60 D4 B5 FC D0 09 EA 1B 00 00 ......`. ........ [040] 00 00 00 00 00 00 00 A4 00 A4 00 3E 00 00 00 52 ........ ...>...R [050] 00 4B 00 5F 00 4B 00 4C 00 42 00 47 00 02 00 0E .K._.K.L .B.G.... [060] 00 52 00 4B 00 5F 00 4B 00 4C 00 42 00 47 00 01 .R.K._.K .L.B.G.. [070] 00 0A 00 53 00 41 00 4D 00 42 00 41 00 04 00 36 ...S.A.M .B.A...6 [080] 00 69 00 6E 00 74 00 65 00 72 00 6E 00 2E 00 72 .i.n.t.e .r.n...r [090] 00 6B 00 2D 00 6B 00 6C 00 6F 00 73 00 74 00 65 .k.-.k.l .o.s.t.e [0A0] 00 72 00 6E 00 65 00 75 00 62 00 75 00 72 00 67 .r.n.e.u .b.u.r.g [0B0] 00 2E 00 61 00 74 00 03 00 42 00 73 00 61 00 6D ...a.t.. .B.s.a.m [0C0] 00 62 00 61 00 2E 00 69 00 6E 00 74 00 65 00 72 .b.a...i .n.t.e.r [0D0] 00 6E 00 2E 00 72 00 6B 00 2D 00 6B 00 6C 00 6F .n...r.k .-.k.l.o [0E0] 00 73 00 74 00 65 00 72 00 6E 00 65 00 75 00 62 .s.t.e.r .n.e.u.b [0F0] 00 75 00 72 00 67 00 2E 00 61 00 74 00 00 00 00 .u.r.g.. .a.t.... [100] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [110] 00 62 00 61 00 20 00 33 00 2E 00 32 00 2E 00 38 .b.a. .3 ...2...8 [120] 00 2D 00 30 00 2E 00 32 00 36 00 6C 00 65 00 6F .-.0...2 .6.l.e.o [130] 00 2E 00 66 00 63 00 31 00 30 00 00 00 52 00 4B ...f.c.1 .0...R.K [140] 00 5F 00 4B 00 4C 00 42 00 47 00 00 00 ._.K.L.B .G... [2009/03/10 11:50:57, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(1025) Got challenge flags: [2009/03/10 11:50:57, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60898215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_CHAL_TARGET_INFO NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2009/03/10 11:50:57, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(1047) NTLMSSP: Set final flags: [2009/03/10 11:50:57, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2009/03/10 11:50:57, 5] libsmb/ntlmssp.c:ntlmssp_client_challenge(1121) NTLMSSP challenge set by NTLM2 [2009/03/10 11:50:57, 5] libsmb/ntlmssp.c:ntlmssp_client_challenge(1122) challenge is: [2009/03/10 11:50:57, 5] lib/util.c:dump_data(2230) [000] 80 8A B8 05 F1 10 29 6C ......)l [2009/03/10 11:50:57, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(337) NTLMSSP Sign/Seal - Initialising with flags: [2009/03/10 11:50:57, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,270) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,270) wrote 270 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 128 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=128 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=10198 smb_uid=100 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=85 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 32 00 2E 00 38 00 2D 00 30 00 2E 00 32 ...2...8 .-.0...2 [030] 00 36 00 6C 00 65 00 6F 00 2E 00 66 00 63 00 31 .6.l.e.o ...f.c.1 [040] 00 30 00 00 00 52 00 4B 00 5F 00 4B 00 4C 00 42 .0...R.K ._.K.L.B [050] 00 47 00 00 00 .G... [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=128 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=10198 smb_uid=100 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=85 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [020] 00 2E 00 32 00 2E 00 38 00 2D 00 30 00 2E 00 32 ...2...8 .-.0...2 [030] 00 36 00 6C 00 65 00 6F 00 2E 00 66 00 63 00 31 .6.l.e.o ...f.c.1 [040] 00 30 00 00 00 52 00 4B 00 5F 00 4B 00 4C 00 42 .0...R.K ._.K.L.B [050] 00 47 00 00 00 .G... [2009/03/10 11:50:57, 10] libsmb/clientgen.c:cli_init_creds(415) cli_init_creds: user MONSTER$ domain RK_KLBG [2009/03/10 11:50:57, 10] libsmb/namequery.c:saf_store(86) saf_store: domain = [RK_KLBG], server = [SAMBA], expire = [1236683157] [2009/03/10 11:50:57, 10] lib/gencache.c:gencache_set(131) Adding cache entry with key = SAF/DOMAIN/RK_KLBG; value = SAMBA and timeout = Tue Mar 10 12:05:57 2009 (900 seconds ahead) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,78) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,78) wrote 78 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 56 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=56 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=4 smt_wct=7 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 511 (0x1FF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 511 (0x1FF) smb_vwv[ 6]= 0 (0x0) smb_bcc=7 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 49 50 43 00 00 00 00 IPC.... [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:set_global_winbindd_state_online(2864) set_global_winbindd_state_online: online requested. [2009/03/10 11:50:57, 10] winbindd/winbindd_cache.c:set_global_winbindd_state_online(2867) set_global_winbindd_state_online: rejecting. [2009/03/10 11:50:57, 10] winbindd/winbindd_cm.c:set_domain_online(390) set_domain_online: called for domain RK_KLBG [2009/03/10 11:50:57, 10] lib/events.c:timed_event_destructor(65) Destroying timed event 81637ab0 "check_domain_online_handler" [2009/03/10 11:50:57, 10] winbindd/winbindd_cm.c:set_dc_type_and_flags(1918) set_dc_type_and_flags: setting up flags for primary domain [2009/03/10 11:50:57, 5] winbindd/winbindd_cm.c:set_dc_type_and_flags_connect(1766) set_dc_type_and_flags_connect: domain RK_KLBG [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,104) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,104) wrote 104 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 103 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=5 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=61696 (0xF100) smb_vwv[ 3]= 369 (0x171) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2049) Bind RPC Pipe[71f1]: \lsarpc auth_type 0, auth_level 0 [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) Bind Abstract Syntax: [000] 6A 28 19 39 0C B1 D0 11 9B A8 00 C0 4F D9 2E F5 j(.9.... ....O... [010] 00 00 00 00 .... [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:valid_pipe_name(1653) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 0b [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0048 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000001 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_rb [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_bba [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0010 max_tsize: 10b8 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0012 max_rsize: 10b8 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0014 assoc_gid: 00000000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0018 num_contexts: 01 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 001c context_id : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 001e num_transfer_syntaxes: 01 [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 00001f smb_io_rpc_iface [2009/03/10 11:50:57, 7] rpc_parse/parse_prs.c:prs_debug(88) 000020 smb_io_uuid uuid [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0020 data : 3919286a [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0024 data : b10c [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0026 data : 11d0 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 0028 data : 9b a8 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 002a data : 00 c0 4f d9 2e f5 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0030 version: 00000000 [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 000034 smb_io_rpc_iface [2009/03/10 11:50:57, 7] rpc_parse/parse_prs.c:prs_debug(88) 000034 smb_io_uuid uuid [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0034 data : 8a885d04 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0038 data : 1ceb [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 003a data : 11c9 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 003c data : 9f e8 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 003e data : 08 00 2b 10 48 60 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0044 version: 00000002 [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x71f1 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29169 (0x71F1) smb_bcc=87 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 6A ........ .......j [030] 28 19 39 0C B1 D0 11 9B A8 00 C0 4F D9 2E F5 00 (.9..... ...O.... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,158) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,158) wrote 158 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 124 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6C 73 61 72 70 63 00 00 01 00 00 00 00 00 00 \lsarpc. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6C 73 61 72 70 63 00 00 01 00 00 00 00 00 00 \lsarpc. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 0c [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0044 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000001 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 68 at offset 0 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:rpc_api_pipe(893) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x71f1 returned 68 bytes. [2009/03/10 11:50:57, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2086) rpc_pipe_bind: Remote machine SAMBA pipe \lsarpc fnum 0x71f1 bind request returned ok. [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 0c [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0044 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000001 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_ba [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_bba [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0010 max_tsize: 10b8 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0012 max_rsize: 10b8 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0014 assoc_gid: 000053f0 [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 000018 smb_io_rpc_addr_str [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0018 len: 000d [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 001a str: \PIPE\lsarpc. [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 000027 smb_io_rpc_results [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0028 num_results: 01 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 002c result : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 002e reason : 0000 [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 000030 smb_io_rpc_iface [2009/03/10 11:50:57, 7] rpc_parse/parse_prs.c:prs_debug(88) 000030 smb_io_uuid uuid [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0030 data : 8a885d04 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0034 data : 1ceb [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0036 data : 11c9 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 0038 data : 9f e8 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 003a data : 08 00 2b 10 48 60 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0040 version: 00000002 [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:check_bind_response(1704) check_bind_response: accepted! [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2282) cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine SAMBA and bound anonymously. dssetup_DsRoleGetPrimaryDomainInformation: struct dssetup_DsRoleGetPrimaryDomainInformation in: struct dssetup_DsRoleGetPrimaryDomainInformation level : DS_ROLE_BASIC_INFORMATION (1) [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 001a [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000002 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_req hdr_req [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000002 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0016 opnum : 0000 [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x71f1 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=108 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 26 (0x1A) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 26 (0x1A) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29169 (0x71F1) smb_bcc=41 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 1A 00 00 00 02 00 00 00 02 ........ ........ [020] 00 00 00 00 00 00 00 01 00 ........ . [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,112) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,112) wrote 112 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 156 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=156 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=101 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 64 00 00 00 02 00 00 ........ .d...... [010] 00 4C 00 00 00 00 00 00 00 00 00 02 00 01 00 00 .L...... ........ [020] 00 05 00 00 00 00 00 00 01 04 00 02 00 00 00 00 ........ ........ [030] 00 00 00 00 00 12 F6 45 AE 89 4B CC 4A 95 84 EF .......E ..K.J... [040] D6 B3 B8 D3 B2 08 00 00 00 00 00 00 00 08 00 00 ........ ........ [050] 00 52 00 4B 00 5F 00 4B 00 4C 00 42 00 47 00 00 .R.K._.K .L.B.G.. [060] 00 00 00 00 00 ..... [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=156 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=101 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 64 00 00 00 02 00 00 ........ .d...... [010] 00 4C 00 00 00 00 00 00 00 00 00 02 00 01 00 00 .L...... ........ [020] 00 05 00 00 00 00 00 00 01 04 00 02 00 00 00 00 ........ ........ [030] 00 00 00 00 00 12 F6 45 AE 89 4B CC 4A 95 84 EF .......E ..K.J... [040] D6 B3 B8 D3 B2 08 00 00 00 00 00 00 00 08 00 00 ........ ........ [050] 00 52 00 4B 00 5F 00 4B 00 4C 00 42 00 47 00 00 .R.K._.K .L.B.G.. [060] 00 00 00 00 00 ..... [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 02 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0064 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000002 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 0000004c [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0016 cancel_ct : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0017 reserved : 00 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(576) cli_pipe_validate_current_pdu: got pdu len 100, data_len 76, ss_len 0 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 100 at offset 0 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:rpc_api_pipe(893) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x71f1 returned 152 bytes. dssetup_DsRoleGetPrimaryDomainInformation: struct dssetup_DsRoleGetPrimaryDomainInformation out: struct dssetup_DsRoleGetPrimaryDomainInformation info : * info : union dssetup_DsRoleInfo(case 1) basic: struct dssetup_DsRolePrimaryDomInfoBasic role : DS_ROLE_PRIMARY_DC (5) flags : 0x01000000 (16777216) 0: DS_ROLE_PRIMARY_DS_RUNNING 0: DS_ROLE_PRIMARY_DS_MIXED_MODE 0: DS_ROLE_UPGRADE_IN_PROGRESS 1: DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT domain : * domain : 'RK_KLBG' dns_domain : NULL forest : NULL domain_guid : ae45f612-4b89-4acc-9584-efd6b3b8d3b2 result : WERR_OK [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,45) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,45) wrote 45 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 35 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=8 smt_wct=0 smb_bcc=0 [2009/03/10 11:50:57, 10] libsmb/clientgen.c:cli_rpc_pipe_close(553) cli_rpc_pipe_close: closed pipe \lsarpc to machine SAMBA [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,104) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,104) wrote 104 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 103 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=9 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=61952 (0xF200) smb_vwv[ 3]= 369 (0x171) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:rpc_pipe_bind(2049) Bind RPC Pipe[71f2]: \lsarpc auth_type 0, auth_level 0 [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:valid_pipe_name(1650) Bind Abstract Syntax: [000] 78 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB xW4.4... ...#Eg.. [010] 00 00 00 00 .... [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:valid_pipe_name(1653) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]...... ....+.H` [010] 02 00 00 00 .... [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 0b [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0048 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000003 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_rb [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_bba [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0010 max_tsize: 10b8 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0012 max_rsize: 10b8 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0014 assoc_gid: 00000000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0018 num_contexts: 01 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 001c context_id : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 001e num_transfer_syntaxes: 01 [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 00001f smb_io_rpc_iface [2009/03/10 11:50:57, 7] rpc_parse/parse_prs.c:prs_debug(88) 000020 smb_io_uuid uuid [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0020 data : 12345778 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0024 data : 1234 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0026 data : abcd [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 0028 data : ef 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 002a data : 01 23 45 67 89 ab [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0030 version: 00000000 [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 000034 smb_io_rpc_iface [2009/03/10 11:50:57, 7] rpc_parse/parse_prs.c:prs_debug(88) 000034 smb_io_uuid uuid [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0034 data : 8a885d04 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0038 data : 1ceb [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 003a data : 11c9 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 003c data : 9f e8 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 003e data : 08 00 2b 10 48 60 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0044 version: 00000002 [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x71f2 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=10 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29170 (0x71F2) smb_bcc=87 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 03 00 00 00 B8 .......H ........ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 ........ .......x [030] 57 34 12 34 12 CD AB EF 00 01 23 45 67 89 AB 00 W4.4.... ..#Eg... [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [050] 10 48 60 02 00 00 00 .H`.... [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,158) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,158) wrote 158 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 124 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=10 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 03 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6C 73 61 72 70 63 00 00 01 00 00 00 00 00 00 \lsarpc. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=10 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 03 00 00 ........ .D...... [010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [020] 5C 6C 73 61 72 70 63 00 00 01 00 00 00 00 00 00 \lsarpc. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [040] 60 02 00 00 00 `.... [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 0c [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0044 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000003 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 68 at offset 0 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:rpc_api_pipe(893) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x71f2 returned 68 bytes. [2009/03/10 11:50:57, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2086) rpc_pipe_bind: Remote machine SAMBA pipe \lsarpc fnum 0x71f2 bind request returned ok. [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 0c [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0044 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000003 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_ba [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_bba [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0010 max_tsize: 10b8 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0012 max_rsize: 10b8 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0014 assoc_gid: 000053f0 [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 000018 smb_io_rpc_addr_str [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0018 len: 000d [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 001a str: \PIPE\lsarpc. [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 000027 smb_io_rpc_results [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0028 num_results: 01 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 002c result : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 002e reason : 0000 [2009/03/10 11:50:57, 6] rpc_parse/parse_prs.c:prs_debug(88) 000030 smb_io_rpc_iface [2009/03/10 11:50:57, 7] rpc_parse/parse_prs.c:prs_debug(88) 000030 smb_io_uuid uuid [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0030 data : 8a885d04 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0034 data : 1ceb [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0036 data : 11c9 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 0038 data : 9f e8 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8s(865) 003a data : 08 00 2b 10 48 60 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0040 version: 00000002 [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:check_bind_response(1704) check_bind_response: accepted! [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2282) cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine SAMBA and bound anonymously. [2009/03/10 11:50:57, 5] rpc_client/init_lsa.c:init_lsa_sec_qos(70) init_lsa_sec_qos [2009/03/10 11:50:57, 5] rpc_client/init_lsa.c:init_lsa_obj_attr(90) init_lsa_obj_attr lsa_OpenPolicy2: struct lsa_OpenPolicy2 in: struct lsa_OpenPolicy2 system_name : * system_name : '' attr : * attr: struct lsa_ObjectAttribute len : 0x00000018 (24) root_dir : NULL object_name : NULL attributes : 0x00000000 (0) sec_desc : NULL sec_qos : * sec_qos: struct lsa_QosInfo len : 0x0000000c (12) impersonation_level : 0x0002 (2) context_mode : 0x01 (1) effective_only : 0x00 (0) access_mask : 0x02000000 (33554432) 0: LSA_POLICY_VIEW_LOCAL_INFORMATION 0: LSA_POLICY_VIEW_AUDIT_INFORMATION 0: LSA_POLICY_GET_PRIVATE_INFORMATION 0: LSA_POLICY_TRUST_ADMIN 0: LSA_POLICY_CREATE_ACCOUNT 0: LSA_POLICY_CREATE_SECRET 0: LSA_POLICY_CREATE_PRIVILEGE 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS 0: LSA_POLICY_AUDIT_LOG_ADMIN 0: LSA_POLICY_SERVER_ADMIN 0: LSA_POLICY_LOOKUP_NAMES [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0050 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000004 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_req hdr_req [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000038 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0016 opnum : 002c [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x71f2 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=162 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=11 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 80 (0x50) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 80 (0x50) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29170 (0x71F2) smb_bcc=95 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 50 00 00 00 04 00 00 00 38 .......P .......8 [020] 00 00 00 00 00 2C 00 00 00 02 00 01 00 00 00 00 .....,.. ........ [030] 00 00 00 01 00 00 00 00 00 00 00 18 00 00 00 00 ........ ........ [040] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 ........ ........ [050] 00 02 00 0C 00 00 00 02 00 01 00 00 00 00 02 ........ ....... [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,166) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,166) wrote 166 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 104 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=11 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ [020] 00 00 00 00 00 B6 49 11 46 E0 37 00 00 00 00 00 ......I. F.7..... [030] 00 . [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=11 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 04 00 00 ........ .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ........ ........ [020] 00 00 00 00 00 B6 49 11 46 E0 37 00 00 00 00 00 ......I. F.7..... [030] 00 . [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 02 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0030 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000004 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000018 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0016 cancel_ct : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0017 reserved : 00 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(576) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 48 at offset 0 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:rpc_api_pipe(893) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x71f2 returned 48 bytes. lsa_OpenPolicy2: struct lsa_OpenPolicy2 out: struct lsa_OpenPolicy2 handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-b649-1146e0370000 result : NT_STATUS_OK lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2 in: struct lsa_QueryInfoPolicy2 handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000001-0000-0000-b649-1146e0370000 level : LSA_POLICY_INFO_DNS (12) [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 002e [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000005 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_req hdr_req [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000016 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0016 opnum : 002e [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x71f2 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=12 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 46 (0x2E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 46 (0x2E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29170 (0x71F2) smb_bcc=61 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 2E 00 00 00 05 00 00 00 16 ........ ........ [020] 00 00 00 00 00 2E 00 00 00 00 00 01 00 00 00 00 ........ ........ [030] 00 00 00 B6 49 11 46 E0 37 00 00 0C 00 ....I.F. 7.... [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,132) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,132) wrote 132 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 88 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=12 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 03 23 10 00 00 00 20 00 00 00 05 00 00 ....#... . ...... [010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [020] 00 . [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=88 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=12 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=33 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 03 23 10 00 00 00 20 00 00 00 05 00 00 ....#... . ...... [010] 00 00 00 00 00 00 00 00 00 02 00 01 1C 00 00 00 ........ ........ [020] 00 . [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 23 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0020 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000005 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0016 cancel_ct : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0017 reserved : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000018 smb_io_rpc_hdr_fault fault [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_dcerpc_status(807) 0018 status : DCERPC_FAULT_OP_RNG_ERROR [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 001c reserved: 00000000 [2009/03/10 11:50:57, 1] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(624) cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR received from remote machine SAMBA pipe \lsarpc fnum 0x71f2! [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 32 at offset 0 [2009/03/10 11:50:57, 5] rpc_client/init_lsa.c:init_lsa_sec_qos(70) init_lsa_sec_qos [2009/03/10 11:50:57, 5] rpc_client/init_lsa.c:init_lsa_obj_attr(90) init_lsa_obj_attr lsa_OpenPolicy: struct lsa_OpenPolicy in: struct lsa_OpenPolicy system_name : * system_name : 0x005c (92) attr : * attr: struct lsa_ObjectAttribute len : 0x00000018 (24) root_dir : NULL object_name : NULL attributes : 0x00000000 (0) sec_desc : NULL sec_qos : * sec_qos: struct lsa_QosInfo len : 0x0000000c (12) impersonation_level : 0x0002 (2) context_mode : 0x01 (1) effective_only : 0x00 (0) access_mask : 0x02000000 (33554432) 0: LSA_POLICY_VIEW_LOCAL_INFORMATION 0: LSA_POLICY_VIEW_AUDIT_INFORMATION 0: LSA_POLICY_GET_PRIVATE_INFORMATION 0: LSA_POLICY_TRUST_ADMIN 0: LSA_POLICY_CREATE_ACCOUNT 0: LSA_POLICY_CREATE_SECRET 0: LSA_POLICY_CREATE_PRIVILEGE 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS 0: LSA_POLICY_AUDIT_LOG_ADMIN 0: LSA_POLICY_SERVER_ADMIN 0: LSA_POLICY_LOOKUP_NAMES [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0044 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000006 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_req hdr_req [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 0000002c [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0016 opnum : 0006 [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x71f2 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=150 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=13 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 68 (0x44) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29170 (0x71F2) smb_bcc=83 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 44 00 00 00 06 00 00 00 2C .......D ......., [020] 00 00 00 00 00 06 00 00 00 02 00 5C 00 00 00 18 ........ ...\.... [030] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [040] 00 00 00 04 00 02 00 0C 00 00 00 02 00 01 00 00 ........ ........ [050] 00 00 02 ... [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,154) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,154) wrote 154 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 104 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=13 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 06 00 00 ........ .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 02 00 00 ........ ........ [020] 00 00 00 00 00 B6 49 11 46 E0 37 00 00 00 00 00 ......I. F.7..... [030] 00 . [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=104 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=13 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 48 (0x30) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=49 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 30 00 00 00 06 00 00 ........ .0...... [010] 00 18 00 00 00 00 00 00 00 00 00 00 00 02 00 00 ........ ........ [020] 00 00 00 00 00 B6 49 11 46 E0 37 00 00 00 00 00 ......I. F.7..... [030] 00 . [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 02 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0030 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000006 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000018 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0016 cancel_ct : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0017 reserved : 00 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(576) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 48 at offset 0 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:rpc_api_pipe(893) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x71f2 returned 48 bytes. lsa_OpenPolicy: struct lsa_OpenPolicy out: struct lsa_OpenPolicy handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-b649-1146e0370000 result : NT_STATUS_OK lsa_QueryInfoPolicy: struct lsa_QueryInfoPolicy in: struct lsa_QueryInfoPolicy handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000002-0000-0000-b649-1146e0370000 level : LSA_POLICY_INFO_ACCOUNT_DOMAIN (5) [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 002e [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000007 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_req hdr_req [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000016 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0016 opnum : 0007 [2009/03/10 11:50:57, 5] rpc_client/cli_pipe.c:rpc_api_pipe(769) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x71f2 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=128 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=14 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 46 (0x2E) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 46 (0x2E) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=29170 (0x71F2) smb_bcc=61 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 2E 00 00 00 07 00 00 00 16 ........ ........ [020] 00 00 00 00 00 07 00 00 00 00 00 02 00 00 00 00 ........ ........ [030] 00 00 00 B6 49 11 46 E0 37 00 00 05 00 ....I.F. 7.... [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,132) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,132) wrote 132 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 160 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=160 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=14 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 104 (0x68) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 104 (0x68) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 68 00 00 00 07 00 00 ........ .h...... [010] 00 50 00 00 00 00 00 00 00 00 00 02 00 05 00 00 .P...... ........ [020] 00 0E 00 10 00 04 00 02 00 08 00 02 00 08 00 00 ........ ........ [030] 00 00 00 00 00 07 00 00 00 52 00 4B 00 5F 00 4B ........ .R.K._.K [040] 00 4C 00 42 00 47 00 00 00 04 00 00 00 01 04 00 .L.B.G.. ........ [050] 00 00 00 00 05 15 00 00 00 60 15 D9 0A EE 0D 05 ........ .`...... [060] 42 6A AF 99 87 00 00 00 00 Bj...... . [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=160 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=14 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 104 (0x68) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 104 (0x68) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=105 [2009/03/10 11:50:57, 10] lib/util.c:dump_data(2230) [000] 00 05 00 02 03 10 00 00 00 68 00 00 00 07 00 00 ........ .h...... [010] 00 50 00 00 00 00 00 00 00 00 00 02 00 05 00 00 .P...... ........ [020] 00 0E 00 10 00 04 00 02 00 08 00 02 00 08 00 00 ........ ........ [030] 00 00 00 00 00 07 00 00 00 52 00 4B 00 5F 00 4B ........ .R.K._.K [040] 00 4C 00 42 00 47 00 00 00 04 00 00 00 01 04 00 .L.B.G.. ........ [050] 00 00 00 00 05 15 00 00 00 60 15 D9 0A EE 0D 05 ........ .`...... [060] 42 6A AF 99 87 00 00 00 00 Bj...... . [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000000 smb_io_rpc_hdr rpc_hdr [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0000 major : 05 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0001 minor : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0002 pkt_type : 02 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0003 flags : 03 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0004 pack_type0: 10 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0005 pack_type1: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0006 pack_type2: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0007 pack_type3: 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0008 frag_len : 0068 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 000a auth_len : 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 000c call_id : 00000007 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_debug(88) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint32(718) 0010 alloc_hint: 00000050 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint16(689) 0014 context_id: 0000 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0016 cancel_ct : 00 [2009/03/10 11:50:57, 5] rpc_parse/parse_prs.c:prs_uint8(624) 0017 reserved : 00 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(576) cli_pipe_validate_current_pdu: got pdu len 104, data_len 80, ss_len 0 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:rpc_api_pipe(842) rpc_api_pipe: got PDU len of 104 at offset 0 [2009/03/10 11:50:57, 10] rpc_client/cli_pipe.c:rpc_api_pipe(893) rpc_api_pipe: Remote machine SAMBA pipe \lsarpc fnum 0x71f2 returned 160 bytes. lsa_QueryInfoPolicy: struct lsa_QueryInfoPolicy out: struct lsa_QueryInfoPolicy info : * info : * info : union lsa_PolicyInformation(case 5) account_domain: struct lsa_DomainInfo name: struct lsa_StringLarge length : 0x000e (14) size : 0x0010 (16) string : * string : 'RK_KLBG' sid : * sid : S-1-5-21-181998944-1107627502-2274996074 result : NT_STATUS_OK [2009/03/10 11:50:57, 5] winbindd/winbindd_cm.c:set_dc_type_and_flags_connect(1896) set_dc_type_and_flags_connect: domain RK_KLBG is NOT in native mode. [2009/03/10 11:50:57, 5] winbindd/winbindd_cm.c:set_dc_type_and_flags_connect(1899) set_dc_type_and_flags_connect: domain RK_KLBG is NOT running active directory. [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(236) write_socket(19,45) [2009/03/10 11:50:57, 6] libsmb/clientgen.c:write_socket(239) write_socket(19,45) wrote 45 [2009/03/10 11:50:57, 10] lib/util_sock.c:read_smb_length_return_keepalive(1187) got smb length of 35 [2009/03/10 11:50:57, 5] lib/util.c:show_msg(642) [2009/03/10 11:50:57, 5] lib/util.c:show_msg(652) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=10198 smb_uid=100 smb_mid=15 smt_wct=0 smb_bcc=0 [2009/03/10 11:50:57, 10] libsmb/clientgen.c:cli_rpc_pipe_close(553) cli_rpc_pipe_close: closed pipe \lsarpc to machine SAMBA [2009/03/10 11:50:57, 10] winbindd/winbindd_dual.c:async_request(125) Sending request to child pid 10199 (domain=RK_KLBG) [2009/03/10 11:50:57, 10] lib/events.c:event_add_timed(130) Added timed event "async_request_timeout": 8160a640 [2009/03/10 11:50:57, 10] lib/events.c:get_timed_events_timeout(304) timed_events_timeout: 299/999912 [2009/03/10 11:50:58, 10] lib/events.c:timed_event_destructor(65) Destroying timed event 8160a640 "async_request_timeout" [2009/03/10 11:50:58, 10] winbindd/winbindd_cache.c:cache_retrieve_response(2468) Retrieving response for pid 10199 [2009/03/10 11:51:10, 6] winbindd/winbindd.c:new_connection(717) accepted socket 20 [2009/03/10 11:51:10, 10] winbindd/winbindd.c:process_request(402) process_request: request fn INTERFACE_VERSION [2009/03/10 11:51:10, 3] winbindd/winbindd_misc.c:winbindd_interface_version(757) [10200]: request interface version [2009/03/10 11:51:10, 10] winbindd/winbindd.c:process_request(402) process_request: request fn WINBINDD_PRIV_PIPE_DIR [2009/03/10 11:51:10, 3] winbindd/winbindd_misc.c:winbindd_priv_pipe_dir(790) [10200]: request location of privileged pipe [2009/03/10 11:51:10, 6] winbindd/winbindd.c:new_connection(717) accepted socket 21 [2009/03/10 11:51:10, 2] winbindd/winbindd.c:remove_client(761) final write to client failed: Broken pipe [2009/03/10 11:51:10, 10] winbindd/winbindd.c:process_request(402) process_request: request fn LIST_GROUPS [2009/03/10 11:51:10, 3] winbindd/winbindd_misc.c:winbindd_list_ent(130) [10200]: list groups [2009/03/10 11:51:10, 10] winbindd/winbindd_dual.c:async_request(125) Sending request to child pid 0 (domain=BUILTIN) [2009/03/10 11:51:10, 10] winbindd/winbindd_dual.c:fork_domain_child(1141) fork_domain_child called for domain 'BUILTIN' [2009/03/10 11:51:10, 10] winbindd/winbindd_dual.c:async_request(125) Sending request to child pid 0 (domain=MONSTER) [2009/03/10 11:51:10, 10] winbindd/winbindd_dual.c:fork_domain_child(1141) fork_domain_child called for domain 'MONSTER' [2009/03/10 11:51:10, 10] winbindd/winbindd_dual.c:async_request(125) Sending request to child pid 10199 (domain=RK_KLBG) [2009/03/10 11:51:10, 10] lib/events.c:event_add_timed(130) Added timed event "async_request_timeout": 816a6ad8 [2009/03/10 11:51:10, 10] lib/events.c:event_add_timed(130) Added timed event "async_request_timeout": 81636da8 [2009/03/10 11:51:10, 10] lib/events.c:event_add_timed(130) Added timed event "async_request_timeout": 81625630 [2009/03/10 11:51:10, 10] lib/events.c:get_timed_events_timeout(304) timed_events_timeout: 299/999663 [2009/03/10 11:51:10, 10] lib/events.c:timed_event_destructor(65) Destroying timed event 816a6ad8 "async_request_timeout" [2009/03/10 11:51:10, 10] winbindd/winbindd_cache.c:cache_retrieve_response(2468) Retrieving response for pid 10202 [2009/03/10 11:51:10, 5] winbindd/winbindd_util.c:init_child_recv(638) Received child initialization response for domain MONSTER [2009/03/10 11:51:10, 10] winbindd/winbindd_dual.c:async_request(125) Sending request to child pid 10202 (domain=MONSTER) [2009/03/10 11:51:10, 10] lib/events.c:get_timed_events_timeout(304) timed_events_timeout: 299/997701 [2009/03/10 11:51:10, 10] lib/events.c:event_add_timed(130) Added timed event "async_request_timeout": 81609920 [2009/03/10 11:51:10, 10] lib/events.c:timed_event_destructor(65) Destroying timed event 81636da8 "async_request_timeout" [2009/03/10 11:51:10, 10] winbindd/winbindd_cache.c:cache_retrieve_response(2468) Retrieving response for pid 10201 [2009/03/10 11:51:10, 5] winbindd/winbindd_util.c:init_child_recv(638) Received child initialization response for domain BUILTIN [2009/03/10 11:51:10, 10] winbindd/winbindd_dual.c:async_request(125) Sending request to child pid 10201 (domain=BUILTIN) [2009/03/10 11:51:10, 10] lib/events.c:get_timed_events_timeout(304) timed_events_timeout: 299/997135 [2009/03/10 11:51:10, 10] lib/events.c:event_add_timed(130) Added timed event "async_request_timeout": 81636da8 [2009/03/10 11:51:10, 10] lib/events.c:get_timed_events_timeout(304) timed_events_timeout: 299/996968 [2009/03/10 11:51:10, 10] lib/events.c:timed_event_destructor(65) Destroying timed event 81609920 "async_request_timeout" [2009/03/10 11:51:10, 10] winbindd/winbindd_cache.c:cache_retrieve_response(2468) Retrieving response for pid 10202 [2009/03/10 11:51:10, 5] winbindd/winbindd_async.c:listent_recv(465) list_ent() failed! [2009/03/10 11:51:10, 5] winbindd/winbindd_misc.c:listent_recv(206) listent_recv: MONSTER returned no groups. [2009/03/10 11:51:10, 10] lib/events.c:get_timed_events_timeout(304) timed_events_timeout: 299/976254 [2009/03/10 11:51:10, 10] lib/events.c:timed_event_destructor(65) Destroying timed event 81636da8 "async_request_timeout" [2009/03/10 11:51:10, 10] winbindd/winbindd_cache.c:cache_retrieve_response(2468) Retrieving response for pid 10201 [2009/03/10 11:51:10, 10] winbindd/winbindd_cache.c:cache_retrieve_response(2490) Retrieving extra data length=167 [2009/03/10 11:51:10, 5] winbindd/winbindd_misc.c:listent_recv(193) listent_recv: BUILTIN returned groups. [2009/03/10 11:51:10, 10] lib/events.c:get_timed_events_timeout(304) timed_events_timeout: 299/971834 [2009/03/10 11:51:10, 10] lib/events.c:timed_event_destructor(65) Destroying timed event 81625630 "async_request_timeout" [2009/03/10 11:51:10, 10] winbindd/winbindd_cache.c:cache_retrieve_response(2468) Retrieving response for pid 10199 [2009/03/10 11:51:10, 5] winbindd/winbindd_async.c:listent_recv(465) list_ent() failed! [2009/03/10 11:51:10, 5] winbindd/winbindd_misc.c:listent_recv(206) listent_recv: RK_KLBG returned no groups. [2009/03/10 11:51:10, 2] winbindd/winbindd.c:remove_client(761) final write to client failed: Broken pipe [2009/03/10 11:51:18, 5] lib/gencache.c:gencache_shutdown(93) Closing cache file