[2009/06/19 14:13:29, 5] lib/debug.c:407(debug_dump_status) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 registry: False/0 [2009/06/19 14:13:29, 3] param/loadparm.c:9011(lp_load_ex) lp_load_ex: refreshing parameters [2009/06/19 14:13:29, 3] param/loadparm.c:4824(init_globals) Initialising global parameters [2009/06/19 14:13:29, 3] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/usr/local/samba/3.4.0pre2/lib/smb.conf" [2009/06/19 14:13:29, 3] param/loadparm.c:7698(do_section) Processing section "[global]" doing parameter workgroup = KEIM doing parameter realm = KEIM.VSIX.ME doing parameter preferred master = no doing parameter server string = Samba file and print server doing parameter security = ADS doing parameter encrypt passwords = yes doing parameter log level = 3 doing parameter log file = /usr/local/samba/3.4.0pre2/var/log/samba/%m doing parameter max log size = 50 doing parameter winbind separator = + doing parameter printcap name = cups doing parameter printing = cups doing parameter idmap uid = 10000-20000 doing parameter idmap gid = 10000-20000 [2009/06/19 14:13:29, 4] param/loadparm.c:9046(lp_load_ex) pm_process() returned Yes [2009/06/19 14:13:29, 7] param/loadparm.c:9251(lp_servicenumber) lp_servicenumber: couldn't find homes [2009/06/19 14:13:29, 10] param/loadparm.c:8259(set_server_role) set_server_role: role = ROLE_DOMAIN_MEMBER [2009/06/19 14:13:29, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UCS-2LE [2009/06/19 14:13:29, 5] lib/iconv.c:112(smb_register_charset) Registered charset UCS-2LE [2009/06/19 14:13:29, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF-16LE [2009/06/19 14:13:29, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF-16LE [2009/06/19 14:13:29, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UCS-2BE [2009/06/19 14:13:29, 5] lib/iconv.c:112(smb_register_charset) Registered charset UCS-2BE [2009/06/19 14:13:29, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF-16BE [2009/06/19 14:13:29, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF-16BE [2009/06/19 14:13:29, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF8 [2009/06/19 14:13:29, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF8 [2009/06/19 14:13:29, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF-8 [2009/06/19 14:13:29, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF-8 [2009/06/19 14:13:29, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset ASCII [2009/06/19 14:13:29, 5] lib/iconv.c:112(smb_register_charset) Registered charset ASCII [2009/06/19 14:13:29, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset 646 [2009/06/19 14:13:29, 5] lib/iconv.c:112(smb_register_charset) Registered charset 646 [2009/06/19 14:13:29, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset ISO-8859-1 [2009/06/19 14:13:29, 5] lib/iconv.c:112(smb_register_charset) Registered charset ISO-8859-1 [2009/06/19 14:13:29, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UCS2-HEX [2009/06/19 14:13:29, 5] lib/iconv.c:112(smb_register_charset) Registered charset UCS2-HEX [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:29, 5] lib/util.c:266(init_names) Netbios name list:- my_netbios_names[0]="SOL" [2009/06/19 14:13:29, 2] lib/interface.c:340(add_interface) added interface eth0 ip=2001:16d8:dd22::1 bcast=2001:16d8:dd22:0:ffff:ffff:ffff:ffff netmask=ffff:ffff:ffff:ffff:: [2009/06/19 14:13:29, 2] lib/interface.c:340(add_interface) added interface eth0 ip=2001:16d8:dd22:0:10:a7ff:fe10:c1af bcast=2001:16d8:dd22:0:ffff:ffff:ffff:ffff netmask=ffff:ffff:ffff:ffff:: [2009/06/19 14:13:29, 2] lib/interface.c:340(add_interface) added interface eth0 ip=2001:16d8:dd22:0:210:a7ff:fe10:c1af bcast=2001:16d8:dd22:0:ffff:ffff:ffff:ffff netmask=ffff:ffff:ffff:ffff:: [2009/06/19 14:13:29, 2] lib/interface.c:340(add_interface) added interface eth0 ip=2001:16d8:ee0f::1 bcast=2001:16d8:ee0f:0:ffff:ffff:ffff:ffff netmask=ffff:ffff:ffff:ffff:: [2009/06/19 14:13:29, 2] lib/interface.c:340(add_interface) added interface eth0 ip=2001:16d8:ee0f:0:10:a7ff:fe10:c1af bcast=2001:16d8:ee0f:0:ffff:ffff:ffff:ffff netmask=ffff:ffff:ffff:ffff:: [2009/06/19 14:13:29, 2] lib/interface.c:340(add_interface) added interface eth0 ip=2001:16d8:ee0f:0:210:a7ff:fe10:c1af bcast=2001:16d8:ee0f:0:ffff:ffff:ffff:ffff netmask=ffff:ffff:ffff:ffff:: [2009/06/19 14:13:29, 2] lib/interface.c:340(add_interface) added interface eth0 ip=fe80::210:a7ff:fe10:c1af%eth0 bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff:: [2009/06/19 14:13:29, 2] lib/interface.c:340(add_interface) added interface eth0 ip=192.168.80.51 bcast=192.168.87.255 netmask=255.255.248.0 [2009/06/19 14:13:32, 1] libnet/libnet_join.c:1871(libnet_Join) libnet_Join: libnet_JoinCtx: struct libnet_JoinCtx in: struct libnet_JoinCtx dc_name : 'fmusptwdc002.keim.vsix.me' machine_name : 'SOL' domain_name : * domain_name : 'KEIM.VSIX.ME' account_ou : NULL admin_account : 'chaz' admin_password : * machine_password : NULL join_flags : 0x00000023 (35) 0: WKSSVC_JOIN_FLAGS_IGNORE_UNSUPPORTED_FLAGS 0: WKSSVC_JOIN_FLAGS_JOIN_WITH_NEW_NAME 0: WKSSVC_JOIN_FLAGS_JOIN_DC_ACCOUNT 0: WKSSVC_JOIN_FLAGS_DEFER_SPN 0: WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED 0: WKSSVC_JOIN_FLAGS_JOIN_UNSECURE 1: WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED 0: WKSSVC_JOIN_FLAGS_WIN9X_UPGRADE 0: WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE 1: WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE 1: WKSSVC_JOIN_FLAGS_JOIN_TYPE os_version : NULL os_name : NULL create_upn : 0x00 (0) upn : NULL modify_config : 0x00 (0) ads : NULL debug : 0x01 (1) use_kerberos : 0x00 (0) secure_channel_type : SEC_CHAN_WKSTA (2) [2009/06/19 14:13:32, 3] libsmb/cliconnect.c:2031(cli_start_connection) Connecting to host=fmusptwdc002.keim.vsix.me [2009/06/19 14:13:32, 5] lib/gencache.c:61(gencache_init) Opening cache file at /usr/local/samba/3.4.0pre2/var/locks/gencache.tdb [2009/06/19 14:13:32, 10] lib/gencache.c:194(gencache_get) Cache entry with key = AD_SITENAME/DOMAIN/KEIM.VSIX.ME couldn't be found [2009/06/19 14:13:32, 5] libads/dns.c:814(sitename_fetch) sitename_fetch: No stored sitename for KEIM.VSIX.ME [2009/06/19 14:13:32, 10] libsmb/namequery.c:1505(internal_resolve_name) internal_resolve_name: looking up fmusptwdc002.keim.vsix.me#20 (sitename (null)) [2009/06/19 14:13:32, 10] lib/gencache.c:208(gencache_get) Returning expired cache entry: key = NBT/FMUSPTWDC002.KEIM.VSIX.ME#20, value = [2001:470:8a93:2::4]:0, timeout = Fri Jun 19 13:53:42 2009 [2009/06/19 14:13:32, 5] libsmb/namecache.c:208(namecache_fetch) no entry for fmusptwdc002.keim.vsix.me#20 found. [2009/06/19 14:13:32, 3] libsmb/namequery.c:1224(resolve_lmhosts) resolve_lmhosts: Attempting lmhosts lookup for name fmusptwdc002.keim.vsix.me<0x20> [2009/06/19 14:13:32, 4] libsmb/namequery.c:838(startlmhosts) startlmhosts: Can't open lmhosts file /usr/local/samba/3.4.0pre2/lib/lmhosts. Error was No such file or directory [2009/06/19 14:13:32, 3] libsmb/namequery.c:1088(resolve_wins) resolve_wins: Attempting wins lookup for name fmusptwdc002.keim.vsix.me<0x20> [2009/06/19 14:13:32, 3] libsmb/namequery.c:1092(resolve_wins) resolve_wins: WINS server resolution selected and no WINS servers listed. [2009/06/19 14:13:32, 3] libsmb/namequery.c:1306(resolve_hosts) resolve_hosts: Attempting host lookup for name fmusptwdc002.keim.vsix.me<0x20> [2009/06/19 14:13:32, 10] libsmb/namequery.c:582(remove_duplicate_addrs2) remove_duplicate_addrs2: looking for duplicate address/port pairs [2009/06/19 14:13:32, 5] libsmb/namecache.c:122(namecache_store) namecache_store: storing 1 address for fmusptwdc002.keim.vsix.me#20: [2001:470:8a93:2::4] [2009/06/19 14:13:32, 10] lib/gencache.c:131(gencache_set) Adding cache entry with key = NBT/FMUSPTWDC002.KEIM.VSIX.ME#20; value = [2001:470:8a93:2::4]:0 and timeout = Fri Jun 19 14:24:32 2009 (660 seconds ahead) [2009/06/19 14:13:32, 10] libsmb/namequery.c:1652(internal_resolve_name) internal_resolve_name: returning 1 addresses: 2001:470:8a93:2::4:0 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb89f8380 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb89f8858 [2009/06/19 14:13:32, 10] lib/events.c:105(run_events) Running timed event "tevent_req_timedout" 0xb89f8380 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb89f8380 "tevent_req_timedout" [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb89f8380 [2009/06/19 14:13:32, 3] lib/util_sock.c:1025(open_socket_out_send) Connecting to 2001:470:8a93:2::4 at port 445 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb89f9168 [2009/06/19 14:13:32, 10] lib/events.c:105(run_events) Running timed event "tevent_req_timedout" 0xb89f8858 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb89f8858 "tevent_req_timedout" [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb8a22c90 [2009/06/19 14:13:32, 3] lib/util_sock.c:1025(open_socket_out_send) Connecting to 2001:470:8a93:2::4 at port 139 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb8a22fc0 [2009/06/19 14:13:32, 10] lib/events.c:105(run_events) Running timed event "tevent_req_timedout" 0xb89f9168 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb89f9168 "tevent_req_timedout" [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb89f9168 [2009/06/19 14:13:32, 10] lib/events.c:105(run_events) Running timed event "tevent_req_timedout" 0xb8a22fc0 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a22fc0 "tevent_req_timedout" [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb8a22fc0 [2009/06/19 14:13:32, 10] lib/events.c:105(run_events) Running timed event "tevent_req_timedout" 0xb89f9168 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb89f9168 "tevent_req_timedout" [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb89f9168 [2009/06/19 14:13:32, 10] lib/events.c:105(run_events) Running timed event "tevent_req_timedout" 0xb8a22fc0 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a22fc0 "tevent_req_timedout" [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb8a22fc0 [2009/06/19 14:13:32, 10] lib/events.c:105(run_events) Running timed event "tevent_req_timedout" 0xb89f9168 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb89f9168 "tevent_req_timedout" [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb89f9168 [2009/06/19 14:13:32, 10] lib/events.c:105(run_events) Running timed event "tevent_req_timedout" 0xb8a22fc0 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a22fc0 "tevent_req_timedout" [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb8a22fc0 [2009/06/19 14:13:32, 10] lib/events.c:105(run_events) Running timed event "tevent_req_timedout" 0xb89f9168 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb89f9168 "tevent_req_timedout" [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb89f9168 [2009/06/19 14:13:32, 10] lib/events.c:105(run_events) Running timed event "tevent_req_timedout" 0xb8a22fc0 [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a22fc0 "tevent_req_timedout" [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "tevent_req_timedout": 0xb8a22fc0 [2009/06/19 14:13:32, 10] ../lib/async_req/async_sock.c:342(async_connect_connected) connect returned Connection refused [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a22fc0 "tevent_req_timedout" [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a22c90 "tevent_req_timedout" [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb89f9168 "tevent_req_timedout" [2009/06/19 14:13:32, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb89f8380 "tevent_req_timedout" [2009/06/19 14:13:32, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 0 SO_REUSEADDR = 0 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE [2009/06/19 14:13:32, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=1 [2009/06/19 14:13:33, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 1 [2009/06/19 14:13:33, 3] libsmb/cliconnect.c:939(cli_session_setup_spnego) Doing spnego session setup (blob length=124) [2009/06/19 14:13:33, 3] libsmb/cliconnect.c:966(cli_session_setup_spnego) got OID=1.2.840.48018.1.2.2 [2009/06/19 14:13:33, 3] libsmb/cliconnect.c:966(cli_session_setup_spnego) got OID=1.2.840.113554.1.2.2 [2009/06/19 14:13:33, 3] libsmb/cliconnect.c:966(cli_session_setup_spnego) got OID=1.2.840.113554.1.2.2.3 [2009/06/19 14:13:33, 3] libsmb/cliconnect.c:966(cli_session_setup_spnego) got OID=1.3.6.1.4.1.311.2.2.10 [2009/06/19 14:13:33, 3] libsmb/cliconnect.c:974(cli_session_setup_spnego) got principal=not_defined_in_RFC4178@please_ignore [2009/06/19 14:13:33, 6] libsmb/clientgen.c:245(write_socket) write_socket(7,158) [2009/06/19 14:13:33, 6] libsmb/clientgen.c:248(write_socket) write_socket(7,158) wrote 158 [2009/06/19 14:13:33, 10] lib/util_sock.c:781(read_smb_length_return_keepalive) got smb length of 557 [2009/06/19 14:13:33, 5] lib/util.c:632(show_msg) [2009/06/19 14:13:33, 5] lib/util.c:642(show_msg) size=557 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51205 smb_tid=0 smb_pid=32357 smb_uid=2049 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 557 (0x22D) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 262 (0x106) smb_bcc=514 [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] A1 82 01 02 30 81 FF A0 03 0A 01 01 A1 0C 06 0A ....0... ........ [0010] 2B 06 01 04 01 82 37 02 02 0A A2 81 E9 04 81 E6 +.....7. ........ [0020] 4E 54 4C 4D 53 53 50 00 02 00 00 00 08 00 08 00 NTLMSSP. ........ [0030] 38 00 00 00 15 82 89 62 04 D5 2E ED 80 C6 10 5F 8......b ......._ [0040] 00 00 00 00 00 00 00 00 A6 00 A6 00 40 00 00 00 ........ ....@... [0050] 06 00 72 17 00 00 00 0F 4B 00 45 00 49 00 4D 00 ..r..... K.E.I.M. [0060] 02 00 08 00 4B 00 45 00 49 00 4D 00 01 00 18 00 ....K.E. I.M..... [0070] 46 00 4D 00 55 00 53 00 50 00 54 00 57 00 44 00 F.M.U.S. P.T.W.D. [0080] 43 00 30 00 30 00 32 00 04 00 18 00 6B 00 65 00 C.0.0.2. ....k.e. [0090] 69 00 6D 00 2E 00 76 00 73 00 69 00 78 00 2E 00 i.m...v. s.i.x... [00A0] 6D 00 65 00 03 00 32 00 66 00 6D 00 75 00 73 00 m.e...2. f.m.u.s. [00B0] 70 00 74 00 77 00 64 00 63 00 30 00 30 00 32 00 p.t.w.d. c.0.0.2. [00C0] 2E 00 6B 00 65 00 69 00 6D 00 2E 00 76 00 73 00 ..k.e.i. m...v.s. [00D0] 69 00 78 00 2E 00 6D 00 65 00 05 00 18 00 6B 00 i.x...m. e.....k. [00E0] 65 00 69 00 6D 00 2E 00 76 00 73 00 69 00 78 00 e.i.m... v.s.i.x. [00F0] 2E 00 6D 00 65 00 07 00 08 00 6E 2B 0E 5D D7 F0 ..m.e... ..n+.].. [0100] C9 01 00 00 00 00 FF 57 00 69 00 6E 00 64 00 6F .......W .i.n.d.o [0110] 00 77 00 73 00 20 00 53 00 65 00 72 00 76 00 65 .w.s. .S .e.r.v.e [0120] 00 72 00 20 00 28 00 52 00 29 00 20 00 32 00 30 .r. .(.R .). .2.0 [0130] 00 30 00 38 00 20 00 45 00 6E 00 74 00 65 00 72 .0.8. .E .n.t.e.r [0140] 00 70 00 72 00 69 00 73 00 65 00 20 00 77 00 69 .p.r.i.s .e. .w.i [0150] 00 74 00 68 00 6F 00 75 00 74 00 20 00 48 00 79 .t.h.o.u .t. .H.y [0160] 00 70 00 65 00 72 00 2D 00 56 00 20 00 36 00 30 .p.e.r.- .V. .6.0 [0170] 00 30 00 32 00 20 00 53 00 65 00 72 00 76 00 69 .0.2. .S .e.r.v.i [0180] 00 63 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 .c.e. .P .a.c.k. [0190] 00 32 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .2...W.i .n.d.o.w [01A0] 00 73 00 20 00 53 00 65 00 72 00 76 00 65 00 72 .s. .S.e .r.v.e.r [01B0] 00 20 00 28 00 52 00 29 00 20 00 32 00 30 00 30 . .(.R.) . .2.0.0 [01C0] 00 38 00 20 00 45 00 6E 00 74 00 65 00 72 00 70 .8. .E.n .t.e.r.p [01D0] 00 72 00 69 00 73 00 65 00 20 00 77 00 69 00 74 .r.i.s.e . .w.i.t [01E0] 00 68 00 6F 00 75 00 74 00 20 00 48 00 79 00 70 .h.o.u.t . .H.y.p [01F0] 00 65 00 72 00 2D 00 56 00 20 00 36 00 2E 00 30 .e.r.-.V . .6...0 [2009/06/19 14:13:33, 5] lib/util.c:632(show_msg) [2009/06/19 14:13:33, 5] lib/util.c:642(show_msg) size=557 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51205 smb_tid=0 smb_pid=32357 smb_uid=2049 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 557 (0x22D) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 262 (0x106) smb_bcc=514 [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] A1 82 01 02 30 81 FF A0 03 0A 01 01 A1 0C 06 0A ....0... ........ [0010] 2B 06 01 04 01 82 37 02 02 0A A2 81 E9 04 81 E6 +.....7. ........ [0020] 4E 54 4C 4D 53 53 50 00 02 00 00 00 08 00 08 00 NTLMSSP. ........ [0030] 38 00 00 00 15 82 89 62 04 D5 2E ED 80 C6 10 5F 8......b ......._ [0040] 00 00 00 00 00 00 00 00 A6 00 A6 00 40 00 00 00 ........ ....@... [0050] 06 00 72 17 00 00 00 0F 4B 00 45 00 49 00 4D 00 ..r..... K.E.I.M. [0060] 02 00 08 00 4B 00 45 00 49 00 4D 00 01 00 18 00 ....K.E. I.M..... [0070] 46 00 4D 00 55 00 53 00 50 00 54 00 57 00 44 00 F.M.U.S. P.T.W.D. [0080] 43 00 30 00 30 00 32 00 04 00 18 00 6B 00 65 00 C.0.0.2. ....k.e. [0090] 69 00 6D 00 2E 00 76 00 73 00 69 00 78 00 2E 00 i.m...v. s.i.x... [00A0] 6D 00 65 00 03 00 32 00 66 00 6D 00 75 00 73 00 m.e...2. f.m.u.s. [00B0] 70 00 74 00 77 00 64 00 63 00 30 00 30 00 32 00 p.t.w.d. c.0.0.2. [00C0] 2E 00 6B 00 65 00 69 00 6D 00 2E 00 76 00 73 00 ..k.e.i. m...v.s. [00D0] 69 00 78 00 2E 00 6D 00 65 00 05 00 18 00 6B 00 i.x...m. e.....k. [00E0] 65 00 69 00 6D 00 2E 00 76 00 73 00 69 00 78 00 e.i.m... v.s.i.x. [00F0] 2E 00 6D 00 65 00 07 00 08 00 6E 2B 0E 5D D7 F0 ..m.e... ..n+.].. [0100] C9 01 00 00 00 00 FF 57 00 69 00 6E 00 64 00 6F .......W .i.n.d.o [0110] 00 77 00 73 00 20 00 53 00 65 00 72 00 76 00 65 .w.s. .S .e.r.v.e [0120] 00 72 00 20 00 28 00 52 00 29 00 20 00 32 00 30 .r. .(.R .). .2.0 [0130] 00 30 00 38 00 20 00 45 00 6E 00 74 00 65 00 72 .0.8. .E .n.t.e.r [0140] 00 70 00 72 00 69 00 73 00 65 00 20 00 77 00 69 .p.r.i.s .e. .w.i [0150] 00 74 00 68 00 6F 00 75 00 74 00 20 00 48 00 79 .t.h.o.u .t. .H.y [0160] 00 70 00 65 00 72 00 2D 00 56 00 20 00 36 00 30 .p.e.r.- .V. .6.0 [0170] 00 30 00 32 00 20 00 53 00 65 00 72 00 76 00 69 .0.2. .S .e.r.v.i [0180] 00 63 00 65 00 20 00 50 00 61 00 63 00 6B 00 20 .c.e. .P .a.c.k. [0190] 00 32 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 .2...W.i .n.d.o.w [01A0] 00 73 00 20 00 53 00 65 00 72 00 76 00 65 00 72 .s. .S.e .r.v.e.r [01B0] 00 20 00 28 00 52 00 29 00 20 00 32 00 30 00 30 . .(.R.) . .2.0.0 [01C0] 00 38 00 20 00 45 00 6E 00 74 00 65 00 72 00 70 .8. .E.n .t.e.r.p [01D0] 00 72 00 69 00 73 00 65 00 20 00 77 00 69 00 74 .r.i.s.e . .w.i.t [01E0] 00 68 00 6F 00 75 00 74 00 20 00 48 00 79 00 70 .h.o.u.t . .H.y.p [01F0] 00 65 00 72 00 2D 00 56 00 20 00 36 00 2E 00 30 .e.r.-.V . .6...0 [2009/06/19 14:13:33, 3] libsmb/ntlmssp.c:1023(ntlmssp_client_challenge) Got challenge flags: [2009/06/19 14:13:33, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x62898215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_CHAL_TARGET_INFO NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2009/06/19 14:13:33, 3] libsmb/ntlmssp.c:1045(ntlmssp_client_challenge) NTLMSSP: Set final flags: [2009/06/19 14:13:33, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2009/06/19 14:13:33, 5] libsmb/ntlmssp.c:1119(ntlmssp_client_challenge) NTLMSSP challenge set by NTLM2 [2009/06/19 14:13:33, 5] libsmb/ntlmssp.c:1120(ntlmssp_client_challenge) challenge is: [2009/06/19 14:13:33, 5] ../lib/util/util.c:304(_dump_data) [0000] C0 9A 80 0F 77 E1 6E C9 ....w.n. [2009/06/19 14:13:33, 3] libsmb/ntlmssp_sign.c:342(ntlmssp_sign_init) NTLMSSP Sign/Seal - Initialising with flags: [2009/06/19 14:13:33, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2009/06/19 14:13:33, 6] libsmb/clientgen.c:245(write_socket) write_socket(7,240) [2009/06/19 14:13:33, 6] libsmb/clientgen.c:248(write_socket) write_socket(7,240) wrote 240 [2009/06/19 14:13:33, 10] lib/util_sock.c:781(read_smb_length_return_keepalive) got smb length of 304 [2009/06/19 14:13:33, 5] lib/util.c:632(show_msg) [2009/06/19 14:13:33, 5] lib/util.c:642(show_msg) size=304 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=0 smb_pid=32357 smb_uid=2049 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 304 (0x130) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=261 [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] A1 07 30 05 A0 03 0A 01 00 57 00 69 00 6E 00 64 ..0..... .W.i.n.d [0010] 00 6F 00 77 00 73 00 20 00 53 00 65 00 72 00 76 .o.w.s. .S.e.r.v [0020] 00 65 00 72 00 20 00 28 00 52 00 29 00 20 00 32 .e.r. .( .R.). .2 [0030] 00 30 00 30 00 38 00 20 00 45 00 6E 00 74 00 65 .0.0.8. .E.n.t.e [0040] 00 72 00 70 00 72 00 69 00 73 00 65 00 20 00 77 .r.p.r.i .s.e. .w [0050] 00 69 00 74 00 68 00 6F 00 75 00 74 00 20 00 48 .i.t.h.o .u.t. .H [0060] 00 79 00 70 00 65 00 72 00 2D 00 56 00 20 00 36 .y.p.e.r .-.V. .6 [0070] 00 30 00 30 00 32 00 20 00 53 00 65 00 72 00 76 .0.0.2. .S.e.r.v [0080] 00 69 00 63 00 65 00 20 00 50 00 61 00 63 00 6B .i.c.e. .P.a.c.k [0090] 00 20 00 32 00 00 00 57 00 69 00 6E 00 64 00 6F . .2...W .i.n.d.o [00A0] 00 77 00 73 00 20 00 53 00 65 00 72 00 76 00 65 .w.s. .S .e.r.v.e [00B0] 00 72 00 20 00 28 00 52 00 29 00 20 00 32 00 30 .r. .(.R .). .2.0 [00C0] 00 30 00 38 00 20 00 45 00 6E 00 74 00 65 00 72 .0.8. .E .n.t.e.r [00D0] 00 70 00 72 00 69 00 73 00 65 00 20 00 77 00 69 .p.r.i.s .e. .w.i [00E0] 00 74 00 68 00 6F 00 75 00 74 00 20 00 48 00 79 .t.h.o.u .t. .H.y [00F0] 00 70 00 65 00 72 00 2D 00 56 00 20 00 36 00 2E .p.e.r.- .V. .6.. [0100] 00 30 00 00 00 .0... [2009/06/19 14:13:33, 5] lib/util.c:632(show_msg) [2009/06/19 14:13:33, 5] lib/util.c:642(show_msg) size=304 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=0 smb_pid=32357 smb_uid=2049 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 304 (0x130) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 9 (0x9) smb_bcc=261 [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] A1 07 30 05 A0 03 0A 01 00 57 00 69 00 6E 00 64 ..0..... .W.i.n.d [0010] 00 6F 00 77 00 73 00 20 00 53 00 65 00 72 00 76 .o.w.s. .S.e.r.v [0020] 00 65 00 72 00 20 00 28 00 52 00 29 00 20 00 32 .e.r. .( .R.). .2 [0030] 00 30 00 30 00 38 00 20 00 45 00 6E 00 74 00 65 .0.0.8. .E.n.t.e [0040] 00 72 00 70 00 72 00 69 00 73 00 65 00 20 00 77 .r.p.r.i .s.e. .w [0050] 00 69 00 74 00 68 00 6F 00 75 00 74 00 20 00 48 .i.t.h.o .u.t. .H [0060] 00 79 00 70 00 65 00 72 00 2D 00 56 00 20 00 36 .y.p.e.r .-.V. .6 [0070] 00 30 00 30 00 32 00 20 00 53 00 65 00 72 00 76 .0.0.2. .S.e.r.v [0080] 00 69 00 63 00 65 00 20 00 50 00 61 00 63 00 6B .i.c.e. .P.a.c.k [0090] 00 20 00 32 00 00 00 57 00 69 00 6E 00 64 00 6F . .2...W .i.n.d.o [00A0] 00 77 00 73 00 20 00 53 00 65 00 72 00 76 00 65 .w.s. .S .e.r.v.e [00B0] 00 72 00 20 00 28 00 52 00 29 00 20 00 32 00 30 .r. .(.R .). .2.0 [00C0] 00 30 00 38 00 20 00 45 00 6E 00 74 00 65 00 72 .0.8. .E .n.t.e.r [00D0] 00 70 00 72 00 69 00 73 00 65 00 20 00 77 00 69 .p.r.i.s .e. .w.i [00E0] 00 74 00 68 00 6F 00 75 00 74 00 20 00 48 00 79 .t.h.o.u .t. .H.y [00F0] 00 70 00 65 00 72 00 2D 00 56 00 20 00 36 00 2E .p.e.r.- .V. .6.. [0100] 00 30 00 00 00 .0... [2009/06/19 14:13:33, 5] libsmb/smb_signing.c:140(set_smb_signing_real_common) Mandatory SMB signing enabled! [2009/06/19 14:13:33, 5] libsmb/smb_signing.c:144(set_smb_signing_real_common) SMB signing enabled! [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:494(cli_simple_set_signing) cli_simple_set_signing: user_session_key [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] 04 09 0D 11 53 62 14 EA 31 33 B3 16 FD 7B D6 DA ....Sb.. 13...{.. [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:502(cli_simple_set_signing) cli_simple_set_signing: NULL response_data [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 0 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] 9F 25 14 E2 4D A2 EB 5E .%..M..^ [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 1 mid = 3 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 1 mid = 3 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 1 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 1: got good SMB signature of [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] 31 71 B7 51 47 1C 9F 8E 1q.QG... [2009/06/19 14:13:33, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=4 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 2 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] DB 7A 98 D5 0C BF 01 4C .z.....L [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 3 mid = 4 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 3 mid = 4 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 3 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 3: got good SMB signature of [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] 09 29 62 E7 2A B2 24 4E .)b.*.$N [2009/06/19 14:13:33, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 4 [2009/06/19 14:13:33, 10] libsmb/clientgen.c:467(cli_init_creds) cli_init_creds: user chaz domain [2009/06/19 14:13:33, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=5 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 4 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] D8 C2 59 87 54 4A 30 01 ..Y.TJ0. [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 5 mid = 5 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 5 mid = 5 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 5 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 5: got good SMB signature of [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] 6F 83 D0 A2 DD 5F 1B 57 o...._.W [2009/06/19 14:13:33, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 5 [2009/06/19 14:13:33, 5] rpc_client/cli_pipe.c:2554(rpc_pipe_bind_send) Bind RPC Pipe: host fmusptwdc002.keim.vsix.me auth_type 0, auth_level 0 [2009/06/19 14:13:33, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0b 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0048 000a auth_len : 0000 000c call_id : 00000001 [2009/06/19 14:13:33, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_rb [2009/06/19 14:13:33, 6] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_bba 0010 max_tsize: 10b8 0012 max_rsize: 10b8 0014 assoc_gid: 00000000 0018 num_contexts: 01 001c context_id : 0000 001e num_transfer_syntaxes: 01 [2009/06/19 14:13:33, 6] rpc_parse/parse_prs.c:88(prs_debug) 00001f smb_io_rpc_iface [2009/06/19 14:13:33, 7] rpc_parse/parse_prs.c:88(prs_debug) 000020 smb_io_uuid uuid 0020 data : 12345778 0024 data : 1234 0026 data : abcd 0028 data : ef 00 002a data : 01 23 45 67 89 ab 0030 version: 00000000 [2009/06/19 14:13:33, 6] rpc_parse/parse_prs.c:88(prs_debug) 000034 smb_io_rpc_iface [2009/06/19 14:13:33, 7] rpc_parse/parse_prs.c:88(prs_debug) 000034 smb_io_uuid uuid 0034 data : 8a885d04 0038 data : 1ceb 003a data : 11c9 003c data : 9f e8 003e data : 08 00 2b 10 48 60 0044 version: 00000002 [2009/06/19 14:13:33, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:33, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:33, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=6 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 6 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] 8C 98 09 C1 C6 5C 52 F6 .....\R. [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 7 mid = 6 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 7 mid = 6 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 7 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 7: got good SMB signature of [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] C9 89 39 66 76 9B B2 67 ..9fv..g [2009/06/19 14:13:33, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 6 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 7 mid = 6 [2009/06/19 14:13:33, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0c 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000001 [2009/06/19 14:13:33, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb8a26c08 [2009/06/19 14:13:33, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb8a26c08 [2009/06/19 14:13:33, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a26c08 "async_trigger" [2009/06/19 14:13:33, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 68 at offset 0: NT_STATUS_OK [2009/06/19 14:13:33, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 68 bytes. [2009/06/19 14:13:33, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0c 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000001 [2009/06/19 14:13:33, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_ba [2009/06/19 14:13:33, 6] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_bba 0010 max_tsize: 10b8 0012 max_rsize: 10b8 0014 assoc_gid: 00010d9a [2009/06/19 14:13:33, 6] rpc_parse/parse_prs.c:88(prs_debug) 000018 smb_io_rpc_addr_str 0018 len: 000c 001a str: \pipe\lsass. [2009/06/19 14:13:33, 6] rpc_parse/parse_prs.c:88(prs_debug) 000026 smb_io_rpc_results 0028 num_results: 01 002c result : 0000 002e reason : 0000 [2009/06/19 14:13:33, 6] rpc_parse/parse_prs.c:88(prs_debug) 000030 smb_io_rpc_iface [2009/06/19 14:13:33, 7] rpc_parse/parse_prs.c:88(prs_debug) 000030 smb_io_uuid uuid 0030 data : 8a885d04 0034 data : 1ceb 0036 data : 11c9 0038 data : 9f e8 003a data : 08 00 2b 10 48 60 0040 version: 00000002 [2009/06/19 14:13:33, 5] rpc_client/cli_pipe.c:2401(check_bind_response) check_bind_response: accepted! [2009/06/19 14:13:33, 10] rpc_client/cli_pipe.c:3672(cli_rpc_pipe_open_noauth) cli_rpc_pipe_open_noauth: opened pipe \lsarpc to machine fmusptwdc002.keim.vsix.me and bound anonymously. [2009/06/19 14:13:33, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_OpenPolicy: struct lsa_OpenPolicy in: struct lsa_OpenPolicy system_name : * system_name : 0x005c (92) attr : * attr: struct lsa_ObjectAttribute len : 0x00000018 (24) root_dir : NULL object_name : NULL attributes : 0x00000000 (0) sec_desc : NULL sec_qos : * sec_qos: struct lsa_QosInfo len : 0x0000000c (12) impersonation_level : 0x0002 (2) context_mode : 0x01 (1) effective_only : 0x00 (0) access_mask : 0x02000000 (33554432) 0: LSA_POLICY_VIEW_LOCAL_INFORMATION 0: LSA_POLICY_VIEW_AUDIT_INFORMATION 0: LSA_POLICY_GET_PRIVATE_INFORMATION 0: LSA_POLICY_TRUST_ADMIN 0: LSA_POLICY_CREATE_ACCOUNT 0: LSA_POLICY_CREATE_SECRET 0: LSA_POLICY_CREATE_PRIVILEGE 0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS 0: LSA_POLICY_SET_AUDIT_REQUIREMENTS 0: LSA_POLICY_AUDIT_LOG_ADMIN 0: LSA_POLICY_SERVER_ADMIN 0: LSA_POLICY_LOOKUP_NAMES 0: LSA_POLICY_NOTIFICATION [2009/06/19 14:13:33, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000002 [2009/06/19 14:13:33, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_req hdr_req 0010 alloc_hint: 0000002c 0014 context_id: 0000 0016 opnum : 0006 [2009/06/19 14:13:33, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:33, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=68, this_data=68, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:33, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=7 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 8 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] BD DF 5F 60 47 C7 D6 C2 .._`G... [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 9 mid = 7 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 9 mid = 7 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 9 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 9: got good SMB signature of [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] 37 B6 9D 83 F3 81 76 98 7.....v. [2009/06/19 14:13:33, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 7 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 9 mid = 7 [2009/06/19 14:13:33, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000002 [2009/06/19 14:13:33, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb89f6ce8 [2009/06/19 14:13:33, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb89f6ce8 [2009/06/19 14:13:33, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb89f6ce8 "async_trigger" [2009/06/19 14:13:33, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2009/06/19 14:13:33, 10] rpc_client/cli_pipe.c:904(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2009/06/19 14:13:33, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK [2009/06/19 14:13:33, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 48 bytes. [2009/06/19 14:13:33, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_OpenPolicy: struct lsa_OpenPolicy out: struct lsa_OpenPolicy handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 758c694c-0583-4a67-8123-da4e45228070 result : NT_STATUS_OK [2009/06/19 14:13:33, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2 in: struct lsa_QueryInfoPolicy2 handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 758c694c-0583-4a67-8123-da4e45228070 level : LSA_POLICY_INFO_DNS (12) [2009/06/19 14:13:33, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002e 000a auth_len : 0000 000c call_id : 00000003 [2009/06/19 14:13:33, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_req hdr_req 0010 alloc_hint: 00000016 0014 context_id: 0000 0016 opnum : 002e [2009/06/19 14:13:33, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:33, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=46, this_data=46, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:33, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=8 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 10 [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:33, 10] ../lib/util/util.c:304(_dump_data) [0000] D0 EB 77 3A 25 0F 3D 99 ..w:%.=. [2009/06/19 14:13:33, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 11 mid = 8 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 11 mid = 8 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 11 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 11: got good SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] AF CC E8 F7 30 32 F7 5E ....02.^ [2009/06/19 14:13:34, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 8 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 11 mid = 8 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 00c8 000a auth_len : 0000 000c call_id : 00000003 [2009/06/19 14:13:34, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb8a24430 [2009/06/19 14:13:34, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb8a24430 [2009/06/19 14:13:34, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a24430 "async_trigger" [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 000000b0 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:904(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: got pdu len 200, data_len 176, ss_len 0 [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 200 at offset 0: NT_STATUS_OK [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 352 bytes. [2009/06/19 14:13:34, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_QueryInfoPolicy2: struct lsa_QueryInfoPolicy2 out: struct lsa_QueryInfoPolicy2 info : * info : * info : union lsa_PolicyInformation(case 12) dns: struct lsa_DnsDomainInfo name: struct lsa_StringLarge length : 0x0008 (8) size : 0x000a (10) string : * string : 'KEIM' dns_domain: struct lsa_StringLarge length : 0x0018 (24) size : 0x001a (26) string : * string : 'keim.vsix.me' dns_forest: struct lsa_StringLarge length : 0x0018 (24) size : 0x001a (26) string : * string : 'keim.vsix.me' domain_guid : 57dfab32-4bee-4ab2-a8cb-75306faadaf0 sid : * sid : S-1-5-21-737143589-971638385-3934013448 result : NT_STATUS_OK [2009/06/19 14:13:34, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_Close: struct lsa_Close in: struct lsa_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 758c694c-0583-4a67-8123-da4e45228070 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000004 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_req hdr_req 0010 alloc_hint: 00000014 0014 context_id: 0000 0016 opnum : 0000 [2009/06/19 14:13:34, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:34, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=44, this_data=44, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:34, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=9 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 12 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] E7 87 66 19 3F C9 0B 0F ..f.?... [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 13 mid = 9 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 13 mid = 9 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 13 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 13: got good SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] B9 3C 26 CA B9 9D 6A 9F .<&...j. [2009/06/19 14:13:34, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 9 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 13 mid = 9 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000004 [2009/06/19 14:13:34, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb89f47a0 [2009/06/19 14:13:34, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb89f47a0 [2009/06/19 14:13:34, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb89f47a0 "async_trigger" [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:904(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 48 bytes. [2009/06/19 14:13:34, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) lsa_Close: struct lsa_Close out: struct lsa_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK [2009/06/19 14:13:34, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=10 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 14 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] 9D 5B 45 92 FD DB 6A 09 .[E...j. [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 15 mid = 10 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 15 mid = 10 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 15 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 15: got good SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] B6 8E 0C 97 73 7F 8B 96 ....s... [2009/06/19 14:13:34, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 10 [2009/06/19 14:13:34, 10] rpc_client/rpc_transport_np.c:40(rpc_transport_np_state_destructor) rpc_pipe_destructor: closed \lsarpc [2009/06/19 14:13:34, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=11 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 16 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] 5D 24 12 0A 09 BF 13 33 ]$.....3 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 17 mid = 11 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 17 mid = 11 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 17 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 17: got good SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] C7 C3 C2 90 43 33 0B CD ....C3.. [2009/06/19 14:13:34, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 11 [2009/06/19 14:13:34, 5] rpc_client/cli_pipe.c:2554(rpc_pipe_bind_send) Bind RPC Pipe: host fmusptwdc002.keim.vsix.me auth_type 0, auth_level 0 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0b 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0048 000a auth_len : 0000 000c call_id : 00000005 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_rb [2009/06/19 14:13:34, 6] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_bba 0010 max_tsize: 10b8 0012 max_rsize: 10b8 0014 assoc_gid: 00000000 0018 num_contexts: 01 001c context_id : 0000 001e num_transfer_syntaxes: 01 [2009/06/19 14:13:34, 6] rpc_parse/parse_prs.c:88(prs_debug) 00001f smb_io_rpc_iface [2009/06/19 14:13:34, 7] rpc_parse/parse_prs.c:88(prs_debug) 000020 smb_io_uuid uuid 0020 data : 12345778 0024 data : 1234 0026 data : abcd 0028 data : ef 00 002a data : 01 23 45 67 89 ac 0030 version: 00000001 [2009/06/19 14:13:34, 6] rpc_parse/parse_prs.c:88(prs_debug) 000034 smb_io_rpc_iface [2009/06/19 14:13:34, 7] rpc_parse/parse_prs.c:88(prs_debug) 000034 smb_io_uuid uuid 0034 data : 8a885d04 0038 data : 1ceb 003a data : 11c9 003c data : 9f e8 003e data : 08 00 2b 10 48 60 0044 version: 00000002 [2009/06/19 14:13:34, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:34, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=72, this_data=72, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:34, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=12 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 18 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] 78 A4 91 D5 BB 5E 66 51 x....^fQ [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 19 mid = 12 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 19 mid = 12 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 19 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 19: got good SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] 8E 6F E7 30 5B AC 36 9C .o.0[.6. [2009/06/19 14:13:34, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 12 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 19 mid = 12 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0c 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000005 [2009/06/19 14:13:34, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb8a22ea0 [2009/06/19 14:13:34, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb8a22ea0 [2009/06/19 14:13:34, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a22ea0 "async_trigger" [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 68 at offset 0: NT_STATUS_OK [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 68 bytes. [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0c 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000005 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_ba [2009/06/19 14:13:34, 6] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_bba 0010 max_tsize: 10b8 0012 max_rsize: 10b8 0014 assoc_gid: 00010d9b [2009/06/19 14:13:34, 6] rpc_parse/parse_prs.c:88(prs_debug) 000018 smb_io_rpc_addr_str 0018 len: 000c 001a str: \pipe\lsass. [2009/06/19 14:13:34, 6] rpc_parse/parse_prs.c:88(prs_debug) 000026 smb_io_rpc_results 0028 num_results: 01 002c result : 0000 002e reason : 0000 [2009/06/19 14:13:34, 6] rpc_parse/parse_prs.c:88(prs_debug) 000030 smb_io_rpc_iface [2009/06/19 14:13:34, 7] rpc_parse/parse_prs.c:88(prs_debug) 000030 smb_io_uuid uuid 0030 data : 8a885d04 0034 data : 1ceb 0036 data : 11c9 0038 data : 9f e8 003a data : 08 00 2b 10 48 60 0040 version: 00000002 [2009/06/19 14:13:34, 5] rpc_client/cli_pipe.c:2401(check_bind_response) check_bind_response: accepted! [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:3672(cli_rpc_pipe_open_noauth) cli_rpc_pipe_open_noauth: opened pipe \samr to machine fmusptwdc002.keim.vsix.me and bound anonymously. [2009/06/19 14:13:34, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_Connect2: struct samr_Connect2 in: struct samr_Connect2 system_name : * system_name : 'fmusptwdc002.keim.vsix.me' access_mask : 0x00000030 (48) 0: SAMR_ACCESS_CONNECT_TO_SERVER 0: SAMR_ACCESS_SHUTDOWN_SERVER 0: SAMR_ACCESS_INITIALIZE_SERVER 0: SAMR_ACCESS_CREATE_DOMAIN 1: SAMR_ACCESS_ENUM_DOMAINS 1: SAMR_ACCESS_LOOKUP_DOMAIN [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0060 000a auth_len : 0000 000c call_id : 00000006 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_req hdr_req 0010 alloc_hint: 00000048 0014 context_id: 0000 0016 opnum : 0039 [2009/06/19 14:13:34, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:34, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=96, this_data=96, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:34, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=13 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 20 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] 9A 4C 87 D8 07 7F 35 31 .L....51 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 21 mid = 13 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 21 mid = 13 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 21 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 21: got good SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] 00 37 C0 12 A5 05 D3 CB .7...... [2009/06/19 14:13:34, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 13 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 21 mid = 13 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000006 [2009/06/19 14:13:34, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb89f9498 [2009/06/19 14:13:34, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb89f9498 [2009/06/19 14:13:34, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb89f9498 "async_trigger" [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:904(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 48 bytes. [2009/06/19 14:13:34, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_Connect2: struct samr_Connect2 out: struct samr_Connect2 connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 9bde6dd1-2c77-4fab-a7ee-3ad66659b2ac result : NT_STATUS_OK [2009/06/19 14:13:34, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_OpenDomain: struct samr_OpenDomain in: struct samr_OpenDomain connect_handle : * connect_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 9bde6dd1-2c77-4fab-a7ee-3ad66659b2ac access_mask : 0x00000211 (529) 1: SAMR_DOMAIN_ACCESS_LOOKUP_INFO_1 0: SAMR_DOMAIN_ACCESS_SET_INFO_1 0: SAMR_DOMAIN_ACCESS_LOOKUP_INFO_2 0: SAMR_DOMAIN_ACCESS_SET_INFO_2 1: SAMR_DOMAIN_ACCESS_CREATE_USER 0: SAMR_DOMAIN_ACCESS_CREATE_GROUP 0: SAMR_DOMAIN_ACCESS_CREATE_ALIAS 0: SAMR_DOMAIN_ACCESS_LOOKUP_ALIAS 0: SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS 1: SAMR_DOMAIN_ACCESS_OPEN_ACCOUNT 0: SAMR_DOMAIN_ACCESS_SET_INFO_3 sid : * sid : S-1-5-21-737143589-971638385-3934013448 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 004c 000a auth_len : 0000 000c call_id : 00000007 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_req hdr_req 0010 alloc_hint: 00000034 0014 context_id: 0000 0016 opnum : 0007 [2009/06/19 14:13:34, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:34, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=76, this_data=76, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:34, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=14 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 22 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] 13 EA E2 0F 63 0F 71 44 ....c.qD [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 23 mid = 14 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 23 mid = 14 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 23 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 23: got good SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] BC BA 43 8A A3 69 0F 5E ..C..i.^ [2009/06/19 14:13:34, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 14 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 23 mid = 14 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 00000007 [2009/06/19 14:13:34, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb89f8df8 [2009/06/19 14:13:34, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb89f8df8 [2009/06/19 14:13:34, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb89f8df8 "async_trigger" [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:904(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK [2009/06/19 14:13:34, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 48 bytes. [2009/06/19 14:13:34, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_OpenDomain: struct samr_OpenDomain out: struct samr_OpenDomain domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : f08e22fc-5f43-4c62-8c4b-d72e72111c09 result : NT_STATUS_OK [2009/06/19 14:13:34, 10] libnet/libnet_join.c:824(libnet_join_joindomain_rpc) Creating account with desired access mask: -536543056 [2009/06/19 14:13:34, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_CreateUser2: struct samr_CreateUser2 in: struct samr_CreateUser2 domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : f08e22fc-5f43-4c62-8c4b-d72e72111c09 account_name : * account_name: struct lsa_String length : 0x0008 (8) size : 0x0008 (8) string : * string : 'sol$' acct_flags : 0x00000080 (128) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_NO_AUTH_DATA_REQD access_mask : 0xe00500b0 (3758424240) 0: SAMR_USER_ACCESS_GET_NAME_ETC 0: SAMR_USER_ACCESS_GET_LOCALE 0: SAMR_USER_ACCESS_SET_LOC_COM 0: SAMR_USER_ACCESS_GET_LOGONINFO 1: SAMR_USER_ACCESS_GET_ATTRIBUTES 1: SAMR_USER_ACCESS_SET_ATTRIBUTES 0: SAMR_USER_ACCESS_CHANGE_PASSWORD 1: SAMR_USER_ACCESS_SET_PASSWORD 0: SAMR_USER_ACCESS_GET_GROUPS 0: SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP 0: SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0050 000a auth_len : 0000 000c call_id : 00000008 [2009/06/19 14:13:34, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_req hdr_req 0010 alloc_hint: 00000038 0014 context_id: 0000 0016 opnum : 0032 [2009/06/19 14:13:34, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:34, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=80, this_data=80, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:34, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=15 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 24 [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:34, 10] ../lib/util/util.c:304(_dump_data) [0000] 2F 93 B4 12 0E 73 50 4A /....sPJ [2009/06/19 14:13:34, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 25 mid = 15 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 25 mid = 15 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 25 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 25: got good SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] 62 A1 FD 68 97 56 9E 69 b..h.V.i [2009/06/19 14:13:35, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 15 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 25 mid = 15 [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0038 000a auth_len : 0000 000c call_id : 00000008 [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb8a23ea8 [2009/06/19 14:13:35, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb8a23ea8 [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a23ea8 "async_trigger" [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 00000020 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:904(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: got pdu len 56, data_len 32, ss_len 0 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 56 at offset 0: NT_STATUS_OK [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 64 bytes. [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_CreateUser2: struct samr_CreateUser2 out: struct samr_CreateUser2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 access_granted : * access_granted : 0x00000000 (0) rid : * rid : 0x00000000 (0) result : NT_STATUS_USER_EXISTS [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_LookupNames: struct samr_LookupNames in: struct samr_LookupNames domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : f08e22fc-5f43-4c62-8c4b-d72e72111c09 num_names : 0x00000001 (1) names: ARRAY(1) names: struct lsa_String length : 0x0008 (8) size : 0x0008 (8) string : * string : 'sol$' [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0058 000a auth_len : 0000 000c call_id : 00000009 [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_req hdr_req 0010 alloc_hint: 00000040 0014 context_id: 0000 0016 opnum : 0011 [2009/06/19 14:13:35, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:35, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=88, this_data=88, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:35, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=16 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 26 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] 87 3E 0F D7 CE 79 1C F3 .>...y.. [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 27 mid = 16 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 27 mid = 16 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 27 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 27: got good SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] 91 6A 0C 83 23 F0 05 CA .j..#... [2009/06/19 14:13:35, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 16 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 27 mid = 16 [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 003c 000a auth_len : 0000 000c call_id : 00000009 [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb8a23ea8 [2009/06/19 14:13:35, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb8a23ea8 [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a23ea8 "async_trigger" [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 00000024 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:904(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: got pdu len 60, data_len 36, ss_len 0 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 60 at offset 0: NT_STATUS_OK [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 72 bytes. [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_LookupNames: struct samr_LookupNames out: struct samr_LookupNames rids : * rids: struct samr_Ids count : 0x00000001 (1) ids : * ids: ARRAY(1) ids : 0x00000453 (1107) types : * types: struct samr_Ids count : 0x00000001 (1) ids : * ids: ARRAY(1) ids : 0x00000001 (1) result : NT_STATUS_OK [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_OpenUser: struct samr_OpenUser in: struct samr_OpenUser domain_handle : * domain_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : f08e22fc-5f43-4c62-8c4b-d72e72111c09 access_mask : 0x02000000 (33554432) 0: SAMR_USER_ACCESS_GET_NAME_ETC 0: SAMR_USER_ACCESS_GET_LOCALE 0: SAMR_USER_ACCESS_SET_LOC_COM 0: SAMR_USER_ACCESS_GET_LOGONINFO 0: SAMR_USER_ACCESS_GET_ATTRIBUTES 0: SAMR_USER_ACCESS_SET_ATTRIBUTES 0: SAMR_USER_ACCESS_CHANGE_PASSWORD 0: SAMR_USER_ACCESS_SET_PASSWORD 0: SAMR_USER_ACCESS_GET_GROUPS 0: SAMR_USER_ACCESS_GET_GROUP_MEMBERSHIP 0: SAMR_USER_ACCESS_CHANGE_GROUP_MEMBERSHIP rid : 0x00000453 (1107) [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0034 000a auth_len : 0000 000c call_id : 0000000a [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_req hdr_req 0010 alloc_hint: 0000001c 0014 context_id: 0000 0016 opnum : 0022 [2009/06/19 14:13:35, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:35, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=52, this_data=52, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:35, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=17 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 28 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] 9F 65 BB D7 29 FD DD 6D .e..)..m [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 29 mid = 17 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 29 mid = 17 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 29 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 29: got good SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] C8 45 FF 52 84 73 D5 35 .E.R.s.5 [2009/06/19 14:13:35, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 17 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 29 mid = 17 [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000000a [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb8a23ea8 [2009/06/19 14:13:35, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb8a23ea8 [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a23ea8 "async_trigger" [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:904(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 48 bytes. [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_OpenUser: struct samr_OpenUser out: struct samr_OpenUser user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 681bf9bf-22e7-4ef7-ad5e-d89f824136ff result : NT_STATUS_OK [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_SetUserInfo: struct samr_SetUserInfo in: struct samr_SetUserInfo user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 681bf9bf-22e7-4ef7-ad5e-d89f824136ff level : 0x0010 (16) info : * info : union samr_UserInfo(case 16) info16: struct samr_UserInfo16 acct_flags : 0x00000280 (640) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 0: ACB_SVRTRUST 1: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_NO_AUTH_DATA_REQD [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0034 000a auth_len : 0000 000c call_id : 0000000b [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_req hdr_req 0010 alloc_hint: 0000001c 0014 context_id: 0000 0016 opnum : 0025 [2009/06/19 14:13:35, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:35, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=52, this_data=52, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:35, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=18 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 30 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] F3 E4 29 0A 2D 45 53 49 ..).-ESI [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 31 mid = 18 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 31 mid = 18 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 31 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 31: got good SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] 46 5C 7F AE F1 5F 7F 22 F\..._." [2009/06/19 14:13:35, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 18 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 31 mid = 18 [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 001c 000a auth_len : 0000 000c call_id : 0000000b [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb8a23ea8 [2009/06/19 14:13:35, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb8a23ea8 [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a23ea8 "async_trigger" [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 00000004 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:904(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: got pdu len 28, data_len 4, ss_len 0 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 28 at offset 0: NT_STATUS_OK [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 8 bytes. [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_SetUserInfo: struct samr_SetUserInfo out: struct samr_SetUserInfo result : NT_STATUS_OK [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_SetUserInfo2: struct samr_SetUserInfo2 in: struct samr_SetUserInfo2 user_handle : * user_handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 681bf9bf-22e7-4ef7-ad5e-d89f824136ff level : 0x001a (26) info : * info : union samr_UserInfo(case 26) info26: struct samr_UserInfo26 password: struct samr_CryptPasswordEx data : 9f47c55fbac351006d455acde9ad5601df276514004d4a9670b3a9c019d19d4c25e060c1cba23c460c8151cfac1afefde65a85a4701c50a19f54b7aee94fb93a14d9aec2f540ecb9038a7a1338175aa684c74d952e84b0aa720b400f5cd3aa94cdb82ebaa200bc05cb5f3821e3f35703ca32b15d638d2ac9560b77db51356b7fd92c59331121e26f16b495e1d37ee510d059250e972b4bb4d268df046447546e1ce2c9c3501c4c510f9601f4f08341b3386025e487dbac22857b2bc10d3b829a7400e1ab13411ca4d319e5be82984282eeb42a6ed56ae351dc5518f5efe858e02c6e7d4449d7137d93d17ddb6d3353e6f8e45b80eefd25a6daaf950204da328097aba6903121c90705efc5b52c063c96de03bc2a9b0e2aa660706e7934afdee103ae8931d0f0b7e3709a49823106c330e0c69395e7f663c549de17ba53d5d3d14304193feb082f84e53245f55d96ca2f2f982d20bd9c6402265b64eaadfcde97bc9fa108e149b0ea265e9941344e7f45b897fb8ebfb2ca6be5118656c1cd76b26b971e9dca5a8d2da54374ee76a6bc5cdcf1be4e7dd86ed958f5d90ae55b3598563c2f33605e5c86761798d3703571cb35203f3024097c945a2dfe0bb584c2d1cf3fa20b65a11efdab04007d0fc8f391be8ec15d92be873a190c7145adce2ee41f128d9e12 +> 20e6ab1a2d3aca71c3164ba48c6c3382fad55da8f4a6a866330ade488c4f99c81547f73e246b22412a56ddce6d94d5 password_expired : 0x00 (0) [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0245 000a auth_len : 0000 000c call_id : 0000000c [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_req hdr_req 0010 alloc_hint: 0000022d 0014 context_id: 0000 0016 opnum : 003a [2009/06/19 14:13:35, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:35, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=581, this_data=581, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:35, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=19 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 32 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] F6 25 A0 15 11 8A 93 F3 .%...... [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 33 mid = 19 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 33 mid = 19 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 33 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 33: got good SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] 59 D5 1D 32 A1 06 F0 56 Y..2...V [2009/06/19 14:13:35, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 19 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 33 mid = 19 [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 001c 000a auth_len : 0000 000c call_id : 0000000c [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb8a23d20 [2009/06/19 14:13:35, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb8a23d20 [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a23d20 "async_trigger" [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 00000004 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:904(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: got pdu len 28, data_len 4, ss_len 0 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 28 at offset 0: NT_STATUS_OK [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 8 bytes. [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_SetUserInfo2: struct samr_SetUserInfo2 out: struct samr_SetUserInfo2 result : NT_STATUS_OK [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 9bde6dd1-2c77-4fab-a7ee-3ad66659b2ac [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 0000000d [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_req hdr_req 0010 alloc_hint: 00000014 0014 context_id: 0000 0016 opnum : 0001 [2009/06/19 14:13:35, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:35, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=44, this_data=44, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:35, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=20 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 34 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] 7D C8 17 75 A0 61 84 43 }..u.a.C [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 35 mid = 20 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 35 mid = 20 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 35 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 35: got good SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] 67 5A 1F C1 F3 60 25 F8 gZ...`%. [2009/06/19 14:13:35, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 20 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 35 mid = 20 [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000000d [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb8a23ea8 [2009/06/19 14:13:35, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb8a23ea8 [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a23ea8 "async_trigger" [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:904(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 48 bytes. [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : f08e22fc-5f43-4c62-8c4b-d72e72111c09 [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 0000000e [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_req hdr_req 0010 alloc_hint: 00000014 0014 context_id: 0000 0016 opnum : 0001 [2009/06/19 14:13:35, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:35, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=44, this_data=44, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:35, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=21 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 36 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] C0 6F 01 2A 49 D0 78 48 .o.*I.xH [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 37 mid = 21 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 37 mid = 21 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 37 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 37: got good SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] 5D 70 6F E4 CF B5 79 7A ]po...yz [2009/06/19 14:13:35, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 21 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 37 mid = 21 [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000000e [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb8a1c040 [2009/06/19 14:13:35, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb8a1c040 [2009/06/19 14:13:35, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a1c040 "async_trigger" [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:904(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK [2009/06/19 14:13:35, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 48 bytes. [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK [2009/06/19 14:13:35, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_Close: struct samr_Close in: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 681bf9bf-22e7-4ef7-ad5e-d89f824136ff [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 0000000f [2009/06/19 14:13:35, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_req hdr_req 0010 alloc_hint: 00000014 0014 context_id: 0000 0016 opnum : 0001 [2009/06/19 14:13:35, 5] rpc_client/cli_pipe.c:1279(rpc_api_pipe_send) rpc_api_pipe: host fmusptwdc002.keim.vsix.me [2009/06/19 14:13:35, 10] libsmb/clitrans.c:825(cli_ship_trans) num_setup=2, max_setup=0, param_total=0, this_param=0, max_param=0, data_total=44, this_data=44, max_data=4280, param_offset=82, param_disp=0, data_disp=0 [2009/06/19 14:13:35, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=22 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 38 [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:35, 10] ../lib/util/util.c:304(_dump_data) [0000] EA F1 0D 60 AB E4 24 F8 ...`..$. [2009/06/19 14:13:35, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 39 mid = 22 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 39 mid = 22 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 39 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 39: got good SMB signature of [2009/06/19 14:13:36, 10] ../lib/util/util.c:304(_dump_data) [0000] 7E 58 6E 06 5C 40 43 27 ~Xn.\@C' [2009/06/19 14:13:36, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 22 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 39 mid = 22 [2009/06/19 14:13:36, 5] rpc_parse/parse_prs.c:88(prs_debug) 000000 smb_io_rpc_hdr rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0030 000a auth_len : 0000 000c call_id : 0000000f [2009/06/19 14:13:36, 10] lib/events.c:287(s3_event_debug) s3_event: Added timed event "async_trigger": 0xb8a1c118 [2009/06/19 14:13:36, 10] lib/events.c:105(run_events) Running timed event "async_trigger" 0xb8a1c118 [2009/06/19 14:13:36, 10] lib/events.c:287(s3_event_debug) s3_event: Destroying timer event 0xb8a1c118 "async_trigger" [2009/06/19 14:13:36, 5] rpc_parse/parse_prs.c:88(prs_debug) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp 0010 alloc_hint: 00000018 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2009/06/19 14:13:36, 10] rpc_client/cli_pipe.c:904(cli_pipe_validate_current_pdu) cli_pipe_validate_current_pdu: got pdu len 48, data_len 24, ss_len 0 [2009/06/19 14:13:36, 10] rpc_client/cli_pipe.c:1381(rpc_api_pipe_got_pdu) rpc_api_pipe: got frag len of 48 at offset 0: NT_STATUS_OK [2009/06/19 14:13:36, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu) rpc_api_pipe: host fmusptwdc002.keim.vsix.me returned 48 bytes. [2009/06/19 14:13:36, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) samr_Close: struct samr_Close out: struct samr_Close handle : * handle: struct policy_handle handle_type : 0x00000000 (0) uuid : 00000000-0000-0000-0000-000000000000 result : NT_STATUS_OK [2009/06/19 14:13:36, 10] libsmb/async_smb.c:510(cli_chain_cork) cli_chain_cork: mid=23 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 40 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:36, 10] ../lib/util/util.c:304(_dump_data) [0000] A5 46 CA F9 70 10 18 59 .F..p..Y [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 41 mid = 23 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 41 mid = 23 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 41 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 41: got good SMB signature of [2009/06/19 14:13:36, 10] ../lib/util/util.c:304(_dump_data) [0000] D9 96 69 32 40 5E 66 9E ..i2@^f. [2009/06/19 14:13:36, 10] libsmb/async_smb.c:933(handle_incoming_pdu) handle_incoming_pdu: got mid 23 [2009/06/19 14:13:36, 10] rpc_client/rpc_transport_np.c:40(rpc_transport_np_state_destructor) rpc_pipe_destructor: closed \samr [2009/06/19 14:13:36, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 534543524554532F5349 [2009/06/19 14:13:36, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb8a1c380 [2009/06/19 14:13:36, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 534543524554532F5349 [2009/06/19 14:13:36, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 534543524554532F4D41 [2009/06/19 14:13:36, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb8a1c1f8 [2009/06/19 14:13:36, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 534543524554532F4D41 [2009/06/19 14:13:36, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 534543524554532F4D41 [2009/06/19 14:13:36, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb8a1c1f8 [2009/06/19 14:13:36, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 534543524554532F4D41 [2009/06/19 14:13:36, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 534543524554532F4D41 [2009/06/19 14:13:36, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb8a1c1f8 [2009/06/19 14:13:36, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 534543524554532F4D41 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 42 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:351(client_sign_outgoing_message) client_sign_outgoing_message: sent SMB signature of [2009/06/19 14:13:36, 10] ../lib/util/util.c:304(_dump_data) [0000] F9 82 8C 03 63 8C 9C 0B ....c... [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:67(store_sequence_for_reply) store_sequence_for_reply: stored seq = 43 mid = 24 [2009/06/19 14:13:36, 6] libsmb/clientgen.c:245(write_socket) write_socket(7,39) [2009/06/19 14:13:36, 6] libsmb/clientgen.c:248(write_socket) write_socket(7,39) wrote 39 [2009/06/19 14:13:36, 10] lib/util_sock.c:781(read_smb_length_return_keepalive) got smb length of 35 [2009/06/19 14:13:36, 5] lib/util.c:632(show_msg) [2009/06/19 14:13:36, 5] lib/util.c:642(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51205 smb_tid=2049 smb_pid=32357 smb_uid=2049 smb_mid=24 smt_wct=0 smb_bcc=0 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:80(get_sequence_for_reply) get_sequence_for_reply: found seq = 43 mid = 24 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:285(simple_packet_signature) simple_packet_signature: sequence number 43 [2009/06/19 14:13:36, 10] libsmb/smb_signing.c:434(client_check_incoming_message) client_check_incoming_message: seq 43: got good SMB signature of [2009/06/19 14:13:36, 10] ../lib/util/util.c:304(_dump_data) [0000] 44 3B 40 C0 17 D3 E9 A2 D;@..... [2009/06/19 14:13:36, 10] libsmb/namequery.c:118(saf_join_store) saf_join_store: domain = [KEIM], server = [fmusptwdc002.keim.vsix.me], expire = [1245417216] [2009/06/19 14:13:36, 10] lib/gencache.c:131(gencache_set) Adding cache entry with key = SAFJOIN/DOMAIN/KEIM; value = fmusptwdc002.keim.vsix.me and timeout = Fri Jun 19 15:13:36 2009 (3600 seconds ahead) [2009/06/19 14:13:36, 10] libsmb/namequery.c:118(saf_join_store) saf_join_store: domain = [keim.vsix.me], server = [fmusptwdc002.keim.vsix.me], expire = [1245417216] [2009/06/19 14:13:36, 10] lib/gencache.c:131(gencache_set) Adding cache entry with key = SAFJOIN/DOMAIN/KEIM.VSIX.ME; value = fmusptwdc002.keim.vsix.me and timeout = Fri Jun 19 15:13:36 2009 (3600 seconds ahead) [2009/06/19 14:13:36, 5] libads/ldap.c:203(ads_try_connect) ads_try_connect: sending CLDAP request to fmusptwdc002.keim.vsix.me (realm: keim.vsix.me) [2009/06/19 14:13:36, 1] libads/cldap.c:166(recv_cldap_netlogon) no reply received to cldap netlogon (ret = -1: Error = Permission denied) [2009/06/19 14:13:36, 3] libads/ldap.c:218(ads_try_connect) ads_try_connect: CLDAP request fmusptwdc002.keim.vsix.me failed. [2009/06/19 14:13:36, 6] libads/ldap.c:346(ads_find_dc) ads_find_dc: (ldap) looking for realm 'keim.vsix.me' [2009/06/19 14:13:36, 10] lib/gencache.c:194(gencache_get) Cache entry with key = AD_SITENAME/DOMAIN/KEIM.VSIX.ME couldn't be found [2009/06/19 14:13:36, 5] libads/dns.c:814(sitename_fetch) sitename_fetch: No stored sitename for keim.vsix.me [2009/06/19 14:13:36, 4] libsmb/namequery_dc.c:73(ads_dc_name) ads_dc_name: domain=KEIM [2009/06/19 14:13:36, 10] lib/gencache.c:194(gencache_get) Cache entry with key = AD_SITENAME/DOMAIN/KEIM.VSIX.ME couldn't be found [2009/06/19 14:13:36, 5] libads/dns.c:814(sitename_fetch) sitename_fetch: No stored sitename for keim.vsix.me [2009/06/19 14:13:36, 6] libads/ldap.c:366(ads_find_dc) ads_find_dc: (cldap) looking for realm 'keim.vsix.me' [2009/06/19 14:13:36, 8] libsmb/namequery.c:2155(get_sorted_dc_list) get_sorted_dc_list: attempting lookup for name keim.vsix.me (sitename NULL) using [ads] [2009/06/19 14:13:36, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = SAFJOIN/DOMAIN/KEIM.VSIX.ME, value = fmusptwdc002.keim.vsix.me, timeout = Fri Jun 19 15:13:36 2009 [2009/06/19 14:13:36, 5] libsmb/namequery.c:185(saf_fetch) saf_fetch[join]: Returning "fmusptwdc002.keim.vsix.me" for "keim.vsix.me" domain [2009/06/19 14:13:36, 3] libsmb/namequery.c:1971(get_dc_list) get_dc_list: preferred server list: "fmusptwdc002.keim.vsix.me, *" [2009/06/19 14:13:36, 10] libsmb/namequery.c:1505(internal_resolve_name) internal_resolve_name: looking up keim.vsix.me#1c (sitename (null)) [2009/06/19 14:13:36, 10] lib/gencache.c:194(gencache_get) Cache entry with key = NBT/KEIM.VSIX.ME#1C couldn't be found [2009/06/19 14:13:36, 5] libsmb/namecache.c:208(namecache_fetch) no entry for keim.vsix.me#1C found. [2009/06/19 14:13:36, 5] libsmb/namequery.c:1399(resolve_ads) resolve_ads: Attempting to resolve DCs for keim.vsix.me using DNS [2009/06/19 14:13:36, 4] libads/dns.c:432(ads_dns_lookup_srv) ads_dns_lookup_srv: 1 records returned in the answer section. [2009/06/19 14:13:36, 10] libads/dns.c:213(ads_dns_parse_rr_srv) ads_dns_parse_rr_srv: Parsed fmusptwdc002.keim.vsix.me [0, 100, 389] [2009/06/19 14:13:36, 10] libsmb/namequery.c:582(remove_duplicate_addrs2) remove_duplicate_addrs2: looking for duplicate address/port pairs [2009/06/19 14:13:36, 5] libsmb/namecache.c:122(namecache_store) namecache_store: storing 1 address for keim.vsix.me#1c: [2001:470:8a93:2::4] [2009/06/19 14:13:36, 10] lib/gencache.c:131(gencache_set) Adding cache entry with key = NBT/KEIM.VSIX.ME#1C; value = [2001:470:8a93:2::4]:389 and timeout = Fri Jun 19 14:24:36 2009 (660 seconds ahead) [2009/06/19 14:13:36, 10] libsmb/namequery.c:1652(internal_resolve_name) internal_resolve_name: returning 1 addresses: 2001:470:8a93:2::4:389 [2009/06/19 14:13:36, 8] libsmb/namequery.c:1992(get_dc_list) Adding 1 DC's from auto lookup [2009/06/19 14:13:36, 10] lib/gencache.c:194(gencache_get) Cache entry with key = AD_SITENAME/DOMAIN/KEIM.VSIX.ME couldn't be found [2009/06/19 14:13:36, 5] libads/dns.c:814(sitename_fetch) sitename_fetch: No stored sitename for KEIM.VSIX.ME [2009/06/19 14:13:36, 10] libsmb/namequery.c:1505(internal_resolve_name) internal_resolve_name: looking up fmusptwdc002.keim.vsix.me#20 (sitename (null)) [2009/06/19 14:13:36, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = NBT/FMUSPTWDC002.KEIM.VSIX.ME#20, value = [2001:470:8a93:2::4]:0, timeout = Fri Jun 19 14:24:32 2009 [2009/06/19 14:13:36, 5] libsmb/namecache.c:212(namecache_fetch) name fmusptwdc002.keim.vsix.me#20 found. [2009/06/19 14:13:36, 10] lib/gencache.c:208(gencache_get) Returning expired cache entry: key = NEG_CONN_CACHE/keim.vsix.me,2001:470:8a93:2::4, value = c0000001, timeout = Fri Jun 19 13:44:12 2009 [2009/06/19 14:13:36, 9] libsmb/conncache.c:150(check_negative_conn_cache) check_negative_conn_cache returning result 0 for domain keim.vsix.me server 2001:470:8a93:2::4 [2009/06/19 14:13:36, 10] lib/gencache.c:194(gencache_get) Cache entry with key = NEG_CONN_CACHE/keim.vsix.me,2001:470:8a93:2::4 couldn't be found [2009/06/19 14:13:36, 9] libsmb/conncache.c:150(check_negative_conn_cache) check_negative_conn_cache returning result 0 for domain keim.vsix.me server 2001:470:8a93:2::4 [2009/06/19 14:13:36, 10] libsmb/namequery.c:582(remove_duplicate_addrs2) remove_duplicate_addrs2: looking for duplicate address/port pairs [2009/06/19 14:13:36, 4] libsmb/namequery.c:2104(get_dc_list) get_dc_list: returning 1 ip addresses in an ordered list [2009/06/19 14:13:36, 4] libsmb/namequery.c:2105(get_dc_list) get_dc_list: 2001:470:8a93:2::4:389 [2009/06/19 14:13:36, 10] lib/gencache.c:194(gencache_get) Cache entry with key = NEG_CONN_CACHE/keim.vsix.me,2001:470:8a93:2::4 couldn't be found [2009/06/19 14:13:36, 9] libsmb/conncache.c:150(check_negative_conn_cache) check_negative_conn_cache returning result 0 for domain keim.vsix.me server 2001:470:8a93:2::4 [2009/06/19 14:13:36, 5] libads/ldap.c:203(ads_try_connect) ads_try_connect: sending CLDAP request to 2001:470:8a93:2::4 (realm: keim.vsix.me) [2009/06/19 14:13:36, 1] libads/cldap.c:166(recv_cldap_netlogon) no reply received to cldap netlogon (ret = -1: Error = Permission denied) [2009/06/19 14:13:36, 3] libads/ldap.c:218(ads_try_connect) ads_try_connect: CLDAP request 2001:470:8a93:2::4 failed. [2009/06/19 14:13:36, 10] lib/gencache.c:131(gencache_set) Adding cache entry with key = NEG_CONN_CACHE/keim.vsix.me,2001:470:8a93:2::4; value = c0000001 and timeout = Fri Jun 19 14:14:06 2009 (30 seconds ahead) [2009/06/19 14:13:36, 9] libsmb/conncache.c:210(add_failed_connection_entry) add_failed_connection_entry: added domain keim.vsix.me (2001:470:8a93:2::4) to failed conn cache [2009/06/19 14:13:36, 8] libsmb/namequery.c:2155(get_sorted_dc_list) get_sorted_dc_list: attempting lookup for name KEIM (sitename NULL) using [lmhosts wins host bcast] [2009/06/19 14:13:36, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = SAFJOIN/DOMAIN/KEIM, value = fmusptwdc002.keim.vsix.me, timeout = Fri Jun 19 15:13:36 2009 [2009/06/19 14:13:36, 5] libsmb/namequery.c:185(saf_fetch) saf_fetch[join]: Returning "fmusptwdc002.keim.vsix.me" for "KEIM" domain [2009/06/19 14:13:36, 3] libsmb/namequery.c:1971(get_dc_list) get_dc_list: preferred server list: "fmusptwdc002.keim.vsix.me, *" [2009/06/19 14:13:36, 10] libsmb/namequery.c:1505(internal_resolve_name) internal_resolve_name: looking up KEIM#1c (sitename (null)) [2009/06/19 14:13:36, 10] lib/gencache.c:194(gencache_get) Cache entry with key = NBT/KEIM#1C couldn't be found [2009/06/19 14:13:36, 5] libsmb/namecache.c:208(namecache_fetch) no entry for KEIM#1C found. [2009/06/19 14:13:36, 3] libsmb/namequery.c:1224(resolve_lmhosts) resolve_lmhosts: Attempting lmhosts lookup for name KEIM<0x1c> [2009/06/19 14:13:36, 4] libsmb/namequery.c:838(startlmhosts) startlmhosts: Can't open lmhosts file /usr/local/samba/3.4.0pre2/lib/lmhosts. Error was No such file or directory [2009/06/19 14:13:36, 3] libsmb/namequery.c:1088(resolve_wins) resolve_wins: Attempting wins lookup for name KEIM<0x1c> [2009/06/19 14:13:36, 3] libsmb/namequery.c:1092(resolve_wins) resolve_wins: WINS server resolution selected and no WINS servers listed. [2009/06/19 14:13:36, 5] libsmb/namequery.c:1298(resolve_hosts) resolve_hosts: not appropriate for name type <0x1c> [2009/06/19 14:13:36, 3] libsmb/namequery.c:1015(name_resolve_bcast) name_resolve_bcast: Attempting broadcast lookup for name KEIM<0x1c> [2009/06/19 14:13:36, 10] lib/util_sock.c:943(open_socket_in) bind succeeded on port 0 [2009/06/19 14:13:36, 5] lib/util_sock.c:371(print_socket_options) Socket options: SO_KEEPALIVE = 0 SO_REUSEADDR = 1 SO_BROADCAST = 1 Could not test socket option TCP_NODELAY. Could not test socket option TCP_KEEPCNT. Could not test socket option TCP_KEEPIDLE. Could not test socket option TCP_KEEPINTVL. IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 110592 SO_RCVBUF = 110592 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2009/06/19 14:13:36, 5] libsmb/nmblib.c:819(send_udp) Sending a packet of len 50 to (192.168.87.255) on port 137 [2009/06/19 14:13:36, 2] lib/util_tdb.c:385(tdb_log) tdb(unnamed): tdb_open_ex: could not open file /usr/local/samba/3.4.0pre2/var/locks/unexpected.tdb: No such file or directory [2009/06/19 14:13:36, 2] lib/util_tdb.c:385(tdb_log) tdb(unnamed): tdb_open_ex: could not open file /usr/local/samba/3.4.0pre2/var/locks/unexpected.tdb: No such file or directory [2009/06/19 14:13:36, 2] lib/util_tdb.c:385(tdb_log) tdb(unnamed): tdb_open_ex: could not open file /usr/local/samba/3.4.0pre2/var/locks/unexpected.tdb: No such file or directory [2009/06/19 14:13:36, 5] libsmb/nmblib.c:819(send_udp) Sending a packet of len 50 to (192.168.87.255) on port 137 [2009/06/19 14:13:37, 2] lib/util_tdb.c:385(tdb_log) tdb(unnamed): tdb_open_ex: could not open file /usr/local/samba/3.4.0pre2/var/locks/unexpected.tdb: No such file or directory [2009/06/19 14:13:37, 2] lib/util_tdb.c:385(tdb_log) tdb(unnamed): tdb_open_ex: could not open file /usr/local/samba/3.4.0pre2/var/locks/unexpected.tdb: No such file or directory [2009/06/19 14:13:37, 2] lib/util_tdb.c:385(tdb_log) tdb(unnamed): tdb_open_ex: could not open file /usr/local/samba/3.4.0pre2/var/locks/unexpected.tdb: No such file or directory [2009/06/19 14:13:37, 5] libsmb/nmblib.c:819(send_udp) Sending a packet of len 50 to (192.168.87.255) on port 137 [2009/06/19 14:13:37, 2] lib/util_tdb.c:385(tdb_log) tdb(unnamed): tdb_open_ex: could not open file /usr/local/samba/3.4.0pre2/var/locks/unexpected.tdb: No such file or directory [2009/06/19 14:13:37, 2] lib/util_tdb.c:385(tdb_log) tdb(unnamed): tdb_open_ex: could not open file /usr/local/samba/3.4.0pre2/var/locks/unexpected.tdb: No such file or directory [2009/06/19 14:13:37, 2] lib/util_tdb.c:385(tdb_log) tdb(unnamed): tdb_open_ex: could not open file /usr/local/samba/3.4.0pre2/var/locks/unexpected.tdb: No such file or directory [2009/06/19 14:13:37, 8] libsmb/namequery.c:1992(get_dc_list) Adding 0 DC's from auto lookup [2009/06/19 14:13:37, 10] lib/gencache.c:194(gencache_get) Cache entry with key = AD_SITENAME/DOMAIN/KEIM.VSIX.ME couldn't be found [2009/06/19 14:13:37, 5] libads/dns.c:814(sitename_fetch) sitename_fetch: No stored sitename for KEIM.VSIX.ME [2009/06/19 14:13:37, 10] libsmb/namequery.c:1505(internal_resolve_name) internal_resolve_name: looking up fmusptwdc002.keim.vsix.me#20 (sitename (null)) [2009/06/19 14:13:37, 10] lib/gencache.c:208(gencache_get) Returning valid cache entry: key = NBT/FMUSPTWDC002.KEIM.VSIX.ME#20, value = [2001:470:8a93:2::4]:0, timeout = Fri Jun 19 14:24:32 2009 [2009/06/19 14:13:37, 5] libsmb/namecache.c:212(namecache_fetch) name fmusptwdc002.keim.vsix.me#20 found. [2009/06/19 14:13:37, 10] lib/gencache.c:194(gencache_get) Cache entry with key = NEG_CONN_CACHE/KEIM,2001:470:8a93:2::4 couldn't be found [2009/06/19 14:13:37, 9] libsmb/conncache.c:150(check_negative_conn_cache) check_negative_conn_cache returning result 0 for domain KEIM server 2001:470:8a93:2::4 [2009/06/19 14:13:37, 10] libsmb/namequery.c:582(remove_duplicate_addrs2) remove_duplicate_addrs2: looking for duplicate address/port pairs [2009/06/19 14:13:37, 4] libsmb/namequery.c:2104(get_dc_list) get_dc_list: returning 1 ip addresses in an ordered list [2009/06/19 14:13:37, 4] libsmb/namequery.c:2105(get_dc_list) get_dc_list: 2001:470:8a93:2::4:389 [2009/06/19 14:13:37, 10] libsmb/namequery.c:381(name_status_find) name_status_find: looking up KEIM#1c at 2001:470:8a93:2::4 [2009/06/19 14:13:37, 10] lib/gencache.c:194(gencache_get) Cache entry with key = NBT/KEIM#1C.20.2001:470:8A93:2::4 couldn't be found [2009/06/19 14:13:37, 5] libsmb/namecache.c:361(namecache_status_fetch) namecache_status_fetch: no entry for NBT/KEIM#1C.20.2001:470:8A93:2::4 found. [2009/06/19 14:13:37, 1] libnet/libnet_join.c:1902(libnet_Join) libnet_Join: libnet_JoinCtx: struct libnet_JoinCtx out: struct libnet_JoinCtx account_name : NULL netbios_domain_name : 'KEIM' dns_domain_name : 'keim.vsix.me' forest_name : 'keim.vsix.me' dn : NULL domain_sid : * domain_sid : S-1-5-21-737143589-971638385-3934013448 modified_config : 0x00 (0) error_string : 'failed to connect to AD: No logon servers' domain_is_ad : 0x01 (1) result : WERR_GENERAL_FAILURE [2009/06/19 14:13:37, 10] intl/lang_tdb.c:138(lang_tdb_init) lang_tdb_init: /usr/local/samba/3.4.0pre2/lib/en_GB.UTF-8.msg: No such file or directory [2009/06/19 14:13:37, 2] utils/net.c:756(main) return code = -1 Failed to join domain: failed to connect to AD: No logon servers