Attachment 4776 Details for Bug 6775 – Level 10 log file

Level 10 log file

samba.log (text/plain), 810.52 KB, created by Hans Lampl on 2009-10-02 05:08:34 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Hans Lampl

Created: 2009-10-02 05:08:34 UTC

Size: 810.52 KB

patch

obsolete

>[2009/10/02 12:00:01,  3] param/loadparm.c:9011(lp_load_ex)
>  lp_load_ex: refreshing parameters
>Initialising global parameters
>[2009/10/02 12:00:01,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/usr/local/samba/lib/smb.conf"
>[2009/10/02 12:00:01,  3] param/loadparm.c:7698(do_section)
>  Processing section "[global]"
>  doing parameter hosts deny = all
>  doing parameter hosts allow = 192.168.3.182 127.0.0.
>  doing parameter display charset = UTF-8
>  doing parameter unix charset = UTF-8
>  doing parameter dos charset = CP850
>  doing parameter unix extensions = no
>  doing parameter interfaces = eth0
>  doing parameter bind interfaces only = yes
>  doing parameter netbios name = TESTFS
>[2009/10/02 12:00:01,  4] param/loadparm.c:7060(handle_netbios_name)
>  handle_netbios_name: set global_myname to: TESTFS
>  doing parameter workgroup = DEV.MUC.DW
>  doing parameter server string = Test Server
>  doing parameter security = USER
>  doing parameter realm = MUC.DYNAWARE.DE
>  doing parameter client use spnego = yes
>  doing parameter client ntlmv2 auth = yes
>  doing parameter encrypt passwords = yes
>  doing parameter private dir = /var/lib/samba
>  doing parameter passdb backend = tdbsam
>  doing parameter log level = 10
>[2009/10/02 12:00:01,  5] lib/debug.c:407(debug_dump_status)
>  INFO: Current debug levels:
>    all: True/10
>    tdb: False/0
>    printdrivers: False/0
>    lanman: False/0
>    smb: False/0
>    rpc_parse: False/0
>    rpc_srv: False/0
>    rpc_cli: False/0
>    passdb: False/0
>    sam: False/0
>    auth: False/0
>    winbind: False/0
>    vfs: False/0
>    idmap: False/0
>    quota: False/0
>    acls: False/0
>    locking: False/0
>    msdfs: False/0
>    dmapi: False/0
>    registry: False/0
>  doing parameter log file = /var/log/samba/samba.log
>  doing parameter max log size = 40960
>  doing parameter name resolve order = lmhosts hosts wins bcast
>  doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>  doing parameter os level = 20
>  doing parameter wins support = no
>  doing parameter dns proxy = no
>  doing parameter idmap uid = 20000-29999
>  doing parameter idmap gid = 20000-29999
>  doing parameter winbind separator = #
>  doing parameter winbind enum users = yes
>  doing parameter winbind enum groups = yes
>  doing parameter winbind nested groups = yes
>  doing parameter inherit acls = yes
>  doing parameter map acl inherit = yes
>  doing parameter template shell = /bin/bash
>  doing parameter store dos attributes = yes
>  doing parameter map archive = no
>  doing parameter map hidden = no
>  doing parameter map system = no
>  doing parameter map readonly = no
>  doing parameter oplocks = yes
>  doing parameter level2 oplocks = yes
>  doing parameter kernel oplocks = no
>  doing parameter delete readonly = yes
>  doing parameter dos filemode = yes
>  doing parameter dos filetimes = yes
>  doing parameter dos filetime resolution = yes
>  doing parameter load printers = no
>[2009/10/02 12:00:01,  2] param/loadparm.c:7715(do_section)
>  Processing section "[root]"
>[2009/10/02 12:00:01,  8] param/loadparm.c:6024(add_a_service)
>  add_a_service: Creating snum = 0 for root
>[2009/10/02 12:00:01, 10] param/loadparm.c:6062(hash_a_service)
>  hash_a_service: creating servicehash
>[2009/10/02 12:00:01, 10] param/loadparm.c:6071(hash_a_service)
>  hash_a_service: hashing index 0 for service name root
>  doing parameter comment = Test Root
>  doing parameter path = /export/netroot
>  doing parameter public = yes
>  doing parameter browseable = yes
>  doing parameter writeable = yes
>  doing parameter inherit acls = yes
>  doing parameter map acl inherit = yes
>  doing parameter create mask = 0755
>  doing parameter directory mask = 0755
>  doing parameter valid users = hlampl
>  doing parameter admin users = hlampl
>[2009/10/02 12:00:01,  2] param/loadparm.c:7715(do_section)
>  Processing section "[data]"
>[2009/10/02 12:00:01,  8] param/loadparm.c:6024(add_a_service)
>  add_a_service: Creating snum = 1 for data
>[2009/10/02 12:00:01, 10] param/loadparm.c:6071(hash_a_service)
>  hash_a_service: hashing index 1 for service name data
>  doing parameter comment = Test Root
>  doing parameter path = /var/data1
>  doing parameter public = yes
>  doing parameter browseable = yes
>  doing parameter writeable = yes
>  doing parameter inherit acls = yes
>  doing parameter map acl inherit = yes
>  doing parameter create mask = 0755
>  doing parameter directory mask = 0755
>  doing parameter valid users = hlampl
>  doing parameter admin users = hlampl
>[2009/10/02 12:00:01,  4] param/loadparm.c:9046(lp_load_ex)
>  pm_process() returned Yes
>[2009/10/02 12:00:01,  7] param/loadparm.c:9251(lp_servicenumber)
>  lp_servicenumber: couldn't find homes
>[2009/10/02 12:00:01,  8] param/loadparm.c:6024(add_a_service)
>  add_a_service: Creating snum = 2 for IPC$
>[2009/10/02 12:00:01, 10] param/loadparm.c:6071(hash_a_service)
>  hash_a_service: hashing index 2 for service name IPC$
>[2009/10/02 12:00:01,  3] param/loadparm.c:6169(lp_add_ipc)
>  adding IPC service
>[2009/10/02 12:00:01, 10] param/loadparm.c:8259(set_server_role)
>  set_server_role: role = ROLE_STANDALONE
>[2009/10/02 12:00:01,  7] param/loadparm.c:9251(lp_servicenumber)
>  lp_servicenumber: couldn't find printers
>[2009/10/02 12:00:01,  3] printing/pcap.c:136(pcap_cache_reload)
>  reloading printcap cache
>[2009/10/02 12:00:01,  0] printing/pcap.c:178(pcap_cache_reload)
>  Unable to open printcap file /etc/printcap for read!
>[2009/10/02 12:00:01,  3] printing/pcap.c:243(pcap_cache_reload)
>  reload status: error
>[2009/10/02 12:00:01,  3] printing/pcap.c:136(pcap_cache_reload)
>  reloading printcap cache
>[2009/10/02 12:00:01,  0] printing/pcap.c:178(pcap_cache_reload)
>  Unable to open printcap file /etc/printcap for read!
>[2009/10/02 12:00:01,  3] printing/pcap.c:243(pcap_cache_reload)
>  reload status: error
>[2009/10/02 12:00:01,  7] param/loadparm.c:9251(lp_servicenumber)
>  lp_servicenumber: couldn't find printers
>[2009/10/02 12:00:01,  6] param/loadparm.c:6989(lp_file_list_changed)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Oct  2 11:59:23 2009
>  
>[2009/10/02 12:00:01,  2] lib/interface.c:340(add_interface)
>  added interface eth0 ip=fe80::20c:29ff:fee2:3750%eth0 bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff::
>[2009/10/02 12:00:01,  2] lib/interface.c:340(add_interface)
>  added interface eth0 ip=192.168.0.144 bcast=192.168.127.255 netmask=255.255.128.0
>[2009/10/02 12:00:01,  5] lib/util.c:266(init_names)
>  Netbios name list:-
>  my_netbios_names[0]="TESTFS"
>[2009/10/02 12:00:01, 10] profile/profile.c:172(init_clock_gettime)
>  Using CLOCK_MONOTONIC for profile_clock
>[2009/10/02 12:00:01,  3] profile/profile.c:266(profile_setup)
>  Initialised profile area
>[2009/10/02 12:00:01,  3] smbd/server.c:1107(main)
>  loaded services
>[2009/10/02 12:00:01,  3] smbd/server.c:1122(main)
>  Becoming a daemon.
>[2009/10/02 12:00:01,  8] ../lib/util/util.c:243(fcntl_lock)
>  fcntl_lock 9 6 0 1 1
>[2009/10/02 12:00:01,  8] ../lib/util/util.c:278(fcntl_lock)
>  fcntl_lock: Lock call successful
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend ldapsam
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'ldapsam'
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend ldapsam_compat
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'ldapsam_compat'
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend NDS_ldapsam
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'NDS_ldapsam'
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend NDS_ldapsam_compat
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'NDS_ldapsam_compat'
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend smbpasswd
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'smbpasswd'
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend tdbsam
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'tdbsam'
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend wbc_sam
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'wbc_sam'
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:133(make_pdb_method_name)
>  Attempting to find a passdb backend to match tdbsam (tdbsam)
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:154(make_pdb_method_name)
>  Found pdb backend tdbsam
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:165(make_pdb_method_name)
>  pdb backend tdbsam has a valid init
>[2009/10/02 12:00:01,  5] lib/gencache.c:61(gencache_init)
>  Opening cache file at /usr/local/samba/var/locks/gencache.tdb
>[2009/10/02 12:00:01,  5] libsmb/namecache.c:59(namecache_enable)
>  namecache_enable: enabling netbios namecache, timeout 660 seconds
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:73(reghook_cache_init)
>  reghook_cache_init: new tree with default ops 0x7f61c640a0a0 for key []
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1488(regdb_fetch_values)
>  regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] 
>[2009/10/02 12:00:01,  8] registry/reg_backend_db.c:1436(regdb_unpack_values)
>  specific: [Samba Printer Port], len: 2
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1488(regdb_fetch_values)
>  regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] 
>[2009/10/02 12:00:01,  8] registry/reg_backend_db.c:1436(regdb_unpack_values)
>  specific: [DefaultSpoolDirectory], len: 70
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1488(regdb_fetch_values)
>  regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] 
>[2009/10/02 12:00:01,  8] registry/reg_backend_db.c:1436(regdb_unpack_values)
>  specific: [DisplayName], len: 20
>[2009/10/02 12:00:01,  8] registry/reg_backend_db.c:1436(regdb_unpack_values)
>  specific: [ErrorControl], len: 4
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1488(regdb_fetch_values)
>  regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] 
>[2009/10/02 12:00:01,  8] registry/reg_backend_db.c:1436(regdb_unpack_values)
>  specific: [DisplayName], len: 20
>[2009/10/02 12:00:01,  8] registry/reg_backend_db.c:1436(regdb_unpack_values)
>  specific: [ErrorControl], len: 4
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7f61c640a340 for key [/HKLM/SYSTEM/CurrentControlSet/Control/Print]
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7f61c640a340 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers]
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] to tree
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7f61c640a340 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports]
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] to tree
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7f61c640a3a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares]
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] to tree
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7f61c640a1a0 for key [/HKLM/SOFTWARE/Samba/smbconf]
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SOFTWARE/Samba/smbconf] to tree
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7f61c640a400 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/Parameters]
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/Parameters] to tree
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7f61c640a460 for key [/HKLM/SYSTEM/CurrentControlSet/Control/ProductOptions]
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/ProductOptions] to tree
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7f61c640a4c0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/Parameters]
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/Parameters] to tree
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7f61c640a520 for key [/HKPT]
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKPT] to tree
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7f61c640a580 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion]
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion] to tree
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7f61c640a5e0 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Perflib]
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Perflib] to tree
>[2009/10/02 12:00:01,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2009/10/02 12:00:01, 10] lib/gencache.c:194(gencache_get)
>  Cache entry with key = IDMAP/UID2SID/0 couldn't be found
>[2009/10/02 12:00:01,  5] passdb/lookup_sid.c:1325(uid_to_sid)
>  uid_to_sid: winbind failed to find a sid for uid 0
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:01,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:01,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:01,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:01,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:01,  4] passdb/pdb_tdb.c:518(tdbsam_open)
>  tdbsam_open: successfully opened /var/lib/samba/passdb.tdb
>[2009/10/02 12:00:01,  5] passdb/pdb_tdb.c:557(tdbsam_getsampwnam)
>  pdb_getsampwnam (TDB): error fetching database.
>   Key: USER_root
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  5] passdb/pdb_interface.c:1213(pdb_default_uid_to_sid)
>  pdb_default_uid_to_rid: Did not find user root (0)
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:01, 10] passdb/lookup_sid.c:1142(legacy_uid_to_sid)
>  LEGACY: uid 0 -> sid S-1-22-1-0
>[2009/10/02 12:00:01, 10] lib/gencache.c:194(gencache_get)
>  Cache entry with key = IDMAP/GID2SID/0 couldn't be found
>[2009/10/02 12:00:01,  5] passdb/lookup_sid.c:1378(gid_to_sid)
>  gid_to_sid: winbind failed to find a sid for gid 0
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:01,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:01, 10] passdb/lookup_sid.c:1173(legacy_gid_to_sid)
>  LEGACY: gid 0 -> sid S-1-22-2-0
>[2009/10/02 12:00:01, 10] auth/token_util.c:353(create_local_nt_token)
>  Create local NT token for S-1-22-1-0
>[2009/10/02 12:00:01, 10] lib/gencache.c:208(gencache_get)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-544, value = 20000, timeout = Tue Oct  6 16:09:40 2009
>[2009/10/02 12:00:01, 10] passdb/lookup_sid.c:1509(sid_to_gid)
>  sid S-1-5-32-544 -> gid 20000
>[2009/10/02 12:00:01, 10] lib/gencache.c:208(gencache_get)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-545, value = 20001, timeout = Tue Oct  6 16:09:41 2009
>[2009/10/02 12:00:01, 10] passdb/lookup_sid.c:1509(sid_to_gid)
>  sid S-1-5-32-545 -> gid 20001
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:01,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:01,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-22-1-0]
>[2009/10/02 12:00:01,  5] lib/privileges.c:128(get_privileges_for_sids)
>  get_privileges_for_sids: sid = S-1-5-32-544
>  Privilege set:
>  SE_PRIV  0xff0 0x0 0x0 0x0
>[2009/10/02 12:00:01,  5] lib/privileges.c:128(get_privileges_for_sids)
>  get_privileges_for_sids: sid = S-1-1-0
>  Privilege set:
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:01,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2009/10/02 12:00:01,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-11]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (1)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (2)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (3)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (2)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Spooler]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1525(regdb_store_values)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] 
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (2)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Spooler]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Security]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1525(regdb_store_values)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] 
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (2)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [NETLOGON]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1525(regdb_store_values)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] 
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (2)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [NETLOGON]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Security]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1525(regdb_store_values)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] 
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (2)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [RemoteRegistry]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1525(regdb_store_values)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] 
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (2)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [RemoteRegistry]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Security]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1525(regdb_store_values)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] 
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (2)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [WINS]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1525(regdb_store_values)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] 
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (2)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [WINS]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Security]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:440(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security]
>[2009/10/02 12:00:01, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2009/10/02 12:00:01, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7f61c640a0a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1583(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (3)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:1525(regdb_store_values)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] 
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (1)
>[2009/10/02 12:00:01, 10] registry/reg_backend_db.c:474(regdb_close)
>  regdb_close: decrementing refcount (0)
>[2009/10/02 12:00:01, 10] printing/nt_printing.c:700(update_c_setprinter)
>  update_c_setprinter: c_setprinter = 0
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:01,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:01,  6] passdb/pdb_interface.c:279(pdb_getsampwsid)
>  pdb_getsampwsid: Building guest account
>[2009/10/02 12:00:01, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username nobody, was 
>[2009/10/02 12:00:01, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name nobody, was 
>[2009/10/02 12:00:01, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:01, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-501
>[2009/10/02 12:00:01, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-501 from rid 501
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:01, 10] lib/system_smbd.c:122(sys_getgrouplist)
>  sys_getgrouplist: user [nobody]
>[2009/10/02 12:00:01, 10] lib/gencache.c:194(gencache_get)
>  Cache entry with key = IDMAP/GID2SID/65534 couldn't be found
>[2009/10/02 12:00:01,  5] passdb/lookup_sid.c:1378(gid_to_sid)
>  gid_to_sid: winbind failed to find a sid for gid 65534
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:01,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:01, 10] passdb/lookup_sid.c:1173(legacy_gid_to_sid)
>  LEGACY: gid 65534 -> sid S-1-22-2-65534
>[2009/10/02 12:00:01,  5] auth/auth_util.c:646(make_server_info_sam)
>  make_server_info_sam: made server info for user nobody -> nobody
>[2009/10/02 12:00:01, 10] auth/token_util.c:353(create_local_nt_token)
>  Create local NT token for S-1-5-21-2901898339-3287136368-3549063626-501
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:01,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:01,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:01,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:01,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-2901898339-3287136368-3549063626-501]
>[2009/10/02 12:00:01,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-22-2-65534]
>[2009/10/02 12:00:01,  5] lib/privileges.c:128(get_privileges_for_sids)
>  get_privileges_for_sids: sid = S-1-1-0
>  Privilege set:
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:01,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2009/10/02 12:00:01,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-32-546]
>[2009/10/02 12:00:01, 10] lib/gencache.c:208(gencache_get)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-1-0, value = 20002, timeout = Tue Oct  6 16:09:41 2009
>[2009/10/02 12:00:01, 10] passdb/lookup_sid.c:1509(sid_to_gid)
>  sid S-1-1-0 -> gid 20002
>[2009/10/02 12:00:01, 10] lib/gencache.c:208(gencache_get)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-2, value = 20003, timeout = Tue Oct  6 16:09:41 2009
>[2009/10/02 12:00:01, 10] passdb/lookup_sid.c:1509(sid_to_gid)
>  sid S-1-5-2 -> gid 20003
>[2009/10/02 12:00:01, 10] lib/gencache.c:208(gencache_get)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-546, value = 20005, timeout = Tue Oct  6 16:09:45 2009
>[2009/10/02 12:00:01, 10] passdb/lookup_sid.c:1509(sid_to_gid)
>  sid S-1-5-32-546 -> gid 20005
>[2009/10/02 12:00:01, 10] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-501
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-501
>  SID[  1]: S-1-22-2-65534
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-32-546
>  SID[  5]: S-1-22-1-65534
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20005
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:01, 10] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 65534
>  Primary group is 65534 and contains 4 supplementary groups
>  Group[  0]: 65534
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20005
>[2009/10/02 12:00:01,  3] printing/printing.c:1415(start_background_queue)
>  start_background_queue: Starting background LPQ thread
>[2009/10/02 12:00:01,  5] printing/printing.c:1434(start_background_queue)
>  start_background_queue: background LPQ thread started
>[2009/10/02 12:00:01,  5] smbd/connection.c:142(claim_connection)
>  claiming [smbd lpq backend]
>[2009/10/02 12:00:01, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key C0320000FFFFFFFF736D
>[2009/10/02 12:00:01, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c6493950
>[2009/10/02 12:00:01, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key C0320000FFFFFFFF736D
>[2009/10/02 12:00:01,  5] printing/printing.c:1468(start_background_queue)
>  start_background_queue: background LPQ thread waiting for messages
>[2009/10/02 12:00:01, 10] lib/util_sock.c:951(open_socket_in)
>  bind succeeded on port 445
>[2009/10/02 12:00:01,  5] lib/util_sock.c:371(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 0
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 87380
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2009/10/02 12:00:01,  5] lib/util_sock.c:371(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 1
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 16384
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2009/10/02 12:00:01, 10] lib/util_sock.c:951(open_socket_in)
>  bind succeeded on port 139
>[2009/10/02 12:00:01,  5] lib/util_sock.c:371(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 0
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 87380
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2009/10/02 12:00:01,  5] lib/util_sock.c:371(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 1
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 16384
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2009/10/02 12:00:01, 10] lib/util_sock.c:951(open_socket_in)
>  bind succeeded on port 445
>[2009/10/02 12:00:01,  5] lib/util_sock.c:371(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 0
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 87380
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2009/10/02 12:00:01,  5] lib/util_sock.c:371(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 1
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 16384
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2009/10/02 12:00:01, 10] lib/util_sock.c:951(open_socket_in)
>  bind succeeded on port 139
>[2009/10/02 12:00:01,  5] lib/util_sock.c:371(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 0
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 87380
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2009/10/02 12:00:01,  5] lib/util_sock.c:371(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 1
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 16384
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2009/10/02 12:00:01,  5] smbd/connection.c:142(claim_connection)
>  claiming []
>[2009/10/02 12:00:01, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key BD320000FFFFFFFF0000
>[2009/10/02 12:00:01, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c6494200
>[2009/10/02 12:00:01, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key BD320000FFFFFFFF0000
>[2009/10/02 12:00:01,  2] smbd/server.c:676(smbd_parent_loop)
>  waiting for connections
>[2009/10/02 12:00:03,  5] lib/util_sock.c:371(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 1
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 16384
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2009/10/02 12:00:03,  5] lib/util_sock.c:371(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 1
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 16384
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2009/10/02 12:00:03,  6] param/loadparm.c:6989(lp_file_list_changed)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Oct  2 11:59:23 2009
>  
>[2009/10/02 12:00:03,  3] lib/access.c:362(only_ipaddrs_in_list)
>  only_ipaddrs_in_list: list has non-ip address (127.0.0.)
>[2009/10/02 12:00:03,  3] lib/access.c:396(check_access)
>  check_access: hostnames in host allow/deny list.
>[2009/10/02 12:00:03,  2] lib/access.c:406(check_access)
>  Allowed connection from platypus.muc.dynaware.de (192.168.3.182)
>[2009/10/02 12:00:03,  3] smbd/oplock.c:911(init_oplocks)
>  init_oplocks: initializing messages.
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Added timed event "smbd_idle_event_handler": 0x7f61c641a3e0
>[2009/10/02 12:00:03, 10] smbd/process.c:699(event_add_idle)
>  event_add_idle: idle_evt(keepalive) 0x7f61c641a3e0
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Added timed event "smbd_idle_event_handler": 0x7f61c6491760
>[2009/10/02 12:00:03, 10] smbd/process.c:699(event_add_idle)
>  event_add_idle: idle_evt(deadtime) 0x7f61c6491760
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Added timed event "smbd_idle_event_handler": 0x7f61c6491920
>[2009/10/02 12:00:03, 10] smbd/process.c:699(event_add_idle)
>  event_add_idle: idle_evt(housekeeping) 0x7f61c6491920
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 133
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x85
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 0 of length 137 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=133
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51283
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=0
>  smt_wct=0
>  smb_bcc=98
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 02 50 43 20 4E 45 54 57   4F 52 4B 20 50 52 4F 47   .PC NETW ORK PROG
>  [0010] 52 41 4D 20 31 2E 30 00   02 4C 41 4E 4D 41 4E 31   RAM 1.0. .LANMAN1
>  [0020] 2E 30 00 02 57 69 6E 64   6F 77 73 20 66 6F 72 20   .0..Wind ows for 
>  [0030] 57 6F 72 6B 67 72 6F 75   70 73 20 33 2E 31 61 00   Workgrou ps 3.1a.
>  [0040] 02 4C 4D 31 2E 32 58 30   30 32 00 02 4C 41 4E 4D   .LM1.2X0 02..LANM
>  [0050] 41 4E 32 2E 31 00 02 4E   54 20 4C 4D 20 30 2E 31   AN2.1..N T LM 0.1
>  [0060] 32 00                                             2. 
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBnegprot (pid 12993) conn 0x0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:03,  3] smbd/negprot.c:567(reply_negprot)
>  Requested protocol [PC NETWORK PROGRAM 1.0]
>[2009/10/02 12:00:03,  3] smbd/negprot.c:567(reply_negprot)
>  Requested protocol [LANMAN1.0]
>[2009/10/02 12:00:03,  3] smbd/negprot.c:567(reply_negprot)
>  Requested protocol [Windows for Workgroups 3.1a]
>[2009/10/02 12:00:03,  3] smbd/negprot.c:567(reply_negprot)
>  Requested protocol [LM1.2X002]
>[2009/10/02 12:00:03,  3] smbd/negprot.c:567(reply_negprot)
>  Requested protocol [LANMAN2.1]
>[2009/10/02 12:00:03,  3] smbd/negprot.c:567(reply_negprot)
>  Requested protocol [NT LM 0.12]
>[2009/10/02 12:00:03, 10] lib/util.c:1979(set_remote_arch)
>  set_remote_arch: Client arch is 'Win2K'
>[2009/10/02 12:00:03,  6] param/loadparm.c:6989(lp_file_list_changed)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Oct  2 11:59:23 2009
>  
>[2009/10/02 12:00:03,  5] smbd/connection.c:142(claim_connection)
>  claiming []
>[2009/10/02 12:00:03, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key C1320000FFFFFFFF0000
>[2009/10/02 12:00:03, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c6492da0
>[2009/10/02 12:00:03, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key C1320000FFFFFFFF0000
>[2009/10/02 12:00:03,  6] param/loadparm.c:6989(lp_file_list_changed)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Oct  2 11:59:23 2009
>  
>[2009/10/02 12:00:03,  3] smbd/negprot.c:387(reply_nt1)
>  using SPNEGO
>[2009/10/02 12:00:03,  3] smbd/negprot.c:672(reply_negprot)
>  Selected protocol NT LM 0.12
>[2009/10/02 12:00:03,  5] smbd/negprot.c:679(reply_negprot)
>  negprot index=5
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=127
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51283
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=0
>  smt_wct=17
>  smb_vwv[ 0]=    5 (0x5)
>  smb_vwv[ 1]=12803 (0x3203)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=49408 (0xC100)
>  smb_vwv[ 8]=   50 (0x32)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=  243 (0xF3)
>  smb_vwv[11]=32896 (0x8080)
>  smb_vwv[12]=19603 (0x4C93)
>  smb_vwv[13]=18204 (0x471C)
>  smb_vwv[14]=51779 (0xCA43)
>  smb_vwv[15]=34817 (0x8801)
>  smb_vwv[16]=  255 (0xFF)
>  smb_bcc=58
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 74 65 73 74 66 73 00 00   00 00 00 00 00 00 00 00   testfs.. ........
>  [0010] 60 28 06 06 2B 06 01 05   05 02 A0 1E 30 1C A0 0E   `(..+... ....0...
>  [0020] 30 0C 06 0A 2B 06 01 04   01 82 37 02 02 0A A3 0A   0...+... ..7.....
>  [0030] 30 08 A0 06 1B 04 4E 4F   4E 45                    0.....NO NE
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 236
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0xec
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 1 of length 240 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=236
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=14144
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  236 (0xEC)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=   74 (0x4A)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=40960 (0xA000)
>  smb_bcc=177
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 60 48 06 06 2B 06 01 05   05 02 A0 3E 30 3C A0 0E   `H..+... ...>0<..
>  [0010] 30 0C 06 0A 2B 06 01 04   01 82 37 02 02 0A A2 2A   0...+... ..7....*
>  [0020] 04 28 4E 54 4C 4D 53 53   50 00 01 00 00 00 07 82   .(NTLMSS P.......
>  [0030] 08 A2 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00 00 05 01 28 0A 00 00   00 0F 00 57 00 69 00 6E   ....(... ...W.i.n
>  [0050] 00 64 00 6F 00 77 00 73   00 20 00 32 00 30 00 30   .d.o.w.s . .2.0.0
>  [0060] 00 32 00 20 00 53 00 65   00 72 00 76 00 69 00 63   .2. .S.e .r.v.i.c
>  [0070] 00 65 00 20 00 50 00 61   00 63 00 6B 00 20 00 33   .e. .P.a .c.k. .3
>  [0080] 00 20 00 32 00 36 00 30   00 30 00 00 00 57 00 69   . .2.6.0 .0...W.i
>  [0090] 00 6E 00 64 00 6F 00 77   00 73 00 20 00 32 00 30   .n.d.o.w .s. .2.0
>  [00A0] 00 30 00 32 00 20 00 35   00 2E 00 31 00 00 00 00   .0.2. .5 ...1....
>  [00B0] 00                                                . 
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBsesssetupX (pid 12993) conn 0x0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:03,  3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2009/10/02 12:00:03,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
>[2009/10/02 12:00:03,  3] smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2009/10/02 12:00:03,  3] smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2009/10/02 12:00:03, 10] lib/util.c:1979(set_remote_arch)
>  set_remote_arch: Client arch is 'WinXP'
>[2009/10/02 12:00:03, 10] smbd/password.c:172(register_initial_vuid)
>  register_initial_vuid: allocated vuid = 100
>[2009/10/02 12:00:03, 10] smbd/sesssetup.c:1106(check_spnego_blob_complete)
>  check_spnego_blob_complete: needed_len = 74, pblob->length = 74
>[2009/10/02 12:00:03,  5] smbd/sesssetup.c:735(parse_spnego_mechanisms)
>  parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10
>[2009/10/02 12:00:03,  3] smbd/sesssetup.c:786(reply_spnego_negotiate)
>  reply_spnego_negotiate: Got secblob of size 40
>[2009/10/02 12:00:03,  5] auth/auth.c:493(make_auth_context_subsystem)
>  Making default auth method list for standalone security=user, encrypt passwords = yes
>[2009/10/02 12:00:03,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend sam
>[2009/10/02 12:00:03,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'sam'
>[2009/10/02 12:00:03,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend sam_ignoredomain
>[2009/10/02 12:00:03,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'sam_ignoredomain'
>[2009/10/02 12:00:03,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend unix
>[2009/10/02 12:00:03,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'unix'
>[2009/10/02 12:00:03,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend winbind
>[2009/10/02 12:00:03,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'winbind'
>[2009/10/02 12:00:03,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend wbc
>[2009/10/02 12:00:03,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'wbc'
>[2009/10/02 12:00:03,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend smbserver
>[2009/10/02 12:00:03,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'smbserver'
>[2009/10/02 12:00:03,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend trustdomain
>[2009/10/02 12:00:03,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'trustdomain'
>[2009/10/02 12:00:03,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend ntdomain
>[2009/10/02 12:00:03,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'ntdomain'
>[2009/10/02 12:00:03,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend guest
>[2009/10/02 12:00:03,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'guest'
>[2009/10/02 12:00:03,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend netlogond
>[2009/10/02 12:00:03,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'netlogond'
>[2009/10/02 12:00:03,  5] auth/auth.c:389(load_auth_module)
>  load_auth_module: Attempting to find an auth method to match guest
>[2009/10/02 12:00:03,  5] auth/auth.c:414(load_auth_module)
>  load_auth_module: auth method guest has a valid init
>[2009/10/02 12:00:03,  5] auth/auth.c:389(load_auth_module)
>  load_auth_module: Attempting to find an auth method to match sam
>[2009/10/02 12:00:03,  5] auth/auth.c:414(load_auth_module)
>  load_auth_module: auth method sam has a valid init
>[2009/10/02 12:00:03,  3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088207
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_NEGOTIATE_OEM
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2009/10/02 12:00:03,  5] auth/auth.c:98(get_ntlm_challenge)
>  auth_get_challenge: module guest did not want to specify a challenge
>[2009/10/02 12:00:03,  5] auth/auth.c:98(get_ntlm_challenge)
>  auth_get_challenge: module sam did not want to specify a challenge
>[2009/10/02 12:00:03,  5] auth/auth.c:138(get_ntlm_challenge)
>  auth_context challenge created by random
>[2009/10/02 12:00:03,  5] auth/auth.c:139(get_ntlm_challenge)
>  challenge is: 
>[2009/10/02 12:00:03,  5] ../lib/util/util.c:304(_dump_data)
>  [0000] 5F 6B 10 72 2E E1 5B 30                            _k.r..[0 
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=308
>  smb_com=0x73
>  smb_rcls=22
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14144
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  209 (0xD1)
>  smb_bcc=265
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] A1 81 CE 30 81 CB A0 03   0A 01 01 A1 0C 06 0A 2B   ...0.... .......+
>  [0010] 06 01 04 01 82 37 02 02   0A A2 81 B5 04 81 B2 4E   .....7.. .......N
>  [0020] 54 4C 4D 53 53 50 00 02   00 00 00 0C 00 0C 00 30   TLMSSP.. .......0
>  [0030] 00 00 00 05 82 8A A2 5F   6B 10 72 2E E1 5B 30 00   ......._ k.r..[0.
>  [0040] 00 00 00 00 00 00 00 76   00 76 00 3C 00 00 00 54   .......v .v.<...T
>  [0050] 00 45 00 53 00 54 00 46   00 53 00 02 00 0C 00 54   .E.S.T.F .S.....T
>  [0060] 00 45 00 53 00 54 00 46   00 53 00 01 00 0C 00 54   .E.S.T.F .S.....T
>  [0070] 00 45 00 53 00 54 00 46   00 53 00 04 00 1E 00 6D   .E.S.T.F .S.....m
>  [0080] 00 75 00 63 00 2E 00 64   00 79 00 6E 00 61 00 77   .u.c...d .y.n.a.w
>  [0090] 00 61 00 72 00 65 00 2E   00 64 00 65 00 03 00 2C   .a.r.e.. .d.e...,
>  [00A0] 00 74 00 65 00 73 00 74   00 66 00 73 00 2E 00 6D   .t.e.s.t .f.s...m
>  [00B0] 00 75 00 63 00 2E 00 64   00 79 00 6E 00 61 00 77   .u.c...d .y.n.a.w
>  [00C0] 00 61 00 72 00 65 00 2E   00 64 00 65 00 00 00 00   .a.r.e.. .d.e....
>  [00D0] 00 55 00 6E 00 69 00 78   00 00 00 53 00 61 00 6D   .U.n.i.x ...S.a.m
>  [00E0] 00 62 00 61 00 20 00 33   00 2E 00 34 00 2E 00 31   .b.a. .3 ...4...1
>  [00F0] 00 00 00 44 00 45 00 56   00 2E 00 4D 00 55 00 43   ...D.E.V ...M.U.C
>  [0100] 00 2E 00 44 00 57 00 00   00                       ...D.W.. .
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 338
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x152
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 2 of length 342 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=338
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14208
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  338 (0x152)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=  176 (0xB0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=40960 (0xA000)
>  smb_bcc=279
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] A1 81 AD 30 81 AA A2 81   A7 04 81 A4 4E 54 4C 4D   ...0.... ....NTLM
>  [0010] 53 53 50 00 03 00 00 00   18 00 18 00 74 00 00 00   SSP..... ....t...
>  [0020] 18 00 18 00 8C 00 00 00   10 00 10 00 48 00 00 00   ........ ....H...
>  [0030] 0C 00 0C 00 58 00 00 00   10 00 10 00 64 00 00 00   ....X... ....d...
>  [0040] 00 00 00 00 A4 00 00 00   05 82 88 A2 05 01 28 0A   ........ ......(.
>  [0050] 00 00 00 0F 50 00 4C 00   41 00 54 00 59 00 50 00   ....P.L. A.T.Y.P.
>  [0060] 55 00 53 00 68 00 6C 00   61 00 6D 00 70 00 6C 00   U.S.h.l. a.m.p.l.
>  [0070] 50 00 4C 00 41 00 54 00   59 00 50 00 55 00 53 00   P.L.A.T. Y.P.U.S.
>  [0080] 3C 1A 37 48 61 80 56 DE   00 00 00 00 00 00 00 00   <.7Ha.V. ........
>  [0090] 00 00 00 00 00 00 00 00   66 FE B6 7E C0 2B 08 23   ........ f..~.+.#
>  [00A0] A2 0A 72 C5 79 E1 B2 4D   A4 82 3A C2 A6 88 EA 83   ..r.y..M ..:.....
>  [00B0] 00 57 00 69 00 6E 00 64   00 6F 00 77 00 73 00 20   .W.i.n.d .o.w.s. 
>  [00C0] 00 32 00 30 00 30 00 32   00 20 00 53 00 65 00 72   .2.0.0.2 . .S.e.r
>  [00D0] 00 76 00 69 00 63 00 65   00 20 00 50 00 61 00 63   .v.i.c.e . .P.a.c
>  [00E0] 00 6B 00 20 00 33 00 20   00 32 00 36 00 30 00 30   .k. .3.  .2.6.0.0
>  [00F0] 00 00 00 57 00 69 00 6E   00 64 00 6F 00 77 00 73   ...W.i.n .d.o.w.s
>  [0100] 00 20 00 32 00 30 00 30   00 32 00 20 00 35 00 2E   . .2.0.0 .2. .5..
>  [0110] 00 31 00 00 00 00 00                              .1..... 
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBsesssetupX (pid 12993) conn 0x0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:03,  3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2009/10/02 12:00:03,  2] smbd/sesssetup.c:1360(setup_new_vc_session)
>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
>[2009/10/02 12:00:03,  3] smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2009/10/02 12:00:03,  3] smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2009/10/02 12:00:03, 10] smbd/sesssetup.c:1106(check_spnego_blob_complete)
>  check_spnego_blob_complete: needed_len = 176, pblob->length = 176
>[2009/10/02 12:00:03,  3] libsmb/ntlmssp.c:745(ntlmssp_server_auth)
>  Got user=[hlampl] domain=[PLATYPUS] workstation=[PLATYPUS] len1=24 len2=24
>[2009/10/02 12:00:03,  5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge)
>  auth_context challenge set by NTLMSSP callback (NTLM2)
>[2009/10/02 12:00:03,  5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge)
>  challenge is: 
>[2009/10/02 12:00:03,  5] ../lib/util/util.c:304(_dump_data)
>  [0000] 3A 2A 7F 9B 3D 90 65 80                            :*..=.e. 
>[2009/10/02 12:00:03,  6] param/loadparm.c:6989(lp_file_list_changed)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Oct  2 11:59:23 2009
>  
>[2009/10/02 12:00:03,  5] auth/auth_util.c:208(make_user_info_map)
>  Mapping user [PLATYPUS]\[hlampl] from workstation [PLATYPUS]
>[2009/10/02 12:00:03,  5] auth/auth_util.c:229(make_user_info_map)
>  Mapped domain from [PLATYPUS] to [TESTFS] for user [hlampl] from workstation [PLATYPUS]
>[2009/10/02 12:00:03,  5] auth/auth_util.c:120(make_user_info)
>  attempting to make a user_info for hlampl (hlampl)
>[2009/10/02 12:00:03,  5] auth/auth_util.c:130(make_user_info)
>  making strings for hlampl's user_info struct
>[2009/10/02 12:00:03,  5] auth/auth_util.c:162(make_user_info)
>  making blobs for hlampl's user_info struct
>[2009/10/02 12:00:03, 10] auth/auth_util.c:180(make_user_info)
>  made an encrypted user_info for hlampl (hlampl)
>[2009/10/02 12:00:03,  3] auth/auth.c:222(check_ntlm_password)
>  check_ntlm_password:  Checking password for unmapped user [PLATYPUS]\[hlampl]@[PLATYPUS] with the new password interface
>[2009/10/02 12:00:03,  3] auth/auth.c:225(check_ntlm_password)
>  check_ntlm_password:  mapped user is: [TESTFS]\[hlampl]@[PLATYPUS]
>[2009/10/02 12:00:03, 10] auth/auth.c:234(check_ntlm_password)
>  check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2)
>[2009/10/02 12:00:03, 10] auth/auth.c:236(check_ntlm_password)
>  challenge is: 
>[2009/10/02 12:00:03,  5] ../lib/util/util.c:304(_dump_data)
>  [0000] 3A 2A 7F 9B 3D 90 65 80                            :*..=.e. 
>[2009/10/02 12:00:03, 10] auth/auth.c:262(check_ntlm_password)
>  check_ntlm_password: guest had nothing to say
>[2009/10/02 12:00:03,  8] lib/util.c:1879(is_myname)
>  is_myname("TESTFS") returns 1
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:03, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] lib/username.c:133(Get_Pwnam_alloc)
>  Finding user hlampl
>[2009/10/02 12:00:03,  5] lib/username.c:77(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is hlampl
>[2009/10/02 12:00:03,  5] lib/username.c:110(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [hlampl]!
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:03, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  9] passdb/passdb.c:2142(pdb_update_autolock_flag)
>  pdb_update_autolock_flag: Account hlampl not autolocked, no check needed
>[2009/10/02 12:00:03,  4] libsmb/ntlm_check.c:332(ntlm_password_check)
>  ntlm_password_check: Checking NT MD4 password
>[2009/10/02 12:00:03,  4] auth/auth_sam.c:137(sam_account_ok)
>  sam_account_ok: Checking SMB password for user hlampl
>[2009/10/02 12:00:03,  5] auth/auth_sam.c:119(logon_hours_ok)
>  logon_hours_ok: user hlampl allowed to logon at this time (Fri Oct  2 10:00:03 2009
>  )
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/system_smbd.c:122(sys_getgrouplist)
>  sys_getgrouplist: user [hlampl]
>[2009/10/02 12:00:03, 10] lib/gencache.c:194(gencache_get)
>  Cache entry with key = IDMAP/GID2SID/1001 couldn't be found
>[2009/10/02 12:00:03,  5] passdb/lookup_sid.c:1378(gid_to_sid)
>  gid_to_sid: winbind failed to find a sid for gid 1001
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03, 10] passdb/lookup_sid.c:1173(legacy_gid_to_sid)
>  LEGACY: gid 1001 -> sid S-1-22-2-1001
>[2009/10/02 12:00:03,  5] auth/auth_util.c:646(make_server_info_sam)
>  make_server_info_sam: made server info for user hlampl -> hlampl
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] auth/auth.c:271(check_ntlm_password)
>  check_ntlm_password: sam authentication for user [hlampl] succeeded
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  5] auth/auth.c:297(check_ntlm_password)
>  check_ntlm_password:  PAM Account for user [hlampl] succeeded
>[2009/10/02 12:00:03,  2] auth/auth.c:310(check_ntlm_password)
>  check_ntlm_password:  authentication for user [hlampl] -> [hlampl] -> [hlampl] succeeded
>[2009/10/02 12:00:03,  5] auth/auth_util.c:2114(free_user_info)
>  attempting to free (and zero) a user_info structure
>[2009/10/02 12:00:03, 10] auth/auth_util.c:2118(free_user_info)
>  structure was created for hlampl
>[2009/10/02 12:00:03, 10] auth/token_util.c:353(create_local_nt_token)
>  Create local NT token for S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-2901898339-3287136368-3549063626-3002]
>[2009/10/02 12:00:03,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-22-2-1001]
>[2009/10/02 12:00:03,  5] lib/privileges.c:128(get_privileges_for_sids)
>  get_privileges_for_sids: sid = S-1-1-0
>  Privilege set:
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:03,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2009/10/02 12:00:03,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-11]
>[2009/10/02 12:00:03, 10] lib/gencache.c:208(gencache_get)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-11, value = 20004, timeout = Tue Oct  6 16:09:41 2009
>[2009/10/02 12:00:03, 10] passdb/lookup_sid.c:1509(sid_to_gid)
>  sid S-1-5-11 -> gid 20004
>[2009/10/02 12:00:03, 10] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:03, 10] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 1001
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:03, 10] auth/auth_ntlmssp.c:139(auth_ntlmssp_check_password)
>  Got NT session key of length 16
>[2009/10/02 12:00:03, 10] libsmb/ntlmssp.c:813(ntlmssp_server_auth)
>  ntlmssp_server_auth: Created NTLM2 session key.
>[2009/10/02 12:00:03,  3] libsmb/ntlmssp_sign.c:342(ntlmssp_sign_init)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2009/10/02 12:00:03,  3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088205
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2009/10/02 12:00:03, 10] smbd/password.c:265(register_existing_vuid)
>  register_existing_vuid: (1001,1001) hlampl hlampl TESTFS guest=0
>[2009/10/02 12:00:03,  3] smbd/password.c:269(register_existing_vuid)
>  register_existing_vuid: User name: hlampl	Real name: ,,,
>[2009/10/02 12:00:03,  3] smbd/password.c:279(register_existing_vuid)
>  register_existing_vuid: UNIX uid 1001 is UNIX user hlampl, and will be vuid 100
>[2009/10/02 12:00:03, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 49442F31323939332F31
>[2009/10/02 12:00:03, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c640ffd0
>[2009/10/02 12:00:03, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 49442F31323939332F31
>[2009/10/02 12:00:03,  7] param/loadparm.c:9251(lp_servicenumber)
>  lp_servicenumber: couldn't find hlampl
>[2009/10/02 12:00:03,  3] smbd/password.c:211(register_homes_share)
>  Adding homes service for user 'hlampl' using home directory: '/home/hlampl'
>[2009/10/02 12:00:03,  7] param/loadparm.c:9251(lp_servicenumber)
>  lp_servicenumber: couldn't find homes
>[2009/10/02 12:00:03,  6] param/loadparm.c:6989(lp_file_list_changed)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Oct  2 11:59:23 2009
>  
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=108
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14208
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    9 (0x9)
>  smb_bcc=65
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] A1 07 30 05 A0 03 0A 01   00 55 00 6E 00 69 00 78   ..0..... .U.n.i.x
>  [0010] 00 00 00 53 00 61 00 6D   00 62 00 61 00 20 00 33   ...S.a.m .b.a. .3
>  [0020] 00 2E 00 34 00 2E 00 31   00 00 00 44 00 45 00 56   ...4...1 ...D.E.V
>  [0030] 00 2E 00 4D 00 55 00 43   00 2E 00 44 00 57 00 00   ...M.U.C ...D.W..
>  [0040] 00                                                . 
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 78
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4e
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 3 of length 82 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=78
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14272
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   78 (0x4E)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=35
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 5C 00 54 00 45   00 53 00 54 00 46 00 53   .\.\.T.E .S.T.F.S
>  [0010] 00 5C 00 49 00 50 00 43   00 24 00 00 00 3F 3F 3F   .\.I.P.C .$...???
>  [0020] 3F 3F 00                                          ??. 
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtconX (pid 12993) conn 0x0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:03,  4] smbd/reply.c:675(reply_tcon_and_X)
>  Client requested device type [?????] for share [IPC$]
>[2009/10/02 12:00:03,  5] smbd/service.c:1198(make_connection)
>  making a connection to 'normal' service ipc$
>[2009/10/02 12:00:03,  3] lib/access.c:362(only_ipaddrs_in_list)
>  only_ipaddrs_in_list: list has non-ip address (127.0.0.)
>[2009/10/02 12:00:03,  3] lib/access.c:396(check_access)
>  check_access: hostnames in host allow/deny list.
>[2009/10/02 12:00:03,  2] lib/access.c:406(check_access)
>  Allowed connection from 192.168.3.182 (192.168.3.182)
>[2009/10/02 12:00:03, 10] smbd/share_access.c:234(user_ok_token)
>  user_ok_token: share IPC$ is ok for unix user hlampl
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:03, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:03,  5] lib/username.c:133(Get_Pwnam_alloc)
>  Finding user hlampl
>[2009/10/02 12:00:03,  5] lib/username.c:77(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is hlampl
>[2009/10/02 12:00:03,  5] lib/username.c:110(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [hlampl]!
>[2009/10/02 12:00:03, 10] smbd/service.c:158(set_conn_connectpath)
>  set_conn_connectpath: service IPC$, connectpath = /tmp
>[2009/10/02 12:00:03,  3] smbd/service.c:803(make_connection_snum)
>  Connect path is '/tmp' for service [IPC$]
>[2009/10/02 12:00:03, 10] lib/util_seaccess.c:58(se_map_generic)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2009/10/02 12:00:03,  3] smbd/vfs.c:95(vfs_init_default)
>  Initialising default vfs hooks
>[2009/10/02 12:00:03, 10] smbd/vfs.c:47(vfs_find_backend_entry)
>  vfs_find_backend_entry called for /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:85(smb_register_vfs)
>  Successfully added vfs backend '/[Default VFS]/'
>[2009/10/02 12:00:03, 10] smbd/vfs.c:47(vfs_find_backend_entry)
>  vfs_find_backend_entry called for posixacl
>[2009/10/02 12:00:03,  5] smbd/vfs.c:85(smb_register_vfs)
>  Successfully added vfs backend 'posixacl'
>[2009/10/02 12:00:03,  3] smbd/vfs.c:129(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2009/10/02 12:00:03, 10] smbd/vfs.c:47(vfs_find_backend_entry)
>  vfs_find_backend_entry called for /[Default VFS]/
>  Successfully loaded vfs module [/[Default VFS]/] with the new modules system
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #0 (type 0, layer 0)
>  Making operation type 0 opaque [module /[Default VFS]/]
>  Accepting operation type 0 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #1 (type 1, layer 0)
>  Making operation type 1 opaque [module /[Default VFS]/]
>  Accepting operation type 1 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #2 (type 2, layer 0)
>  Making operation type 2 opaque [module /[Default VFS]/]
>  Accepting operation type 2 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #3 (type 3, layer 0)
>  Making operation type 3 opaque [module /[Default VFS]/]
>  Accepting operation type 3 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #4 (type 4, layer 0)
>  Making operation type 4 opaque [module /[Default VFS]/]
>  Accepting operation type 4 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #5 (type 5, layer 0)
>  Making operation type 5 opaque [module /[Default VFS]/]
>  Accepting operation type 5 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #6 (type 6, layer 0)
>  Making operation type 6 opaque [module /[Default VFS]/]
>  Accepting operation type 6 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #7 (type 7, layer 0)
>  Making operation type 7 opaque [module /[Default VFS]/]
>  Accepting operation type 7 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #8 (type 8, layer 0)
>  Making operation type 8 opaque [module /[Default VFS]/]
>  Accepting operation type 8 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #9 (type 9, layer 0)
>  Making operation type 9 opaque [module /[Default VFS]/]
>  Accepting operation type 9 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #10 (type 10, layer 0)
>  Making operation type 10 opaque [module /[Default VFS]/]
>  Accepting operation type 10 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #11 (type 11, layer 0)
>  Making operation type 11 opaque [module /[Default VFS]/]
>  Accepting operation type 11 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #12 (type 12, layer 0)
>  Making operation type 12 opaque [module /[Default VFS]/]
>  Accepting operation type 12 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #13 (type 13, layer 0)
>  Making operation type 13 opaque [module /[Default VFS]/]
>  Accepting operation type 13 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #14 (type 14, layer 0)
>  Making operation type 14 opaque [module /[Default VFS]/]
>  Accepting operation type 14 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #15 (type 15, layer 0)
>  Making operation type 15 opaque [module /[Default VFS]/]
>  Accepting operation type 15 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #16 (type 16, layer 0)
>  Making operation type 16 opaque [module /[Default VFS]/]
>  Accepting operation type 16 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #17 (type 17, layer 0)
>  Making operation type 17 opaque [module /[Default VFS]/]
>  Accepting operation type 17 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #18 (type 18, layer 0)
>  Making operation type 18 opaque [module /[Default VFS]/]
>  Accepting operation type 18 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #19 (type 19, layer 0)
>  Making operation type 19 opaque [module /[Default VFS]/]
>  Accepting operation type 19 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #20 (type 20, layer 0)
>  Making operation type 20 opaque [module /[Default VFS]/]
>  Accepting operation type 20 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #21 (type 21, layer 0)
>  Making operation type 21 opaque [module /[Default VFS]/]
>  Accepting operation type 21 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #22 (type 22, layer 0)
>  Making operation type 22 opaque [module /[Default VFS]/]
>  Accepting operation type 22 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #23 (type 23, layer 0)
>  Making operation type 23 opaque [module /[Default VFS]/]
>  Accepting operation type 23 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #24 (type 24, layer 0)
>  Making operation type 24 opaque [module /[Default VFS]/]
>  Accepting operation type 24 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #25 (type 25, layer 0)
>  Making operation type 25 opaque [module /[Default VFS]/]
>  Accepting operation type 25 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #26 (type 26, layer 0)
>  Making operation type 26 opaque [module /[Default VFS]/]
>  Accepting operation type 26 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #27 (type 27, layer 0)
>  Making operation type 27 opaque [module /[Default VFS]/]
>  Accepting operation type 27 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #28 (type 28, layer 0)
>  Making operation type 28 opaque [module /[Default VFS]/]
>  Accepting operation type 28 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #29 (type 29, layer 0)
>  Making operation type 29 opaque [module /[Default VFS]/]
>  Accepting operation type 29 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #30 (type 30, layer 0)
>  Making operation type 30 opaque [module /[Default VFS]/]
>  Accepting operation type 30 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #31 (type 31, layer 0)
>  Making operation type 31 opaque [module /[Default VFS]/]
>  Accepting operation type 31 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #32 (type 32, layer 0)
>  Making operation type 32 opaque [module /[Default VFS]/]
>  Accepting operation type 32 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #33 (type 33, layer 0)
>  Making operation type 33 opaque [module /[Default VFS]/]
>  Accepting operation type 33 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #34 (type 34, layer 0)
>  Making operation type 34 opaque [module /[Default VFS]/]
>  Accepting operation type 34 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #35 (type 35, layer 0)
>  Making operation type 35 opaque [module /[Default VFS]/]
>  Accepting operation type 35 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #36 (type 36, layer 0)
>  Making operation type 36 opaque [module /[Default VFS]/]
>  Accepting operation type 36 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #37 (type 37, layer 0)
>  Making operation type 37 opaque [module /[Default VFS]/]
>  Accepting operation type 37 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #38 (type 38, layer 0)
>  Making operation type 38 opaque [module /[Default VFS]/]
>  Accepting operation type 38 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #39 (type 39, layer 0)
>  Making operation type 39 opaque [module /[Default VFS]/]
>  Accepting operation type 39 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #40 (type 40, layer 0)
>  Making operation type 40 opaque [module /[Default VFS]/]
>  Accepting operation type 40 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #41 (type 41, layer 0)
>  Making operation type 41 opaque [module /[Default VFS]/]
>  Accepting operation type 41 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #42 (type 42, layer 0)
>  Making operation type 42 opaque [module /[Default VFS]/]
>  Accepting operation type 42 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #43 (type 43, layer 0)
>  Making operation type 43 opaque [module /[Default VFS]/]
>  Accepting operation type 43 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #44 (type 44, layer 0)
>  Making operation type 44 opaque [module /[Default VFS]/]
>  Accepting operation type 44 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #45 (type 45, layer 0)
>  Making operation type 45 opaque [module /[Default VFS]/]
>  Accepting operation type 45 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #46 (type 46, layer 0)
>  Making operation type 46 opaque [module /[Default VFS]/]
>  Accepting operation type 46 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #47 (type 47, layer 0)
>  Making operation type 47 opaque [module /[Default VFS]/]
>  Accepting operation type 47 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #48 (type 48, layer 0)
>  Making operation type 48 opaque [module /[Default VFS]/]
>  Accepting operation type 48 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #49 (type 49, layer 0)
>  Making operation type 49 opaque [module /[Default VFS]/]
>  Accepting operation type 49 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #50 (type 50, layer 0)
>  Making operation type 50 opaque [module /[Default VFS]/]
>  Accepting operation type 50 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #51 (type 51, layer 0)
>  Making operation type 51 opaque [module /[Default VFS]/]
>  Accepting operation type 51 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #52 (type 52, layer 0)
>  Making operation type 52 opaque [module /[Default VFS]/]
>  Accepting operation type 52 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #53 (type 53, layer 0)
>  Making operation type 53 opaque [module /[Default VFS]/]
>  Accepting operation type 53 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #54 (type 54, layer 0)
>  Making operation type 54 opaque [module /[Default VFS]/]
>  Accepting operation type 54 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #55 (type 55, layer 0)
>  Making operation type 55 opaque [module /[Default VFS]/]
>  Accepting operation type 55 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #56 (type 56, layer 0)
>  Making operation type 56 opaque [module /[Default VFS]/]
>  Accepting operation type 56 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #57 (type 57, layer 0)
>  Making operation type 57 opaque [module /[Default VFS]/]
>  Accepting operation type 57 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #58 (type 58, layer 0)
>  Making operation type 58 opaque [module /[Default VFS]/]
>  Accepting operation type 58 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #59 (type 59, layer 0)
>  Making operation type 59 opaque [module /[Default VFS]/]
>  Accepting operation type 59 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #60 (type 60, layer 0)
>  Making operation type 60 opaque [module /[Default VFS]/]
>  Accepting operation type 60 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #61 (type 61, layer 0)
>  Making operation type 61 opaque [module /[Default VFS]/]
>  Accepting operation type 61 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #62 (type 62, layer 0)
>  Making operation type 62 opaque [module /[Default VFS]/]
>  Accepting operation type 62 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #63 (type 63, layer 0)
>  Making operation type 63 opaque [module /[Default VFS]/]
>  Accepting operation type 63 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #64 (type 64, layer 0)
>  Making operation type 64 opaque [module /[Default VFS]/]
>  Accepting operation type 64 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #65 (type 65, layer 0)
>  Making operation type 65 opaque [module /[Default VFS]/]
>  Accepting operation type 65 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #66 (type 66, layer 0)
>  Making operation type 66 opaque [module /[Default VFS]/]
>  Accepting operation type 66 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #67 (type 67, layer 0)
>  Making operation type 67 opaque [module /[Default VFS]/]
>  Accepting operation type 67 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #68 (type 68, layer 0)
>  Making operation type 68 opaque [module /[Default VFS]/]
>  Accepting operation type 68 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #69 (type 69, layer 0)
>  Making operation type 69 opaque [module /[Default VFS]/]
>  Accepting operation type 69 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #70 (type 70, layer 0)
>  Making operation type 70 opaque [module /[Default VFS]/]
>  Accepting operation type 70 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #71 (type 71, layer 0)
>  Making operation type 71 opaque [module /[Default VFS]/]
>  Accepting operation type 71 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #72 (type 72, layer 0)
>  Making operation type 72 opaque [module /[Default VFS]/]
>  Accepting operation type 72 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #73 (type 73, layer 0)
>  Making operation type 73 opaque [module /[Default VFS]/]
>  Accepting operation type 73 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #74 (type 74, layer 0)
>  Making operation type 74 opaque [module /[Default VFS]/]
>  Accepting operation type 74 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #75 (type 75, layer 0)
>  Making operation type 75 opaque [module /[Default VFS]/]
>  Accepting operation type 75 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #76 (type 76, layer 0)
>  Making operation type 76 opaque [module /[Default VFS]/]
>  Accepting operation type 76 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #77 (type 77, layer 0)
>  Making operation type 77 opaque [module /[Default VFS]/]
>  Accepting operation type 77 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #78 (type 78, layer 0)
>  Making operation type 78 opaque [module /[Default VFS]/]
>  Accepting operation type 78 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #79 (type 79, layer 0)
>  Making operation type 79 opaque [module /[Default VFS]/]
>  Accepting operation type 79 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #80 (type 80, layer 0)
>  Making operation type 80 opaque [module /[Default VFS]/]
>  Accepting operation type 80 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #81 (type 81, layer 0)
>  Making operation type 81 opaque [module /[Default VFS]/]
>  Accepting operation type 81 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #82 (type 82, layer 0)
>  Making operation type 82 opaque [module /[Default VFS]/]
>  Accepting operation type 82 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #83 (type 83, layer 0)
>  Making operation type 83 opaque [module /[Default VFS]/]
>  Accepting operation type 83 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #84 (type 84, layer 0)
>  Making operation type 84 opaque [module /[Default VFS]/]
>  Accepting operation type 84 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #85 (type 85, layer 0)
>  Making operation type 85 opaque [module /[Default VFS]/]
>  Accepting operation type 85 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #86 (type 86, layer 0)
>  Making operation type 86 opaque [module /[Default VFS]/]
>  Accepting operation type 86 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #87 (type 87, layer 0)
>  Making operation type 87 opaque [module /[Default VFS]/]
>  Accepting operation type 87 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #88 (type 88, layer 0)
>  Making operation type 88 opaque [module /[Default VFS]/]
>  Accepting operation type 88 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #89 (type 89, layer 0)
>  Making operation type 89 opaque [module /[Default VFS]/]
>  Accepting operation type 89 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #90 (type 90, layer 0)
>  Making operation type 90 opaque [module /[Default VFS]/]
>  Accepting operation type 90 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #91 (type 91, layer 0)
>  Making operation type 91 opaque [module /[Default VFS]/]
>  Accepting operation type 91 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #92 (type 92, layer 0)
>  Making operation type 92 opaque [module /[Default VFS]/]
>  Accepting operation type 92 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #93 (type 93, layer 0)
>  Making operation type 93 opaque [module /[Default VFS]/]
>  Accepting operation type 93 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #94 (type 94, layer 0)
>  Making operation type 94 opaque [module /[Default VFS]/]
>  Accepting operation type 94 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #95 (type 95, layer 0)
>  Making operation type 95 opaque [module /[Default VFS]/]
>  Accepting operation type 95 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #96 (type 96, layer 0)
>  Making operation type 96 opaque [module /[Default VFS]/]
>  Accepting operation type 96 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #97 (type 97, layer 0)
>  Making operation type 97 opaque [module /[Default VFS]/]
>  Accepting operation type 97 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #98 (type 98, layer 0)
>  Making operation type 98 opaque [module /[Default VFS]/]
>  Accepting operation type 98 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #99 (type 99, layer 0)
>  Making operation type 99 opaque [module /[Default VFS]/]
>  Accepting operation type 99 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #100 (type 100, layer 0)
>  Making operation type 100 opaque [module /[Default VFS]/]
>  Accepting operation type 100 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #101 (type 101, layer 0)
>  Making operation type 101 opaque [module /[Default VFS]/]
>  Accepting operation type 101 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #102 (type 102, layer 0)
>  Making operation type 102 opaque [module /[Default VFS]/]
>  Accepting operation type 102 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #103 (type 103, layer 0)
>  Making operation type 103 opaque [module /[Default VFS]/]
>  Accepting operation type 103 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #104 (type 104, layer 0)
>  Making operation type 104 opaque [module /[Default VFS]/]
>  Accepting operation type 104 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #105 (type 105, layer 0)
>  Making operation type 105 opaque [module /[Default VFS]/]
>  Accepting operation type 105 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #106 (type 106, layer 0)
>  Making operation type 106 opaque [module /[Default VFS]/]
>  Accepting operation type 106 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #107 (type 107, layer 0)
>  Making operation type 107 opaque [module /[Default VFS]/]
>  Accepting operation type 107 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #108 (type 108, layer 0)
>  Making operation type 108 opaque [module /[Default VFS]/]
>  Accepting operation type 108 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #109 (type 109, layer 0)
>  Making operation type 109 opaque [module /[Default VFS]/]
>  Accepting operation type 109 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #110 (type 110, layer 0)
>  Making operation type 110 opaque [module /[Default VFS]/]
>  Accepting operation type 110 from module /[Default VFS]/
>[2009/10/02 12:00:03,  5] smbd/connection.c:142(claim_connection)
>  claiming [IPC$]
>[2009/10/02 12:00:03, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key C1320000010000004950
>[2009/10/02 12:00:03, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c6497c00
>[2009/10/02 12:00:03, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key C1320000010000004950
>[2009/10/02 12:00:03, 10] smbd/share_access.c:234(user_ok_token)
>  user_ok_token: share IPC$ is ok for unix user hlampl
>[2009/10/02 12:00:03, 10] smbd/share_access.c:279(is_share_read_only_for_token)
>  is_share_read_only_for_user: share IPC$ is read-only for unix user hlampl
>[2009/10/02 12:00:03, 10] lib/util_seaccess.c:58(se_map_generic)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:03, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 1001
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:03,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,1001) gid=(0,1001)
>[2009/10/02 12:00:03,  3] smbd/service.c:1043(make_connection_snum)
>  platypus (192.168.3.182) connect to service IPC$ initially as user hlampl (uid=1001, gid=1001) (pid 12993)
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:03,  3] smbd/reply.c:754(reply_tcon_and_X)
>  tconX service=IPC$ 
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 100
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x64
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 4 of length 104 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=14336
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=16384 (0x4000)
>  smb_vwv[21]=  256 (0x100)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  256 (0x100)
>  smb_bcc=17
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 77 00 6B 00 73   00 73 00 76 00 63 00 00   .\.w.k.s .s.v.c..
>  [0010] 00                                                . 
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 1001
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:03,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,1001) gid=(0,1001)
>[2009/10/02 12:00:03,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2009/10/02 12:00:03, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = wkssvc
>[2009/10/02 12:00:03,  4] smbd/nttrans.c:315(nt_open_pipe)
>  nt_open_pipe: Opening pipe \wkssvc.
>[2009/10/02 12:00:03,  5] smbd/files.c:103(file_new)
>  allocated file structure 482, fnum = 4578 (1 used)
>[2009/10/02 12:00:03,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \wkssvc
>[2009/10/02 12:00:03, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list)
>  init_pipe_handles: created handle list for pipe \wkssvc
>[2009/10/02 12:00:03, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
>  init_pipe_handles: pipe_handles ref count = 1 for pipe \wkssvc
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  5] lib/username.c:133(Get_Pwnam_alloc)
>  Finding user hlampl
>[2009/10/02 12:00:03,  5] lib/username.c:77(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is hlampl
>[2009/10/02 12:00:03,  5] lib/username.c:110(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [hlampl]!
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:03, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:03,  4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
>  Created internal pipe \wkssvc (pipes_open=0)
>[2009/10/02 12:00:03,  5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
>  do_ntcreate_pipe_open: open pipe = \wkssvc
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 136
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x88
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 5 of length 140 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=136
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14400
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4578 (0x11E2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    8 (0x8)
>  smb_vwv[ 8]=   72 (0x48)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   72 (0x48)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=73
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] EE 05 00 0B 03 10 00 00   00 48 00 00 00 01 00 00   ........ .H......
>  [0010] 00 B8 10 B8 10 00 00 00   00 01 00 00 00 00 00 01   ........ ........
>  [0020] 00 98 D0 FF 6B 12 A1 10   36 98 33 46 C3 F8 7E 34   ....k... 6.3F..~4
>  [0030] 5A 01 00 00 00 04 5D 88   8A EB 1C C9 11 9F E8 08   Z.....]. ........
>  [0040] 00 2B 10 48 60 02 00 00   00                       .+.H`... .
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBwriteX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03,  6] smbd/pipes.c:271(reply_pipe_write_and_X)
>  reply_pipe_write_and_X: 11e2 name: wkssvc len: 72
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 72
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0b
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0048
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 11
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
>  api_pipe_bind_req: decode request. 1558
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_rb 
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 00000000
>      0008 num_contexts: 01
>      000c context_id  : 0000
>      000e num_transfer_syntaxes: 01
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00000f smb_io_rpc_iface 
>[2009/10/02 12:00:03,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000010 smb_io_uuid uuid
>              0010 data   : 6bffd098
>              0014 data   : a112
>              0016 data   : 3610
>              0018 data   : 98 33 
>              001a data   : 46 c3 f8 7e 34 5a 
>          0020 version: 00000001
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000024 smb_io_rpc_iface 
>[2009/10/02 12:00:03,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000024 smb_io_uuid uuid
>              0024 data   : 8a885d04
>              0028 data   : 1ceb
>              002a data   : 11c9
>              002c data   : 9f e8 
>              002e data   : 08 00 2b 10 48 60 
>          0034 version: 00000002
>[2009/10/02 12:00:03,  3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\wkssvc
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
>  api_pipe_bind_req: make response. 1628
>[2009/10/02 12:00:03,  3] rpc_server/srv_pipe.c:960(check_bind_req)
>  check_bind_req for \wkssvc
>  checking lsarpc
>  checking winreg
>  checking initshutdown
>  checking dssetup
>  checking wkssvc
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_ba 
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 000053f0
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000008 smb_io_rpc_addr_str 
>          0008 len: 000d
>          000a str: \PIPE\wkssvc.
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000017 smb_io_rpc_results 
>          0018 num_results: 01
>          001c result     : 0000
>          001e reason     : 0000
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000020 smb_io_rpc_iface 
>[2009/10/02 12:00:03,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000020 smb_io_uuid uuid
>              0020 data   : 8a885d04
>              0024 data   : 1ceb
>              0026 data   : 11c9
>              0028 data   : 9f e8 
>              002a data   : 08 00 2b 10 48 60 
>          0030 version: 00000002
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0c
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0044
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 56
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64969d0
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64969d0
>[2009/10/02 12:00:03,  3] smbd/pipes.c:325(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 6 of length 63 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14464
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4578 (0x11E2)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]= 1024 (0x400)
>  smb_vwv[ 7]=65535 (0xFFFF)
>  smb_vwv[ 8]=65535 (0xFFFF)
>  smb_vwv[ 9]= 1024 (0x400)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBreadX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \wkssvc len: 1024
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
>  read_from_pipe: \wkssvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c6498e80
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c6498e80
>[2009/10/02 12:00:03,  3] smbd/pipes.c:430(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 148
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x94
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 7 of length 152 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=148
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=14528
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   64 (0x40)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4578 (0x11E2)
>  smb_bcc=81
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 40 00 00 00 01 00 00   ........ .@......
>  [0020] 00 28 00 00 00 00 00 00   00 00 00 02 00 09 00 00   .(...... ........
>  [0030] 00 00 00 00 00 09 00 00   00 5C 00 5C 00 54 00 65   ........ .\.\.T.e
>  [0040] 00 73 00 74 00 66 00 73   00 00 00 C9 11 64 00 00   .s.t.f.s .....d..
>  [0050] 00                                                . 
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=64 params=0 setup=2
>[2009/10/02 12:00:03,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/10/02 12:00:03,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/10/02 12:00:03,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/10/02 12:00:03,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "wkssvc" (pnum 11e2)
>[2009/10/02 12:00:03, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0x7f61c6489dc0 max_trans_reply: 1024
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 64
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 64
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 64
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 64, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 48
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 48
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0040
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 48
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 48, incoming data = 48
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000028
>      0004 context_id: 0000
>      0006 opnum     : 0000
>[2009/10/02 12:00:03,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\wkssvc
>[2009/10/02 12:00:03,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \wkssvc op 0x0 - api_rpcTNP: rpc command: WKSSVC_NETWKSTAGETINFO
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[0].fn == 0x7f61c5cca89e
>[2009/10/02 12:00:03,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo
>          in: struct wkssvc_NetWkstaGetInfo
>              server_name              : *
>                  server_name              : '\\Testfs'
>              level                    : 0x00000064 (100)
>[2009/10/02 12:00:03,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo
>          out: struct wkssvc_NetWkstaGetInfo
>              info                     : *
>                  info                     : union wkssvc_NetWkstaInfo(case 100)
>                  info100                  : *
>                      info100: struct wkssvc_NetWkstaInfo100
>                          platform_id              : PLATFORM_ID_NT (500)
>                          server_name              : *
>                              server_name              : 'TESTFS'
>                          domain_name              : *
>                              domain_name              : 'DEV.MUC.DW'
>                          version_major            : 0x00000004 (4)
>                          version_minor            : 0x00000009 (9)
>              result                   : WERR_OK
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \wkssvc successfully
>[2009/10/02 12:00:03,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 50
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 48
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c649ab60
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c649ab60
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \wkssvc len: 1024
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \wkssvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 96.
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0078
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000060
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c6475df0
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c6475df0
>[2009/10/02 12:00:03,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..120] (align 0)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=176
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=14528
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=121
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 78 00 00 00 01 00 00   ........ .x......
>  [0010] 00 60 00 00 00 00 00 00   00 64 00 00 00 00 00 02   .`...... .d......
>  [0020] 00 F4 01 00 00 04 00 02   00 08 00 02 00 04 00 00   ........ ........
>  [0030] 00 09 00 00 00 07 00 00   00 00 00 00 00 07 00 00   ........ ........
>  [0040] 00 54 00 45 00 53 00 54   00 46 00 53 00 00 00 00   .T.E.S.T .F.S....
>  [0050] 00 0B 00 00 00 00 00 00   00 0B 00 00 00 44 00 45   ........ .....D.E
>  [0060] 00 56 00 2E 00 4D 00 55   00 43 00 2E 00 44 00 57   .V...M.U .C...D.W
>  [0070] 00 00 00 00 00 00 00 00   00                       ........ .
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 8 of length 45 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14592
>  smt_wct=3
>  smb_vwv[ 0]= 4578 (0x11E2)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03,  3] smbd/reply.c:4456(reply_close)
>  close fd=-1 fnum=4578 (numopen=1)
>[2009/10/02 12:00:03,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Sun Feb  7 07:28:15 2106
>[2009/10/02 12:00:03, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe)
>  close_policy_by_pipe: deleted handle list for pipe \wkssvc
>[2009/10/02 12:00:03,  5] smbd/files.c:484(file_free)
>  freed files structure 4578 (0 used)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14592
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 100
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x64
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 9 of length 104 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=14656
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=16384 (0x4000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  256 (0x100)
>  smb_bcc=17
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 73 00 72 00 76   00 73 00 76 00 63 00 00   .\.s.r.v .s.v.c..
>  [0010] 00                                                . 
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = srvsvc
>[2009/10/02 12:00:03,  4] smbd/nttrans.c:315(nt_open_pipe)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2009/10/02 12:00:03,  5] smbd/files.c:103(file_new)
>  allocated file structure 483, fnum = 4579 (1 used)
>[2009/10/02 12:00:03,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \srvsvc
>[2009/10/02 12:00:03, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list)
>  init_pipe_handles: created handle list for pipe \srvsvc
>[2009/10/02 12:00:03, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
>  init_pipe_handles: pipe_handles ref count = 1 for pipe \srvsvc
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:03, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:03,  4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
>  Created internal pipe \srvsvc (pipes_open=0)
>[2009/10/02 12:00:03,  5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
>  do_ntcreate_pipe_open: open pipe = \srvsvc
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 136
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x88
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 10 of length 140 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=136
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14720
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4579 (0x11E3)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    8 (0x8)
>  smb_vwv[ 8]=   72 (0x48)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   72 (0x48)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=73
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] EE 05 00 0B 03 10 00 00   00 48 00 00 00 01 00 00   ........ .H......
>  [0010] 00 B8 10 B8 10 00 00 00   00 01 00 00 00 00 00 01   ........ ........
>  [0020] 00 C8 4F 32 4B 70 16 D3   01 12 78 5A 47 BF 6E E1   ..O2Kp.. ..xZG.n.
>  [0030] 88 03 00 00 00 04 5D 88   8A EB 1C C9 11 9F E8 08   ......]. ........
>  [0040] 00 2B 10 48 60 02 00 00   00                       .+.H`... .
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBwriteX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03,  6] smbd/pipes.c:271(reply_pipe_write_and_X)
>  reply_pipe_write_and_X: 11e3 name: srvsvc len: 72
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 72
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0b
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0048
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 11
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
>  api_pipe_bind_req: decode request. 1558
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_rb 
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 00000000
>      0008 num_contexts: 01
>      000c context_id  : 0000
>      000e num_transfer_syntaxes: 01
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00000f smb_io_rpc_iface 
>[2009/10/02 12:00:03,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000010 smb_io_uuid uuid
>              0010 data   : 4b324fc8
>              0014 data   : 1670
>              0016 data   : 01d3
>              0018 data   : 12 78 
>              001a data   : 5a 47 bf 6e e1 88 
>          0020 version: 00000003
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000024 smb_io_rpc_iface 
>[2009/10/02 12:00:03,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000024 smb_io_uuid uuid
>              0024 data   : 8a885d04
>              0028 data   : 1ceb
>              002a data   : 11c9
>              002c data   : 9f e8 
>              002e data   : 08 00 2b 10 48 60 
>          0034 version: 00000002
>[2009/10/02 12:00:03,  3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
>  api_pipe_bind_req: make response. 1628
>[2009/10/02 12:00:03,  3] rpc_server/srv_pipe.c:960(check_bind_req)
>  check_bind_req for \srvsvc
>  checking lsarpc
>  checking winreg
>  checking initshutdown
>  checking dssetup
>  checking wkssvc
>  checking svcctl
>  checking ntsvcs
>  checking netlogon
>  checking netdfs
>  checking srvsvc
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_ba 
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 000053f0
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000008 smb_io_rpc_addr_str 
>          0008 len: 000d
>          000a str: \PIPE\srvsvc.
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000017 smb_io_rpc_results 
>          0018 num_results: 01
>          001c result     : 0000
>          001e reason     : 0000
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000020 smb_io_rpc_iface 
>[2009/10/02 12:00:03,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000020 smb_io_uuid uuid
>              0020 data   : 8a885d04
>              0024 data   : 1ceb
>              0026 data   : 11c9
>              0028 data   : 9f e8 
>              002a data   : 08 00 2b 10 48 60 
>          0030 version: 00000002
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0c
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0044
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 56
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c649aab0
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c649aab0
>[2009/10/02 12:00:03,  3] smbd/pipes.c:325(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 11 of length 63 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14784
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4579 (0x11E3)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]= 1024 (0x400)
>  smb_vwv[ 7]=65535 (0xFFFF)
>  smb_vwv[ 8]=65535 (0xFFFF)
>  smb_vwv[ 9]= 1024 (0x400)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBreadX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \srvsvc len: 1024
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
>  read_from_pipe: \srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c649cf60
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c649cf60
>[2009/10/02 12:00:03,  3] smbd/pipes.c:430(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 148
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x94
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 12 of length 152 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=148
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=14848
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   64 (0x40)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4579 (0x11E3)
>  smb_bcc=81
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 40 00 00 00 01 00 00   ........ .@......
>  [0020] 00 28 00 00 00 00 00 15   00 00 00 02 00 09 00 00   .(...... ........
>  [0030] 00 00 00 00 00 09 00 00   00 5C 00 5C 00 54 00 65   ........ .\.\.T.e
>  [0040] 00 73 00 74 00 66 00 73   00 00 00 C9 11 65 00 00   .s.t.f.s .....e..
>  [0050] 00                                                . 
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=64 params=0 setup=2
>[2009/10/02 12:00:03,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/10/02 12:00:03,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/10/02 12:00:03,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/10/02 12:00:03,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "srvsvc" (pnum 11e3)
>[2009/10/02 12:00:03, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0x7f61c6489dc0 max_trans_reply: 1024
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 64
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 64
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 64
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 64, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 48
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 48
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0040
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 48
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 48, incoming data = 48
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000028
>      0004 context_id: 0000
>      0006 opnum     : 0015
>[2009/10/02 12:00:03,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\srvsvc
>[2009/10/02 12:00:03,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \srvsvc op 0x15 - api_rpcTNP: rpc command: SRVSVC_NETSRVGETINFO
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[21].fn == 0x7f61c5cf68c0
>[2009/10/02 12:00:03,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       srvsvc_NetSrvGetInfo: struct srvsvc_NetSrvGetInfo
>          in: struct srvsvc_NetSrvGetInfo
>              server_unc               : *
>                  server_unc               : '\\Testfs'
>              level                    : 0x00000065 (101)
>[2009/10/02 12:00:03,  5] rpc_server/srv_srvsvc_nt.c:1073(_srvsvc_NetSrvGetInfo)
>  _srvsvc_NetSrvGetInfo: 1073
>[2009/10/02 12:00:03,  5] rpc_server/srv_srvsvc_nt.c:1151(_srvsvc_NetSrvGetInfo)
>  _srvsvc_NetSrvGetInfo: 1151
>[2009/10/02 12:00:03,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       srvsvc_NetSrvGetInfo: struct srvsvc_NetSrvGetInfo
>          out: struct srvsvc_NetSrvGetInfo
>              info                     : *
>                  info                     : union srvsvc_NetSrvInfo(case 101)
>                  info101                  : *
>                      info101: struct srvsvc_NetSrvInfo101
>                          platform_id              : PLATFORM_ID_NT (500)
>                          server_name              : *
>                              server_name              : 'TESTFS'
>                          version_major            : 0x00000004 (4)
>                          version_minor            : 0x00000009 (9)
>                          server_type              : 0x00809a03 (8428035)
>                                 1: SV_TYPE_WORKSTATION      
>                                 1: SV_TYPE_SERVER           
>                                 0: SV_TYPE_SQLSERVER        
>                                 0: SV_TYPE_DOMAIN_CTRL      
>                                 0: SV_TYPE_DOMAIN_BAKCTRL   
>                                 0: SV_TYPE_TIME_SOURCE      
>                                 0: SV_TYPE_AFP              
>                                 0: SV_TYPE_NOVELL           
>                                 0: SV_TYPE_DOMAIN_MEMBER    
>                                 1: SV_TYPE_PRINTQ_SERVER    
>                                 0: SV_TYPE_DIALIN_SERVER    
>                                 1: SV_TYPE_SERVER_UNIX      
>                                 1: SV_TYPE_NT               
>                                 0: SV_TYPE_WFW              
>                                 0: SV_TYPE_SERVER_MFPN      
>                                 1: SV_TYPE_SERVER_NT        
>                                 0: SV_TYPE_POTENTIAL_BROWSER
>                                 0: SV_TYPE_BACKUP_BROWSER   
>                                 0: SV_TYPE_MASTER_BROWSER   
>                                 0: SV_TYPE_DOMAIN_MASTER    
>                                 0: SV_TYPE_SERVER_OSF       
>                                 0: SV_TYPE_SERVER_VMS       
>                                 0: SV_TYPE_WIN95_PLUS       
>                                 1: SV_TYPE_DFS_SERVER       
>                                 0: SV_TYPE_ALTERNATE_XPORT  
>                                 0: SV_TYPE_LOCAL_LIST_ONLY  
>                                 0: SV_TYPE_DOMAIN_ENUM      
>                          comment                  : *
>                              comment                  : 'Test Server'
>              result                   : WERR_OK
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \srvsvc successfully
>[2009/10/02 12:00:03,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 40
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 48
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c649ec40
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c649ec40
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \srvsvc len: 1024
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 100.
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 007c
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000064
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c6475df0
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c6475df0
>[2009/10/02 12:00:03,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..124] (align 0)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=180
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=14848
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  124 (0x7C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  124 (0x7C)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=125
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 7C 00 00 00 01 00 00   ........ .|......
>  [0010] 00 64 00 00 00 00 00 00   00 65 00 00 00 00 00 02   .d...... .e......
>  [0020] 00 F4 01 00 00 04 00 02   00 04 00 00 00 09 00 00   ........ ........
>  [0030] 00 03 9A 80 00 08 00 02   00 07 00 00 00 00 00 00   ........ ........
>  [0040] 00 07 00 00 00 54 00 45   00 53 00 54 00 46 00 53   .....T.E .S.T.F.S
>  [0050] 00 00 00 00 00 0C 00 00   00 00 00 00 00 0C 00 00   ........ ........
>  [0060] 00 54 00 65 00 73 00 74   00 20 00 53 00 65 00 72   .T.e.s.t . .S.e.r
>  [0070] 00 76 00 65 00 72 00 00   00 00 00 00 00           .v.e.r.. .....
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 13 of length 45 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14912
>  smt_wct=3
>  smb_vwv[ 0]= 4579 (0x11E3)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03,  3] smbd/reply.c:4456(reply_close)
>  close fd=-1 fnum=4579 (numopen=1)
>[2009/10/02 12:00:03,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Sun Feb  7 07:28:15 2106
>[2009/10/02 12:00:03, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe)
>  close_policy_by_pipe: deleted handle list for pipe \srvsvc
>[2009/10/02 12:00:03,  5] smbd/files.c:484(file_free)
>  freed files structure 4579 (0 used)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=14912
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 100
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x64
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 14 of length 104 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=14976
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=16384 (0x4000)
>  smb_vwv[21]=  256 (0x100)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  256 (0x100)
>  smb_bcc=17
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 77 00 6B 00 73   00 73 00 76 00 63 00 00   .\.w.k.s .s.v.c..
>  [0010] 00                                                . 
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = wkssvc
>[2009/10/02 12:00:03,  4] smbd/nttrans.c:315(nt_open_pipe)
>  nt_open_pipe: Opening pipe \wkssvc.
>[2009/10/02 12:00:03,  5] smbd/files.c:103(file_new)
>  allocated file structure 484, fnum = 4580 (1 used)
>[2009/10/02 12:00:03,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \wkssvc
>[2009/10/02 12:00:03, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list)
>  init_pipe_handles: created handle list for pipe \wkssvc
>[2009/10/02 12:00:03, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
>  init_pipe_handles: pipe_handles ref count = 1 for pipe \wkssvc
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:03,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:03,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:03,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:03, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:03,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:03, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:03, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:03,  4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
>  Created internal pipe \wkssvc (pipes_open=0)
>[2009/10/02 12:00:03,  5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
>  do_ntcreate_pipe_open: open pipe = \wkssvc
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 136
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x88
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 15 of length 140 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=136
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=15040
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4580 (0x11E4)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    8 (0x8)
>  smb_vwv[ 8]=   72 (0x48)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   72 (0x48)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=73
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] EE 05 00 0B 03 10 00 00   00 48 00 00 00 01 00 00   ........ .H......
>  [0010] 00 B8 10 B8 10 00 00 00   00 01 00 00 00 00 00 01   ........ ........
>  [0020] 00 98 D0 FF 6B 12 A1 10   36 98 33 46 C3 F8 7E 34   ....k... 6.3F..~4
>  [0030] 5A 01 00 00 00 04 5D 88   8A EB 1C C9 11 9F E8 08   Z.....]. ........
>  [0040] 00 2B 10 48 60 02 00 00   00                       .+.H`... .
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBwriteX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03,  6] smbd/pipes.c:271(reply_pipe_write_and_X)
>  reply_pipe_write_and_X: 11e4 name: wkssvc len: 72
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 72
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0b
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0048
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 11
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
>  api_pipe_bind_req: decode request. 1558
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_rb 
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 00000000
>      0008 num_contexts: 01
>      000c context_id  : 0000
>      000e num_transfer_syntaxes: 01
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00000f smb_io_rpc_iface 
>[2009/10/02 12:00:03,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000010 smb_io_uuid uuid
>              0010 data   : 6bffd098
>              0014 data   : a112
>              0016 data   : 3610
>              0018 data   : 98 33 
>              001a data   : 46 c3 f8 7e 34 5a 
>          0020 version: 00000001
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000024 smb_io_rpc_iface 
>[2009/10/02 12:00:03,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000024 smb_io_uuid uuid
>              0024 data   : 8a885d04
>              0028 data   : 1ceb
>              002a data   : 11c9
>              002c data   : 9f e8 
>              002e data   : 08 00 2b 10 48 60 
>          0034 version: 00000002
>[2009/10/02 12:00:03,  3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\wkssvc -> \PIPE\wkssvc
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
>  api_pipe_bind_req: make response. 1628
>[2009/10/02 12:00:03,  3] rpc_server/srv_pipe.c:960(check_bind_req)
>  check_bind_req for \wkssvc
>  checking lsarpc
>  checking winreg
>  checking initshutdown
>  checking dssetup
>  checking wkssvc
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_ba 
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 000053f0
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000008 smb_io_rpc_addr_str 
>          0008 len: 000d
>          000a str: \PIPE\wkssvc.
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000017 smb_io_rpc_results 
>          0018 num_results: 01
>          001c result     : 0000
>          001e reason     : 0000
>[2009/10/02 12:00:03,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000020 smb_io_rpc_iface 
>[2009/10/02 12:00:03,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000020 smb_io_uuid uuid
>              0020 data   : 8a885d04
>              0024 data   : 1ceb
>              0026 data   : 11c9
>              0028 data   : 9f e8 
>              002a data   : 08 00 2b 10 48 60 
>          0030 version: 00000002
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0c
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0044
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 56
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c649eb90
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c649eb90
>[2009/10/02 12:00:03,  3] smbd/pipes.c:325(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 16 of length 63 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=15104
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4580 (0x11E4)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]= 1024 (0x400)
>  smb_vwv[ 7]=65535 (0xFFFF)
>  smb_vwv[ 8]=65535 (0xFFFF)
>  smb_vwv[ 9]= 1024 (0x400)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBreadX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \wkssvc len: 1024
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
>  read_from_pipe: \wkssvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64a1040
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64a1040
>[2009/10/02 12:00:03,  3] smbd/pipes.c:430(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 148
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x94
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 17 of length 152 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=148
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=15168
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   64 (0x40)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4580 (0x11E4)
>  smb_bcc=81
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 40 00 00 00 01 00 00   ........ .@......
>  [0020] 00 28 00 00 00 00 00 00   00 00 00 02 00 09 00 00   .(...... ........
>  [0030] 00 00 00 00 00 09 00 00   00 5C 00 5C 00 54 00 65   ........ .\.\.T.e
>  [0040] 00 73 00 74 00 66 00 73   00 00 00 C9 11 64 00 00   .s.t.f.s .....d..
>  [0050] 00                                                . 
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=64 params=0 setup=2
>[2009/10/02 12:00:03,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/10/02 12:00:03,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/10/02 12:00:03,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/10/02 12:00:03,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "wkssvc" (pnum 11e4)
>[2009/10/02 12:00:03, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0x7f61c6489dc0 max_trans_reply: 1024
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 64
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 64
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 64
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 64, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 48
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 48
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0040
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 48
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 48, incoming data = 48
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000028
>      0004 context_id: 0000
>      0006 opnum     : 0000
>[2009/10/02 12:00:03,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\wkssvc
>[2009/10/02 12:00:03,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \wkssvc op 0x0 - api_rpcTNP: rpc command: WKSSVC_NETWKSTAGETINFO
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[0].fn == 0x7f61c5cca89e
>[2009/10/02 12:00:03,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo
>          in: struct wkssvc_NetWkstaGetInfo
>              server_name              : *
>                  server_name              : '\\Testfs'
>              level                    : 0x00000064 (100)
>[2009/10/02 12:00:03,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       wkssvc_NetWkstaGetInfo: struct wkssvc_NetWkstaGetInfo
>          out: struct wkssvc_NetWkstaGetInfo
>              info                     : *
>                  info                     : union wkssvc_NetWkstaInfo(case 100)
>                  info100                  : *
>                      info100: struct wkssvc_NetWkstaInfo100
>                          platform_id              : PLATFORM_ID_NT (500)
>                          server_name              : *
>                              server_name              : 'TESTFS'
>                          domain_name              : *
>                              domain_name              : 'DEV.MUC.DW'
>                          version_major            : 0x00000004 (4)
>                          version_minor            : 0x00000009 (9)
>              result                   : WERR_OK
>[2009/10/02 12:00:03,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \wkssvc successfully
>[2009/10/02 12:00:03,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 50
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 48
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64a2d20
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64a2d20
>[2009/10/02 12:00:03,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \wkssvc len: 1024
>[2009/10/02 12:00:03, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \wkssvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 96.
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0078
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:03,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000060
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64915b0
>[2009/10/02 12:00:03, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64915b0
>[2009/10/02 12:00:03,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..120] (align 0)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=176
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=15168
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  120 (0x78)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  120 (0x78)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=121
>[2009/10/02 12:00:03, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 78 00 00 00 01 00 00   ........ .x......
>  [0010] 00 60 00 00 00 00 00 00   00 64 00 00 00 00 00 02   .`...... .d......
>  [0020] 00 F4 01 00 00 04 00 02   00 08 00 02 00 04 00 00   ........ ........
>  [0030] 00 09 00 00 00 07 00 00   00 00 00 00 00 07 00 00   ........ ........
>  [0040] 00 54 00 45 00 53 00 54   00 46 00 53 00 00 00 00   .T.E.S.T .F.S....
>  [0050] 00 0B 00 00 00 00 00 00   00 0B 00 00 00 44 00 45   ........ .....D.E
>  [0060] 00 56 00 2E 00 4D 00 55   00 43 00 2E 00 44 00 57   .V...M.U .C...D.W
>  [0070] 00 00 00 00 00 00 00 00   00                       ........ .
>[2009/10/02 12:00:03, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:03,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:03,  3] smbd/process.c:1439(process_smb)
>  Transaction 18 of length 45 (0 toread)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=15232
>  smt_wct=3
>  smb_vwv[ 0]= 4580 (0x11E4)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:03,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:03,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:03,  3] smbd/reply.c:4456(reply_close)
>  close fd=-1 fnum=4580 (numopen=1)
>[2009/10/02 12:00:03,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Sun Feb  7 07:28:15 2106
>[2009/10/02 12:00:03, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe)
>  close_policy_by_pipe: deleted handle list for pipe \wkssvc
>[2009/10/02 12:00:03,  5] smbd/files.c:484(file_free)
>  freed files structure 4580 (0 used)
>[2009/10/02 12:00:03,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:03,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=15232
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 236
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0xec
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 19 of length 240 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=236
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=15296
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  236 (0xEC)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=   74 (0x4A)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=40960 (0xA000)
>  smb_bcc=177
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 60 48 06 06 2B 06 01 05   05 02 A0 3E 30 3C A0 0E   `H..+... ...>0<..
>  [0010] 30 0C 06 0A 2B 06 01 04   01 82 37 02 02 0A A2 2A   0...+... ..7....*
>  [0020] 04 28 4E 54 4C 4D 53 53   50 00 01 00 00 00 07 82   .(NTLMSS P.......
>  [0030] 08 A2 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00 00 05 01 28 0A 00 00   00 0F 00 57 00 69 00 6E   ....(... ...W.i.n
>  [0050] 00 64 00 6F 00 77 00 73   00 20 00 32 00 30 00 30   .d.o.w.s . .2.0.0
>  [0060] 00 32 00 20 00 53 00 65   00 72 00 76 00 69 00 63   .2. .S.e .r.v.i.c
>  [0070] 00 65 00 20 00 50 00 61   00 63 00 6B 00 20 00 33   .e. .P.a .c.k. .3
>  [0080] 00 20 00 32 00 36 00 30   00 30 00 00 00 57 00 69   . .2.6.0 .0...W.i
>  [0090] 00 6E 00 64 00 6F 00 77   00 73 00 20 00 32 00 30   .n.d.o.w .s. .2.0
>  [00A0] 00 30 00 32 00 20 00 35   00 2E 00 31 00 00 00 00   .0.2. .5 ...1....
>  [00B0] 00                                                . 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBsesssetupX (pid 12993) conn 0x0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:04,  3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2009/10/02 12:00:04,  3] smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2009/10/02 12:00:04,  3] smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2009/10/02 12:00:04, 10] smbd/password.c:172(register_initial_vuid)
>  register_initial_vuid: allocated vuid = 101
>[2009/10/02 12:00:04, 10] smbd/sesssetup.c:1106(check_spnego_blob_complete)
>  check_spnego_blob_complete: needed_len = 74, pblob->length = 74
>[2009/10/02 12:00:04,  5] smbd/sesssetup.c:735(parse_spnego_mechanisms)
>  parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10
>[2009/10/02 12:00:04,  3] smbd/sesssetup.c:786(reply_spnego_negotiate)
>  reply_spnego_negotiate: Got secblob of size 40
>[2009/10/02 12:00:04,  5] auth/auth.c:493(make_auth_context_subsystem)
>  Making default auth method list for standalone security=user, encrypt passwords = yes
>[2009/10/02 12:00:04,  5] auth/auth.c:389(load_auth_module)
>  load_auth_module: Attempting to find an auth method to match guest
>[2009/10/02 12:00:04,  5] auth/auth.c:414(load_auth_module)
>  load_auth_module: auth method guest has a valid init
>[2009/10/02 12:00:04,  5] auth/auth.c:389(load_auth_module)
>  load_auth_module: Attempting to find an auth method to match sam
>[2009/10/02 12:00:04,  5] auth/auth.c:414(load_auth_module)
>  load_auth_module: auth method sam has a valid init
>[2009/10/02 12:00:04,  3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088207
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_NEGOTIATE_OEM
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2009/10/02 12:00:04,  5] auth/auth.c:98(get_ntlm_challenge)
>  auth_get_challenge: module guest did not want to specify a challenge
>[2009/10/02 12:00:04,  5] auth/auth.c:98(get_ntlm_challenge)
>  auth_get_challenge: module sam did not want to specify a challenge
>[2009/10/02 12:00:04,  5] auth/auth.c:138(get_ntlm_challenge)
>  auth_context challenge created by random
>[2009/10/02 12:00:04,  5] auth/auth.c:139(get_ntlm_challenge)
>  challenge is: 
>[2009/10/02 12:00:04,  5] ../lib/util/util.c:304(_dump_data)
>  [0000] C5 40 A8 2B 0D 5C 7E 56                            .@.+.\~V 
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=308
>  smb_com=0x73
>  smb_rcls=22
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=15296
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  209 (0xD1)
>  smb_bcc=265
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] A1 81 CE 30 81 CB A0 03   0A 01 01 A1 0C 06 0A 2B   ...0.... .......+
>  [0010] 06 01 04 01 82 37 02 02   0A A2 81 B5 04 81 B2 4E   .....7.. .......N
>  [0020] 54 4C 4D 53 53 50 00 02   00 00 00 0C 00 0C 00 30   TLMSSP.. .......0
>  [0030] 00 00 00 05 82 8A A2 C5   40 A8 2B 0D 5C 7E 56 00   ........ @.+.\~V.
>  [0040] 00 00 00 00 00 00 00 76   00 76 00 3C 00 00 00 54   .......v .v.<...T
>  [0050] 00 45 00 53 00 54 00 46   00 53 00 02 00 0C 00 54   .E.S.T.F .S.....T
>  [0060] 00 45 00 53 00 54 00 46   00 53 00 01 00 0C 00 54   .E.S.T.F .S.....T
>  [0070] 00 45 00 53 00 54 00 46   00 53 00 04 00 1E 00 6D   .E.S.T.F .S.....m
>  [0080] 00 75 00 63 00 2E 00 64   00 79 00 6E 00 61 00 77   .u.c...d .y.n.a.w
>  [0090] 00 61 00 72 00 65 00 2E   00 64 00 65 00 03 00 2C   .a.r.e.. .d.e...,
>  [00A0] 00 74 00 65 00 73 00 74   00 66 00 73 00 2E 00 6D   .t.e.s.t .f.s...m
>  [00B0] 00 75 00 63 00 2E 00 64   00 79 00 6E 00 61 00 77   .u.c...d .y.n.a.w
>  [00C0] 00 61 00 72 00 65 00 2E   00 64 00 65 00 00 00 00   .a.r.e.. .d.e....
>  [00D0] 00 55 00 6E 00 69 00 78   00 00 00 53 00 61 00 6D   .U.n.i.x ...S.a.m
>  [00E0] 00 62 00 61 00 20 00 33   00 2E 00 34 00 2E 00 31   .b.a. .3 ...4...1
>  [00F0] 00 00 00 44 00 45 00 56   00 2E 00 4D 00 55 00 43   ...D.E.V ...M.U.C
>  [0100] 00 2E 00 44 00 57 00 00   00                       ...D.W.. .
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 258
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x102
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 20 of length 262 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=258
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=15360
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  258 (0x102)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=   97 (0x61)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=40960 (0xA000)
>  smb_bcc=199
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] A1 5F 30 5D A2 5B 04 59   4E 54 4C 4D 53 53 50 00   ._0].[.Y NTLMSSP.
>  [0010] 03 00 00 00 01 00 01 00   58 00 00 00 00 00 00 00   ........ X.......
>  [0020] 59 00 00 00 00 00 00 00   48 00 00 00 00 00 00 00   Y....... H.......
>  [0030] 48 00 00 00 10 00 10 00   48 00 00 00 00 00 00 00   H....... H.......
>  [0040] 59 00 00 00 05 8A 88 A2   05 01 28 0A 00 00 00 0F   Y....... ..(.....
>  [0050] 50 00 4C 00 41 00 54 00   59 00 50 00 55 00 53 00   P.L.A.T. Y.P.U.S.
>  [0060] 00 57 00 69 00 6E 00 64   00 6F 00 77 00 73 00 20   .W.i.n.d .o.w.s. 
>  [0070] 00 32 00 30 00 30 00 32   00 20 00 53 00 65 00 72   .2.0.0.2 . .S.e.r
>  [0080] 00 76 00 69 00 63 00 65   00 20 00 50 00 61 00 63   .v.i.c.e . .P.a.c
>  [0090] 00 6B 00 20 00 33 00 20   00 32 00 36 00 30 00 30   .k. .3.  .2.6.0.0
>  [00A0] 00 00 00 57 00 69 00 6E   00 64 00 6F 00 77 00 73   ...W.i.n .d.o.w.s
>  [00B0] 00 20 00 32 00 30 00 30   00 32 00 20 00 35 00 2E   . .2.0.0 .2. .5..
>  [00C0] 00 31 00 00 00 00 00                              .1..... 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBsesssetupX (pid 12993) conn 0x0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:04,  3] smbd/sesssetup.c:1404(reply_sesssetup_and_X)
>  wct=12 flg2=0xc807
>[2009/10/02 12:00:04,  3] smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2009/10/02 12:00:04,  3] smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego)
>  NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2009/10/02 12:00:04, 10] smbd/sesssetup.c:1106(check_spnego_blob_complete)
>  check_spnego_blob_complete: needed_len = 97, pblob->length = 97
>[2009/10/02 12:00:04,  3] libsmb/ntlmssp.c:745(ntlmssp_server_auth)
>  Got user=[] domain=[] workstation=[PLATYPUS] len1=1 len2=0
>[2009/10/02 12:00:04,  6] param/loadparm.c:6989(lp_file_list_changed)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Oct  2 11:59:23 2009
>  
>[2009/10/02 12:00:04,  5] auth/auth_util.c:208(make_user_info_map)
>  Mapping user []\[] from workstation [PLATYPUS]
>[2009/10/02 12:00:04,  5] auth/auth_util.c:229(make_user_info_map)
>  Mapped domain from [] to [TESTFS] for user [] from workstation [PLATYPUS]
>[2009/10/02 12:00:04,  5] auth/auth_util.c:120(make_user_info)
>  attempting to make a user_info for  ()
>[2009/10/02 12:00:04,  5] auth/auth_util.c:130(make_user_info)
>  making strings for 's user_info struct
>[2009/10/02 12:00:04,  5] auth/auth_util.c:162(make_user_info)
>  making blobs for 's user_info struct
>[2009/10/02 12:00:04, 10] auth/auth_util.c:180(make_user_info)
>  made an encrypted user_info for  ()
>[2009/10/02 12:00:04,  3] auth/auth.c:222(check_ntlm_password)
>  check_ntlm_password:  Checking password for unmapped user []\[]@[PLATYPUS] with the new password interface
>[2009/10/02 12:00:04,  3] auth/auth.c:225(check_ntlm_password)
>  check_ntlm_password:  mapped user is: [TESTFS]\[]@[PLATYPUS]
>[2009/10/02 12:00:04, 10] auth/auth.c:234(check_ntlm_password)
>  check_ntlm_password: auth_context challenge created by random
>[2009/10/02 12:00:04, 10] auth/auth.c:236(check_ntlm_password)
>  challenge is: 
>[2009/10/02 12:00:04,  5] ../lib/util/util.c:304(_dump_data)
>  [0000] C5 40 A8 2B 0D 5C 7E 56                            .@.+.\~V 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username nobody, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name nobody, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\nobody, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\nobody\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-501
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-501 from rid 501
>[2009/10/02 12:00:04,  3] auth/auth.c:271(check_ntlm_password)
>  check_ntlm_password: guest authentication for user [] succeeded
>[2009/10/02 12:00:04,  5] auth/auth.c:310(check_ntlm_password)
>  check_ntlm_password:  guest authentication for user [] -> [] -> [nobody] succeeded
>[2009/10/02 12:00:04,  5] auth/auth_util.c:2114(free_user_info)
>  attempting to free (and zero) a user_info structure
>[2009/10/02 12:00:04, 10] auth/auth_util.c:2118(free_user_info)
>  structure was created for 
>[2009/10/02 12:00:04, 10] auth/token_util.c:353(create_local_nt_token)
>  Create local NT token for S-1-5-21-2901898339-3287136368-3549063626-501
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-2901898339-3287136368-3549063626-501]
>[2009/10/02 12:00:04,  5] lib/privileges.c:128(get_privileges_for_sids)
>  get_privileges_for_sids: sid = S-1-1-0
>  Privilege set:
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2009/10/02 12:00:04,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-32-546]
>[2009/10/02 12:00:04, 10] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-501
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-501
>  SID[  1]: S-1-1-0
>  SID[  2]: S-1-5-2
>  SID[  3]: S-1-5-32-546
>  SID[  4]: S-1-22-1-65534
>  SID[  5]: S-1-22-2-20002
>  SID[  6]: S-1-22-2-20003
>  SID[  7]: S-1-22-2-20005
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04, 10] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 65534
>  Primary group is 65534 and contains 3 supplementary groups
>  Group[  0]: 20002
>  Group[  1]: 20003
>  Group[  2]: 20005
>[2009/10/02 12:00:04, 10] auth/auth_ntlmssp.c:139(auth_ntlmssp_check_password)
>  Got NT session key of length 16
>[2009/10/02 12:00:04, 10] auth/auth_ntlmssp.c:146(auth_ntlmssp_check_password)
>  Got LM session key of length 16
>[2009/10/02 12:00:04, 10] libsmb/ntlmssp.c:851(ntlmssp_server_auth)
>  ntlmssp_server_auth: Using unmodified nt session key.
>[2009/10/02 12:00:04,  3] libsmb/ntlmssp_sign.c:342(ntlmssp_sign_init)
>  NTLMSSP Sign/Seal - Initialising with flags:
>[2009/10/02 12:00:04,  3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0xa2088205
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_VERSION
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_56
>[2009/10/02 12:00:04, 10] smbd/password.c:265(register_existing_vuid)
>  register_existing_vuid: (65534,65534) nobody  TESTFS guest=1
>[2009/10/02 12:00:04,  3] smbd/password.c:269(register_existing_vuid)
>  register_existing_vuid: User name: nobody	Real name: nobody
>[2009/10/02 12:00:04,  3] smbd/password.c:279(register_existing_vuid)
>  register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 101
>[2009/10/02 12:00:04,  6] param/loadparm.c:6989(lp_file_list_changed)
>  lp_file_list_changed()
>  file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf  last mod_time: Fri Oct  2 11:59:23 2009
>  
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=108
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=15360
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_vwv[ 3]=    9 (0x9)
>  smb_bcc=65
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] A1 07 30 05 A0 03 0A 01   00 55 00 6E 00 69 00 78   ..0..... .U.n.i.x
>  [0010] 00 00 00 53 00 61 00 6D   00 62 00 61 00 20 00 33   ...S.a.m .b.a. .3
>  [0020] 00 2E 00 34 00 2E 00 31   00 00 00 44 00 45 00 56   ...4...1 ...D.E.V
>  [0030] 00 2E 00 4D 00 55 00 43   00 2E 00 44 00 57 00 00   ...M.U.C ...D.W..
>  [0040] 00                                                . 
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 78
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4e
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 21 of length 82 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=78
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=15424
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   78 (0x4E)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=35
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 5C 00 54 00 45   00 53 00 54 00 46 00 53   .\.\.T.E .S.T.F.S
>  [0010] 00 5C 00 49 00 50 00 43   00 24 00 00 00 3F 3F 3F   .\.I.P.C .$...???
>  [0020] 3F 3F 00                                          ??. 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtconX (pid 12993) conn 0x0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:04,  4] smbd/reply.c:675(reply_tcon_and_X)
>  Client requested device type [?????] for share [IPC$]
>[2009/10/02 12:00:04,  5] smbd/service.c:1198(make_connection)
>  making a connection to 'normal' service ipc$
>[2009/10/02 12:00:04,  3] lib/access.c:362(only_ipaddrs_in_list)
>  only_ipaddrs_in_list: list has non-ip address (127.0.0.)
>[2009/10/02 12:00:04,  3] lib/access.c:396(check_access)
>  check_access: hostnames in host allow/deny list.
>[2009/10/02 12:00:04,  2] lib/access.c:406(check_access)
>  Allowed connection from 192.168.3.182 (192.168.3.182)
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username nobody, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name nobody, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\nobody, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\nobody\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-501
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-501 from rid 501
>[2009/10/02 12:00:04,  5] lib/username.c:133(Get_Pwnam_alloc)
>  Finding user nobody
>[2009/10/02 12:00:04,  5] lib/username.c:77(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is nobody
>[2009/10/02 12:00:04,  5] lib/username.c:110(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [nobody]!
>[2009/10/02 12:00:04, 10] smbd/service.c:158(set_conn_connectpath)
>  set_conn_connectpath: service IPC$, connectpath = /tmp
>[2009/10/02 12:00:04,  3] smbd/service.c:803(make_connection_snum)
>  Connect path is '/tmp' for service [IPC$]
>[2009/10/02 12:00:04, 10] lib/util_seaccess.c:58(se_map_generic)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2009/10/02 12:00:04,  3] smbd/vfs.c:95(vfs_init_default)
>  Initialising default vfs hooks
>[2009/10/02 12:00:04,  3] smbd/vfs.c:129(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2009/10/02 12:00:04, 10] smbd/vfs.c:47(vfs_find_backend_entry)
>  vfs_find_backend_entry called for /[Default VFS]/
>  Successfully loaded vfs module [/[Default VFS]/] with the new modules system
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #0 (type 0, layer 0)
>  Making operation type 0 opaque [module /[Default VFS]/]
>  Accepting operation type 0 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #1 (type 1, layer 0)
>  Making operation type 1 opaque [module /[Default VFS]/]
>  Accepting operation type 1 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #2 (type 2, layer 0)
>  Making operation type 2 opaque [module /[Default VFS]/]
>  Accepting operation type 2 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #3 (type 3, layer 0)
>  Making operation type 3 opaque [module /[Default VFS]/]
>  Accepting operation type 3 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #4 (type 4, layer 0)
>  Making operation type 4 opaque [module /[Default VFS]/]
>  Accepting operation type 4 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #5 (type 5, layer 0)
>  Making operation type 5 opaque [module /[Default VFS]/]
>  Accepting operation type 5 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #6 (type 6, layer 0)
>  Making operation type 6 opaque [module /[Default VFS]/]
>  Accepting operation type 6 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #7 (type 7, layer 0)
>  Making operation type 7 opaque [module /[Default VFS]/]
>  Accepting operation type 7 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #8 (type 8, layer 0)
>  Making operation type 8 opaque [module /[Default VFS]/]
>  Accepting operation type 8 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #9 (type 9, layer 0)
>  Making operation type 9 opaque [module /[Default VFS]/]
>  Accepting operation type 9 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #10 (type 10, layer 0)
>  Making operation type 10 opaque [module /[Default VFS]/]
>  Accepting operation type 10 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #11 (type 11, layer 0)
>  Making operation type 11 opaque [module /[Default VFS]/]
>  Accepting operation type 11 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #12 (type 12, layer 0)
>  Making operation type 12 opaque [module /[Default VFS]/]
>  Accepting operation type 12 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #13 (type 13, layer 0)
>  Making operation type 13 opaque [module /[Default VFS]/]
>  Accepting operation type 13 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #14 (type 14, layer 0)
>  Making operation type 14 opaque [module /[Default VFS]/]
>  Accepting operation type 14 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #15 (type 15, layer 0)
>  Making operation type 15 opaque [module /[Default VFS]/]
>  Accepting operation type 15 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #16 (type 16, layer 0)
>  Making operation type 16 opaque [module /[Default VFS]/]
>  Accepting operation type 16 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #17 (type 17, layer 0)
>  Making operation type 17 opaque [module /[Default VFS]/]
>  Accepting operation type 17 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #18 (type 18, layer 0)
>  Making operation type 18 opaque [module /[Default VFS]/]
>  Accepting operation type 18 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #19 (type 19, layer 0)
>  Making operation type 19 opaque [module /[Default VFS]/]
>  Accepting operation type 19 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #20 (type 20, layer 0)
>  Making operation type 20 opaque [module /[Default VFS]/]
>  Accepting operation type 20 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #21 (type 21, layer 0)
>  Making operation type 21 opaque [module /[Default VFS]/]
>  Accepting operation type 21 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #22 (type 22, layer 0)
>  Making operation type 22 opaque [module /[Default VFS]/]
>  Accepting operation type 22 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #23 (type 23, layer 0)
>  Making operation type 23 opaque [module /[Default VFS]/]
>  Accepting operation type 23 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #24 (type 24, layer 0)
>  Making operation type 24 opaque [module /[Default VFS]/]
>  Accepting operation type 24 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #25 (type 25, layer 0)
>  Making operation type 25 opaque [module /[Default VFS]/]
>  Accepting operation type 25 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #26 (type 26, layer 0)
>  Making operation type 26 opaque [module /[Default VFS]/]
>  Accepting operation type 26 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #27 (type 27, layer 0)
>  Making operation type 27 opaque [module /[Default VFS]/]
>  Accepting operation type 27 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #28 (type 28, layer 0)
>  Making operation type 28 opaque [module /[Default VFS]/]
>  Accepting operation type 28 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #29 (type 29, layer 0)
>  Making operation type 29 opaque [module /[Default VFS]/]
>  Accepting operation type 29 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #30 (type 30, layer 0)
>  Making operation type 30 opaque [module /[Default VFS]/]
>  Accepting operation type 30 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #31 (type 31, layer 0)
>  Making operation type 31 opaque [module /[Default VFS]/]
>  Accepting operation type 31 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #32 (type 32, layer 0)
>  Making operation type 32 opaque [module /[Default VFS]/]
>  Accepting operation type 32 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #33 (type 33, layer 0)
>  Making operation type 33 opaque [module /[Default VFS]/]
>  Accepting operation type 33 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #34 (type 34, layer 0)
>  Making operation type 34 opaque [module /[Default VFS]/]
>  Accepting operation type 34 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #35 (type 35, layer 0)
>  Making operation type 35 opaque [module /[Default VFS]/]
>  Accepting operation type 35 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #36 (type 36, layer 0)
>  Making operation type 36 opaque [module /[Default VFS]/]
>  Accepting operation type 36 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #37 (type 37, layer 0)
>  Making operation type 37 opaque [module /[Default VFS]/]
>  Accepting operation type 37 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #38 (type 38, layer 0)
>  Making operation type 38 opaque [module /[Default VFS]/]
>  Accepting operation type 38 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #39 (type 39, layer 0)
>  Making operation type 39 opaque [module /[Default VFS]/]
>  Accepting operation type 39 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #40 (type 40, layer 0)
>  Making operation type 40 opaque [module /[Default VFS]/]
>  Accepting operation type 40 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #41 (type 41, layer 0)
>  Making operation type 41 opaque [module /[Default VFS]/]
>  Accepting operation type 41 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #42 (type 42, layer 0)
>  Making operation type 42 opaque [module /[Default VFS]/]
>  Accepting operation type 42 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #43 (type 43, layer 0)
>  Making operation type 43 opaque [module /[Default VFS]/]
>  Accepting operation type 43 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #44 (type 44, layer 0)
>  Making operation type 44 opaque [module /[Default VFS]/]
>  Accepting operation type 44 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #45 (type 45, layer 0)
>  Making operation type 45 opaque [module /[Default VFS]/]
>  Accepting operation type 45 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #46 (type 46, layer 0)
>  Making operation type 46 opaque [module /[Default VFS]/]
>  Accepting operation type 46 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #47 (type 47, layer 0)
>  Making operation type 47 opaque [module /[Default VFS]/]
>  Accepting operation type 47 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #48 (type 48, layer 0)
>  Making operation type 48 opaque [module /[Default VFS]/]
>  Accepting operation type 48 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #49 (type 49, layer 0)
>  Making operation type 49 opaque [module /[Default VFS]/]
>  Accepting operation type 49 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #50 (type 50, layer 0)
>  Making operation type 50 opaque [module /[Default VFS]/]
>  Accepting operation type 50 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #51 (type 51, layer 0)
>  Making operation type 51 opaque [module /[Default VFS]/]
>  Accepting operation type 51 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #52 (type 52, layer 0)
>  Making operation type 52 opaque [module /[Default VFS]/]
>  Accepting operation type 52 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #53 (type 53, layer 0)
>  Making operation type 53 opaque [module /[Default VFS]/]
>  Accepting operation type 53 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #54 (type 54, layer 0)
>  Making operation type 54 opaque [module /[Default VFS]/]
>  Accepting operation type 54 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #55 (type 55, layer 0)
>  Making operation type 55 opaque [module /[Default VFS]/]
>  Accepting operation type 55 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #56 (type 56, layer 0)
>  Making operation type 56 opaque [module /[Default VFS]/]
>  Accepting operation type 56 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #57 (type 57, layer 0)
>  Making operation type 57 opaque [module /[Default VFS]/]
>  Accepting operation type 57 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #58 (type 58, layer 0)
>  Making operation type 58 opaque [module /[Default VFS]/]
>  Accepting operation type 58 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #59 (type 59, layer 0)
>  Making operation type 59 opaque [module /[Default VFS]/]
>  Accepting operation type 59 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #60 (type 60, layer 0)
>  Making operation type 60 opaque [module /[Default VFS]/]
>  Accepting operation type 60 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #61 (type 61, layer 0)
>  Making operation type 61 opaque [module /[Default VFS]/]
>  Accepting operation type 61 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #62 (type 62, layer 0)
>  Making operation type 62 opaque [module /[Default VFS]/]
>  Accepting operation type 62 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #63 (type 63, layer 0)
>  Making operation type 63 opaque [module /[Default VFS]/]
>  Accepting operation type 63 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #64 (type 64, layer 0)
>  Making operation type 64 opaque [module /[Default VFS]/]
>  Accepting operation type 64 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #65 (type 65, layer 0)
>  Making operation type 65 opaque [module /[Default VFS]/]
>  Accepting operation type 65 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #66 (type 66, layer 0)
>  Making operation type 66 opaque [module /[Default VFS]/]
>  Accepting operation type 66 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #67 (type 67, layer 0)
>  Making operation type 67 opaque [module /[Default VFS]/]
>  Accepting operation type 67 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #68 (type 68, layer 0)
>  Making operation type 68 opaque [module /[Default VFS]/]
>  Accepting operation type 68 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #69 (type 69, layer 0)
>  Making operation type 69 opaque [module /[Default VFS]/]
>  Accepting operation type 69 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #70 (type 70, layer 0)
>  Making operation type 70 opaque [module /[Default VFS]/]
>  Accepting operation type 70 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #71 (type 71, layer 0)
>  Making operation type 71 opaque [module /[Default VFS]/]
>  Accepting operation type 71 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #72 (type 72, layer 0)
>  Making operation type 72 opaque [module /[Default VFS]/]
>  Accepting operation type 72 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #73 (type 73, layer 0)
>  Making operation type 73 opaque [module /[Default VFS]/]
>  Accepting operation type 73 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #74 (type 74, layer 0)
>  Making operation type 74 opaque [module /[Default VFS]/]
>  Accepting operation type 74 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #75 (type 75, layer 0)
>  Making operation type 75 opaque [module /[Default VFS]/]
>  Accepting operation type 75 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #76 (type 76, layer 0)
>  Making operation type 76 opaque [module /[Default VFS]/]
>  Accepting operation type 76 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #77 (type 77, layer 0)
>  Making operation type 77 opaque [module /[Default VFS]/]
>  Accepting operation type 77 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #78 (type 78, layer 0)
>  Making operation type 78 opaque [module /[Default VFS]/]
>  Accepting operation type 78 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #79 (type 79, layer 0)
>  Making operation type 79 opaque [module /[Default VFS]/]
>  Accepting operation type 79 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #80 (type 80, layer 0)
>  Making operation type 80 opaque [module /[Default VFS]/]
>  Accepting operation type 80 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #81 (type 81, layer 0)
>  Making operation type 81 opaque [module /[Default VFS]/]
>  Accepting operation type 81 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #82 (type 82, layer 0)
>  Making operation type 82 opaque [module /[Default VFS]/]
>  Accepting operation type 82 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #83 (type 83, layer 0)
>  Making operation type 83 opaque [module /[Default VFS]/]
>  Accepting operation type 83 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #84 (type 84, layer 0)
>  Making operation type 84 opaque [module /[Default VFS]/]
>  Accepting operation type 84 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #85 (type 85, layer 0)
>  Making operation type 85 opaque [module /[Default VFS]/]
>  Accepting operation type 85 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #86 (type 86, layer 0)
>  Making operation type 86 opaque [module /[Default VFS]/]
>  Accepting operation type 86 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #87 (type 87, layer 0)
>  Making operation type 87 opaque [module /[Default VFS]/]
>  Accepting operation type 87 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #88 (type 88, layer 0)
>  Making operation type 88 opaque [module /[Default VFS]/]
>  Accepting operation type 88 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #89 (type 89, layer 0)
>  Making operation type 89 opaque [module /[Default VFS]/]
>  Accepting operation type 89 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #90 (type 90, layer 0)
>  Making operation type 90 opaque [module /[Default VFS]/]
>  Accepting operation type 90 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #91 (type 91, layer 0)
>  Making operation type 91 opaque [module /[Default VFS]/]
>  Accepting operation type 91 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #92 (type 92, layer 0)
>  Making operation type 92 opaque [module /[Default VFS]/]
>  Accepting operation type 92 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #93 (type 93, layer 0)
>  Making operation type 93 opaque [module /[Default VFS]/]
>  Accepting operation type 93 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #94 (type 94, layer 0)
>  Making operation type 94 opaque [module /[Default VFS]/]
>  Accepting operation type 94 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #95 (type 95, layer 0)
>  Making operation type 95 opaque [module /[Default VFS]/]
>  Accepting operation type 95 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #96 (type 96, layer 0)
>  Making operation type 96 opaque [module /[Default VFS]/]
>  Accepting operation type 96 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #97 (type 97, layer 0)
>  Making operation type 97 opaque [module /[Default VFS]/]
>  Accepting operation type 97 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #98 (type 98, layer 0)
>  Making operation type 98 opaque [module /[Default VFS]/]
>  Accepting operation type 98 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #99 (type 99, layer 0)
>  Making operation type 99 opaque [module /[Default VFS]/]
>  Accepting operation type 99 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #100 (type 100, layer 0)
>  Making operation type 100 opaque [module /[Default VFS]/]
>  Accepting operation type 100 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #101 (type 101, layer 0)
>  Making operation type 101 opaque [module /[Default VFS]/]
>  Accepting operation type 101 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #102 (type 102, layer 0)
>  Making operation type 102 opaque [module /[Default VFS]/]
>  Accepting operation type 102 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #103 (type 103, layer 0)
>  Making operation type 103 opaque [module /[Default VFS]/]
>  Accepting operation type 103 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #104 (type 104, layer 0)
>  Making operation type 104 opaque [module /[Default VFS]/]
>  Accepting operation type 104 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #105 (type 105, layer 0)
>  Making operation type 105 opaque [module /[Default VFS]/]
>  Accepting operation type 105 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #106 (type 106, layer 0)
>  Making operation type 106 opaque [module /[Default VFS]/]
>  Accepting operation type 106 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #107 (type 107, layer 0)
>  Making operation type 107 opaque [module /[Default VFS]/]
>  Accepting operation type 107 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #108 (type 108, layer 0)
>  Making operation type 108 opaque [module /[Default VFS]/]
>  Accepting operation type 108 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #109 (type 109, layer 0)
>  Making operation type 109 opaque [module /[Default VFS]/]
>  Accepting operation type 109 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #110 (type 110, layer 0)
>  Making operation type 110 opaque [module /[Default VFS]/]
>  Accepting operation type 110 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/connection.c:142(claim_connection)
>  claiming [IPC$]
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key C1320000020000004950
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64a3d70
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key C1320000020000004950
>[2009/10/02 12:00:04, 10] smbd/share_access.c:234(user_ok_token)
>  user_ok_token: share IPC$ is ok for unix user nobody
>[2009/10/02 12:00:04, 10] smbd/share_access.c:279(is_share_read_only_for_token)
>  is_share_read_only_for_user: share IPC$ is read-only for unix user nobody
>[2009/10/02 12:00:04, 10] lib/util_seaccess.c:58(se_map_generic)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username nobody, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name nobody, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\nobody, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\nobody\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-501
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-501 from rid 501
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-501
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-501
>  SID[  1]: S-1-1-0
>  SID[  2]: S-1-5-2
>  SID[  3]: S-1-5-32-546
>  SID[  4]: S-1-22-1-65534
>  SID[  5]: S-1-22-2-20002
>  SID[  6]: S-1-22-2-20003
>  SID[  7]: S-1-22-2-20005
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 65534
>  Primary group is 65534 and contains 3 supplementary groups
>  Group[  0]: 20002
>  Group[  1]: 20003
>  Group[  2]: 20005
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,65534) gid=(0,65534)
>[2009/10/02 12:00:04,  3] smbd/service.c:1043(make_connection_snum)
>  platypus (192.168.3.182) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 12993)
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:04,  3] smbd/reply.c:754(reply_tcon_and_X)
>  tconX service=IPC$ 
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 96
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x60
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 22 of length 100 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=96
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=4
>  smb_uid=101
>  smb_mid=15488
>  smt_wct=15
>  smb_vwv[ 0]=   28 (0x1C)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   28 (0x1C)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=   16 (0x10)
>  smb_bcc=31
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 04 00 5C 00 54   00 45 00 53 00 54 00 46   .....\.T .E.S.T.F
>  [0010] 00 53 00 5C 00 52 00 4F   00 4F 00 54 00 00 00     .S.\.R.O .O.T...
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c648a300
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-501
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-501
>  SID[  1]: S-1-1-0
>  SID[  2]: S-1-5-2
>  SID[  3]: S-1-5-32-546
>  SID[  4]: S-1-22-1-65534
>  SID[  5]: S-1-22-2-20002
>  SID[  6]: S-1-22-2-20003
>  SID[  7]: S-1-22-2-20005
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 65534
>  Primary group is 65534 and contains 3 supplementary groups
>  Group[  0]: 20002
>  Group[  1]: 20003
>  Group[  2]: 20005
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,65534) gid=(0,65534)
>[2009/10/02 12:00:04, 10] smbd/trans2.c:7387(call_trans2getdfsreferral)
>  call_trans2getdfsreferral
>[2009/10/02 12:00:04, 10] smbd/msdfs.c:107(parse_dfs_path)
>  parse_dfs_path: temp = |TESTFS\ROOT| after trimming \'s
>[2009/10/02 12:00:04, 10] smbd/msdfs.c:132(parse_dfs_path)
>  parse_dfs_path: hostname: TESTFS
>[2009/10/02 12:00:04, 10] smbd/msdfs.c:174(parse_dfs_path)
>  parse_dfs_path: servicename: ROOT
>[2009/10/02 12:00:04,  3] smbd/msdfs.c:828(get_referred_path)
>  get_referred_path: |ROOT| in dfs path \TESTFS\ROOT is not a dfs root.
>[2009/10/02 12:00:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/trans2.c(7409) cmd=50 (SMBtrans2) NT_STATUS_NOT_FOUND
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x32
>  smb_rcls=37
>  smb_reh=2
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=4
>  smb_uid=101
>  smb_mid=15488
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 78
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4e
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 23 of length 82 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=78
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=15552
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=   78 (0x4E)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=35
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 5C 00 54 00 45   00 53 00 54 00 46 00 53   .\.\.T.E .S.T.F.S
>  [0010] 00 5C 00 52 00 4F 00 4F   00 54 00 00 00 3F 3F 3F   .\.R.O.O .T...???
>  [0020] 3F 3F 00                                          ??. 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtconX (pid 12993) conn 0x0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:04,  4] smbd/reply.c:675(reply_tcon_and_X)
>  Client requested device type [?????] for share [ROOT]
>[2009/10/02 12:00:04,  5] smbd/service.c:1198(make_connection)
>  making a connection to 'normal' service root
>[2009/10/02 12:00:04,  3] lib/access.c:362(only_ipaddrs_in_list)
>  only_ipaddrs_in_list: list has non-ip address (127.0.0.)
>[2009/10/02 12:00:04,  3] lib/access.c:396(check_access)
>  check_access: hostnames in host allow/deny list.
>[2009/10/02 12:00:04,  2] lib/access.c:406(check_access)
>  Allowed connection from 192.168.3.182 (192.168.3.182)
>[2009/10/02 12:00:04,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid hlampl does not start with 'S-'.
>[2009/10/02 12:00:04, 10] passdb/lookup_sid.c:69(lookup_name)
>  lookup_name: TESTFS\hlampl => TESTFS (domain), hlampl (name)
>[2009/10/02 12:00:04, 10] passdb/lookup_sid.c:70(lookup_name)
>  lookup_name: flags = 0x073
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] lib/username.c:133(Get_Pwnam_alloc)
>  Finding user hlampl
>[2009/10/02 12:00:04,  5] lib/username.c:77(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is hlampl
>[2009/10/02 12:00:04,  5] lib/username.c:110(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [hlampl]!
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] smbd/share_access.c:234(user_ok_token)
>  user_ok_token: share root is ok for unix user hlampl
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:04,  5] lib/username.c:133(Get_Pwnam_alloc)
>  Finding user hlampl
>[2009/10/02 12:00:04,  5] lib/username.c:77(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is hlampl
>[2009/10/02 12:00:04,  5] lib/username.c:110(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [hlampl]!
>[2009/10/02 12:00:04, 10] smbd/service.c:158(set_conn_connectpath)
>  set_conn_connectpath: service root, connectpath = /export/netroot
>[2009/10/02 12:00:04,  3] smbd/service.c:803(make_connection_snum)
>  Connect path is '/export/netroot' for service [root]
>[2009/10/02 12:00:04, 10] lib/util_seaccess.c:58(se_map_generic)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2009/10/02 12:00:04,  3] smbd/vfs.c:95(vfs_init_default)
>  Initialising default vfs hooks
>[2009/10/02 12:00:04,  3] smbd/vfs.c:129(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2009/10/02 12:00:04, 10] smbd/vfs.c:47(vfs_find_backend_entry)
>  vfs_find_backend_entry called for /[Default VFS]/
>  Successfully loaded vfs module [/[Default VFS]/] with the new modules system
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #0 (type 0, layer 0)
>  Making operation type 0 opaque [module /[Default VFS]/]
>  Accepting operation type 0 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #1 (type 1, layer 0)
>  Making operation type 1 opaque [module /[Default VFS]/]
>  Accepting operation type 1 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #2 (type 2, layer 0)
>  Making operation type 2 opaque [module /[Default VFS]/]
>  Accepting operation type 2 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #3 (type 3, layer 0)
>  Making operation type 3 opaque [module /[Default VFS]/]
>  Accepting operation type 3 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #4 (type 4, layer 0)
>  Making operation type 4 opaque [module /[Default VFS]/]
>  Accepting operation type 4 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #5 (type 5, layer 0)
>  Making operation type 5 opaque [module /[Default VFS]/]
>  Accepting operation type 5 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #6 (type 6, layer 0)
>  Making operation type 6 opaque [module /[Default VFS]/]
>  Accepting operation type 6 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #7 (type 7, layer 0)
>  Making operation type 7 opaque [module /[Default VFS]/]
>  Accepting operation type 7 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #8 (type 8, layer 0)
>  Making operation type 8 opaque [module /[Default VFS]/]
>  Accepting operation type 8 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #9 (type 9, layer 0)
>  Making operation type 9 opaque [module /[Default VFS]/]
>  Accepting operation type 9 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #10 (type 10, layer 0)
>  Making operation type 10 opaque [module /[Default VFS]/]
>  Accepting operation type 10 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #11 (type 11, layer 0)
>  Making operation type 11 opaque [module /[Default VFS]/]
>  Accepting operation type 11 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #12 (type 12, layer 0)
>  Making operation type 12 opaque [module /[Default VFS]/]
>  Accepting operation type 12 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #13 (type 13, layer 0)
>  Making operation type 13 opaque [module /[Default VFS]/]
>  Accepting operation type 13 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #14 (type 14, layer 0)
>  Making operation type 14 opaque [module /[Default VFS]/]
>  Accepting operation type 14 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #15 (type 15, layer 0)
>  Making operation type 15 opaque [module /[Default VFS]/]
>  Accepting operation type 15 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #16 (type 16, layer 0)
>  Making operation type 16 opaque [module /[Default VFS]/]
>  Accepting operation type 16 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #17 (type 17, layer 0)
>  Making operation type 17 opaque [module /[Default VFS]/]
>  Accepting operation type 17 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #18 (type 18, layer 0)
>  Making operation type 18 opaque [module /[Default VFS]/]
>  Accepting operation type 18 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #19 (type 19, layer 0)
>  Making operation type 19 opaque [module /[Default VFS]/]
>  Accepting operation type 19 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #20 (type 20, layer 0)
>  Making operation type 20 opaque [module /[Default VFS]/]
>  Accepting operation type 20 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #21 (type 21, layer 0)
>  Making operation type 21 opaque [module /[Default VFS]/]
>  Accepting operation type 21 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #22 (type 22, layer 0)
>  Making operation type 22 opaque [module /[Default VFS]/]
>  Accepting operation type 22 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #23 (type 23, layer 0)
>  Making operation type 23 opaque [module /[Default VFS]/]
>  Accepting operation type 23 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #24 (type 24, layer 0)
>  Making operation type 24 opaque [module /[Default VFS]/]
>  Accepting operation type 24 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #25 (type 25, layer 0)
>  Making operation type 25 opaque [module /[Default VFS]/]
>  Accepting operation type 25 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #26 (type 26, layer 0)
>  Making operation type 26 opaque [module /[Default VFS]/]
>  Accepting operation type 26 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #27 (type 27, layer 0)
>  Making operation type 27 opaque [module /[Default VFS]/]
>  Accepting operation type 27 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #28 (type 28, layer 0)
>  Making operation type 28 opaque [module /[Default VFS]/]
>  Accepting operation type 28 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #29 (type 29, layer 0)
>  Making operation type 29 opaque [module /[Default VFS]/]
>  Accepting operation type 29 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #30 (type 30, layer 0)
>  Making operation type 30 opaque [module /[Default VFS]/]
>  Accepting operation type 30 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #31 (type 31, layer 0)
>  Making operation type 31 opaque [module /[Default VFS]/]
>  Accepting operation type 31 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #32 (type 32, layer 0)
>  Making operation type 32 opaque [module /[Default VFS]/]
>  Accepting operation type 32 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #33 (type 33, layer 0)
>  Making operation type 33 opaque [module /[Default VFS]/]
>  Accepting operation type 33 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #34 (type 34, layer 0)
>  Making operation type 34 opaque [module /[Default VFS]/]
>  Accepting operation type 34 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #35 (type 35, layer 0)
>  Making operation type 35 opaque [module /[Default VFS]/]
>  Accepting operation type 35 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #36 (type 36, layer 0)
>  Making operation type 36 opaque [module /[Default VFS]/]
>  Accepting operation type 36 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #37 (type 37, layer 0)
>  Making operation type 37 opaque [module /[Default VFS]/]
>  Accepting operation type 37 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #38 (type 38, layer 0)
>  Making operation type 38 opaque [module /[Default VFS]/]
>  Accepting operation type 38 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #39 (type 39, layer 0)
>  Making operation type 39 opaque [module /[Default VFS]/]
>  Accepting operation type 39 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #40 (type 40, layer 0)
>  Making operation type 40 opaque [module /[Default VFS]/]
>  Accepting operation type 40 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #41 (type 41, layer 0)
>  Making operation type 41 opaque [module /[Default VFS]/]
>  Accepting operation type 41 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #42 (type 42, layer 0)
>  Making operation type 42 opaque [module /[Default VFS]/]
>  Accepting operation type 42 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #43 (type 43, layer 0)
>  Making operation type 43 opaque [module /[Default VFS]/]
>  Accepting operation type 43 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #44 (type 44, layer 0)
>  Making operation type 44 opaque [module /[Default VFS]/]
>  Accepting operation type 44 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #45 (type 45, layer 0)
>  Making operation type 45 opaque [module /[Default VFS]/]
>  Accepting operation type 45 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #46 (type 46, layer 0)
>  Making operation type 46 opaque [module /[Default VFS]/]
>  Accepting operation type 46 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #47 (type 47, layer 0)
>  Making operation type 47 opaque [module /[Default VFS]/]
>  Accepting operation type 47 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #48 (type 48, layer 0)
>  Making operation type 48 opaque [module /[Default VFS]/]
>  Accepting operation type 48 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #49 (type 49, layer 0)
>  Making operation type 49 opaque [module /[Default VFS]/]
>  Accepting operation type 49 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #50 (type 50, layer 0)
>  Making operation type 50 opaque [module /[Default VFS]/]
>  Accepting operation type 50 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #51 (type 51, layer 0)
>  Making operation type 51 opaque [module /[Default VFS]/]
>  Accepting operation type 51 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #52 (type 52, layer 0)
>  Making operation type 52 opaque [module /[Default VFS]/]
>  Accepting operation type 52 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #53 (type 53, layer 0)
>  Making operation type 53 opaque [module /[Default VFS]/]
>  Accepting operation type 53 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #54 (type 54, layer 0)
>  Making operation type 54 opaque [module /[Default VFS]/]
>  Accepting operation type 54 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #55 (type 55, layer 0)
>  Making operation type 55 opaque [module /[Default VFS]/]
>  Accepting operation type 55 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #56 (type 56, layer 0)
>  Making operation type 56 opaque [module /[Default VFS]/]
>  Accepting operation type 56 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #57 (type 57, layer 0)
>  Making operation type 57 opaque [module /[Default VFS]/]
>  Accepting operation type 57 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #58 (type 58, layer 0)
>  Making operation type 58 opaque [module /[Default VFS]/]
>  Accepting operation type 58 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #59 (type 59, layer 0)
>  Making operation type 59 opaque [module /[Default VFS]/]
>  Accepting operation type 59 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #60 (type 60, layer 0)
>  Making operation type 60 opaque [module /[Default VFS]/]
>  Accepting operation type 60 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #61 (type 61, layer 0)
>  Making operation type 61 opaque [module /[Default VFS]/]
>  Accepting operation type 61 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #62 (type 62, layer 0)
>  Making operation type 62 opaque [module /[Default VFS]/]
>  Accepting operation type 62 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #63 (type 63, layer 0)
>  Making operation type 63 opaque [module /[Default VFS]/]
>  Accepting operation type 63 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #64 (type 64, layer 0)
>  Making operation type 64 opaque [module /[Default VFS]/]
>  Accepting operation type 64 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #65 (type 65, layer 0)
>  Making operation type 65 opaque [module /[Default VFS]/]
>  Accepting operation type 65 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #66 (type 66, layer 0)
>  Making operation type 66 opaque [module /[Default VFS]/]
>  Accepting operation type 66 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #67 (type 67, layer 0)
>  Making operation type 67 opaque [module /[Default VFS]/]
>  Accepting operation type 67 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #68 (type 68, layer 0)
>  Making operation type 68 opaque [module /[Default VFS]/]
>  Accepting operation type 68 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #69 (type 69, layer 0)
>  Making operation type 69 opaque [module /[Default VFS]/]
>  Accepting operation type 69 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #70 (type 70, layer 0)
>  Making operation type 70 opaque [module /[Default VFS]/]
>  Accepting operation type 70 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #71 (type 71, layer 0)
>  Making operation type 71 opaque [module /[Default VFS]/]
>  Accepting operation type 71 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #72 (type 72, layer 0)
>  Making operation type 72 opaque [module /[Default VFS]/]
>  Accepting operation type 72 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #73 (type 73, layer 0)
>  Making operation type 73 opaque [module /[Default VFS]/]
>  Accepting operation type 73 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #74 (type 74, layer 0)
>  Making operation type 74 opaque [module /[Default VFS]/]
>  Accepting operation type 74 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #75 (type 75, layer 0)
>  Making operation type 75 opaque [module /[Default VFS]/]
>  Accepting operation type 75 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #76 (type 76, layer 0)
>  Making operation type 76 opaque [module /[Default VFS]/]
>  Accepting operation type 76 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #77 (type 77, layer 0)
>  Making operation type 77 opaque [module /[Default VFS]/]
>  Accepting operation type 77 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #78 (type 78, layer 0)
>  Making operation type 78 opaque [module /[Default VFS]/]
>  Accepting operation type 78 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #79 (type 79, layer 0)
>  Making operation type 79 opaque [module /[Default VFS]/]
>  Accepting operation type 79 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #80 (type 80, layer 0)
>  Making operation type 80 opaque [module /[Default VFS]/]
>  Accepting operation type 80 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #81 (type 81, layer 0)
>  Making operation type 81 opaque [module /[Default VFS]/]
>  Accepting operation type 81 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #82 (type 82, layer 0)
>  Making operation type 82 opaque [module /[Default VFS]/]
>  Accepting operation type 82 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #83 (type 83, layer 0)
>  Making operation type 83 opaque [module /[Default VFS]/]
>  Accepting operation type 83 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #84 (type 84, layer 0)
>  Making operation type 84 opaque [module /[Default VFS]/]
>  Accepting operation type 84 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #85 (type 85, layer 0)
>  Making operation type 85 opaque [module /[Default VFS]/]
>  Accepting operation type 85 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #86 (type 86, layer 0)
>  Making operation type 86 opaque [module /[Default VFS]/]
>  Accepting operation type 86 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #87 (type 87, layer 0)
>  Making operation type 87 opaque [module /[Default VFS]/]
>  Accepting operation type 87 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #88 (type 88, layer 0)
>  Making operation type 88 opaque [module /[Default VFS]/]
>  Accepting operation type 88 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #89 (type 89, layer 0)
>  Making operation type 89 opaque [module /[Default VFS]/]
>  Accepting operation type 89 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #90 (type 90, layer 0)
>  Making operation type 90 opaque [module /[Default VFS]/]
>  Accepting operation type 90 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #91 (type 91, layer 0)
>  Making operation type 91 opaque [module /[Default VFS]/]
>  Accepting operation type 91 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #92 (type 92, layer 0)
>  Making operation type 92 opaque [module /[Default VFS]/]
>  Accepting operation type 92 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #93 (type 93, layer 0)
>  Making operation type 93 opaque [module /[Default VFS]/]
>  Accepting operation type 93 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #94 (type 94, layer 0)
>  Making operation type 94 opaque [module /[Default VFS]/]
>  Accepting operation type 94 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #95 (type 95, layer 0)
>  Making operation type 95 opaque [module /[Default VFS]/]
>  Accepting operation type 95 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #96 (type 96, layer 0)
>  Making operation type 96 opaque [module /[Default VFS]/]
>  Accepting operation type 96 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #97 (type 97, layer 0)
>  Making operation type 97 opaque [module /[Default VFS]/]
>  Accepting operation type 97 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #98 (type 98, layer 0)
>  Making operation type 98 opaque [module /[Default VFS]/]
>  Accepting operation type 98 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #99 (type 99, layer 0)
>  Making operation type 99 opaque [module /[Default VFS]/]
>  Accepting operation type 99 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #100 (type 100, layer 0)
>  Making operation type 100 opaque [module /[Default VFS]/]
>  Accepting operation type 100 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #101 (type 101, layer 0)
>  Making operation type 101 opaque [module /[Default VFS]/]
>  Accepting operation type 101 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #102 (type 102, layer 0)
>  Making operation type 102 opaque [module /[Default VFS]/]
>  Accepting operation type 102 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #103 (type 103, layer 0)
>  Making operation type 103 opaque [module /[Default VFS]/]
>  Accepting operation type 103 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #104 (type 104, layer 0)
>  Making operation type 104 opaque [module /[Default VFS]/]
>  Accepting operation type 104 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #105 (type 105, layer 0)
>  Making operation type 105 opaque [module /[Default VFS]/]
>  Accepting operation type 105 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #106 (type 106, layer 0)
>  Making operation type 106 opaque [module /[Default VFS]/]
>  Accepting operation type 106 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #107 (type 107, layer 0)
>  Making operation type 107 opaque [module /[Default VFS]/]
>  Accepting operation type 107 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #108 (type 108, layer 0)
>  Making operation type 108 opaque [module /[Default VFS]/]
>  Accepting operation type 108 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #109 (type 109, layer 0)
>  Making operation type 109 opaque [module /[Default VFS]/]
>  Accepting operation type 109 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/vfs.c:192(vfs_init_custom)
>  Checking operation #110 (type 110, layer 0)
>  Making operation type 110 opaque [module /[Default VFS]/]
>  Accepting operation type 110 from module /[Default VFS]/
>[2009/10/02 12:00:04,  5] smbd/connection.c:142(claim_connection)
>  claiming [root]
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key C132000003000000726F
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64a45e0
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key C132000003000000726F
>[2009/10/02 12:00:04,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid hlampl does not start with 'S-'.
>[2009/10/02 12:00:04, 10] passdb/lookup_sid.c:69(lookup_name)
>  lookup_name: TESTFS\hlampl => TESTFS (domain), hlampl (name)
>[2009/10/02 12:00:04, 10] passdb/lookup_sid.c:70(lookup_name)
>  lookup_name: flags = 0x073
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] lib/username.c:133(Get_Pwnam_alloc)
>  Finding user hlampl
>[2009/10/02 12:00:04,  5] lib/username.c:77(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is hlampl
>[2009/10/02 12:00:04,  5] lib/username.c:110(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [hlampl]!
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] smbd/share_access.c:234(user_ok_token)
>  user_ok_token: share root is ok for unix user hlampl
>[2009/10/02 12:00:04, 10] smbd/share_access.c:279(is_share_read_only_for_token)
>  is_share_read_only_for_user: share root is read-write for unix user hlampl
>[2009/10/02 12:00:04, 10] lib/util_seaccess.c:58(se_map_generic)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2009/10/02 12:00:04, 10] lib/util_seaccess.c:58(se_map_generic)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2009/10/02 12:00:04,  3] lib/util_sid.c:228(string_to_sid)
>  string_to_sid: Sid hlampl does not start with 'S-'.
>[2009/10/02 12:00:04, 10] passdb/lookup_sid.c:69(lookup_name)
>  lookup_name: TESTFS\hlampl => TESTFS (domain), hlampl (name)
>[2009/10/02 12:00:04, 10] passdb/lookup_sid.c:70(lookup_name)
>  lookup_name: flags = 0x073
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] lib/username.c:133(Get_Pwnam_alloc)
>  Finding user hlampl
>[2009/10/02 12:00:04,  5] lib/username.c:77(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is hlampl
>[2009/10/02 12:00:04,  5] lib/username.c:110(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [hlampl]!
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  1] smbd/service.c:1043(make_connection_snum)
>  platypus (192.168.3.182) connect to service root initially as user hlampl (uid=0, gid=1001) (pid 12993)
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:04,  3] smbd/reply.c:754(reply_tcon_and_X)
>  tconX service=ROOT 
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 76
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4c
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 24 of length 80 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=15616
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EC 03 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /export/netroot
>[2009/10/02 12:00:04,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:04,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=61)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] smbd/trans2.c:4308(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/10/02 12:00:04,  5] smbd/trans2.c:4318(call_trans2qfilepathinfo)
>  SMB_QFBI - create: Wed Sep 30 15:03:42 2009
>   access: Fri Oct  2 11:53:20 2009
>   write: Wed Sep 30 15:03:42 2009
>   change: Wed Sep 30 15:03:42 2009
>   mode: 10
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=15616
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 0B 4F   6F CE 41 CA 01 00 A8 17   .......O o.A.....
>  [0010] 2C 46 43 CA 01 00 0B 4F   6F CE 41 CA 01 00 0B 4F   ,FC....O o.A....O
>  [0020] 6F CE 41 CA 01 10 00 00   00 00 00 00 00           o.A..... .....
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 100
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x64
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 25 of length 104 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=15680
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=16384 (0x4000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  256 (0x100)
>  smb_bcc=17
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 73 00 72 00 76   00 73 00 76 00 63 00 00   .\.s.r.v .s.v.c..
>  [0010] 00                                                . 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 1001
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,1001) gid=(0,1001)
>[2009/10/02 12:00:04,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = srvsvc
>[2009/10/02 12:00:04,  4] smbd/nttrans.c:315(nt_open_pipe)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2009/10/02 12:00:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 485, fnum = 4581 (1 used)
>[2009/10/02 12:00:04,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \srvsvc
>[2009/10/02 12:00:04, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list)
>  init_pipe_handles: created handle list for pipe \srvsvc
>[2009/10/02 12:00:04, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
>  init_pipe_handles: pipe_handles ref count = 1 for pipe \srvsvc
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:04,  4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
>  Created internal pipe \srvsvc (pipes_open=0)
>[2009/10/02 12:00:04,  5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
>  do_ntcreate_pipe_open: open pipe = \srvsvc
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 136
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x88
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 26 of length 140 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=136
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=15744
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4581 (0x11E5)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    8 (0x8)
>  smb_vwv[ 8]=   72 (0x48)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   72 (0x48)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=73
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] EE 05 00 0B 03 10 00 00   00 48 00 00 00 01 00 00   ........ .H......
>  [0010] 00 B8 10 B8 10 00 00 00   00 01 00 00 00 00 00 01   ........ ........
>  [0020] 00 C8 4F 32 4B 70 16 D3   01 12 78 5A 47 BF 6E E1   ..O2Kp.. ..xZG.n.
>  [0030] 88 03 00 00 00 04 5D 88   8A EB 1C C9 11 9F E8 08   ......]. ........
>  [0040] 00 2B 10 48 60 02 00 00   00                       .+.H`... .
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBwriteX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:04,  6] smbd/pipes.c:271(reply_pipe_write_and_X)
>  reply_pipe_write_and_X: 11e5 name: srvsvc len: 72
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0b
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0048
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 11
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
>  api_pipe_bind_req: decode request. 1558
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_rb 
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 00000000
>      0008 num_contexts: 01
>      000c context_id  : 0000
>      000e num_transfer_syntaxes: 01
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00000f smb_io_rpc_iface 
>[2009/10/02 12:00:04,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000010 smb_io_uuid uuid
>              0010 data   : 4b324fc8
>              0014 data   : 1670
>              0016 data   : 01d3
>              0018 data   : 12 78 
>              001a data   : 5a 47 bf 6e e1 88 
>          0020 version: 00000003
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000024 smb_io_rpc_iface 
>[2009/10/02 12:00:04,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000024 smb_io_uuid uuid
>              0024 data   : 8a885d04
>              0028 data   : 1ceb
>              002a data   : 11c9
>              002c data   : 9f e8 
>              002e data   : 08 00 2b 10 48 60 
>          0034 version: 00000002
>[2009/10/02 12:00:04,  3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
>  api_pipe_bind_req: make response. 1628
>[2009/10/02 12:00:04,  3] rpc_server/srv_pipe.c:960(check_bind_req)
>  check_bind_req for \srvsvc
>  checking lsarpc
>  checking winreg
>  checking initshutdown
>  checking dssetup
>  checking wkssvc
>  checking svcctl
>  checking ntsvcs
>  checking netlogon
>  checking netdfs
>  checking srvsvc
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_ba 
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 000053f0
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000008 smb_io_rpc_addr_str 
>          0008 len: 000d
>          000a str: \PIPE\srvsvc.
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000017 smb_io_rpc_results 
>          0018 num_results: 01
>          001c result     : 0000
>          001e reason     : 0000
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000020 smb_io_rpc_iface 
>[2009/10/02 12:00:04,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000020 smb_io_uuid uuid
>              0020 data   : 8a885d04
>              0024 data   : 1ceb
>              0026 data   : 11c9
>              0028 data   : 9f e8 
>              002a data   : 08 00 2b 10 48 60 
>          0030 version: 00000002
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0c
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0044
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 56
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64a2c70
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64a2c70
>[2009/10/02 12:00:04,  3] smbd/pipes.c:325(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 27 of length 63 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=15808
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4581 (0x11E5)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]= 1024 (0x400)
>  smb_vwv[ 7]=65535 (0xFFFF)
>  smb_vwv[ 8]=65535 (0xFFFF)
>  smb_vwv[ 9]= 1024 (0x400)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBreadX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \srvsvc len: 1024
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
>  read_from_pipe: \srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64b2a00
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64b2a00
>[2009/10/02 12:00:04,  3] smbd/pipes.c:430(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 172
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0xac
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 28 of length 176 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=172
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=15872
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   88 (0x58)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   88 (0x58)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4581 (0x11E5)
>  smb_bcc=105
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 58 00 00 00 01 00 00   ........ .X......
>  [0020] 00 40 00 00 00 00 00 10   00 00 00 02 00 09 00 00   .@...... ........
>  [0030] 00 00 00 00 00 09 00 00   00 5C 00 5C 00 54 00 45   ........ .\.\.T.E
>  [0040] 00 53 00 54 00 46 00 53   00 00 00 C9 11 05 00 00   .S.T.F.S ........
>  [0050] 00 00 00 00 00 05 00 00   00 52 00 4F 00 4F 00 54   ........ .R.O.O.T
>  [0060] 00 00 00 00 00 01 00 00   00                       ........ .
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:04,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=88 params=0 setup=2
>[2009/10/02 12:00:04,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/10/02 12:00:04,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/10/02 12:00:04,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/10/02 12:00:04,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "srvsvc" (pnum 11e5)
>[2009/10/02 12:00:04, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0x7f61c648e820 max_trans_reply: 1024
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 88
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 88
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 88
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 88, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 72
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0058
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 72, incoming data = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000040
>      0004 context_id: 0000
>      0006 opnum     : 0010
>[2009/10/02 12:00:04,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\srvsvc
>[2009/10/02 12:00:04,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \srvsvc op 0x10 - api_rpcTNP: rpc command: SRVSVC_NETSHAREGETINFO
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[16].fn == 0x7f61c5cf7354
>[2009/10/02 12:00:04,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       srvsvc_NetShareGetInfo: struct srvsvc_NetShareGetInfo
>          in: struct srvsvc_NetShareGetInfo
>              server_unc               : *
>                  server_unc               : '\\TESTFS'
>              share_name               : 'ROOT'
>              level                    : 0x00000001 (1)
>[2009/10/02 12:00:04,  5] rpc_server/srv_srvsvc_nt.c:1374(_srvsvc_NetShareGetInfo)
>  _srvsvc_NetShareGetInfo: 1374
>[2009/10/02 12:00:04,  5] rpc_server/srv_srvsvc_nt.c:1439(_srvsvc_NetShareGetInfo)
>  _srvsvc_NetShareGetInfo: 1439
>[2009/10/02 12:00:04,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       srvsvc_NetShareGetInfo: struct srvsvc_NetShareGetInfo
>          out: struct srvsvc_NetShareGetInfo
>              info                     : *
>                  info                     : union srvsvc_NetShareInfo(case 1)
>                  info1                    : *
>                      info1: struct srvsvc_NetShareInfo1
>                          name                     : *
>                              name                     : 'root'
>                          type                     : STYPE_DISKTREE (0x0)
>                          comment                  : *
>                              comment                  : 'Test Root'
>              result                   : WERR_OK
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \srvsvc successfully
>[2009/10/02 12:00:04,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 44
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 72
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64a5f00
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64a5f00
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \srvsvc len: 1024
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 80.
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0068
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000050
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c641a150
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c641a150
>[2009/10/02 12:00:04,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..104] (align 0)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=160
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=15872
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  104 (0x68)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  104 (0x68)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=105
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 68 00 00 00 01 00 00   ........ .h......
>  [0010] 00 50 00 00 00 00 00 00   00 01 00 00 00 00 00 02   .P...... ........
>  [0020] 00 04 00 02 00 00 00 00   00 08 00 02 00 05 00 00   ........ ........
>  [0030] 00 00 00 00 00 05 00 00   00 72 00 6F 00 6F 00 74   ........ .r.o.o.t
>  [0040] 00 00 00 00 00 0A 00 00   00 00 00 00 00 0A 00 00   ........ ........
>  [0050] 00 54 00 65 00 73 00 74   00 20 00 52 00 6F 00 6F   .T.e.s.t . .R.o.o
>  [0060] 00 74 00 00 00 00 00 00   00                       .t...... .
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 29 of length 45 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=15936
>  smt_wct=3
>  smb_vwv[ 0]= 4581 (0x11E5)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:04,  3] smbd/reply.c:4456(reply_close)
>  close fd=-1 fnum=4581 (numopen=1)
>[2009/10/02 12:00:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Sun Feb  7 07:28:15 2106
>[2009/10/02 12:00:04, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe)
>  close_policy_by_pipe: deleted handle list for pipe \srvsvc
>[2009/10/02 12:00:04,  5] smbd/files.c:484(file_free)
>  freed files structure 4581 (0 used)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=15936
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 70
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x46
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 30 of length 74 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16000
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 02 01                                    ..... 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /export/netroot
>[2009/10/02 12:00:04,  3] smbd/trans2.c:2599(call_trans2qfsinfo)
>  call_trans2qfsinfo: level = 258
>[2009/10/02 12:00:04,  5] smbd/trans2.c:2735(call_trans2qfsinfo)
>  call_trans2qfsinfo : SMB_QUERY_FS_VOLUME_INFO namelen = 4, vol=root serv=root
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 26, useable_space = 131012
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 0, data_to_send = 26, paramsize = 0, datasize = 26
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=82
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16000
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   26 (0x1A)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   26 (0x1A)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=27
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 00 00   00 B0 02 D2 0A 08 00 00   ........ ........
>  [0010] 00 00 00 72 00 6F 00 6F   00 74 00                 ...r.o.o .t.
>[2009/10/02 12:00:04,  4] smbd/trans2.c:3128(call_trans2qfsinfo)
>  SMBtrans2 info_level = 258
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 76
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4c
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 31 of length 80 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16064
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   64 (0x40)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 ED 03 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:04,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1005 call=5 total_data=0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=61)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] smbd/trans2.c:4329(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16064
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   24 (0x18)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   24 (0x18)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=29
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0010] 00 00 00 00 00 01 00 00   00 00 01 00 00           ........ .....
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 76
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4c
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 32 of length 80 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16128
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EE 03 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1006
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:04,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1006 call=5 total_data=0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=61)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] smbd/trans2.c:4434(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=68
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16128
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    8 (0x8)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=13
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 80 00 00   00 11 08 00 00           ........ .....
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 76
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4c
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 33 of length 80 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16192
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   32 (0x20)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EF 03 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1007
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:04,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1007 call=5 total_data=0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=61)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] smbd/trans2.c:4343(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_EA_INFORMATION
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 4, useable_space = 131010
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 4, paramsize = 2, datasize = 4
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=64
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16192
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    4 (0x4)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    4 (0x4)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=9
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 00 00   00                       ........ .
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 86
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x56
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 34 of length 90 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=86
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16256
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]= 4096 (0x1000)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=3
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00                                          ... 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = 
>[2009/10/02 12:00:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = 
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:04,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:04, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = .
>[2009/10/02 12:00:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 486, fnum = 4582 (1 used)
>[2009/10/02 12:00:04,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(.) returning 0644
>[2009/10/02 12:00:04, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=., dos_attrs=0x80 access_mask=0x100080 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0644 oplock_request=0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=61)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=., after mapping access_mask=0x100080
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64a5f70
>[2009/10/02 12:00:04,  4] smbd/open.c:1913(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x100080, open_access_mask = 0x100080
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:04,  5] smbd/files.c:484(file_free)
>  freed files structure 4582 (0 used)
>[2009/10/02 12:00:04,  5] smbd/open.c:2391(open_directory)
>  open_directory: opening directory ., access_mask = 0x100080, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x80
>[2009/10/02 12:00:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 487, fnum = 4583 (1 used)
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64a62a0
>[2009/10/02 12:00:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Wed Sep 30 15:03:43 2009 CEST cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num: 1
>[2009/10/02 12:00:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x0, access_mask = 0x100080, mid = 0x0, type= 0x0, gen_id = 6, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:04, 10] smbd/open.c:3201(create_file_unixpath)
>  create_file_unixpath: info=1
>[2009/10/02 12:00:04, 10] smbd/open.c:3496(create_file_default)
>  create_file: info=1
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=61)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04,  5] smbd/nttrans.c:650(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: fnum = 4583, open name = .
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 84
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x54
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 35 of length 88 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16320
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=16384 (0x4000)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=  192 (0xC0)
>  smb_vwv[20]=    9 (0x9)
>  smb_vwv[21]= 4583 (0x11E7)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00                                          ... 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBnttrans (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:2697(reply_nttrans)
>  num_setup=8, param_total=0, this_param=0, max_param=0, data_total=0, this_data=0, max_data=64, param_offset=84, data_offset=0
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:2769(reply_nttrans)
>  reply_nttrans: state->setup_count = 8
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] C0 00 09 00 E7 11 01 00                            ........ 
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:1824(call_nt_transact_ioctl)
>  call_nt_transact_ioctl: function[0x000900C0] FID[0x11E7] isFSctl[0x01] compfilter[0x00]
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:1851(call_nt_transact_ioctl)
>  FSCTL_CREATE_OR_GET_OBJECT_ID: called on FID[0x11E7]
>[2009/10/02 12:00:04,  9] smbd/nttrans.c:219(send_nt_replies)
>  nt_rep: params_sent_thistime = 0, data_sent_thistime = 64, useable_space = 130994
>[2009/10/02 12:00:04,  9] smbd/nttrans.c:221(send_nt_replies)
>  nt_rep: params_to_send = 0, data_to_send = 64, paramsize = 0, datasize = 64
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=138
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16320
>  smt_wct=18
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=16384 (0x4000)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=18944 (0x4A00)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_bcc=67
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 11 08 00 00 00   00 00 00 80 00 00 00 00   ........ ........
>  [0010] 00 00 00 32 91 53 F5 60   EB 32 9C 0E 1D EE A5 5E   ...2.S.` .2.....^
>  [0020] 88 A1 E9 11 08 00 00 00   00 00 00 80 00 00 00 00   ........ ........
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00 00 00                                          ... 
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 70
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x46
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 36 of length 74 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16384
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 F0 03                                    ..... 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:2599(call_trans2qfsinfo)
>  call_trans2qfsinfo: level = 1008
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 64, useable_space = 131012
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 0, data_to_send = 64, paramsize = 0, datasize = 64
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=120
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16384
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   64 (0x40)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   64 (0x40)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=65
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 32 91 53 F5 60 EB 32   9C 0E 1D EE A5 5E 88 A1   .2.S.`.2 .....^..
>  [0010] E9 61 42 6D 53 00 01 04   03 00 00 00 00 00 00 00   .aBmS... ........
>  [0020] 00 00 00 00 00 33 2E 34   2E 31 00 00 00 00 00 00   .....3.4 .1......
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00                                                . 
>[2009/10/02 12:00:04,  4] smbd/trans2.c:3128(call_trans2qfsinfo)
>  SMBtrans2 info_level = 1008
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 37 of length 45 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=16448
>  smt_wct=3
>  smb_vwv[ 0]= 4583 (0x11E7)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  3] smbd/reply.c:4446(reply_close)
>  close directory fnum=4583
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64a5e20
>[2009/10/02 12:00:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 1
>[2009/10/02 12:00:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x0, access_mask = 0x100080, mid = 0x0, type= 0x0, gen_id = 6, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:04,  5] smbd/files.c:484(file_free)
>  freed files structure 4583 (0 used)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=16448
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 96
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x60
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 38 of length 100 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=96
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=4
>  smb_uid=101
>  smb_mid=16512
>  smt_wct=15
>  smb_vwv[ 0]=   28 (0x1C)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   28 (0x1C)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=   16 (0x10)
>  smb_bcc=31
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 04 00 5C 00 54   00 45 00 53 00 54 00 46   .....\.T .E.S.T.F
>  [0010] 00 53 00 5C 00 52 00 4F   00 4F 00 54 00 00 00     .S.\.R.O .O.T...
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c648a300
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-501
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-501
>  SID[  1]: S-1-1-0
>  SID[  2]: S-1-5-2
>  SID[  3]: S-1-5-32-546
>  SID[  4]: S-1-22-1-65534
>  SID[  5]: S-1-22-2-20002
>  SID[  6]: S-1-22-2-20003
>  SID[  7]: S-1-22-2-20005
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 65534
>  Primary group is 65534 and contains 3 supplementary groups
>  Group[  0]: 20002
>  Group[  1]: 20003
>  Group[  2]: 20005
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,65534) gid=(0,65534)
>[2009/10/02 12:00:04,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2009/10/02 12:00:04, 10] smbd/trans2.c:7387(call_trans2getdfsreferral)
>  call_trans2getdfsreferral
>[2009/10/02 12:00:04, 10] smbd/msdfs.c:107(parse_dfs_path)
>  parse_dfs_path: temp = |TESTFS\ROOT| after trimming \'s
>[2009/10/02 12:00:04, 10] smbd/msdfs.c:132(parse_dfs_path)
>  parse_dfs_path: hostname: TESTFS
>[2009/10/02 12:00:04, 10] smbd/msdfs.c:174(parse_dfs_path)
>  parse_dfs_path: servicename: ROOT
>[2009/10/02 12:00:04,  3] smbd/msdfs.c:828(get_referred_path)
>  get_referred_path: |ROOT| in dfs path \TESTFS\ROOT is not a dfs root.
>[2009/10/02 12:00:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/trans2.c(7409) cmd=50 (SMBtrans2) NT_STATUS_NOT_FOUND
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x32
>  smb_rcls=37
>  smb_reh=2
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=4
>  smb_uid=101
>  smb_mid=16512
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 76
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4c
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 39 of length 80 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16576
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EC 03 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /export/netroot
>[2009/10/02 12:00:04,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:04,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=61)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] smbd/trans2.c:4308(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/10/02 12:00:04,  5] smbd/trans2.c:4318(call_trans2qfilepathinfo)
>  SMB_QFBI - create: Wed Sep 30 15:03:42 2009
>   access: Fri Oct  2 11:53:20 2009
>   write: Wed Sep 30 15:03:42 2009
>   change: Wed Sep 30 15:03:42 2009
>   mode: 10
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16576
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 0B 4F   6F CE 41 CA 01 00 A8 17   .......O o.A.....
>  [0010] 2C 46 43 CA 01 00 0B 4F   6F CE 41 CA 01 00 0B 4F   ,FC....O o.A....O
>  [0020] 6F CE 41 CA 01 10 00 00   00 00 00 00 00           o.A..... .....
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 100
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x64
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 40 of length 104 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16640
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=16384 (0x4000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  256 (0x100)
>  smb_bcc=17
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 73 00 72 00 76   00 73 00 76 00 63 00 00   .\.s.r.v .s.v.c..
>  [0010] 00                                                . 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 1001
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,1001) gid=(0,1001)
>[2009/10/02 12:00:04,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = srvsvc
>[2009/10/02 12:00:04,  4] smbd/nttrans.c:315(nt_open_pipe)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2009/10/02 12:00:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 488, fnum = 4584 (1 used)
>[2009/10/02 12:00:04,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \srvsvc
>[2009/10/02 12:00:04, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list)
>  init_pipe_handles: created handle list for pipe \srvsvc
>[2009/10/02 12:00:04, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
>  init_pipe_handles: pipe_handles ref count = 1 for pipe \srvsvc
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:04,  4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
>  Created internal pipe \srvsvc (pipes_open=0)
>[2009/10/02 12:00:04,  5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
>  do_ntcreate_pipe_open: open pipe = \srvsvc
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 136
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x88
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 41 of length 140 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=136
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=16704
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4584 (0x11E8)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    8 (0x8)
>  smb_vwv[ 8]=   72 (0x48)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   72 (0x48)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=73
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] EE 05 00 0B 03 10 00 00   00 48 00 00 00 01 00 00   ........ .H......
>  [0010] 00 B8 10 B8 10 00 00 00   00 01 00 00 00 00 00 01   ........ ........
>  [0020] 00 C8 4F 32 4B 70 16 D3   01 12 78 5A 47 BF 6E E1   ..O2Kp.. ..xZG.n.
>  [0030] 88 03 00 00 00 04 5D 88   8A EB 1C C9 11 9F E8 08   ......]. ........
>  [0040] 00 2B 10 48 60 02 00 00   00                       .+.H`... .
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBwriteX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:04,  6] smbd/pipes.c:271(reply_pipe_write_and_X)
>  reply_pipe_write_and_X: 11e8 name: srvsvc len: 72
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0b
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0048
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 11
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
>  api_pipe_bind_req: decode request. 1558
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_rb 
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 00000000
>      0008 num_contexts: 01
>      000c context_id  : 0000
>      000e num_transfer_syntaxes: 01
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00000f smb_io_rpc_iface 
>[2009/10/02 12:00:04,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000010 smb_io_uuid uuid
>              0010 data   : 4b324fc8
>              0014 data   : 1670
>              0016 data   : 01d3
>              0018 data   : 12 78 
>              001a data   : 5a 47 bf 6e e1 88 
>          0020 version: 00000003
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000024 smb_io_rpc_iface 
>[2009/10/02 12:00:04,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000024 smb_io_uuid uuid
>              0024 data   : 8a885d04
>              0028 data   : 1ceb
>              002a data   : 11c9
>              002c data   : 9f e8 
>              002e data   : 08 00 2b 10 48 60 
>          0034 version: 00000002
>[2009/10/02 12:00:04,  3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
>  api_pipe_bind_req: make response. 1628
>[2009/10/02 12:00:04,  3] rpc_server/srv_pipe.c:960(check_bind_req)
>  check_bind_req for \srvsvc
>  checking lsarpc
>  checking winreg
>  checking initshutdown
>  checking dssetup
>  checking wkssvc
>  checking svcctl
>  checking ntsvcs
>  checking netlogon
>  checking netdfs
>  checking srvsvc
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_ba 
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 000053f0
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000008 smb_io_rpc_addr_str 
>          0008 len: 000d
>          000a str: \PIPE\srvsvc.
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000017 smb_io_rpc_results 
>          0018 num_results: 01
>          001c result     : 0000
>          001e reason     : 0000
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000020 smb_io_rpc_iface 
>[2009/10/02 12:00:04,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000020 smb_io_uuid uuid
>              0020 data   : 8a885d04
>              0024 data   : 1ceb
>              0026 data   : 11c9
>              0028 data   : 9f e8 
>              002a data   : 08 00 2b 10 48 60 
>          0030 version: 00000002
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0c
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0044
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 56
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64a5e20
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64a5e20
>[2009/10/02 12:00:04,  3] smbd/pipes.c:325(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 42 of length 63 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=16768
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4584 (0x11E8)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]= 1024 (0x400)
>  smb_vwv[ 7]=65535 (0xFFFF)
>  smb_vwv[ 8]=65535 (0xFFFF)
>  smb_vwv[ 9]= 1024 (0x400)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBreadX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \srvsvc len: 1024
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
>  read_from_pipe: \srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64a82d0
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64a82d0
>[2009/10/02 12:00:04,  3] smbd/pipes.c:430(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 172
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0xac
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 43 of length 176 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=172
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16832
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   88 (0x58)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   88 (0x58)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4584 (0x11E8)
>  smb_bcc=105
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 58 00 00 00 01 00 00   ........ .X......
>  [0020] 00 40 00 00 00 00 00 10   00 00 00 02 00 09 00 00   .@...... ........
>  [0030] 00 00 00 00 00 09 00 00   00 5C 00 5C 00 54 00 45   ........ .\.\.T.E
>  [0040] 00 53 00 54 00 46 00 53   00 00 00 C9 11 05 00 00   .S.T.F.S ........
>  [0050] 00 00 00 00 00 05 00 00   00 52 00 4F 00 4F 00 54   ........ .R.O.O.T
>  [0060] 00 00 00 00 00 01 00 00   00                       ........ .
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:04,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=88 params=0 setup=2
>[2009/10/02 12:00:04,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/10/02 12:00:04,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/10/02 12:00:04,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/10/02 12:00:04,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "srvsvc" (pnum 11e8)
>[2009/10/02 12:00:04, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0x7f61c648e820 max_trans_reply: 1024
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 88
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 88
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 88
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 88, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 72
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0058
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 72, incoming data = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000040
>      0004 context_id: 0000
>      0006 opnum     : 0010
>[2009/10/02 12:00:04,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\srvsvc
>[2009/10/02 12:00:04,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \srvsvc op 0x10 - api_rpcTNP: rpc command: SRVSVC_NETSHAREGETINFO
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[16].fn == 0x7f61c5cf7354
>[2009/10/02 12:00:04,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       srvsvc_NetShareGetInfo: struct srvsvc_NetShareGetInfo
>          in: struct srvsvc_NetShareGetInfo
>              server_unc               : *
>                  server_unc               : '\\TESTFS'
>              share_name               : 'ROOT'
>              level                    : 0x00000001 (1)
>[2009/10/02 12:00:04,  5] rpc_server/srv_srvsvc_nt.c:1374(_srvsvc_NetShareGetInfo)
>  _srvsvc_NetShareGetInfo: 1374
>[2009/10/02 12:00:04,  5] rpc_server/srv_srvsvc_nt.c:1439(_srvsvc_NetShareGetInfo)
>  _srvsvc_NetShareGetInfo: 1439
>[2009/10/02 12:00:04,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       srvsvc_NetShareGetInfo: struct srvsvc_NetShareGetInfo
>          out: struct srvsvc_NetShareGetInfo
>              info                     : *
>                  info                     : union srvsvc_NetShareInfo(case 1)
>                  info1                    : *
>                      info1: struct srvsvc_NetShareInfo1
>                          name                     : *
>                              name                     : 'root'
>                          type                     : STYPE_DISKTREE (0x0)
>                          comment                  : *
>                              comment                  : 'Test Root'
>              result                   : WERR_OK
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \srvsvc successfully
>[2009/10/02 12:00:04,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 44
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 72
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64a9fe0
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64a9fe0
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \srvsvc len: 1024
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 80.
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0068
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000050
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c641a150
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c641a150
>[2009/10/02 12:00:04,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..104] (align 0)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=160
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16832
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  104 (0x68)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  104 (0x68)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=105
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 68 00 00 00 01 00 00   ........ .h......
>  [0010] 00 50 00 00 00 00 00 00   00 01 00 00 00 00 00 02   .P...... ........
>  [0020] 00 04 00 02 00 00 00 00   00 08 00 02 00 05 00 00   ........ ........
>  [0030] 00 00 00 00 00 05 00 00   00 72 00 6F 00 6F 00 74   ........ .r.o.o.t
>  [0040] 00 00 00 00 00 0A 00 00   00 00 00 00 00 0A 00 00   ........ ........
>  [0050] 00 54 00 65 00 73 00 74   00 20 00 52 00 6F 00 6F   .T.e.s.t . .R.o.o
>  [0060] 00 74 00 00 00 00 00 00   00                       .t...... .
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 44 of length 45 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=16896
>  smt_wct=3
>  smb_vwv[ 0]= 4584 (0x11E8)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:04,  3] smbd/reply.c:4456(reply_close)
>  close fd=-1 fnum=4584 (numopen=1)
>[2009/10/02 12:00:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Sun Feb  7 07:28:15 2106
>[2009/10/02 12:00:04, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe)
>  close_policy_by_pipe: deleted handle list for pipe \srvsvc
>[2009/10/02 12:00:04,  5] smbd/files.c:484(file_free)
>  freed files structure 4584 (0 used)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=16896
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 76
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4c
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 45 of length 80 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16960
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   64 (0x40)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 ED 03 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /export/netroot
>[2009/10/02 12:00:04,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:04,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1005 call=5 total_data=0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=61)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] smbd/trans2.c:4329(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=16960
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   24 (0x18)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   24 (0x18)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=29
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0010] 00 00 00 00 00 01 00 00   00 00 01 00 00           ........ .....
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 76
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4c
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 46 of length 80 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17024
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   32 (0x20)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EF 03 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1007
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:04,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1007 call=5 total_data=0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=61)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] smbd/trans2.c:4343(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_EA_INFORMATION
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 4, useable_space = 131010
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 4, paramsize = 2, datasize = 4
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=64
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17024
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    4 (0x4)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    4 (0x4)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=9
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 00 00   00                       ........ .
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 86
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x56
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 47 of length 90 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=86
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17088
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]= 4096 (0x1000)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=3
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00                                          ... 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = 
>[2009/10/02 12:00:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = 
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:04,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:04, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = .
>[2009/10/02 12:00:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 489, fnum = 4585 (1 used)
>[2009/10/02 12:00:04,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(.) returning 0644
>[2009/10/02 12:00:04, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=., dos_attrs=0x80 access_mask=0x100080 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0644 oplock_request=0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=61)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=., after mapping access_mask=0x100080
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64aa050
>[2009/10/02 12:00:04,  4] smbd/open.c:1913(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x100080, open_access_mask = 0x100080
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:04,  5] smbd/files.c:484(file_free)
>  freed files structure 4585 (0 used)
>[2009/10/02 12:00:04,  5] smbd/open.c:2391(open_directory)
>  open_directory: opening directory ., access_mask = 0x100080, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x80
>[2009/10/02 12:00:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 490, fnum = 4586 (1 used)
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64aa380
>[2009/10/02 12:00:04, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Wed Sep 30 15:03:43 2009 CEST cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num: 1
>[2009/10/02 12:00:04, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x0, access_mask = 0x100080, mid = 0x0, type= 0x0, gen_id = 9, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:04, 10] smbd/open.c:3201(create_file_unixpath)
>  create_file_unixpath: info=1
>[2009/10/02 12:00:04, 10] smbd/open.c:3496(create_file_default)
>  create_file: info=1
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=61)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04,  5] smbd/nttrans.c:650(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: fnum = 4586, open name = .
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 84
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x54
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 48 of length 88 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17152
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=16384 (0x4000)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=  192 (0xC0)
>  smb_vwv[20]=    9 (0x9)
>  smb_vwv[21]= 4586 (0x11EA)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00                                          ... 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBnttrans (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:2697(reply_nttrans)
>  num_setup=8, param_total=0, this_param=0, max_param=0, data_total=0, this_data=0, max_data=64, param_offset=84, data_offset=0
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:2769(reply_nttrans)
>  reply_nttrans: state->setup_count = 8
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] C0 00 09 00 EA 11 01 00                            ........ 
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:1824(call_nt_transact_ioctl)
>  call_nt_transact_ioctl: function[0x000900C0] FID[0x11EA] isFSctl[0x01] compfilter[0x00]
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:1851(call_nt_transact_ioctl)
>  FSCTL_CREATE_OR_GET_OBJECT_ID: called on FID[0x11EA]
>[2009/10/02 12:00:04,  9] smbd/nttrans.c:219(send_nt_replies)
>  nt_rep: params_sent_thistime = 0, data_sent_thistime = 64, useable_space = 130994
>[2009/10/02 12:00:04,  9] smbd/nttrans.c:221(send_nt_replies)
>  nt_rep: params_to_send = 0, data_to_send = 64, paramsize = 0, datasize = 64
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=138
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17152
>  smt_wct=18
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=16384 (0x4000)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=18944 (0x4A00)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_bcc=67
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 11 08 00 00 00   00 00 00 80 00 00 00 00   ........ ........
>  [0010] 00 00 00 32 91 53 F5 60   EB 32 9C 0E 1D EE A5 5E   ...2.S.` .2.....^
>  [0020] 88 A1 E9 11 08 00 00 00   00 00 00 80 00 00 00 00   ........ ........
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00 00 00                                          ... 
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 70
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x46
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 49 of length 74 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17216
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 F0 03                                    ..... 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:2599(call_trans2qfsinfo)
>  call_trans2qfsinfo: level = 1008
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 64, useable_space = 131012
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 0, data_to_send = 64, paramsize = 0, datasize = 64
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=120
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17216
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   64 (0x40)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   64 (0x40)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=65
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 32 91 53 F5 60 EB 32   9C 0E 1D EE A5 5E 88 A1   .2.S.`.2 .....^..
>  [0010] E9 61 42 6D 53 00 01 04   03 00 00 00 00 00 00 00   .aBmS... ........
>  [0020] 00 00 00 00 00 33 2E 34   2E 31 00 00 00 00 00 00   .....3.4 .1......
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00                                                . 
>[2009/10/02 12:00:04,  4] smbd/trans2.c:3128(call_trans2qfsinfo)
>  SMBtrans2 info_level = 1008
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 50 of length 45 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=17280
>  smt_wct=3
>  smb_vwv[ 0]= 4586 (0x11EA)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  3] smbd/reply.c:4446(reply_close)
>  close directory fnum=4586
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64a9f00
>[2009/10/02 12:00:04, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 1
>[2009/10/02 12:00:04, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x0, access_mask = 0x100080, mid = 0x0, type= 0x0, gen_id = 9, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:04,  5] smbd/files.c:484(file_free)
>  freed files structure 4586 (0 used)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=17280
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 76
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4c
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 51 of length 80 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17344
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EC 03 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:04,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=61)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] smbd/trans2.c:4308(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/10/02 12:00:04,  5] smbd/trans2.c:4318(call_trans2qfilepathinfo)
>  SMB_QFBI - create: Wed Sep 30 15:03:42 2009
>   access: Fri Oct  2 11:53:20 2009
>   write: Wed Sep 30 15:03:42 2009
>   change: Wed Sep 30 15:03:42 2009
>   mode: 10
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17344
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 0B 4F   6F CE 41 CA 01 00 A8 17   .......O o.A.....
>  [0010] 2C 46 43 CA 01 00 0B 4F   6F CE 41 CA 01 00 0B 4F   ,FC....O o.A....O
>  [0020] 6F CE 41 CA 01 10 00 00   00 00 00 00 00           o.A..... .....
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 86
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x56
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 52 of length 90 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=86
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17408
>  smt_wct=15
>  smb_vwv[ 0]=   18 (0x12)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   18 (0x12)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=21
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 06   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 2A 00 00 00                                    .*... 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "*"
>[2009/10/02 12:00:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [*]
>[2009/10/02 12:00:04,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = *, dirpath = , start = *
>[2009/10/02 12:00:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled * ?
>[2009/10/02 12:00:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component * (len 1) ?
>[2009/10/02 12:00:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled * ?
>[2009/10/02 12:00:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component * (len 1) ?
>[2009/10/02 12:00:04,  5] smbd/filename.c:564(unix_convert)
>  New file *
>[2009/10/02 12:00:04,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=./, mask = *
>[2009/10/02 12:00:04,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=./
>[2009/10/02 12:00:04,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2009/10/02 12:00:04,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = *, attr = 22
>[2009/10/02 12:00:04,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<./> dontdescend=<>
>[2009/10/02 12:00:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c647aaf0 now at offset 0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: ./.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=./.
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=61)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found ./. fname=.
>[2009/10/02 12:00:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/10/02 12:00:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c647aaf0 now at offset 2147483648
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: ./..
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:203(get_ea_dos_attribute)
>  debug_ea_dos_attribute: PATH=./..
>[2009/10/02 12:00:04,  1] smbd/dosmode.c:213(get_ea_dos_attribute)
>  get_ea_dos_attributes: Cannot get attribute from EA on file ./..: Error = Operation not supported
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:214(get_ea_dos_attribute)
>  debug_ea_dos_attribute: Disabling STORE DOS ATTRIBUTES, errno=95
>[2009/10/02 12:00:04,  0] smbd/dosmode.c:217(get_ea_dos_attribute)
>  debug_ea_dos_attribute: *** RETURN FALSE *** (errno=95)
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found ./.. fname=..
>[2009/10/02 12:00:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/10/02 12:00:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c647aaf0 now at offset 16
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: ./v-2.0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found ./v-2.0 fname=v-2.0
>[2009/10/02 12:00:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/10/02 12:00:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c647aaf0 now at offset 512
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: ./xxxxxxx
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning 
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning 
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  5] smbd/trans2.c:1445(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: found ./xxxxxxx fname=xxxxxxx
>[2009/10/02 12:00:04, 10] smbd/trans2.c:1597(get_lanman2_dir_entry)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2009/10/02 12:00:04,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c647aaf0 now at offset -1
>[2009/10/02 12:00:04,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/10/02 12:00:04,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 408, useable_space = 131010
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 10, data_to_send = 408, paramsize = 10, datasize = 408
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=476
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17408
>  smt_wct=10
>  smb_vwv[ 0]=   10 (0xA)
>  smb_vwv[ 1]=  408 (0x198)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=   10 (0xA)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  408 (0x198)
>  smb_vwv[ 7]=   68 (0x44)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=421
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 FD FF 04 00 01 00 00   00 2C 01 00 00 60 00 00   ........ .,...`..
>  [0010] 00 00 00 00 00 00 0B 4F   6F CE 41 CA 01 00 A8 17   .......O o.A.....
>  [0020] 2C 46 43 CA 01 00 0B 4F   6F CE 41 CA 01 00 0B 4F   ,FC....O o.A....O
>  [0030] 6F CE 41 CA 01 00 00 00   00 00 00 00 00 00 00 00   o.A..... ........
>  [0040] 00 00 00 00 00 10 00 00   00 02 00 00 00 00 00 00   ........ ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 00 00 2E 00 64 00 00   ........ .....d..
>  [0070] 00 00 00 00 00 00 76 79   14 C0 3D CA 01 00 35 77   ......vy ..=...5w
>  [0080] 97 0E 41 CA 01 00 76 79   14 C0 3D CA 01 00 76 79   ..A...vy ..=...vy
>  [0090] 14 C0 3D CA 01 00 00 00   00 00 00 00 00 00 00 00   ..=..... ........
>  [00A0] 00 00 00 00 00 10 00 00   00 04 00 00 00 00 00 00   ........ ........
>  [00B0] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [00C0] 00 00 00 00 00 00 00 00   00 00 00 2E 00 2E 00 00   ........ ........
>  [00D0] 00 68 00 00 00 00 00 00   00 00 C0 44 1D A3 41 CA   .h...... ...D..A.
>  [00E0] 01 00 82 84 13 CE 41 CA   01 00 C0 44 1D A3 41 CA   ......A. ...D..A.
>  [00F0] 01 00 C0 44 1D A3 41 CA   01 00 00 00 00 00 00 00   ...D..A. ........
>  [0100] 00 00 00 00 00 00 00 00   00 10 00 00 00 0A 00 00   ........ ........
>  [0110] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0120] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 76   ........ .......v
>  [0130] 00 2D 00 32 00 2E 00 30   00 6C 00 00 00 00 00 00   .-.2...0 .l......
>  [0140] 00 00 D4 E3 FB A2 41 CA   01 00 D4 E3 FB A2 41 CA   ......A. ......A.
>  [0150] 01 00 D4 E3 FB A2 41 CA   01 00 D4 E3 FB A2 41 CA   ......A. ......A.
>  [0160] 01 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0170] 00 80 00 00 00 0E 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0180] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0190] 00 00 00 00 00 00 00 78   00 78 00 78 00 78 00 78   .......x .x.x.x.x
>  [01A0] 00 78 00 78 00                                    .x.x. 
>[2009/10/02 12:00:04,  4] smbd/trans2.c:2189(call_trans2findfirst)
>  SMBtrans2 mask=* directory=./ dirtype=22 numentries=4
>[2009/10/02 12:00:04, 10] smbd/mangle_hash2.c:613(hash2_name_to_8_3)
>  hash2_name_to_8_3: * -> 0A877AA5 -> _2X68P~X (cache=1)
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 86
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x56
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 53 of length 90 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=86
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17472
>  smt_wct=15
>  smb_vwv[ 0]=   18 (0x12)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   18 (0x12)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=21
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EC 03 00 00 00   00 5C 00 2E 00 73 00 76   ........ .\...s.v
>  [0010] 00 6E 00 00 00                                    .n... 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ".svn"
>[2009/10/02 12:00:04, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [.SVN]
>[2009/10/02 12:00:04,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = .svn, dirpath = , start = .svn
>[2009/10/02 12:00:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled .svn ?
>[2009/10/02 12:00:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component .svn (len 4) ?
>[2009/10/02 12:00:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled .svn ?
>[2009/10/02 12:00:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component .svn (len 4) ?
>[2009/10/02 12:00:04, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled .svn ?
>[2009/10/02 12:00:04, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component .svn (len 4) ?
>[2009/10/02 12:00:04,  5] smbd/filename.c:564(unix_convert)
>  New file .svn
>[2009/10/02 12:00:04,  3] smbd/trans2.c:4046(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of .svn failed (No such file or directory)
>[2009/10/02 12:00:04,  3] smbd/error.c:153(reply_unix_error)
>  unix_error_packet: error string = No such file or directory
>[2009/10/02 12:00:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/trans2.c(4047) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x32
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17472
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 96
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x60
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 54 of length 100 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=96
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=4
>  smb_uid=101
>  smb_mid=17536
>  smt_wct=15
>  smb_vwv[ 0]=   28 (0x1C)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   28 (0x1C)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=   16 (0x10)
>  smb_bcc=31
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 04 00 5C 00 54   00 45 00 53 00 54 00 46   .....\.T .E.S.T.F
>  [0010] 00 53 00 5C 00 52 00 4F   00 4F 00 54 00 00 00     .S.\.R.O .O.T...
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c648a300
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-501
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-501
>  SID[  1]: S-1-1-0
>  SID[  2]: S-1-5-2
>  SID[  3]: S-1-5-32-546
>  SID[  4]: S-1-22-1-65534
>  SID[  5]: S-1-22-2-20002
>  SID[  6]: S-1-22-2-20003
>  SID[  7]: S-1-22-2-20005
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 65534
>  Primary group is 65534 and contains 3 supplementary groups
>  Group[  0]: 20002
>  Group[  1]: 20003
>  Group[  2]: 20005
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,65534) gid=(0,65534)
>[2009/10/02 12:00:04,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2009/10/02 12:00:04, 10] smbd/trans2.c:7387(call_trans2getdfsreferral)
>  call_trans2getdfsreferral
>[2009/10/02 12:00:04, 10] smbd/msdfs.c:107(parse_dfs_path)
>  parse_dfs_path: temp = |TESTFS\ROOT| after trimming \'s
>[2009/10/02 12:00:04, 10] smbd/msdfs.c:132(parse_dfs_path)
>  parse_dfs_path: hostname: TESTFS
>[2009/10/02 12:00:04, 10] smbd/msdfs.c:174(parse_dfs_path)
>  parse_dfs_path: servicename: ROOT
>[2009/10/02 12:00:04,  3] smbd/msdfs.c:828(get_referred_path)
>  get_referred_path: |ROOT| in dfs path \TESTFS\ROOT is not a dfs root.
>[2009/10/02 12:00:04,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/trans2.c(7409) cmd=50 (SMBtrans2) NT_STATUS_NOT_FOUND
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x32
>  smb_rcls=37
>  smb_reh=2
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=4
>  smb_uid=101
>  smb_mid=17536
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 100
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x64
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 55 of length 104 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17600
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=16384 (0x4000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  256 (0x100)
>  smb_bcc=17
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 73 00 72 00 76   00 73 00 76 00 63 00 00   .\.s.r.v .s.v.c..
>  [0010] 00                                                . 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 1001
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,1001) gid=(0,1001)
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = srvsvc
>[2009/10/02 12:00:04,  4] smbd/nttrans.c:315(nt_open_pipe)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2009/10/02 12:00:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 491, fnum = 4587 (1 used)
>[2009/10/02 12:00:04,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \srvsvc
>[2009/10/02 12:00:04, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list)
>  init_pipe_handles: created handle list for pipe \srvsvc
>[2009/10/02 12:00:04, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
>  init_pipe_handles: pipe_handles ref count = 1 for pipe \srvsvc
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:04,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:04,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:04, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:04, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:04,  4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
>  Created internal pipe \srvsvc (pipes_open=0)
>[2009/10/02 12:00:04,  5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
>  do_ntcreate_pipe_open: open pipe = \srvsvc
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 136
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x88
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 56 of length 140 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=136
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=17664
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4587 (0x11EB)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    8 (0x8)
>  smb_vwv[ 8]=   72 (0x48)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   72 (0x48)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=73
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] EE 05 00 0B 03 10 00 00   00 48 00 00 00 01 00 00   ........ .H......
>  [0010] 00 B8 10 B8 10 00 00 00   00 01 00 00 00 00 00 01   ........ ........
>  [0020] 00 C8 4F 32 4B 70 16 D3   01 12 78 5A 47 BF 6E E1   ..O2Kp.. ..xZG.n.
>  [0030] 88 03 00 00 00 04 5D 88   8A EB 1C C9 11 9F E8 08   ......]. ........
>  [0040] 00 2B 10 48 60 02 00 00   00                       .+.H`... .
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBwriteX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:04,  6] smbd/pipes.c:271(reply_pipe_write_and_X)
>  reply_pipe_write_and_X: 11eb name: srvsvc len: 72
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0b
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0048
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 11
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
>  api_pipe_bind_req: decode request. 1558
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_rb 
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 00000000
>      0008 num_contexts: 01
>      000c context_id  : 0000
>      000e num_transfer_syntaxes: 01
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00000f smb_io_rpc_iface 
>[2009/10/02 12:00:04,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000010 smb_io_uuid uuid
>              0010 data   : 4b324fc8
>              0014 data   : 1670
>              0016 data   : 01d3
>              0018 data   : 12 78 
>              001a data   : 5a 47 bf 6e e1 88 
>          0020 version: 00000003
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000024 smb_io_rpc_iface 
>[2009/10/02 12:00:04,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000024 smb_io_uuid uuid
>              0024 data   : 8a885d04
>              0028 data   : 1ceb
>              002a data   : 11c9
>              002c data   : 9f e8 
>              002e data   : 08 00 2b 10 48 60 
>          0034 version: 00000002
>[2009/10/02 12:00:04,  3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
>  api_pipe_bind_req: make response. 1628
>[2009/10/02 12:00:04,  3] rpc_server/srv_pipe.c:960(check_bind_req)
>  check_bind_req for \srvsvc
>  checking lsarpc
>  checking winreg
>  checking initshutdown
>  checking dssetup
>  checking wkssvc
>  checking svcctl
>  checking ntsvcs
>  checking netlogon
>  checking netdfs
>  checking srvsvc
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_ba 
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 000053f0
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000008 smb_io_rpc_addr_str 
>          0008 len: 000d
>          000a str: \PIPE\srvsvc.
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000017 smb_io_rpc_results 
>          0018 num_results: 01
>          001c result     : 0000
>          001e reason     : 0000
>[2009/10/02 12:00:04,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000020 smb_io_rpc_iface 
>[2009/10/02 12:00:04,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000020 smb_io_uuid uuid
>              0020 data   : 8a885d04
>              0024 data   : 1ceb
>              0026 data   : 11c9
>              0028 data   : 9f e8 
>              002a data   : 08 00 2b 10 48 60 
>          0030 version: 00000002
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0c
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0044
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 56
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64a9f00
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64a9f00
>[2009/10/02 12:00:04,  3] smbd/pipes.c:325(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 57 of length 63 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=17728
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4587 (0x11EB)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]= 1024 (0x400)
>  smb_vwv[ 7]=65535 (0xFFFF)
>  smb_vwv[ 8]=65535 (0xFFFF)
>  smb_vwv[ 9]= 1024 (0x400)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBreadX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \srvsvc len: 1024
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
>  read_from_pipe: \srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64ac3b0
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64ac3b0
>[2009/10/02 12:00:04,  3] smbd/pipes.c:430(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 172
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0xac
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 58 of length 176 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=172
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17792
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   88 (0x58)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   88 (0x58)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4587 (0x11EB)
>  smb_bcc=105
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 58 00 00 00 01 00 00   ........ .X......
>  [0020] 00 40 00 00 00 00 00 10   00 00 00 02 00 09 00 00   .@...... ........
>  [0030] 00 00 00 00 00 09 00 00   00 5C 00 5C 00 54 00 45   ........ .\.\.T.E
>  [0040] 00 53 00 54 00 46 00 53   00 00 00 C9 11 05 00 00   .S.T.F.S ........
>  [0050] 00 00 00 00 00 05 00 00   00 52 00 4F 00 4F 00 54   ........ .R.O.O.T
>  [0060] 00 00 00 00 00 01 00 00   00                       ........ .
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:04,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=88 params=0 setup=2
>[2009/10/02 12:00:04,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/10/02 12:00:04,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/10/02 12:00:04,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/10/02 12:00:04,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "srvsvc" (pnum 11eb)
>[2009/10/02 12:00:04, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0x7f61c6490ae0 max_trans_reply: 1024
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 88
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 88
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 88
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 88, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 72
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0058
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 72, incoming data = 72
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000040
>      0004 context_id: 0000
>      0006 opnum     : 0010
>[2009/10/02 12:00:04,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\srvsvc
>[2009/10/02 12:00:04,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \srvsvc op 0x10 - api_rpcTNP: rpc command: SRVSVC_NETSHAREGETINFO
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[16].fn == 0x7f61c5cf7354
>[2009/10/02 12:00:04,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       srvsvc_NetShareGetInfo: struct srvsvc_NetShareGetInfo
>          in: struct srvsvc_NetShareGetInfo
>              server_unc               : *
>                  server_unc               : '\\TESTFS'
>              share_name               : 'ROOT'
>              level                    : 0x00000001 (1)
>[2009/10/02 12:00:04,  5] rpc_server/srv_srvsvc_nt.c:1374(_srvsvc_NetShareGetInfo)
>  _srvsvc_NetShareGetInfo: 1374
>[2009/10/02 12:00:04,  5] rpc_server/srv_srvsvc_nt.c:1439(_srvsvc_NetShareGetInfo)
>  _srvsvc_NetShareGetInfo: 1439
>[2009/10/02 12:00:04,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       srvsvc_NetShareGetInfo: struct srvsvc_NetShareGetInfo
>          out: struct srvsvc_NetShareGetInfo
>              info                     : *
>                  info                     : union srvsvc_NetShareInfo(case 1)
>                  info1                    : *
>                      info1: struct srvsvc_NetShareInfo1
>                          name                     : *
>                              name                     : 'root'
>                          type                     : STYPE_DISKTREE (0x0)
>                          comment                  : *
>                              comment                  : 'Test Root'
>              result                   : WERR_OK
>[2009/10/02 12:00:04,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \srvsvc successfully
>[2009/10/02 12:00:04,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 44
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 72
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64b55c0
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64b55c0
>[2009/10/02 12:00:04,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \srvsvc len: 1024
>[2009/10/02 12:00:04, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 80.
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0068
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:04,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000050
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c6477ba0
>[2009/10/02 12:00:04, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c6477ba0
>[2009/10/02 12:00:04,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..104] (align 0)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=160
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17792
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  104 (0x68)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  104 (0x68)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=105
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 68 00 00 00 01 00 00   ........ .h......
>  [0010] 00 50 00 00 00 00 00 00   00 01 00 00 00 00 00 02   .P...... ........
>  [0020] 00 04 00 02 00 00 00 00   00 08 00 02 00 05 00 00   ........ ........
>  [0030] 00 00 00 00 00 05 00 00   00 72 00 6F 00 6F 00 74   ........ .r.o.o.t
>  [0040] 00 00 00 00 00 0A 00 00   00 00 00 00 00 0A 00 00   ........ ........
>  [0050] 00 54 00 65 00 73 00 74   00 20 00 52 00 6F 00 6F   .T.e.s.t . .R.o.o
>  [0060] 00 74 00 00 00 00 00 00   00                       .t...... .
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 59 of length 45 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=17856
>  smt_wct=3
>  smb_vwv[ 0]= 4587 (0x11EB)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:04,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:04,  3] smbd/reply.c:4456(reply_close)
>  close fd=-1 fnum=4587 (numopen=1)
>[2009/10/02 12:00:04,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Sun Feb  7 07:28:15 2106
>[2009/10/02 12:00:04, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe)
>  close_policy_by_pipe: deleted handle list for pipe \srvsvc
>[2009/10/02 12:00:04,  5] smbd/files.c:484(file_free)
>  freed files structure 4587 (0 used)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=17856
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 76
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4c
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 60 of length 80 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17920
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   64 (0x40)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 ED 03 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /export/netroot
>[2009/10/02 12:00:04,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:04,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1005 call=5 total_data=0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] smbd/trans2.c:4329(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17920
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   24 (0x18)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   24 (0x18)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=29
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0010] 00 00 00 00 00 01 00 00   00 00 01 00 00           ........ .....
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 76
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4c
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 61 of length 80 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17984
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   32 (0x20)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EF 03 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1007
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:04,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:04, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:04,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1007 call=5 total_data=0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] smbd/trans2.c:4343(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_EA_INFORMATION
>[2009/10/02 12:00:04,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 4, useable_space = 131010
>[2009/10/02 12:00:04,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 4, paramsize = 2, datasize = 4
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=64
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=17984
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    4 (0x4)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    4 (0x4)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=9
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 00 00   00                       ........ .
>[2009/10/02 12:00:04, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 86
>[2009/10/02 12:00:04,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x56
>[2009/10/02 12:00:04,  3] smbd/process.c:1439(process_smb)
>  Transaction 62 of length 90 (0 toread)
>[2009/10/02 12:00:04,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:04,  5] lib/util.c:642(show_msg)
>  size=86
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18048
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]= 4096 (0x1000)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=3
>[2009/10/02 12:00:04, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00                                          ... 
>[2009/10/02 12:00:04,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:04,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:04,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:04,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:04,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:04, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = 
>[2009/10/02 12:00:04, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = 
>[2009/10/02 12:00:04,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:04,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:04, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = .
>[2009/10/02 12:00:04,  5] smbd/files.c:103(file_new)
>  allocated file structure 492, fnum = 4588 (1 used)
>[2009/10/02 12:00:04,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(.) returning 0644
>[2009/10/02 12:00:04, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=., dos_attrs=0x80 access_mask=0x100080 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0644 oplock_request=0
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:04,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:04, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=., after mapping access_mask=0x100080
>[2009/10/02 12:00:04, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64b5630
>[2009/10/02 12:00:05,  4] smbd/open.c:1913(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x100080, open_access_mask = 0x100080
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:05,  5] smbd/files.c:484(file_free)
>  freed files structure 4588 (0 used)
>[2009/10/02 12:00:05,  5] smbd/open.c:2391(open_directory)
>  open_directory: opening directory ., access_mask = 0x100080, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x80
>[2009/10/02 12:00:05,  5] smbd/files.c:103(file_new)
>  allocated file structure 493, fnum = 4589 (1 used)
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64b5960
>[2009/10/02 12:00:05, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Wed Sep 30 15:03:43 2009 CEST cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num: 1
>[2009/10/02 12:00:05, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x0, access_mask = 0x100080, mid = 0x0, type= 0x0, gen_id = 12, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:05, 10] smbd/open.c:3201(create_file_unixpath)
>  create_file_unixpath: info=1
>[2009/10/02 12:00:05, 10] smbd/open.c:3496(create_file_default)
>  create_file: info=1
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:05,  5] smbd/nttrans.c:650(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: fnum = 4589, open name = .
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 84
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x54
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 63 of length 88 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18112
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=16384 (0x4000)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=  192 (0xC0)
>  smb_vwv[20]=    9 (0x9)
>  smb_vwv[21]= 4589 (0x11ED)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00                                          ... 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBnttrans (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:2697(reply_nttrans)
>  num_setup=8, param_total=0, this_param=0, max_param=0, data_total=0, this_data=0, max_data=64, param_offset=84, data_offset=0
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:2769(reply_nttrans)
>  reply_nttrans: state->setup_count = 8
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] C0 00 09 00 ED 11 01 00                            ........ 
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:1824(call_nt_transact_ioctl)
>  call_nt_transact_ioctl: function[0x000900C0] FID[0x11ED] isFSctl[0x01] compfilter[0x00]
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:1851(call_nt_transact_ioctl)
>  FSCTL_CREATE_OR_GET_OBJECT_ID: called on FID[0x11ED]
>[2009/10/02 12:00:05,  9] smbd/nttrans.c:219(send_nt_replies)
>  nt_rep: params_sent_thistime = 0, data_sent_thistime = 64, useable_space = 130994
>[2009/10/02 12:00:05,  9] smbd/nttrans.c:221(send_nt_replies)
>  nt_rep: params_to_send = 0, data_to_send = 64, paramsize = 0, datasize = 64
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=138
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18112
>  smt_wct=18
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=16384 (0x4000)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=18944 (0x4A00)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_bcc=67
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 11 08 00 00 00   00 00 00 80 00 00 00 00   ........ ........
>  [0010] 00 00 00 32 91 53 F5 60   EB 32 9C 0E 1D EE A5 5E   ...2.S.` .2.....^
>  [0020] 88 A1 E9 11 08 00 00 00   00 00 00 80 00 00 00 00   ........ ........
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00 00 00                                          ... 
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 70
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x46
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 64 of length 74 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18176
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 F0 03                                    ..... 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:2599(call_trans2qfsinfo)
>  call_trans2qfsinfo: level = 1008
>[2009/10/02 12:00:05,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 64, useable_space = 131012
>[2009/10/02 12:00:05,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 0, data_to_send = 64, paramsize = 0, datasize = 64
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=120
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18176
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   64 (0x40)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   64 (0x40)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=65
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 32 91 53 F5 60 EB 32   9C 0E 1D EE A5 5E 88 A1   .2.S.`.2 .....^..
>  [0010] E9 61 42 6D 53 00 01 04   03 00 00 00 00 00 00 00   .aBmS... ........
>  [0020] 00 00 00 00 00 33 2E 34   2E 31 00 00 00 00 00 00   .....3.4 .1......
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00                                                . 
>[2009/10/02 12:00:05,  4] smbd/trans2.c:3128(call_trans2qfsinfo)
>  SMBtrans2 info_level = 1008
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 65 of length 45 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=18240
>  smt_wct=3
>  smb_vwv[ 0]= 4589 (0x11ED)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  3] smbd/reply.c:4446(reply_close)
>  close directory fnum=4589
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64b54e0
>[2009/10/02 12:00:05, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 1
>[2009/10/02 12:00:05, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x0, access_mask = 0x100080, mid = 0x0, type= 0x0, gen_id = 12, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:05,  5] smbd/files.c:484(file_free)
>  freed files structure 4589 (0 used)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=18240
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 100
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x64
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 66 of length 104 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18304
>  smt_wct=15
>  smb_vwv[ 0]=   32 (0x20)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   32 (0x20)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=35
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EC 03 00 00 00   00 5C 00 64 00 65 00 73   ........ .\.d.e.s
>  [0010] 00 6B 00 74 00 6F 00 70   00 2E 00 69 00 6E 00 69   .k.t.o.p ...i.n.i
>  [0020] 00 00 00                                          ... 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/10/02 12:00:05,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "desktop.ini"
>[2009/10/02 12:00:05, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [DESKTOP.INI]
>[2009/10/02 12:00:05,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = desktop.ini, dirpath = , start = desktop.ini
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled desktop.ini ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled desktop.ini ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled desktop.ini ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component desktop.ini (len 11) ?
>[2009/10/02 12:00:05,  5] smbd/filename.c:564(unix_convert)
>  New file desktop.ini
>[2009/10/02 12:00:05,  3] smbd/trans2.c:4046(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of desktop.ini failed (No such file or directory)
>[2009/10/02 12:00:05,  3] smbd/error.c:153(reply_unix_error)
>  unix_error_packet: error string = No such file or directory
>[2009/10/02 12:00:05,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/trans2.c(4047) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x32
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18304
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 76
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4c
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 67 of length 80 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18368
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EC 03 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/10/02 12:00:05,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:05,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:05, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:05, 10] smbd/trans2.c:4308(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/10/02 12:00:05,  5] smbd/trans2.c:4318(call_trans2qfilepathinfo)
>  SMB_QFBI - create: Wed Sep 30 15:03:42 2009
>   access: Fri Oct  2 11:53:20 2009
>   write: Wed Sep 30 15:03:42 2009
>   change: Wed Sep 30 15:03:42 2009
>   mode: 10
>[2009/10/02 12:00:05,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/10/02 12:00:05,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18368
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 0B 4F   6F CE 41 CA 01 00 A8 17   .......O o.A.....
>  [0010] 2C 46 43 CA 01 00 0B 4F   6F CE 41 CA 01 00 0B 4F   ,FC....O o.A....O
>  [0020] 6F CE 41 CA 01 10 00 00   00 00 00 00 00           o.A..... .....
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 86
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x56
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 68 of length 90 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=86
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18432
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=  256 (0x100)
>  smb_vwv[ 8]= 4096 (0x1000)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=  256 (0x100)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=3
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00                                          ... 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100001 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 root_dir_fid = 0x0, fname = 
>[2009/10/02 12:00:05, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x100001 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = 
>[2009/10/02 12:00:05,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:05,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:05, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x100001 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = .
>[2009/10/02 12:00:05,  5] smbd/open.c:2391(open_directory)
>  open_directory: opening directory ., access_mask = 0x100001, share_access = 0x7 create_options = 0x1, create_disposition = 0x1, file_attributes = 0x0
>[2009/10/02 12:00:05,  5] smbd/files.c:103(file_new)
>  allocated file structure 494, fnum = 4590 (1 used)
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64b55d0
>[2009/10/02 12:00:05, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Wed Sep 30 15:03:43 2009 CEST cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num: 1
>[2009/10/02 12:00:05, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:05, 10] smbd/open.c:3201(create_file_unixpath)
>  create_file_unixpath: info=1
>[2009/10/02 12:00:05, 10] smbd/open.c:3496(create_file_default)
>  create_file: info=1
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:05,  5] smbd/nttrans.c:650(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: fnum = 4590, open name = .
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 84
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x54
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 69 of length 88 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18496
>  smt_wct=23
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 8192 (0x2000)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    4 (0x4)
>  smb_vwv[19]=   23 (0x17)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]= 4590 (0x11EE)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00                                          ... 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBnttrans (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:2697(reply_nttrans)
>  num_setup=8, param_total=0, this_param=0, max_param=32, data_total=0, this_data=0, max_data=0, param_offset=84, data_offset=0
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:2769(reply_nttrans)
>  reply_nttrans: state->setup_count = 8
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 17 00 00 00 EE 11 01 00                            ........ 
>[2009/10/02 12:00:05,  3] smbd/nttrans.c:1488(call_nt_transact_notify_change)
>  call_nt_transact_notify_change
>[2009/10/02 12:00:05,  3] smbd/nttrans.c:1505(call_nt_transact_notify_change)
>  call_nt_transact_notify_change: notify change called on ., filter = FILE_NAME|DIR_NAME|ATTRIBUTES|LAST_WRITE, recursive = 1
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 6E6F7469667920617272
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c648f3c0
>[2009/10/02 12:00:05, 10] smbd/notify_internal.c:177(notify_load)
>  notify_load:
>[2009/10/02 12:00:05,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       notify->array: struct notify_array
>          num_depths               : 0x00000000 (0)
>          depth: ARRAY(0)
>[2009/10/02 12:00:05, 10] smbd/notify_inotify.c:412(inotify_watch)
>  inotify_add_watch for /export/netroot mask 210003c6 returned wd 1
>[2009/10/02 12:00:05, 10] smbd/notify_internal.c:231(notify_save)
>  notify_save:
>[2009/10/02 12:00:05,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       notify->array: struct notify_array
>          num_depths               : 0x00000003 (3)
>          depth: ARRAY(3)
>              depth: struct notify_depth
>                  max_mask                 : 0x00000000 (0)
>                  max_mask_subdir          : 0x00000000 (0)
>                  num_entries              : 0x00000000 (0)
>                  entries: ARRAY(0)
>              depth: struct notify_depth
>                  max_mask                 : 0x00000000 (0)
>                  max_mask_subdir          : 0x00000000 (0)
>                  num_entries              : 0x00000000 (0)
>                  entries: ARRAY(0)
>              depth: struct notify_depth
>                  max_mask                 : 0x00000000 (0)
>                  max_mask_subdir          : 0x00000017 (23)
>                  num_entries              : 0x00000001 (1)
>                  entries: ARRAY(1)
>                      entries: struct notify_entry
>                          server: struct server_id
>                              id                       : 0x000032c1 (12993)
>                          filter                   : 0x00000000 (0)
>                          subdir_filter            : 0x00000017 (23)
>                          dir_fd                   : 0xffffffff (4294967295)
>                          dir_id: struct file_id
>                              devid                    : 0x0000000000000811 (2065)
>                              inode                    : 0x0000000000000080 (128)
>                              extid                    : 0x0000000000000000 (0)
>                          path                     : '/export/netroot'
>                          path_len                 : 0x0000000f (15)
>                          private_data             : 0x7f61c648d410
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 6E6F7469667920617272
>[2009/10/02 12:00:05, 10] smbd/notify.c:241(change_notify_add_request)
>  change_notify_add_request: Adding request for .: max_param = 32
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 88
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x58
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 70 of length 92 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=88
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18561
>  smt_wct=15
>  smb_vwv[ 0]=   20 (0x14)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   20 (0x14)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=23
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EC 03 00 00 00   00 5C 00 76 00 2D 00 32   ........ .\.v.-.2
>  [0010] 00 2E 00 30 00 00 00                              ...0... 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/10/02 12:00:05,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "v-2.0"
>[2009/10/02 12:00:05, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [V-2.0]
>[2009/10/02 12:00:05,  5] smbd/statcache.c:138(stat_cache_add)
>  stat_cache_add: Added entry (7f61c64b7530:size 5) V-2.0 -> v-2.0
>[2009/10/02 12:00:05,  5] smbd/filename.c:297(unix_convert)
>  conversion finished v-2.0 -> v-2.0
>[2009/10/02 12:00:05, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo v-2.0 (fnum = -1) level=1004 call=5 total_data=0
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: v-2.0
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:05, 10] smbd/trans2.c:4308(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/10/02 12:00:05,  5] smbd/trans2.c:4318(call_trans2qfilepathinfo)
>  SMB_QFBI - create: Wed Sep 30 09:53:36 2009
>   access: Wed Sep 30 15:01:08 2009
>   write: Wed Sep 30 09:53:36 2009
>   change: Wed Sep 30 09:53:36 2009
>   mode: 10
>[2009/10/02 12:00:05,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/10/02 12:00:05,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18561
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 C0 44   1D A3 41 CA 01 00 82 84   .......D ..A.....
>  [0010] 13 CE 41 CA 01 00 C0 44   1D A3 41 CA 01 00 C0 44   ..A....D ..A....D
>  [0020] 1D A3 41 CA 01 10 00 00   00 00 00 00 00           ..A..... .....
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 88
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x58
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 71 of length 92 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=88
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18625
>  smt_wct=15
>  smb_vwv[ 0]=   20 (0x14)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   20 (0x14)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=23
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EC 03 00 00 00   00 5C 00 76 00 2D 00 32   ........ .\.v.-.2
>  [0010] 00 2E 00 30 00 00 00                              ...0... 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/10/02 12:00:05,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "v-2.0"
>[2009/10/02 12:00:05, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [V-2.0] -> [v-2.0]
>[2009/10/02 12:00:05, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo v-2.0 (fnum = -1) level=1004 call=5 total_data=0
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: v-2.0
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:05, 10] smbd/trans2.c:4308(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/10/02 12:00:05,  5] smbd/trans2.c:4318(call_trans2qfilepathinfo)
>  SMB_QFBI - create: Wed Sep 30 09:53:36 2009
>   access: Wed Sep 30 15:01:08 2009
>   write: Wed Sep 30 09:53:36 2009
>   change: Wed Sep 30 09:53:36 2009
>   mode: 10
>[2009/10/02 12:00:05,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/10/02 12:00:05,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18625
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 C0 44   1D A3 41 CA 01 00 82 84   .......D ..A.....
>  [0010] 13 CE 41 CA 01 00 C0 44   1D A3 41 CA 01 00 C0 44   ..A....D ..A....D
>  [0020] 1D A3 41 CA 01 10 00 00   00 00 00 00 00           ..A..... .....
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 98
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x62
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 72 of length 102 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=98
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18689
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 3072 (0xC00)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=15
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 76 00 2D 00 32   00 2E 00 30 00 00 00     .\.v.-.2 ...0...
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x20080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = v-2.0
>[2009/10/02 12:00:05, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = v-2.0
>[2009/10/02 12:00:05,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "v-2.0"
>[2009/10/02 12:00:05, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [V-2.0] -> [v-2.0]
>[2009/10/02 12:00:05, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x20080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = v-2.0
>[2009/10/02 12:00:05,  5] smbd/files.c:103(file_new)
>  allocated file structure 495, fnum = 4591 (2 used)
>[2009/10/02 12:00:05,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(v-2.0) returning 0644
>[2009/10/02 12:00:05, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=v-2.0, dos_attrs=0x0 access_mask=0x20080 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0644 oplock_request=0
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: v-2.0
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:05, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=v-2.0, after mapping access_mask=0x20080
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008400
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64b7790
>[2009/10/02 12:00:05, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/10/02 12:00:05, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/10/02 12:00:05,  4] smbd/open.c:1913(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x20080, open_access_mask = 0x20080
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008400
>[2009/10/02 12:00:05,  5] smbd/files.c:484(file_free)
>  freed files structure 4591 (1 used)
>[2009/10/02 12:00:05,  5] smbd/open.c:2391(open_directory)
>  open_directory: opening directory v-2.0, access_mask = 0x20080, share_access = 0x7 create_options = 0x200000, create_disposition = 0x1, file_attributes = 0x0
>[2009/10/02 12:00:05,  5] smbd/files.c:103(file_new)
>  allocated file structure 496, fnum = 4592 (2 used)
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008400
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64b7ac0
>[2009/10/02 12:00:05, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Wed Sep 30 09:53:37 2009 CEST cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num: 1
>[2009/10/02 12:00:05, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x200000, access_mask = 0x20080, mid = 0x0, type= 0x0, gen_id = 15, uid = 1001, flags = 0, file_id 811:84:0
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008400
>[2009/10/02 12:00:05, 10] smbd/open.c:3201(create_file_unixpath)
>  create_file_unixpath: info=1
>[2009/10/02 12:00:05, 10] smbd/open.c:3496(create_file_default)
>  create_file: info=1
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: v-2.0
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:05,  5] smbd/nttrans.c:650(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: fnum = 4592, open name = v-2.0
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 72
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x48
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 73 of length 76 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18753
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    8 (0x8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 F0 11 EE 03                              ....... 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:3876(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2009/10/02 12:00:05, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 09:53:37 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 1
>[2009/10/02 12:00:05, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x200000, access_mask = 0x20080, mid = 0x0, type= 0x0, gen_id = 15, uid = 1001, flags = 0, file_id 811:84:0
>[2009/10/02 12:00:05,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo v-2.0 (fnum = 4592) level=1006 call=7 total_data=0
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: v-2.0
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:05, 10] smbd/trans2.c:4434(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION
>[2009/10/02 12:00:05,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010
>[2009/10/02 12:00:05,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=68
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18753
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    8 (0x8)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=13
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 84 00 00   00 11 08 00 00           ........ .....
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 84
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x54
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 74 of length 88 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18817
>  smt_wct=19
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 2048 (0x800)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 2048 (0x800)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=19456 (0x4C00)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    6 (0x6)
>  smb_bcc=11
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 F0 11 00 00 01   00 00 00                 ........ ...
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBnttrans (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:2697(reply_nttrans)
>  num_setup=0, param_total=8, this_param=8, max_param=4, data_total=0, this_data=0, max_data=0, param_offset=76, data_offset=0
>[2009/10/02 12:00:05,  3] smbd/nttrans.c:1663(call_nt_transact_query_security_desc)
>  call_nt_transact_query_security_desc: file = v-2.0, info_wanted = 0x1
>[2009/10/02 12:00:05, 10] smbd/posix_acls.c:3315(posix_fget_nt_acl)
>  posix_fget_nt_acl: called for file v-2.0
>[2009/10/02 12:00:05, 10] smbd/posix_acls.c:3347(posix_get_nt_acl)
>  posix_get_nt_acl: called for file v-2.0
>[2009/10/02 12:00:05, 10] smbd/posix_acls.c:688(load_inherited_info)
>  load_inherited_info: ret = 18446744073709551615 for file v-2.0
>[2009/10/02 12:00:05,  3] smbd/nttrans.c:1697(call_nt_transact_query_security_desc)
>  call_nt_transact_query_security_desc: sd_size = 36.
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:1700(call_nt_transact_query_security_desc)
>  call_nt_transact_query_security_desc for file v-2.0
>[2009/10/02 12:00:05,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       psd: struct security_descriptor
>          revision                 : SECURITY_DESCRIPTOR_REVISION_1 (1)
>          type                     : 0x9000 (36864)
>                 0: SEC_DESC_OWNER_DEFAULTED 
>                 0: SEC_DESC_GROUP_DEFAULTED 
>                 0: SEC_DESC_DACL_PRESENT    
>                 0: SEC_DESC_DACL_DEFAULTED  
>                 0: SEC_DESC_SACL_PRESENT    
>                 0: SEC_DESC_SACL_DEFAULTED  
>                 0: SEC_DESC_DACL_TRUSTED    
>                 0: SEC_DESC_SERVER_SECURITY 
>                 0: SEC_DESC_DACL_AUTO_INHERIT_REQ
>                 0: SEC_DESC_SACL_AUTO_INHERIT_REQ
>                 0: SEC_DESC_DACL_AUTO_INHERITED
>                 0: SEC_DESC_SACL_AUTO_INHERITED
>                 1: SEC_DESC_DACL_PROTECTED  
>                 0: SEC_DESC_SACL_PROTECTED  
>                 0: SEC_DESC_RM_CONTROL_VALID
>                 1: SEC_DESC_SELF_RELATIVE   
>          owner_sid                : *
>              owner_sid                : S-1-22-1-0
>          group_sid                : NULL
>          sacl                     : NULL
>          dacl                     : NULL
>[2009/10/02 12:00:05,  9] smbd/nttrans.c:219(send_nt_replies)
>  nt_rep: params_sent_thistime = 4, data_sent_thistime = 0, useable_space = 130994
>[2009/10/02 12:00:05,  9] smbd/nttrans.c:221(send_nt_replies)
>  nt_rep: params_to_send = 4, data_to_send = 0, paramsize = 4, datasize = 0
>[2009/10/02 12:00:05,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(226) cmd=160 (SMBnttrans) NT_STATUS_BUFFER_TOO_SMALL
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=78
>  smb_com=0xa0
>  smb_rcls=35
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18817
>  smt_wct=18
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 1024 (0x400)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=18944 (0x4A00)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_bcc=7
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 24 00 00 00                              ...$... 
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 84
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x54
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 75 of length 88 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18881
>  smt_wct=19
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 2048 (0x800)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]= 9216 (0x2400)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 2048 (0x800)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=19456 (0x4C00)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    6 (0x6)
>  smb_bcc=11
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 F0 11 00 00 01   00 00 00                 ........ ...
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBnttrans (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:2697(reply_nttrans)
>  num_setup=0, param_total=8, this_param=8, max_param=4, data_total=0, this_data=0, max_data=36, param_offset=76, data_offset=0
>[2009/10/02 12:00:05,  3] smbd/nttrans.c:1663(call_nt_transact_query_security_desc)
>  call_nt_transact_query_security_desc: file = v-2.0, info_wanted = 0x1
>[2009/10/02 12:00:05, 10] smbd/posix_acls.c:3315(posix_fget_nt_acl)
>  posix_fget_nt_acl: called for file v-2.0
>[2009/10/02 12:00:05, 10] smbd/posix_acls.c:3347(posix_get_nt_acl)
>  posix_get_nt_acl: called for file v-2.0
>[2009/10/02 12:00:05, 10] smbd/posix_acls.c:688(load_inherited_info)
>  load_inherited_info: ret = 18446744073709551615 for file v-2.0
>[2009/10/02 12:00:05,  3] smbd/nttrans.c:1697(call_nt_transact_query_security_desc)
>  call_nt_transact_query_security_desc: sd_size = 36.
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:1700(call_nt_transact_query_security_desc)
>  call_nt_transact_query_security_desc for file v-2.0
>[2009/10/02 12:00:05,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       psd: struct security_descriptor
>          revision                 : SECURITY_DESCRIPTOR_REVISION_1 (1)
>          type                     : 0x9000 (36864)
>                 0: SEC_DESC_OWNER_DEFAULTED 
>                 0: SEC_DESC_GROUP_DEFAULTED 
>                 0: SEC_DESC_DACL_PRESENT    
>                 0: SEC_DESC_DACL_DEFAULTED  
>                 0: SEC_DESC_SACL_PRESENT    
>                 0: SEC_DESC_SACL_DEFAULTED  
>                 0: SEC_DESC_DACL_TRUSTED    
>                 0: SEC_DESC_SERVER_SECURITY 
>                 0: SEC_DESC_DACL_AUTO_INHERIT_REQ
>                 0: SEC_DESC_SACL_AUTO_INHERIT_REQ
>                 0: SEC_DESC_DACL_AUTO_INHERITED
>                 0: SEC_DESC_SACL_AUTO_INHERITED
>                 1: SEC_DESC_DACL_PROTECTED  
>                 0: SEC_DESC_SACL_PROTECTED  
>                 0: SEC_DESC_RM_CONTROL_VALID
>                 1: SEC_DESC_SELF_RELATIVE   
>          owner_sid                : *
>              owner_sid                : S-1-22-1-0
>          group_sid                : NULL
>          sacl                     : NULL
>          dacl                     : NULL
>[2009/10/02 12:00:05,  9] smbd/nttrans.c:219(send_nt_replies)
>  nt_rep: params_sent_thistime = 4, data_sent_thistime = 36, useable_space = 130994
>[2009/10/02 12:00:05,  9] smbd/nttrans.c:221(send_nt_replies)
>  nt_rep: params_to_send = 4, data_to_send = 36, paramsize = 4, datasize = 36
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=114
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18881
>  smt_wct=18
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 1024 (0x400)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 9216 (0x2400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=18944 (0x4A00)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]= 9216 (0x2400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=19968 (0x4E00)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_bcc=43
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 24 00 00 00 01   00 00 90 14 00 00 00 00   ...$.... ........
>  [0010] 00 00 00 00 00 00 00 00   00 00 00 01 02 00 00 00   ........ ........
>  [0020] 00 00 16 01 00 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 76 of length 45 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=18945
>  smt_wct=3
>  smb_vwv[ 0]= 4592 (0x11F0)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  3] smbd/reply.c:4446(reply_close)
>  close directory fnum=4592
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008400
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64b7550
>[2009/10/02 12:00:05, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 09:53:37 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 1
>[2009/10/02 12:00:05, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x200000, access_mask = 0x20080, mid = 0x0, type= 0x0, gen_id = 15, uid = 1001, flags = 0, file_id 811:84:0
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008400
>[2009/10/02 12:00:05,  5] smbd/files.c:484(file_free)
>  freed files structure 4592 (1 used)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=18945
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 100
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x64
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 77 of length 104 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19009
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=17
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 6C 00 73 00 61   00 72 00 70 00 63 00 00   .\.l.s.a .r.p.c..
>  [0010] 00                                                . 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 1001
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,1001) gid=(0,1001)
>[2009/10/02 12:00:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0, fname = lsarpc
>[2009/10/02 12:00:05,  4] smbd/nttrans.c:315(nt_open_pipe)
>  nt_open_pipe: Opening pipe \lsarpc.
>[2009/10/02 12:00:05,  5] smbd/files.c:103(file_new)
>  allocated file structure 497, fnum = 4593 (2 used)
>[2009/10/02 12:00:05,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \lsarpc
>[2009/10/02 12:00:05, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list)
>  init_pipe_handles: created handle list for pipe \lsarpc
>[2009/10/02 12:00:05, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
>  init_pipe_handles: pipe_handles ref count = 1 for pipe \lsarpc
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:05,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:05, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:05,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:05, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:05, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:05, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:05, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:05,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:05, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:05, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:05, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:05,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:05, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:05, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:05,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:05,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:05, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:05, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:05,  4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
>  Created internal pipe \lsarpc (pipes_open=0)
>[2009/10/02 12:00:05,  5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
>  do_ntcreate_pipe_open: open pipe = \lsarpc
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 136
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x88
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 78 of length 140 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=136
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=19073
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4593 (0x11F1)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    8 (0x8)
>  smb_vwv[ 8]=   72 (0x48)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   72 (0x48)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=73
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] EE 05 00 0B 03 10 00 00   00 48 00 00 00 01 00 00   ........ .H......
>  [0010] 00 B8 10 B8 10 00 00 00   00 01 00 00 00 00 00 01   ........ ........
>  [0020] 00 78 57 34 12 34 12 CD   AB EF 00 01 23 45 67 89   .xW4.4.. ....#Eg.
>  [0030] AB 00 00 00 00 04 5D 88   8A EB 1C C9 11 9F E8 08   ......]. ........
>  [0040] 00 2B 10 48 60 02 00 00   00                       .+.H`... .
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBwriteX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:05,  6] smbd/pipes.c:271(reply_pipe_write_and_X)
>  reply_pipe_write_and_X: 11f1 name: lsarpc len: 72
>[2009/10/02 12:00:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 72
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0b
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0048
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 11
>[2009/10/02 12:00:05,  5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
>  api_pipe_bind_req: decode request. 1558
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_rb 
>[2009/10/02 12:00:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 00000000
>      0008 num_contexts: 01
>      000c context_id  : 0000
>      000e num_transfer_syntaxes: 01
>[2009/10/02 12:00:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00000f smb_io_rpc_iface 
>[2009/10/02 12:00:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000010 smb_io_uuid uuid
>              0010 data   : 12345778
>              0014 data   : 1234
>              0016 data   : abcd
>              0018 data   : ef 00 
>              001a data   : 01 23 45 67 89 ab 
>          0020 version: 00000000
>[2009/10/02 12:00:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000024 smb_io_rpc_iface 
>[2009/10/02 12:00:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000024 smb_io_uuid uuid
>              0024 data   : 8a885d04
>              0028 data   : 1ceb
>              002a data   : 11c9
>              002c data   : 9f e8 
>              002e data   : 08 00 2b 10 48 60 
>          0034 version: 00000002
>[2009/10/02 12:00:05,  3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\lsarpc -> \PIPE\lsarpc
>[2009/10/02 12:00:05,  5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
>  api_pipe_bind_req: make response. 1628
>[2009/10/02 12:00:05,  3] rpc_server/srv_pipe.c:960(check_bind_req)
>  check_bind_req for \lsarpc
>  checking lsarpc
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_ba 
>[2009/10/02 12:00:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 000053f0
>[2009/10/02 12:00:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000008 smb_io_rpc_addr_str 
>          0008 len: 000d
>          000a str: \PIPE\lsarpc.
>[2009/10/02 12:00:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000017 smb_io_rpc_results 
>          0018 num_results: 01
>          001c result     : 0000
>          001e reason     : 0000
>[2009/10/02 12:00:05,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000020 smb_io_rpc_iface 
>[2009/10/02 12:00:05,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000020 smb_io_uuid uuid
>              0020 data   : 8a885d04
>              0024 data   : 1ceb
>              0026 data   : 11c9
>              0028 data   : 9f e8 
>              002a data   : 08 00 2b 10 48 60 
>          0030 version: 00000002
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0c
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0044
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 56
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64b7550
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64b7550
>[2009/10/02 12:00:05,  3] smbd/pipes.c:325(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 79 of length 63 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=19137
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4593 (0x11F1)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]= 1024 (0x400)
>  smb_vwv[ 7]=65535 (0xFFFF)
>  smb_vwv[ 8]=65535 (0xFFFF)
>  smb_vwv[ 9]= 1024 (0x400)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBreadX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \lsarpc len: 1024
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
>  read_from_pipe: \lsarpc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64b9a00
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64b9a00
>[2009/10/02 12:00:05,  3] smbd/pipes.c:430(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 176
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0xb0
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 80 of length 180 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=176
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19201
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   92 (0x5C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   92 (0x5C)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4593 (0x11F1)
>  smb_bcc=109
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 5C 00 00 00 01 00 00   ........ .\......
>  [0020] 00 44 00 00 00 00 00 2C   00 00 00 02 00 07 00 00   .D....., ........
>  [0030] 00 00 00 00 00 07 00 00   00 54 00 65 00 73 00 74   ........ .T.e.s.t
>  [0040] 00 66 00 73 00 00 00 88   8A 18 00 00 00 00 00 00   .f.s.... ........
>  [0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 04 00 02   ........ ........
>  [0060] 00 0C 00 00 00 02 00 01   00 00 08 00 00           ........ .....
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=92 params=0 setup=2
>[2009/10/02 12:00:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/10/02 12:00:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/10/02 12:00:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/10/02 12:00:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "lsarpc" (pnum 11f1)
>[2009/10/02 12:00:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0x7f61c648e820 max_trans_reply: 1024
>[2009/10/02 12:00:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 92
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 92
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 92
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 92, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 76
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 76
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 005c
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 76
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 76, incoming data = 76
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000044
>      0004 context_id: 0000
>      0006 opnum     : 002c
>[2009/10/02 12:00:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2009/10/02 12:00:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\lsarpc
>[2009/10/02 12:00:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \lsarpc op 0x2c - api_rpcTNP: rpc command: LSA_OPENPOLICY2
>[2009/10/02 12:00:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[44].fn == 0x7f61c5cb6271
>[2009/10/02 12:00:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       lsa_OpenPolicy2: struct lsa_OpenPolicy2
>          in: struct lsa_OpenPolicy2
>              system_name              : *
>                  system_name              : 'Testfs'
>              attr                     : *
>                  attr: struct lsa_ObjectAttribute
>                      len                      : 0x00000018 (24)
>                      root_dir                 : NULL
>                      object_name              : NULL
>                      attributes               : 0x00000000 (0)
>                      sec_desc                 : NULL
>                      sec_qos                  : *
>                          sec_qos: struct lsa_QosInfo
>                              len                      : 0x0000000c (12)
>                              impersonation_level      : 0x0002 (2)
>                              context_mode             : 0x01 (1)
>                              effective_only           : 0x00 (0)
>              access_mask              : 0x00000800 (2048)
>                     0: LSA_POLICY_VIEW_LOCAL_INFORMATION
>                     0: LSA_POLICY_VIEW_AUDIT_INFORMATION
>                     0: LSA_POLICY_GET_PRIVATE_INFORMATION
>                     0: LSA_POLICY_TRUST_ADMIN   
>                     0: LSA_POLICY_CREATE_ACCOUNT
>                     0: LSA_POLICY_CREATE_SECRET 
>                     0: LSA_POLICY_CREATE_PRIVILEGE
>                     0: LSA_POLICY_SET_DEFAULT_QUOTA_LIMITS
>                     0: LSA_POLICY_SET_AUDIT_REQUIREMENTS
>                     0: LSA_POLICY_AUDIT_LOG_ADMIN
>                     0: LSA_POLICY_SERVER_ADMIN  
>                     1: LSA_POLICY_LOOKUP_NAMES  
>                     0: LSA_POLICY_NOTIFICATION  
>[2009/10/02 12:00:05,  4] rpc_server/srv_samr_nt.c:219(access_check_object)
>  _lsa_OpenPolicy2: access GRANTED (requested: 0x00000800, granted: 0x00000800)
>[2009/10/02 12:00:05,  4] rpc_server/srv_lsa_hnd.c:160(create_policy_hnd)
>  Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 C5 4A 25 CF   ........ .....J%.
>  [0010] C1 32 00 00                                       .2.. 
>[2009/10/02 12:00:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       lsa_OpenPolicy2: struct lsa_OpenPolicy2
>          out: struct lsa_OpenPolicy2
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000001-0000-0000-c54a-25cfc1320000
>              result                   : NT_STATUS_OK
>[2009/10/02 12:00:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \lsarpc successfully
>[2009/10/02 12:00:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 1084
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 76
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64bb720
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64bb720
>[2009/10/02 12:00:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \lsarpc len: 1024
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0030
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000018
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c6475df0
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c6475df0
>[2009/10/02 12:00:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..48] (align 0)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=104
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19201
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   48 (0x30)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=49
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 30 00 00 00 01 00 00   ........ .0......
>  [0010] 00 18 00 00 00 00 00 00   00 00 00 00 00 01 00 00   ........ ........
>  [0020] 00 00 00 00 00 C5 4A 25   CF C1 32 00 00 00 00 00   ......J% ..2.....
>  [0030] 00                                                . 
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 188
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0xbc
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 81 of length 192 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=188
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19265
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  104 (0x68)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=  104 (0x68)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4593 (0x11F1)
>  smb_bcc=121
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 68 00 00 00 02 00 00   ........ .h......
>  [0020] 00 50 00 00 00 00 00 39   00 00 00 00 00 01 00 00   .P.....9 ........
>  [0030] 00 00 00 00 00 C5 4A 25   CF C1 32 00 00 01 00 00   ......J% ..2.....
>  [0040] 00 00 00 02 00 01 00 00   00 04 00 02 00 02 00 00   ........ ........
>  [0050] 00 01 02 00 00 00 00 00   16 01 00 00 00 00 00 00   ........ ........
>  [0060] 00 00 00 00 00 00 00 00   00 01 00 00 00 00 00 00   ........ ........
>  [0070] 00 00 00 00 00 02 00 00   00                       ........ .
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=104 params=0 setup=2
>[2009/10/02 12:00:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/10/02 12:00:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/10/02 12:00:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/10/02 12:00:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "lsarpc" (pnum 11f1)
>[2009/10/02 12:00:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0x7f61c648e820 max_trans_reply: 1024
>[2009/10/02 12:00:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 104
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 104
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 104
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 104, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 88
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 88
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0068
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/10/02 12:00:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 88
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 88, incoming data = 88
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000050
>      0004 context_id: 0000
>      0006 opnum     : 0039
>[2009/10/02 12:00:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/10/02 12:00:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\lsarpc
>[2009/10/02 12:00:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \lsarpc op 0x39 - api_rpcTNP: rpc command: LSA_LOOKUPSIDS2
>[2009/10/02 12:00:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[57].fn == 0x7f61c5cb463a
>[2009/10/02 12:00:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       lsa_LookupSids2: struct lsa_LookupSids2
>          in: struct lsa_LookupSids2
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000001-0000-0000-c54a-25cfc1320000
>              sids                     : *
>                  sids: struct lsa_SidArray
>                      num_sids                 : 0x00000001 (1)
>                      sids                     : *
>                          sids: ARRAY(1)
>                              sids: struct lsa_SidPtr
>                                  sid                      : *
>                                      sid                      : S-1-22-1-0
>              names                    : *
>                  names: struct lsa_TransNameArray2
>                      count                    : 0x00000000 (0)
>                      names                    : NULL
>              level                    : 0x0001 (1)
>              count                    : *
>                  count                    : 0x00000000 (0)
>              unknown1                 : 0x00000000 (0)
>              unknown2                 : 0x00000002 (2)
>[2009/10/02 12:00:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 C5 4A 25 CF   ........ .....J%.
>  [0010] C1 32 00 00                                       .2.. 
>[2009/10/02 12:00:05, 10] passdb/lookup_sid.c:708(check_dom_sid_to_level)
>  Accepting SID S-1-22-1 in level 1
>[2009/10/02 12:00:05, 10] passdb/lookup_sid.c:468(lookup_rids)
>  lookup_rids called for domain sid 'S-1-22-1'
>[2009/10/02 12:00:05, 10] rpc_server/srv_lsa_nt.c:779(_lsa_lookup_sids_internal)
>  num_sids 1, mapped_count 1, status NT_STATUS_OK
>[2009/10/02 12:00:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       lsa_LookupSids2: struct lsa_LookupSids2
>          out: struct lsa_LookupSids2
>              domains                  : *
>                  domains                  : *
>                      domains: struct lsa_RefDomainList
>                          count                    : 0x00000001 (1)
>                          domains                  : *
>                              domains: ARRAY(1)
>                                  domains: struct lsa_DomainInfo
>                                      name: struct lsa_StringLarge
>                                          length                   : 0x0000 (0)
>                                          size                     : 0x0000 (0)
>                                          string                   : *
>                                              string                   : 'Unix User'
>                                      sid                      : *
>                                          sid                      : S-1-22-1
>                          max_size                 : 0x00000020 (32)
>              names                    : *
>                  names: struct lsa_TransNameArray2
>                      count                    : 0x00000001 (1)
>                      names                    : *
>                          names: ARRAY(1)
>                              names: struct lsa_TranslatedName2
>                                  sid_type                 : SID_NAME_USER (1)
>                                  name: struct lsa_String
>                                      length                   : 0x5b00 (23296)
>                                      size                     : 0xc648 (50760)
>                                      string                   : *
>                                          string                   : 'root'
>                                  sid_index                : 0x00000000 (0)
>                                  unknown                  : 0x00000000 (0)
>              count                    : *
>                  count                    : 0x00000001 (1)
>              result                   : NT_STATUS_OK
>[2009/10/02 12:00:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \lsarpc successfully
>[2009/10/02 12:00:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 3271
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 88
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64bb730
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64bb730
>[2009/10/02 12:00:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \lsarpc len: 1024
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 140.
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 00a4
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 0000008c
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c6483b10
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c6483b10
>[2009/10/02 12:00:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..164] (align 0)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=220
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19265
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  164 (0xA4)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  164 (0xA4)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=165
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 A4 00 00 00 02 00 00   ........ ........
>  [0010] 00 8C 00 00 00 00 00 00   00 00 00 02 00 01 00 00   ........ ........
>  [0020] 00 04 00 02 00 20 00 00   00 01 00 00 00 12 00 14   ..... .. ........
>  [0030] 00 08 00 02 00 0C 00 02   00 0A 00 00 00 00 00 00   ........ ........
>  [0040] 00 09 00 00 00 55 00 6E   00 69 00 78 00 20 00 55   .....U.n .i.x. .U
>  [0050] 00 73 00 65 00 72 00 00   00 01 00 00 00 01 01 00   .s.e.r.. ........
>  [0060] 00 00 00 00 16 01 00 00   00 01 00 00 00 10 00 02   ........ ........
>  [0070] 00 01 00 00 00 01 00 00   00 08 00 08 00 14 00 02   ........ ........
>  [0080] 00 00 00 00 00 00 00 00   00 04 00 00 00 00 00 00   ........ ........
>  [0090] 00 04 00 00 00 72 00 6F   00 6F 00 74 00 01 00 00   .....r.o .o.t....
>  [00A0] 00 00 00 00 00                                    ..... 
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 128
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x80
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 82 of length 132 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=128
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19329
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   44 (0x2C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   44 (0x2C)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4593 (0x11F1)
>  smb_bcc=61
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 2C 00 00 00 03 00 00   ........ .,......
>  [0020] 00 14 00 00 00 00 00 00   00 00 00 00 00 01 00 00   ........ ........
>  [0030] 00 00 00 00 00 C5 4A 25   CF C1 32 00 00           ......J% ..2..
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:05,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=44 params=0 setup=2
>[2009/10/02 12:00:05,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/10/02 12:00:05,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/10/02 12:00:05,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/10/02 12:00:05,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "lsarpc" (pnum 11f1)
>[2009/10/02 12:00:05, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0x7f61c648e820 max_trans_reply: 1024
>[2009/10/02 12:00:05,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 44
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 44
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 44
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 44, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 28
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 28
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 002c
>      000a auth_len  : 0000
>      000c call_id   : 00000003
>[2009/10/02 12:00:05,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 28
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 28, incoming data = 28
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000014
>      0004 context_id: 0000
>      0006 opnum     : 0000
>[2009/10/02 12:00:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/10/02 12:00:05,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\lsarpc
>[2009/10/02 12:00:05,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \lsarpc op 0x0 - api_rpcTNP: rpc command: LSA_CLOSE
>[2009/10/02 12:00:05,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[0].fn == 0x7f61c5cbd284
>[2009/10/02 12:00:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       lsa_Close: struct lsa_Close
>          in: struct lsa_Close
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000001-0000-0000-c54a-25cfc1320000
>[2009/10/02 12:00:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 C5 4A 25 CF   ........ .....J%.
>  [0010] C1 32 00 00                                       .2.. 
>[2009/10/02 12:00:05,  4] rpc_server/srv_lsa_hnd.c:180(find_policy_by_hnd_internal)
>  Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00   00 00 00 00 C5 4A 25 CF   ........ .....J%.
>  [0010] C1 32 00 00                                       .2.. 
>[2009/10/02 12:00:05,  3] rpc_server/srv_lsa_hnd.c:218(close_policy_hnd)
>  Closed policy
>[2009/10/02 12:00:05,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       lsa_Close: struct lsa_Close
>          out: struct lsa_Close
>              handle                   : *
>                  handle: struct policy_handle
>                      handle_type              : 0x00000000 (0)
>                      uuid                     : 00000000-0000-0000-0000-000000000000
>              result                   : NT_STATUS_OK
>[2009/10/02 12:00:05,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \lsarpc successfully
>[2009/10/02 12:00:05,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 0
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 28
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64bb6c0
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64bb6c0
>[2009/10/02 12:00:05,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \lsarpc len: 1024
>[2009/10/02 12:00:05, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \lsarpc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 24.
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0030
>      000a auth_len  : 0000
>      000c call_id   : 00000003
>[2009/10/02 12:00:05,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000018
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c647f720
>[2009/10/02 12:00:05, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c647f720
>[2009/10/02 12:00:05,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..48] (align 0)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=104
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19329
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   48 (0x30)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   48 (0x30)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=49
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 30 00 00 00 03 00 00   ........ .0......
>  [0010] 00 18 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0020] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0030] 00                                                . 
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 83 of length 45 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=19393
>  smt_wct=3
>  smb_vwv[ 0]= 4593 (0x11F1)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:05,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:05,  3] smbd/reply.c:4456(reply_close)
>  close fd=-1 fnum=4593 (numopen=1)
>[2009/10/02 12:00:05,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Sun Feb  7 07:28:15 2106
>[2009/10/02 12:00:05, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe)
>  close_policy_by_pipe: deleted handle list for pipe \lsarpc
>[2009/10/02 12:00:05,  5] smbd/files.c:484(file_free)
>  freed files structure 4593 (1 used)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=19393
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 92
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x5c
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 84 of length 96 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=92
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19457
>  smt_wct=15
>  smb_vwv[ 0]=   24 (0x18)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   24 (0x18)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=27
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EC 03 00 00 00   00 5C 00 78 00 78 00 78   ........ .\.x.x.x
>  [0010] 00 78 00 78 00 78 00 78   00 00 00                 .x.x.x.x ...
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /export/netroot
>[2009/10/02 12:00:05,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/10/02 12:00:05,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "xxxxxxx"
>[2009/10/02 12:00:05, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [XXXXXXX]
>[2009/10/02 12:00:05,  5] smbd/statcache.c:138(stat_cache_add)
>  stat_cache_add: Added entry (7f61c64bb620:size 7) XXXXXXX -> xxxxxxx
>[2009/10/02 12:00:05,  5] smbd/filename.c:297(unix_convert)
>  conversion finished xxxxxxx -> xxxxxxx
>[2009/10/02 12:00:05, 10] locking/locking.c:891(fetch_share_mode_unlocked)
>  fetch_share_mode_unlocked: no share_mode record around (file not open)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo xxxxxxx (fnum = -1) level=1004 call=5 total_data=0
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: xxxxxxx
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning 
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning 
>[2009/10/02 12:00:05, 10] smbd/trans2.c:4308(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2009/10/02 12:00:05,  5] smbd/trans2.c:4318(call_trans2qfilepathinfo)
>  SMB_QFBI - create: Wed Sep 30 09:52:40 2009
>   access: Wed Sep 30 09:52:40 2009
>   write: Wed Sep 30 09:52:40 2009
>   change: Wed Sep 30 09:52:40 2009
>   mode: 80
>[2009/10/02 12:00:05,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2009/10/02 12:00:05,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19457
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   40 (0x28)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   40 (0x28)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=45
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 D4 E3   FB A2 41 CA 01 00 D4 E3   ........ ..A.....
>  [0010] FB A2 41 CA 01 00 D4 E3   FB A2 41 CA 01 00 D4 E3   ..A..... ..A.....
>  [0020] FB A2 41 CA 01 80 00 00   00 00 00 00 00           ..A..... .....
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 102
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x66
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 85 of length 106 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=102
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19521
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4096 (0x1000)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]=  512 (0x200)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=19
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 78 00 78 00 78   00 78 00 78 00 78 00 78   .\.x.x.x .x.x.x.x
>  [0010] 00 00 00                                          ... 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x20080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = xxxxxxx
>[2009/10/02 12:00:05, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x20080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = xxxxxxx
>[2009/10/02 12:00:05,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "xxxxxxx"
>[2009/10/02 12:00:05, 10] smbd/statcache.c:274(stat_cache_lookup)
>  stat_cache_lookup: lookup succeeded for name [XXXXXXX] -> [xxxxxxx]
>[2009/10/02 12:00:05, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x20080 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = xxxxxxx
>[2009/10/02 12:00:05,  5] smbd/files.c:103(file_new)
>  allocated file structure 498, fnum = 4594 (2 used)
>[2009/10/02 12:00:05,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(xxxxxxx) returning 0644
>[2009/10/02 12:00:05, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=xxxxxxx, dos_attrs=0x0 access_mask=0x20080 share_access=0x7 create_disposition = 0x1 create_options=0x200000 unix mode=0644 oplock_request=0
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: xxxxxxx
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning 
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning 
>[2009/10/02 12:00:05, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=xxxxxxx, after mapping access_mask=0x20080
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008300
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64bb880
>[2009/10/02 12:00:05, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/10/02 12:00:05, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x10 on file 
>[2009/10/02 12:00:05,  4] smbd/open.c:1913(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x20080, open_access_mask = 0x20080
>[2009/10/02 12:00:05,  2] smbd/open.c:580(open_file)
>  hlampl opened file xxxxxxx read=No write=No (numopen=2)
>[2009/10/02 12:00:05,  5] smbd/oplock.c:86(set_file_oplock)
>  set_file_oplock: granted oplock on file xxxxxxx, 811:83:0/17, tv_sec = 4ac5cf25, tv_usec = a00f
>[2009/10/02 12:00:05, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Wed Sep 30 09:52:41 2009 CEST cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num: 1
>[2009/10/02 12:00:05, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x200000, access_mask = 0x20080, mid = 0x0, type= 0x10, gen_id = 17, uid = 1001, flags = 0, file_id 811:83:0
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008300
>[2009/10/02 12:00:05, 10] smbd/open.c:3201(create_file_unixpath)
>  create_file_unixpath: info=1
>[2009/10/02 12:00:05, 10] smbd/open.c:3496(create_file_default)
>  create_file: info=1
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: xxxxxxx
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning 
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning 
>[2009/10/02 12:00:05, 10] smbd/file_access.c:155(can_access_file_data)
>  can_access_file_data: requesting 0x2 on file xxxxxxx
>[2009/10/02 12:00:05,  5] smbd/nttrans.c:650(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: fnum = 4594, open name = xxxxxxx
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 72
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x48
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 86 of length 76 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=72
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19585
>  smt_wct=15
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=    8 (0x8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    4 (0x4)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    7 (0x7)
>  smb_bcc=7
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 F2 11 EE 03                              ....... 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:3876(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QFILEINFO: level = 1006
>[2009/10/02 12:00:05, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 09:52:41 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 1
>[2009/10/02 12:00:05, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x200000, access_mask = 0x20080, mid = 0x0, type= 0x10, gen_id = 17, uid = 1001, flags = 0, file_id 811:83:0
>[2009/10/02 12:00:05,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo xxxxxxx (fnum = 4594) level=1006 call=7 total_data=0
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: xxxxxxx
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning 
>[2009/10/02 12:00:05,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning 
>[2009/10/02 12:00:05, 10] smbd/trans2.c:4434(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_INTERNAL_INFORMATION
>[2009/10/02 12:00:05,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 8, useable_space = 131010
>[2009/10/02 12:00:05,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 8, paramsize = 2, datasize = 8
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=68
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19585
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    8 (0x8)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    8 (0x8)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=13
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 83 00 00   00 11 08 00 00           ........ .....
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 84
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x54
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 87 of length 88 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19649
>  smt_wct=19
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 2048 (0x800)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 2048 (0x800)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=19456 (0x4C00)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    6 (0x6)
>  smb_bcc=11
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 F2 11 00 00 01   00 00 00                 ........ ...
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBnttrans (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:2697(reply_nttrans)
>  num_setup=0, param_total=8, this_param=8, max_param=4, data_total=0, this_data=0, max_data=0, param_offset=76, data_offset=0
>[2009/10/02 12:00:05,  3] smbd/nttrans.c:1663(call_nt_transact_query_security_desc)
>  call_nt_transact_query_security_desc: file = xxxxxxx, info_wanted = 0x1
>[2009/10/02 12:00:05, 10] smbd/posix_acls.c:3315(posix_fget_nt_acl)
>  posix_fget_nt_acl: called for file xxxxxxx
>[2009/10/02 12:00:05, 10] smbd/posix_acls.c:3347(posix_get_nt_acl)
>  posix_get_nt_acl: called for file xxxxxxx
>[2009/10/02 12:00:05, 10] smbd/posix_acls.c:688(load_inherited_info)
>  load_inherited_info: ret = 18446744073709551615 for file xxxxxxx
>[2009/10/02 12:00:05,  3] smbd/nttrans.c:1697(call_nt_transact_query_security_desc)
>  call_nt_transact_query_security_desc: sd_size = 36.
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:1700(call_nt_transact_query_security_desc)
>  call_nt_transact_query_security_desc for file xxxxxxx
>[2009/10/02 12:00:05,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       psd: struct security_descriptor
>          revision                 : SECURITY_DESCRIPTOR_REVISION_1 (1)
>          type                     : 0x9000 (36864)
>                 0: SEC_DESC_OWNER_DEFAULTED 
>                 0: SEC_DESC_GROUP_DEFAULTED 
>                 0: SEC_DESC_DACL_PRESENT    
>                 0: SEC_DESC_DACL_DEFAULTED  
>                 0: SEC_DESC_SACL_PRESENT    
>                 0: SEC_DESC_SACL_DEFAULTED  
>                 0: SEC_DESC_DACL_TRUSTED    
>                 0: SEC_DESC_SERVER_SECURITY 
>                 0: SEC_DESC_DACL_AUTO_INHERIT_REQ
>                 0: SEC_DESC_SACL_AUTO_INHERIT_REQ
>                 0: SEC_DESC_DACL_AUTO_INHERITED
>                 0: SEC_DESC_SACL_AUTO_INHERITED
>                 1: SEC_DESC_DACL_PROTECTED  
>                 0: SEC_DESC_SACL_PROTECTED  
>                 0: SEC_DESC_RM_CONTROL_VALID
>                 1: SEC_DESC_SELF_RELATIVE   
>          owner_sid                : *
>              owner_sid                : S-1-22-1-0
>          group_sid                : NULL
>          sacl                     : NULL
>          dacl                     : NULL
>[2009/10/02 12:00:05,  9] smbd/nttrans.c:219(send_nt_replies)
>  nt_rep: params_sent_thistime = 4, data_sent_thistime = 0, useable_space = 130994
>[2009/10/02 12:00:05,  9] smbd/nttrans.c:221(send_nt_replies)
>  nt_rep: params_to_send = 4, data_to_send = 0, paramsize = 4, datasize = 0
>[2009/10/02 12:00:05,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(226) cmd=160 (SMBnttrans) NT_STATUS_BUFFER_TOO_SMALL
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=78
>  smb_com=0xa0
>  smb_rcls=35
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19649
>  smt_wct=18
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 1024 (0x400)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=18944 (0x4A00)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_bcc=7
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 24 00 00 00                              ...$... 
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 84
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x54
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 88 of length 88 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19713
>  smt_wct=19
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 2048 (0x800)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]= 9216 (0x2400)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]= 2048 (0x800)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=19456 (0x4C00)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    6 (0x6)
>  smb_bcc=11
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 F2 11 00 00 01   00 00 00                 ........ ...
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBnttrans (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:2697(reply_nttrans)
>  num_setup=0, param_total=8, this_param=8, max_param=4, data_total=0, this_data=0, max_data=36, param_offset=76, data_offset=0
>[2009/10/02 12:00:05,  3] smbd/nttrans.c:1663(call_nt_transact_query_security_desc)
>  call_nt_transact_query_security_desc: file = xxxxxxx, info_wanted = 0x1
>[2009/10/02 12:00:05, 10] smbd/posix_acls.c:3315(posix_fget_nt_acl)
>  posix_fget_nt_acl: called for file xxxxxxx
>[2009/10/02 12:00:05, 10] smbd/posix_acls.c:3347(posix_get_nt_acl)
>  posix_get_nt_acl: called for file xxxxxxx
>[2009/10/02 12:00:05, 10] smbd/posix_acls.c:688(load_inherited_info)
>  load_inherited_info: ret = 18446744073709551615 for file xxxxxxx
>[2009/10/02 12:00:05,  3] smbd/nttrans.c:1697(call_nt_transact_query_security_desc)
>  call_nt_transact_query_security_desc: sd_size = 36.
>[2009/10/02 12:00:05, 10] smbd/nttrans.c:1700(call_nt_transact_query_security_desc)
>  call_nt_transact_query_security_desc for file xxxxxxx
>[2009/10/02 12:00:05,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       psd: struct security_descriptor
>          revision                 : SECURITY_DESCRIPTOR_REVISION_1 (1)
>          type                     : 0x9000 (36864)
>                 0: SEC_DESC_OWNER_DEFAULTED 
>                 0: SEC_DESC_GROUP_DEFAULTED 
>                 0: SEC_DESC_DACL_PRESENT    
>                 0: SEC_DESC_DACL_DEFAULTED  
>                 0: SEC_DESC_SACL_PRESENT    
>                 0: SEC_DESC_SACL_DEFAULTED  
>                 0: SEC_DESC_DACL_TRUSTED    
>                 0: SEC_DESC_SERVER_SECURITY 
>                 0: SEC_DESC_DACL_AUTO_INHERIT_REQ
>                 0: SEC_DESC_SACL_AUTO_INHERIT_REQ
>                 0: SEC_DESC_DACL_AUTO_INHERITED
>                 0: SEC_DESC_SACL_AUTO_INHERITED
>                 1: SEC_DESC_DACL_PROTECTED  
>                 0: SEC_DESC_SACL_PROTECTED  
>                 0: SEC_DESC_RM_CONTROL_VALID
>                 1: SEC_DESC_SELF_RELATIVE   
>          owner_sid                : *
>              owner_sid                : S-1-22-1-0
>          group_sid                : NULL
>          sacl                     : NULL
>          dacl                     : NULL
>[2009/10/02 12:00:05,  9] smbd/nttrans.c:219(send_nt_replies)
>  nt_rep: params_sent_thistime = 4, data_sent_thistime = 36, useable_space = 130994
>[2009/10/02 12:00:05,  9] smbd/nttrans.c:221(send_nt_replies)
>  nt_rep: params_to_send = 4, data_to_send = 36, paramsize = 4, datasize = 36
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=114
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19713
>  smt_wct=18
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 1024 (0x400)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 9216 (0x2400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=18944 (0x4A00)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]= 9216 (0x2400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=19968 (0x4E00)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_bcc=43
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 24 00 00 00 01   00 00 90 14 00 00 00 00   ...$.... ........
>  [0010] 00 00 00 00 00 00 00 00   00 00 00 01 02 00 00 00   ........ ........
>  [0020] 00 00 16 01 00 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 89 of length 45 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=19777
>  smt_wct=3
>  smb_vwv[ 0]= 4594 (0x11F2)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  3] smbd/reply.c:4456(reply_close)
>  close fd=-1 fnum=4594 (numopen=2)
>[2009/10/02 12:00:05,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Sun Feb  7 07:28:15 2106
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008300
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64bb630
>[2009/10/02 12:00:05, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 09:52:41 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 1
>[2009/10/02 12:00:05, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x200000, access_mask = 0x20080, mid = 0x0, type= 0x10, gen_id = 17, uid = 1001, flags = 0, file_id 811:83:0
>[2009/10/02 12:00:05, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008300
>[2009/10/02 12:00:05,  2] smbd/close.c:612(close_normal_file)
>  hlampl closed file xxxxxxx (numopen=1) NT_STATUS_OK
>[2009/10/02 12:00:05,  5] smbd/files.c:484(file_free)
>  freed files structure 4594 (1 used)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=19777
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 104
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x68
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 90 of length 108 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=104
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19841
>  smt_wct=15
>  smb_vwv[ 0]=   36 (0x24)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   36 (0x24)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=39
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 74 00 61 00 72 00 67   00 65 00 74 00 2E 00 6C   .t.a.r.g .e.t...l
>  [0020] 00 6E 00 6B 00 00 00                              .n.k... 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/10/02 12:00:05,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "target.lnk"
>[2009/10/02 12:00:05, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [TARGET.LNK]
>[2009/10/02 12:00:05,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = target.lnk, dirpath = , start = target.lnk
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled target.lnk ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component target.lnk (len 10) ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled target.lnk ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component target.lnk (len 10) ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled target.lnk ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component target.lnk (len 10) ?
>[2009/10/02 12:00:05,  5] smbd/filename.c:564(unix_convert)
>  New file target.lnk
>[2009/10/02 12:00:05,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=./, mask = target.lnk
>[2009/10/02 12:00:05,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=./
>[2009/10/02 12:00:05,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2009/10/02 12:00:05,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = target.lnk, attr = 22
>[2009/10/02 12:00:05,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<./> dontdescend=<>
>[2009/10/02 12:00:05,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c6490440 now at offset 0
>[2009/10/02 12:00:05,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c6490440 now at offset 2147483648
>[2009/10/02 12:00:05,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c6490440 now at offset 16
>[2009/10/02 12:00:05,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c6490440 now at offset 512
>[2009/10/02 12:00:05,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c6490440 now at offset -1
>[2009/10/02 12:00:05,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/10/02 12:00:05,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/10/02 12:00:05,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/trans2.c(2163) cmd=50 (SMBtrans2) NT_STATUS_NO_SUCH_FILE
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x32
>  smb_rcls=15
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19841
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 104
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x68
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 91 of length 108 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=104
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19905
>  smt_wct=15
>  smb_vwv[ 0]=   36 (0x24)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   36 (0x24)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=39
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 16 00 56 05 07   00 04 01 00 00 00 00 5C   .....V.. .......\
>  [0010] 00 74 00 61 00 72 00 67   00 65 00 74 00 2E 00 6C   .t.a.r.g .e.t...l
>  [0020] 00 6E 00 6B 00 00 00                              .n.k... 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:1927(call_trans2findfirst)
>  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=1, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2009/10/02 12:00:05,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "target.lnk"
>[2009/10/02 12:00:05, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [TARGET.LNK]
>[2009/10/02 12:00:05,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = target.lnk, dirpath = , start = target.lnk
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled target.lnk ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component target.lnk (len 10) ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled target.lnk ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component target.lnk (len 10) ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled target.lnk ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component target.lnk (len 10) ?
>[2009/10/02 12:00:05,  5] smbd/filename.c:564(unix_convert)
>  New file target.lnk
>[2009/10/02 12:00:05,  5] smbd/trans2.c:2014(call_trans2findfirst)
>  dir=./, mask = target.lnk
>[2009/10/02 12:00:05,  5] smbd/dir.c:394(dptr_create)
>  dptr_create dir=./
>[2009/10/02 12:00:05,  3] smbd/dir.c:512(dptr_create)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2009/10/02 12:00:05,  4] smbd/trans2.c:2081(call_trans2findfirst)
>  dptr_num is 256, wcard = target.lnk, attr = 22
>[2009/10/02 12:00:05,  8] smbd/trans2.c:2089(call_trans2findfirst)
>  dirpath=<./> dontdescend=<>
>[2009/10/02 12:00:05,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c64228d0 now at offset 0
>[2009/10/02 12:00:05,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c64228d0 now at offset 2147483648
>[2009/10/02 12:00:05,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c64228d0 now at offset 16
>[2009/10/02 12:00:05,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c64228d0 now at offset 512
>[2009/10/02 12:00:05,  8] smbd/trans2.c:1302(get_lanman2_dir_entry)
>  get_lanman2_dir_entry:readdir on dirptr 0x7f61c64228d0 now at offset -1
>[2009/10/02 12:00:05,  5] smbd/trans2.c:2145(call_trans2findfirst)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2009/10/02 12:00:05,  4] smbd/dir.c:243(dptr_close_internal)
>  closing dptr key 256
>[2009/10/02 12:00:05,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/trans2.c(2163) cmd=50 (SMBtrans2) NT_STATUS_NO_SUCH_FILE
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x32
>  smb_rcls=15
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19905
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:05, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 98
>[2009/10/02 12:00:05,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x62
>[2009/10/02 12:00:05,  3] smbd/process.c:1439(process_smb)
>  Transaction 92 of length 102 (0 toread)
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=98
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19969
>  smt_wct=15
>  smb_vwv[ 0]=   30 (0x1E)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   30 (0x1E)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=33
>[2009/10/02 12:00:05, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EC 03 00 00 00   00 5C 00 74 00 61 00 72   ........ .\.t.a.r
>  [0010] 00 67 00 65 00 74 00 2E   00 6C 00 6E 00 6B 00 00   .g.e.t.. .l.n.k..
>  [0020] 00                                                . 
>[2009/10/02 12:00:05,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:05,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:05,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:05,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:05,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:05,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2009/10/02 12:00:05,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file "target.lnk"
>[2009/10/02 12:00:05, 10] smbd/statcache.c:235(stat_cache_lookup)
>  stat_cache_lookup: lookup failed for name [TARGET.LNK]
>[2009/10/02 12:00:05,  5] smbd/filename.c:303(unix_convert)
>  unix_convert begin: name = target.lnk, dirpath = , start = target.lnk
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled target.lnk ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component target.lnk (len 10) ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled target.lnk ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component target.lnk (len 10) ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:239(is_mangled)
>  is_mangled target.lnk ?
>[2009/10/02 12:00:05, 10] smbd/mangle_hash2.c:178(is_mangled_component)
>  is_mangled_component target.lnk (len 10) ?
>[2009/10/02 12:00:05,  5] smbd/filename.c:564(unix_convert)
>  New file target.lnk
>[2009/10/02 12:00:05,  3] smbd/trans2.c:4046(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of target.lnk failed (No such file or directory)
>[2009/10/02 12:00:05,  3] smbd/error.c:153(reply_unix_error)
>  unix_error_packet: error string = No such file or directory
>[2009/10/02 12:00:05,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/trans2.c(4047) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2009/10/02 12:00:05,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:05,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x32
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=19969
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 96
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x60
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 93 of length 100 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=96
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=4
>  smb_uid=101
>  smb_mid=20033
>  smt_wct=15
>  smb_vwv[ 0]=   28 (0x1C)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   28 (0x1C)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=   16 (0x10)
>  smb_bcc=31
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 04 00 5C 00 54   00 45 00 53 00 54 00 46   .....\.T .E.S.T.F
>  [0010] 00 53 00 5C 00 52 00 4F   00 4F 00 54 00 00 00     .S.\.R.O .O.T...
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c648a300
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-501
>  contains 8 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-501
>  SID[  1]: S-1-1-0
>  SID[  2]: S-1-5-2
>  SID[  3]: S-1-5-32-546
>  SID[  4]: S-1-22-1-65534
>  SID[  5]: S-1-22-2-20002
>  SID[  6]: S-1-22-2-20003
>  SID[  7]: S-1-22-2-20005
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 65534
>  Primary group is 65534 and contains 3 supplementary groups
>  Group[  0]: 20002
>  Group[  1]: 20003
>  Group[  2]: 20005
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,65534) gid=(0,65534)
>[2009/10/02 12:00:06,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2009/10/02 12:00:06, 10] smbd/trans2.c:7387(call_trans2getdfsreferral)
>  call_trans2getdfsreferral
>[2009/10/02 12:00:06, 10] smbd/msdfs.c:107(parse_dfs_path)
>  parse_dfs_path: temp = |TESTFS\ROOT| after trimming \'s
>[2009/10/02 12:00:06, 10] smbd/msdfs.c:132(parse_dfs_path)
>  parse_dfs_path: hostname: TESTFS
>[2009/10/02 12:00:06, 10] smbd/msdfs.c:174(parse_dfs_path)
>  parse_dfs_path: servicename: ROOT
>[2009/10/02 12:00:06,  3] smbd/msdfs.c:828(get_referred_path)
>  get_referred_path: |ROOT| in dfs path \TESTFS\ROOT is not a dfs root.
>[2009/10/02 12:00:06,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/trans2.c(7409) cmd=50 (SMBtrans2) NT_STATUS_NOT_FOUND
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x32
>  smb_rcls=37
>  smb_reh=2
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=4
>  smb_uid=101
>  smb_mid=20033
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 100
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x64
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 94 of length 104 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=100
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20097
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=16384 (0x4000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  256 (0x100)
>  smb_bcc=17
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 73 00 72 00 76   00 73 00 76 00 63 00 00   .\.s.r.v .s.v.c..
>  [0010] 00                                                . 
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 1001
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,1001) gid=(0,1001)
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0, fname = srvsvc
>[2009/10/02 12:00:06,  4] smbd/nttrans.c:315(nt_open_pipe)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2009/10/02 12:00:06,  5] smbd/files.c:103(file_new)
>  allocated file structure 499, fnum = 4595 (2 used)
>[2009/10/02 12:00:06,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \srvsvc
>[2009/10/02 12:00:06, 10] rpc_server/srv_lsa_hnd.c:85(init_pipe_handle_list)
>  init_pipe_handles: created handle list for pipe \srvsvc
>[2009/10/02 12:00:06, 10] rpc_server/srv_lsa_hnd.c:102(init_pipe_handle_list)
>  init_pipe_handles: pipe_handles ref count = 1 for pipe \srvsvc
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:06,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:06,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:06, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: maximum password age, val: -1
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:06,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:06,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:06, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06, 10] passdb/pdb_get_set.c:572(pdb_set_username)
>  pdb_set_username: setting username hlampl, was 
>[2009/10/02 12:00:06, 10] passdb/pdb_get_set.c:595(pdb_set_domain)
>  pdb_set_domain: setting domain TESTFS, was 
>[2009/10/02 12:00:06, 10] passdb/pdb_get_set.c:618(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2009/10/02 12:00:06, 10] passdb/pdb_get_set.c:641(pdb_set_fullname)
>  pdb_set_full_name: setting full name ,,,, was 
>[2009/10/02 12:00:06,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:06, 10] passdb/pdb_get_set.c:734(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\testfs\hlampl, was 
>[2009/10/02 12:00:06, 10] passdb/pdb_get_set.c:710(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2009/10/02 12:00:06, 10] passdb/pdb_get_set.c:664(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2009/10/02 12:00:06,  4] lib/substitute.c:504(automount_server)
>  Home server: testfs
>[2009/10/02 12:00:06, 10] passdb/pdb_get_set.c:687(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\testfs\hlampl\profile, was 
>[2009/10/02 12:00:06, 10] passdb/pdb_get_set.c:777(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(1001, 1001) : sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:06,  3] smbd/uid.c:428(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2009/10/02 12:00:06,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:06, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (1001, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06, 10] passdb/pdb_get_set.c:501(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002
>[2009/10/02 12:00:06, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2901898339-3287136368-3549063626-3002 from rid 3002
>[2009/10/02 12:00:06,  4] rpc_server/srv_pipe_hnd.c:161(make_internal_rpc_pipe_p)
>  Created internal pipe \srvsvc (pipes_open=0)
>[2009/10/02 12:00:06,  5] smbd/nttrans.c:404(do_ntcreate_pipe_open)
>  do_ntcreate_pipe_open: open pipe = \srvsvc
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 136
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x88
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 95 of length 140 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=136
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=20161
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4595 (0x11F3)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    8 (0x8)
>  smb_vwv[ 8]=   72 (0x48)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   72 (0x48)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=73
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] EE 05 00 0B 03 10 00 00   00 48 00 00 00 01 00 00   ........ .H......
>  [0010] 00 B8 10 B8 10 00 00 00   00 01 00 00 00 00 00 01   ........ ........
>  [0020] 00 C8 4F 32 4B 70 16 D3   01 12 78 5A 47 BF 6E E1   ..O2Kp.. ..xZG.n.
>  [0030] 88 03 00 00 00 04 5D 88   8A EB 1C C9 11 9F E8 08   ......]. ........
>  [0040] 00 2B 10 48 60 02 00 00   00                       .+.H`... .
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBwriteX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:06,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:06,  6] smbd/pipes.c:271(reply_pipe_write_and_X)
>  reply_pipe_write_and_X: 11f3 name: srvsvc len: 72
>[2009/10/02 12:00:06,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 72
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
>[2009/10/02 12:00:06,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0b
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0048
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:06,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 11
>[2009/10/02 12:00:06,  5] rpc_server/srv_pipe.c:1558(api_pipe_bind_req)
>  api_pipe_bind_req: decode request. 1558
>[2009/10/02 12:00:06,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_rb 
>[2009/10/02 12:00:06,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 00000000
>      0008 num_contexts: 01
>      000c context_id  : 0000
>      000e num_transfer_syntaxes: 01
>[2009/10/02 12:00:06,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      00000f smb_io_rpc_iface 
>[2009/10/02 12:00:06,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000010 smb_io_uuid uuid
>              0010 data   : 4b324fc8
>              0014 data   : 1670
>              0016 data   : 01d3
>              0018 data   : 12 78 
>              001a data   : 5a 47 bf 6e e1 88 
>          0020 version: 00000003
>[2009/10/02 12:00:06,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000024 smb_io_rpc_iface 
>[2009/10/02 12:00:06,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000024 smb_io_uuid uuid
>              0024 data   : 8a885d04
>              0028 data   : 1ceb
>              002a data   : 11c9
>              002c data   : 9f e8 
>              002e data   : 08 00 2b 10 48 60 
>          0034 version: 00000002
>[2009/10/02 12:00:06,  3] rpc_server/srv_pipe.c:1584(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc
>[2009/10/02 12:00:06,  5] rpc_server/srv_pipe.c:1628(api_pipe_bind_req)
>  api_pipe_bind_req: make response. 1628
>[2009/10/02 12:00:06,  3] rpc_server/srv_pipe.c:960(check_bind_req)
>  check_bind_req for \srvsvc
>  checking lsarpc
>  checking winreg
>  checking initshutdown
>  checking dssetup
>  checking wkssvc
>  checking svcctl
>  checking ntsvcs
>  checking netlogon
>  checking netdfs
>  checking srvsvc
>[2009/10/02 12:00:06,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_ba 
>[2009/10/02 12:00:06,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 000053f0
>[2009/10/02 12:00:06,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000008 smb_io_rpc_addr_str 
>          0008 len: 000d
>          000a str: \PIPE\srvsvc.
>[2009/10/02 12:00:06,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000017 smb_io_rpc_results 
>          0018 num_results: 01
>          001c result     : 0000
>          001e reason     : 0000
>[2009/10/02 12:00:06,  6] rpc_parse/parse_prs.c:88(prs_debug)
>      000020 smb_io_rpc_iface 
>[2009/10/02 12:00:06,  7] rpc_parse/parse_prs.c:88(prs_debug)
>          000020 smb_io_uuid uuid
>              0020 data   : 8a885d04
>              0024 data   : 1ceb
>              0026 data   : 11c9
>              0028 data   : 9f e8 
>              002a data   : 08 00 2b 10 48 60 
>          0030 version: 00000002
>[2009/10/02 12:00:06,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0c
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0044
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 56
>[2009/10/02 12:00:06, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64bb630
>[2009/10/02 12:00:06, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64bb630
>[2009/10/02 12:00:06,  3] smbd/pipes.c:325(pipe_write_andx_done)
>  writeX-IPC nwritten=72
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 59
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x3b
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 96 of length 63 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=20225
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 4595 (0x11F3)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]= 1024 (0x400)
>  smb_vwv[ 7]=65535 (0xFFFF)
>  smb_vwv[ 8]=65535 (0xFFFF)
>  smb_vwv[ 9]= 1024 (0x400)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBreadX (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:06,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:06,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \srvsvc len: 1024
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:842(read_from_internal_pipe)
>  read_from_pipe: \srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2009/10/02 12:00:06, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64bdae0
>[2009/10/02 12:00:06, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64bdae0
>[2009/10/02 12:00:06,  3] smbd/pipes.c:430(pipe_read_andx_done)
>  readX-IPC min=1024 max=1024 nread=68
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 172
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0xac
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 97 of length 176 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=172
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20289
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   88 (0x58)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=   88 (0x58)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 4595 (0x11F3)
>  smb_bcc=105
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 00   .\.P.I.P .E.\....
>  [0010] 00 05 00 00 03 10 00 00   00 58 00 00 00 01 00 00   ........ .X......
>  [0020] 00 40 00 00 00 00 00 10   00 00 00 02 00 09 00 00   .@...... ........
>  [0030] 00 00 00 00 00 09 00 00   00 5C 00 5C 00 54 00 45   ........ .\.\.T.E
>  [0040] 00 53 00 54 00 46 00 53   00 00 00 C9 11 05 00 00   .S.T.F.S ........
>  [0050] 00 00 00 00 00 05 00 00   00 52 00 4F 00 4F 00 54   ........ .R.O.O.T
>  [0060] 00 00 00 00 00 01 00 00   00                       ........ .
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:06,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:06,  3] smbd/ipc.c:536(handle_trans)
>  trans <\PIPE\> data=88 params=0 setup=2
>[2009/10/02 12:00:06,  5] smbd/ipc.c:569(handle_trans)
>  calling named_pipe
>[2009/10/02 12:00:06,  3] smbd/ipc.c:487(named_pipe)
>  named pipe command on <> name
>[2009/10/02 12:00:06,  5] smbd/ipc.c:410(api_fd_reply)
>  api_fd_reply
>[2009/10/02 12:00:06,  3] smbd/ipc.c:451(api_fd_reply)
>  Got API command 0x26 on pipe "srvsvc" (pnum 11f3)
>[2009/10/02 12:00:06, 10] smbd/ipc.c:453(api_fd_reply)
>  api_fd_reply: p:0x7f61c648e820 max_trans_reply: 1024
>[2009/10/02 12:00:06,  6] rpc_server/srv_pipe_hnd.c:1188(np_write_send)
>  np_write_send: len: 88
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 88
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 88
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:192(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 88, len_needed_to_complete_hdr = 16, receive_len = 0
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 72
>[2009/10/02 12:00:06,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0058
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:06,  5] rpc_server/srv_pipe_hnd.c:288(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:317(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:762(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:672(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 72, incoming data = 72
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:534(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2009/10/02 12:00:06,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000040
>      0004 context_id: 0000
>      0006 opnum     : 0010
>[2009/10/02 12:00:06,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2009/10/02 12:00:06,  5] rpc_server/srv_pipe.c:2261(api_pipe_request)
>  Requested \PIPE\\srvsvc
>[2009/10/02 12:00:06,  4] rpc_server/srv_pipe.c:2297(api_rpcTNP)
>  api_rpcTNP: \srvsvc op 0x10 - api_rpcTNP: rpc command: SRVSVC_NETSHAREGETINFO
>[2009/10/02 12:00:06,  6] rpc_server/srv_pipe.c:2327(api_rpcTNP)
>  api_rpc_cmds[16].fn == 0x7f61c5cf7354
>[2009/10/02 12:00:06,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       srvsvc_NetShareGetInfo: struct srvsvc_NetShareGetInfo
>          in: struct srvsvc_NetShareGetInfo
>              server_unc               : *
>                  server_unc               : '\\TESTFS'
>              share_name               : 'ROOT'
>              level                    : 0x00000001 (1)
>[2009/10/02 12:00:06,  5] rpc_server/srv_srvsvc_nt.c:1374(_srvsvc_NetShareGetInfo)
>  _srvsvc_NetShareGetInfo: 1374
>[2009/10/02 12:00:06,  5] rpc_server/srv_srvsvc_nt.c:1439(_srvsvc_NetShareGetInfo)
>  _srvsvc_NetShareGetInfo: 1439
>[2009/10/02 12:00:06,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       srvsvc_NetShareGetInfo: struct srvsvc_NetShareGetInfo
>          out: struct srvsvc_NetShareGetInfo
>              info                     : *
>                  info                     : union srvsvc_NetShareInfo(case 1)
>                  info1                    : *
>                      info1: struct srvsvc_NetShareInfo1
>                          name                     : *
>                              name                     : 'root'
>                          type                     : STYPE_DISKTREE (0x0)
>                          comment                  : *
>                              comment                  : 'Test Root'
>              result                   : WERR_OK
>[2009/10/02 12:00:06,  5] rpc_server/srv_pipe.c:2362(api_rpcTNP)
>  api_rpcTNP: called \srvsvc successfully
>[2009/10/02 12:00:06,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 44
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:766(write_to_internal_pipe)
>  write_to_pipe: data_used = 72
>[2009/10/02 12:00:06, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c64bf7f0
>[2009/10/02 12:00:06, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c64bf7f0
>[2009/10/02 12:00:06,  6] rpc_server/srv_pipe_hnd.c:802(read_from_internal_pipe)
>   name: \srvsvc len: 1024
>[2009/10/02 12:00:06, 10] rpc_server/srv_pipe_hnd.c:862(read_from_internal_pipe)
>  read_from_pipe: \srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 80.
>[2009/10/02 12:00:06,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0068
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2009/10/02 12:00:06,  5] rpc_parse/parse_prs.c:88(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 00000050
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2009/10/02 12:00:06, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7f61c6483b10
>[2009/10/02 12:00:06, 10] lib/events.c:287(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7f61c6483b10
>[2009/10/02 12:00:06,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..104] (align 0)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=160
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20289
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  104 (0x68)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  104 (0x68)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=105
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 68 00 00 00 01 00 00   ........ .h......
>  [0010] 00 50 00 00 00 00 00 00   00 01 00 00 00 00 00 02   .P...... ........
>  [0020] 00 04 00 02 00 00 00 00   00 08 00 02 00 05 00 00   ........ ........
>  [0030] 00 00 00 00 00 05 00 00   00 72 00 6F 00 6F 00 74   ........ .r.o.o.t
>  [0040] 00 00 00 00 00 0A 00 00   00 00 00 00 00 0A 00 00   ........ ........
>  [0050] 00 54 00 65 00 73 00 74   00 20 00 52 00 6F 00 6F   .T.e.s.t . .R.o.o
>  [0060] 00 74 00 00 00 00 00 00   00                       .t...... .
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 98 of length 45 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=20353
>  smt_wct=3
>  smb_vwv[ 0]= 4595 (0x11F3)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:06,  4] smbd/uid.c:256(change_to_user)
>  change_to_user: Skipping user change - already user
>[2009/10/02 12:00:06,  3] smbd/reply.c:4456(reply_close)
>  close fd=-1 fnum=4595 (numopen=1)
>[2009/10/02 12:00:06,  6] smbd/close.c:454(set_close_write_time)
>  close_write_time: Sun Feb  7 07:28:15 2106
>[2009/10/02 12:00:06, 10] rpc_server/srv_lsa_hnd.c:249(close_policy_by_pipe)
>  close_policy_by_pipe: deleted handle list for pipe \srvsvc
>[2009/10/02 12:00:06,  5] smbd/files.c:484(file_free)
>  freed files structure 4595 (1 used)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=20353
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 76
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4c
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 99 of length 80 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20417
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   64 (0x40)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 ED 03 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:06,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /export/netroot
>[2009/10/02 12:00:06,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005
>[2009/10/02 12:00:06,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:06,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:06, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 1
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1005 call=5 total_data=0
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:06, 10] smbd/trans2.c:4329(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_STANDARD_INFORMATION
>[2009/10/02 12:00:06,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010
>[2009/10/02 12:00:06,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20417
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=   24 (0x18)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   24 (0x18)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=29
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0010] 00 00 00 00 00 01 00 00   00 00 01 00 00           ........ .....
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 76
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x4c
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 100 of length 80 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20481
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   32 (0x20)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 EF 03 00 00 00   00 00 00                 ........ ...
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:06,  3] smbd/trans2.c:3952(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1007
>[2009/10/02 12:00:06,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:06,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:06, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 1
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06,  3] smbd/trans2.c:4066(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo . (fnum = -1) level=1007 call=5 total_data=0
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:06, 10] smbd/trans2.c:4343(call_trans2qfilepathinfo)
>  call_trans2qfilepathinfo: SMB_FILE_EA_INFORMATION
>[2009/10/02 12:00:06,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 4, useable_space = 131010
>[2009/10/02 12:00:06,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 2, data_to_send = 4, paramsize = 2, datasize = 4
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=64
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20481
>  smt_wct=10
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    4 (0x4)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    4 (0x4)
>  smb_vwv[ 7]=   60 (0x3C)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=9
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 00 00 00 00 00   00                       ........ .
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 86
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x56
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 101 of length 90 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=86
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20545
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]= 4096 (0x1000)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]= 1792 (0x700)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=3
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00                                          ... 
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = 
>[2009/10/02 12:00:06, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = 
>[2009/10/02 12:00:06,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:06,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:06, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x100080 file_attributes = 0x80, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = .
>[2009/10/02 12:00:06,  5] smbd/files.c:103(file_new)
>  allocated file structure 500, fnum = 4596 (2 used)
>[2009/10/02 12:00:06,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(.) returning 0644
>[2009/10/02 12:00:06, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=., dos_attrs=0x80 access_mask=0x100080 share_access=0x7 create_disposition = 0x1 create_options=0x0 unix mode=0644 oplock_request=0
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:06, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=., after mapping access_mask=0x100080
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64bf860
>[2009/10/02 12:00:06, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 1
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06,  4] smbd/open.c:1913(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x100080, open_access_mask = 0x100080
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:06,  5] smbd/files.c:484(file_free)
>  freed files structure 4596 (1 used)
>[2009/10/02 12:00:06,  5] smbd/open.c:2391(open_directory)
>  open_directory: opening directory ., access_mask = 0x100080, share_access = 0x7 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x80
>[2009/10/02 12:00:06,  5] smbd/files.c:103(file_new)
>  allocated file structure 501, fnum = 4597 (2 used)
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64bfcf0
>[2009/10/02 12:00:06, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 1
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Wed Sep 30 15:03:43 2009 CEST cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num: 2
>[2009/10/02 12:00:06, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]:  pid = 12993, share_access = 0x7, private_options = 0x0, access_mask = 0x100080, mid = 0x0, type= 0x0, gen_id = 20, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:06, 10] smbd/open.c:3201(create_file_unixpath)
>  create_file_unixpath: info=1
>[2009/10/02 12:00:06, 10] smbd/open.c:3496(create_file_default)
>  create_file: info=1
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:06,  5] smbd/nttrans.c:650(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: fnum = 4597, open name = .
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 84
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x54
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 102 of length 88 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20609
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=16384 (0x4000)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=  192 (0xC0)
>  smb_vwv[20]=    9 (0x9)
>  smb_vwv[21]= 4597 (0x11F5)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00                                          ... 
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBnttrans (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:2697(reply_nttrans)
>  num_setup=8, param_total=0, this_param=0, max_param=0, data_total=0, this_data=0, max_data=64, param_offset=84, data_offset=0
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:2769(reply_nttrans)
>  reply_nttrans: state->setup_count = 8
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] C0 00 09 00 F5 11 01 00                            ........ 
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:1824(call_nt_transact_ioctl)
>  call_nt_transact_ioctl: function[0x000900C0] FID[0x11F5] isFSctl[0x01] compfilter[0x00]
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:1851(call_nt_transact_ioctl)
>  FSCTL_CREATE_OR_GET_OBJECT_ID: called on FID[0x11F5]
>[2009/10/02 12:00:06,  9] smbd/nttrans.c:219(send_nt_replies)
>  nt_rep: params_sent_thistime = 0, data_sent_thistime = 64, useable_space = 130994
>[2009/10/02 12:00:06,  9] smbd/nttrans.c:221(send_nt_replies)
>  nt_rep: params_to_send = 0, data_to_send = 64, paramsize = 0, datasize = 64
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=138
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20609
>  smt_wct=18
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=16384 (0x4000)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=18944 (0x4A00)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_bcc=67
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 11 08 00 00 00   00 00 00 80 00 00 00 00   ........ ........
>  [0010] 00 00 00 32 91 53 F5 60   EB 32 9C 0E 1D EE A5 5E   ...2.S.` .2.....^
>  [0020] 88 A1 E9 11 08 00 00 00   00 00 00 80 00 00 00 00   ........ ........
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00 00 00                                          ... 
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 70
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x46
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 103 of length 74 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20673
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00 F0 03                                    ..... 
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtrans2 (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:06,  3] smbd/trans2.c:2599(call_trans2qfsinfo)
>  call_trans2qfsinfo: level = 1008
>[2009/10/02 12:00:06,  9] smbd/trans2.c:820(send_trans2_replies)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 64, useable_space = 131012
>[2009/10/02 12:00:06,  9] smbd/trans2.c:822(send_trans2_replies)
>  t2_rep: params_to_send = 0, data_to_send = 64, paramsize = 0, datasize = 64
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=120
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20673
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   64 (0x40)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   64 (0x40)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=65
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 32 91 53 F5 60 EB 32   9C 0E 1D EE A5 5E 88 A1   .2.S.`.2 .....^..
>  [0010] E9 61 42 6D 53 00 01 04   03 00 00 00 00 00 00 00   .aBmS... ........
>  [0020] 00 00 00 00 00 33 2E 34   2E 31 00 00 00 00 00 00   .....3.4 .1......
>  [0030] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
>  [0040] 00                                                . 
>[2009/10/02 12:00:06,  4] smbd/trans2.c:3128(call_trans2qfsinfo)
>  SMBtrans2 info_level = 1008
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 104 of length 45 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=20737
>  smt_wct=3
>  smb_vwv[ 0]= 4597 (0x11F5)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:06,  3] smbd/reply.c:4446(reply_close)
>  close directory fnum=4597
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64bf710
>[2009/10/02 12:00:06, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 2
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12993, share_access = 0x7, private_options = 0x0, access_mask = 0x100080, mid = 0x0, type= 0x0, gen_id = 20, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Wed Sep 30 15:03:43 2009 CEST cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num: 2
>[2009/10/02 12:00:06, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12993, share_access = 0x7, private_options = 0x0, access_mask = 0x100080, mid = 0x0, type= 0x40, gen_id = 20, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:06,  5] smbd/files.c:484(file_free)
>  freed files structure 4597 (1 used)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=20737
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 86
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x56
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 105 of length 90 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=86
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20801
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=33024 (0x8100)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=3
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00                                          ... 
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x16, access_mask = 0x81 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = 
>[2009/10/02 12:00:06, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x81 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = 
>[2009/10/02 12:00:06,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:06,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:06, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x81 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x3 ea_list = 0x(nil), sd = 0x(nil), fname = .
>[2009/10/02 12:00:06,  5] smbd/files.c:103(file_new)
>  allocated file structure 502, fnum = 4598 (2 used)
>[2009/10/02 12:00:06,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(.) returning 0644
>[2009/10/02 12:00:06, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=., dos_attrs=0x0 access_mask=0x81 share_access=0x3 create_disposition = 0x1 create_options=0x0 unix mode=0644 oplock_request=3
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:06, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=., after mapping access_mask=0x81
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64bf860
>[2009/10/02 12:00:06, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 2
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12993, share_access = 0x7, private_options = 0x0, access_mask = 0x100080, mid = 0x0, type= 0x40, gen_id = 20, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x0 on file 
>[2009/10/02 12:00:06, 10] smbd/open.c:617(share_conflict)
>  share_conflict: entry->access_mask = 0x100081, entry->share_access = 0x7, entry->private_options = 0x1
>[2009/10/02 12:00:06, 10] smbd/open.c:620(share_conflict)
>  share_conflict: access_mask = 0x81, share_access = 0x3
>[2009/10/02 12:00:06, 10] smbd/open.c:669(share_conflict)
>  share_conflict: [1] am (0x100081) & right (0x6) = 0x0
>[2009/10/02 12:00:06, 10] smbd/open.c:669(share_conflict)
>  share_conflict: [1] sa (0x3) & share (0x2) = 0x2
>[2009/10/02 12:00:06, 10] smbd/open.c:671(share_conflict)
>  share_conflict: [2] am (0x81) & right (0x6) = 0x0
>[2009/10/02 12:00:06, 10] smbd/open.c:671(share_conflict)
>  share_conflict: [2] sa (0x7) & share (0x2) = 0x2
>[2009/10/02 12:00:06, 10] smbd/open.c:674(share_conflict)
>  share_conflict: [3] am (0x100081) & right (0x21) = 0x1
>[2009/10/02 12:00:06, 10] smbd/open.c:674(share_conflict)
>  share_conflict: [3] sa (0x3) & share (0x1) = 0x1
>[2009/10/02 12:00:06, 10] smbd/open.c:676(share_conflict)
>  share_conflict: [4] am (0x81) & right (0x21) = 0x1
>[2009/10/02 12:00:06, 10] smbd/open.c:676(share_conflict)
>  share_conflict: [4] sa (0x7) & share (0x1) = 0x1
>[2009/10/02 12:00:06, 10] smbd/open.c:679(share_conflict)
>  share_conflict: [5] am (0x100081) & right (0x10000) = 0x0
>[2009/10/02 12:00:06, 10] smbd/open.c:679(share_conflict)
>  share_conflict: [5] sa (0x3) & share (0x4) = 0x0
>[2009/10/02 12:00:06, 10] smbd/open.c:681(share_conflict)
>  share_conflict: [6] am (0x81) & right (0x10000) = 0x0
>[2009/10/02 12:00:06, 10] smbd/open.c:681(share_conflict)
>  share_conflict: [6] sa (0x7) & share (0x4) = 0x4
>[2009/10/02 12:00:06, 10] smbd/open.c:683(share_conflict)
>  share_conflict: No conflict.
>[2009/10/02 12:00:06, 10] smbd/open.c:980(delay_for_oplocks)
>  delay_for_oplocks: oplock type 0x0 on file 
>[2009/10/02 12:00:06,  4] smbd/open.c:1913(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x81, open_access_mask = 0x81
>[2009/10/02 12:00:06, 10] smbd/open.c:160(fd_open)
>  fd_open: name ., flags = 00 mode = 0644, fd = 30. 
>[2009/10/02 12:00:06, 10] locking/posix.c:495(get_windows_lock_ref_count)
>  get_windows_lock_count for file  = 0
>[2009/10/02 12:00:06, 10] locking/posix.c:521(delete_windows_lock_ref_count)
>  delete_windows_lock_ref_count for file 
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:06,  5] smbd/files.c:484(file_free)
>  freed files structure 4598 (1 used)
>[2009/10/02 12:00:06,  5] smbd/open.c:2391(open_directory)
>  open_directory: opening directory ., access_mask = 0x81, share_access = 0x3 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x0
>[2009/10/02 12:00:06,  5] smbd/files.c:103(file_new)
>  allocated file structure 503, fnum = 4599 (2 used)
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64bff10
>[2009/10/02 12:00:06, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 2
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12993, share_access = 0x7, private_options = 0x0, access_mask = 0x100080, mid = 0x0, type= 0x40, gen_id = 20, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] smbd/open.c:617(share_conflict)
>  share_conflict: entry->access_mask = 0x100081, entry->share_access = 0x7, entry->private_options = 0x1
>[2009/10/02 12:00:06, 10] smbd/open.c:620(share_conflict)
>  share_conflict: access_mask = 0x81, share_access = 0x3
>[2009/10/02 12:00:06, 10] smbd/open.c:669(share_conflict)
>  share_conflict: [1] am (0x100081) & right (0x6) = 0x0
>[2009/10/02 12:00:06, 10] smbd/open.c:669(share_conflict)
>  share_conflict: [1] sa (0x3) & share (0x2) = 0x2
>[2009/10/02 12:00:06, 10] smbd/open.c:671(share_conflict)
>  share_conflict: [2] am (0x81) & right (0x6) = 0x0
>[2009/10/02 12:00:06, 10] smbd/open.c:671(share_conflict)
>  share_conflict: [2] sa (0x7) & share (0x2) = 0x2
>[2009/10/02 12:00:06, 10] smbd/open.c:674(share_conflict)
>  share_conflict: [3] am (0x100081) & right (0x21) = 0x1
>[2009/10/02 12:00:06, 10] smbd/open.c:674(share_conflict)
>  share_conflict: [3] sa (0x3) & share (0x1) = 0x1
>[2009/10/02 12:00:06, 10] smbd/open.c:676(share_conflict)
>  share_conflict: [4] am (0x81) & right (0x21) = 0x1
>[2009/10/02 12:00:06, 10] smbd/open.c:676(share_conflict)
>  share_conflict: [4] sa (0x7) & share (0x1) = 0x1
>[2009/10/02 12:00:06, 10] smbd/open.c:679(share_conflict)
>  share_conflict: [5] am (0x100081) & right (0x10000) = 0x0
>[2009/10/02 12:00:06, 10] smbd/open.c:679(share_conflict)
>  share_conflict: [5] sa (0x3) & share (0x4) = 0x0
>[2009/10/02 12:00:06, 10] smbd/open.c:681(share_conflict)
>  share_conflict: [6] am (0x81) & right (0x10000) = 0x0
>[2009/10/02 12:00:06, 10] smbd/open.c:681(share_conflict)
>  share_conflict: [6] sa (0x7) & share (0x4) = 0x4
>[2009/10/02 12:00:06, 10] smbd/open.c:683(share_conflict)
>  share_conflict: No conflict.
>[2009/10/02 12:00:06, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Wed Sep 30 15:03:43 2009 CEST cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num: 2
>[2009/10/02 12:00:06, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]:  pid = 12993, share_access = 0x3, private_options = 0x0, access_mask = 0x81, mid = 0x0, type= 0x0, gen_id = 22, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:06, 10] smbd/open.c:3201(create_file_unixpath)
>  create_file_unixpath: info=1
>[2009/10/02 12:00:06, 10] smbd/open.c:3496(create_file_default)
>  create_file: info=1
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:06,  5] smbd/nttrans.c:650(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: fnum = 4599, open name = .
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 84
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x54
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 106 of length 88 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20865
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]= 4096 (0x1000)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=16484 (0x4064)
>  smb_vwv[20]=   20 (0x14)
>  smb_vwv[21]= 4599 (0x11F7)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00                                          ... 
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBnttrans (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:2697(reply_nttrans)
>  num_setup=8, param_total=0, this_param=0, max_param=0, data_total=0, this_data=0, max_data=16, param_offset=84, data_offset=0
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:2769(reply_nttrans)
>  reply_nttrans: state->setup_count = 8
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 64 40 14 00 F7 11 01 00                            d@...... 
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:1824(call_nt_transact_ioctl)
>  call_nt_transact_ioctl: function[0x00144064] FID[0x11F7] isFSctl[0x01] compfilter[0x00]
>[2009/10/02 12:00:06,  5] smbd/nttrans.c:1949(call_nt_transact_ioctl)
>  FSCTL_GET_SHADOW_COPY_DATA: connectpath /export/netroot, not supported.
>[2009/10/02 12:00:06,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(1950) cmd=160 (SMBnttrans) NT_STATUS_NOT_SUPPORTED
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0xa0
>  smb_rcls=187
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20865
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 107 of length 45 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=20929
>  smt_wct=3
>  smb_vwv[ 0]= 4599 (0x11F7)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:06,  3] smbd/reply.c:4446(reply_close)
>  close directory fnum=4599
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64bf710
>[2009/10/02 12:00:06, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 2
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12993, share_access = 0x3, private_options = 0x0, access_mask = 0x81, mid = 0x0, type= 0x0, gen_id = 22, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Wed Sep 30 15:03:43 2009 CEST cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num: 2
>[2009/10/02 12:00:06, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12993, share_access = 0x3, private_options = 0x0, access_mask = 0x81, mid = 0x0, type= 0x40, gen_id = 22, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:06,  5] smbd/files.c:484(file_free)
>  freed files structure 4599 (1 used)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=20929
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 88
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x58
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 108 of length 92 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=88
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=20993
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=  512 (0x200)
>  smb_vwv[ 3]= 4096 (0x1000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=32768 (0x8000)
>  smb_vwv[ 8]= 4096 (0x1000)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=32768 (0x8000)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]= 8192 (0x2000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  768 (0x300)
>  smb_bcc=5
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 5C 00 00 00                                    .\... 
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBntcreateX (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:483(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x10, access_mask = 0x100080 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x200000 root_dir_fid = 0x0, fname = 
>[2009/10/02 12:00:06, 10] smbd/open.c:3366(create_file_default)
>  create_file: access_mask = 0x100080 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), create_file_flags = 0x1, fname = 
>[2009/10/02 12:00:06,  5] smbd/filename.c:148(unix_convert)
>  unix_convert called on file ""
>[2009/10/02 12:00:06,  5] smbd/filename.c:181(unix_convert)
>  conversion finished "" -> .
>[2009/10/02 12:00:06, 10] smbd/open.c:2896(create_file_unixpath)
>  create_file_unixpath: access_mask = 0x100080 file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x200000 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = .
>[2009/10/02 12:00:06,  5] smbd/files.c:103(file_new)
>  allocated file structure 504, fnum = 4600 (2 used)
>[2009/10/02 12:00:06,  3] smbd/dosmode.c:135(unix_mode)
>  unix_mode(.) returning 0644
>[2009/10/02 12:00:06, 10] smbd/open.c:1475(open_file_ntcreate)
>  open_file_ntcreate: fname=., dos_attrs=0x80 access_mask=0x100080 share_access=0x3 create_disposition = 0x1 create_options=0x200000 unix mode=0644 oplock_request=0
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:06, 10] smbd/open.c:1653(open_file_ntcreate)
>  open_file_ntcreate: fname=., after mapping access_mask=0x100080
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64bf860
>[2009/10/02 12:00:06, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 2
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12993, share_access = 0x3, private_options = 0x0, access_mask = 0x81, mid = 0x0, type= 0x40, gen_id = 22, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06,  4] smbd/open.c:1913(open_file_ntcreate)
>  calling open_file with flags=0x0 flags2=0x0 mode=0644, access_mask = 0x100080, open_access_mask = 0x100080
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:06,  5] smbd/files.c:484(file_free)
>  freed files structure 4600 (1 used)
>[2009/10/02 12:00:06,  5] smbd/open.c:2391(open_directory)
>  open_directory: opening directory ., access_mask = 0x100080, share_access = 0x3 create_options = 0x200000, create_disposition = 0x1, file_attributes = 0x80
>[2009/10/02 12:00:06,  5] smbd/files.c:103(file_new)
>  allocated file structure 505, fnum = 4601 (2 used)
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64bfe50
>[2009/10/02 12:00:06, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 2
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12993, share_access = 0x3, private_options = 0x0, access_mask = 0x81, mid = 0x0, type= 0x40, gen_id = 22, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Wed Sep 30 15:03:43 2009 CEST cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num: 2
>[2009/10/02 12:00:06, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]:  pid = 12993, share_access = 0x3, private_options = 0x200000, access_mask = 0x100080, mid = 0x0, type= 0x0, gen_id = 24, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:06, 10] smbd/open.c:3201(create_file_unixpath)
>  create_file_unixpath: info=1
>[2009/10/02 12:00:06, 10] smbd/open.c:3496(create_file_default)
>  create_file: info=1
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:476(dos_mode)
>  dos_mode: .
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:175(dos_mode_from_sbuf)
>  dos_mode_from_sbuf returning d
>[2009/10/02 12:00:06,  8] smbd/dosmode.c:523(dos_mode)
>  dos_mode returning d
>[2009/10/02 12:00:06,  5] smbd/nttrans.c:650(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: fnum = 4601, open name = .
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 84
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x54
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 109 of length 88 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=84
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=21057
>  smt_wct=23
>  smb_vwv[ 0]=    4 (0x4)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=   64 (0x40)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=21504 (0x5400)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]= 1024 (0x400)
>  smb_vwv[18]=    2 (0x2)
>  smb_vwv[19]=  168 (0xA8)
>  smb_vwv[20]=    9 (0x9)
>  smb_vwv[21]= 4601 (0x11F9)
>  smb_vwv[22]=    1 (0x1)
>  smb_bcc=3
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] 00 00 00                                          ... 
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBnttrans (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:2697(reply_nttrans)
>  num_setup=8, param_total=0, this_param=0, max_param=0, data_total=0, this_data=0, max_data=16384, param_offset=84, data_offset=0
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:2769(reply_nttrans)
>  reply_nttrans: state->setup_count = 8
>[2009/10/02 12:00:06, 10] ../lib/util/util.c:304(_dump_data)
>  [0000] A8 00 09 00 F9 11 01 00                            ........ 
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:1824(call_nt_transact_ioctl)
>  call_nt_transact_ioctl: function[0x000900A8] FID[0x11F9] isFSctl[0x01] compfilter[0x00]
>[2009/10/02 12:00:06, 10] smbd/nttrans.c:1878(call_nt_transact_ioctl)
>  FSCTL_GET_REPARSE_POINT: called on FID[0x11F9](but not implemented)
>[2009/10/02 12:00:06,  3] smbd/error.c:60(error_packet_set)
>  error packet at smbd/nttrans.c(1879) cmd=160 (SMBnttrans) NT_STATUS_NOT_A_REPARSE_POINT
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0xa0
>  smb_rcls=117
>  smb_reh=2
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=21057
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:06, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 41
>[2009/10/02 12:00:06,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x29
>[2009/10/02 12:00:06,  3] smbd/process.c:1439(process_smb)
>  Transaction 110 of length 45 (0 toread)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=21121
>  smt_wct=3
>  smb_vwv[ 0]= 4601 (0x11F9)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2009/10/02 12:00:06,  3] smbd/process.c:1252(switch_message)
>  switch message SMBclose (pid 12993) conn 0x7f61c64a49b0
>[2009/10/02 12:00:06,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 1001) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:06,  5] auth/token_util.c:528(debug_nt_user_token)
>  NT user token of user S-1-5-21-2901898339-3287136368-3549063626-3002
>  contains 9 SIDs
>  SID[  0]: S-1-5-21-2901898339-3287136368-3549063626-3002
>  SID[  1]: S-1-22-2-1001
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-22-1-1001
>  SID[  6]: S-1-22-2-20002
>  SID[  7]: S-1-22-2-20003
>  SID[  8]: S-1-22-2-20004
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2009/10/02 12:00:06,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 1001 and contains 4 supplementary groups
>  Group[  0]: 1001
>  Group[  1]: 20002
>  Group[  2]: 20003
>  Group[  3]: 20004
>[2009/10/02 12:00:06,  5] smbd/uid.c:353(change_to_user)
>  change_to_user uid=(0,0) gid=(0,1001)
>[2009/10/02 12:00:06,  3] smbd/reply.c:4446(reply_close)
>  close directory fnum=4601
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64bf710
>[2009/10/02 12:00:06, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 2
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]:  pid = 12993, share_access = 0x3, private_options = 0x200000, access_mask = 0x100080, mid = 0x0, type= 0x0, gen_id = 24, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:716(unparse_share_modes)
>  unparse_share_modes: del: 0, owrt: Wed Sep 30 15:03:43 2009 CEST cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num: 2
>[2009/10/02 12:00:06, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] locking/locking.c:518(print_share_mode_table)
>  print_share_mode_table: share_mode_entry[1]: UNUSED pid = 12993, share_access = 0x3, private_options = 0x200000, access_mask = 0x100080, mid = 0x0, type= 0x40, gen_id = 24, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:06, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:06,  5] smbd/files.c:484(file_free)
>  freed files structure 4601 (1 used)
>[2009/10/02 12:00:06,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:06,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=21121
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:13, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 39
>[2009/10/02 12:00:13,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x27
>[2009/10/02 12:00:13,  3] smbd/process.c:1439(process_smb)
>  Transaction 111 of length 43 (0 toread)
>[2009/10/02 12:00:13,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:13,  5] lib/util.c:642(show_msg)
>  size=39
>  smb_com=0x74
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=21185
>  smt_wct=2
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_bcc=0
>[2009/10/02 12:00:13,  3] smbd/process.c:1252(switch_message)
>  switch message SMBulogoffX (pid 12993) conn 0x0
>[2009/10/02 12:00:13,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:13,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:13,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:13,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:13,  3] smbd/reply.c:1925(reply_ulogoffX)
>  ulogoffX vuid=101
>[2009/10/02 12:00:13, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/10/02 12:00:13,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x23
>[2009/10/02 12:00:13,  3] smbd/process.c:1439(process_smb)
>  Transaction 112 of length 39 (0 toread)
>[2009/10/02 12:00:13,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:13,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=21249
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:13,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtdis (pid 12993) conn 0x7f61c648a300
>[2009/10/02 12:00:13,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:13,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:13,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:13,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:13,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2009/10/02 12:00:13,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:13,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:13,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:13,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:13,  3] smbd/service.c:1222(close_cnum)
>  platypus (192.168.3.182) closed connection to service IPC$
>[2009/10/02 12:00:13,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to IPC$
>[2009/10/02 12:00:13, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key C1320000020000004950
>[2009/10/02 12:00:13, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c6477c80
>[2009/10/02 12:00:13, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key C1320000020000004950
>[2009/10/02 12:00:13,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/10/02 12:00:13,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:13,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:13,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:13,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:13,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:13,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=101
>  smb_mid=21249
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:13, 10] lib/util_sock.c:789(read_smb_length_return_keepalive)
>  got smb length of 35
>[2009/10/02 12:00:13,  6] smbd/process.c:1436(process_smb)
>  got message type 0x0 of len 0x23
>[2009/10/02 12:00:13,  3] smbd/process.c:1439(process_smb)
>  Transaction 113 of length 39 (0 toread)
>[2009/10/02 12:00:13,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:13,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=21313
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:13,  3] smbd/process.c:1252(switch_message)
>  switch message SMBtdis (pid 12993) conn 0x7f61c648b8d0
>[2009/10/02 12:00:13,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:13,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:13,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:13,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:13,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /tmp
>[2009/10/02 12:00:13,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:13,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:13,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:13,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:13,  3] smbd/service.c:1222(close_cnum)
>  platypus (192.168.3.182) closed connection to service IPC$
>[2009/10/02 12:00:13,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to IPC$
>[2009/10/02 12:00:13, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key C1320000010000004950
>[2009/10/02 12:00:13, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c6477c80
>[2009/10/02 12:00:13, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key C1320000010000004950
>[2009/10/02 12:00:13,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/10/02 12:00:13,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:13,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:13,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:13,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:13,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:13,  5] lib/util.c:642(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=21313
>  smt_wct=0
>  smb_bcc=0
>[2009/10/02 12:00:14,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:14,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:14,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:14,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:14,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to 
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key BD320000FFFFFFFF0000
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c648f8e0
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key BD320000FFFFFFFF0000
>[2009/10/02 12:00:14,  3] smbd/server.c:845(exit_server_common)
>  Server exit (termination signal)
>[2009/10/02 12:00:14,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:14,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:14,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:14,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:14,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to 
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key C0320000FFFFFFFF0000
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c6494080
>[2009/10/02 12:00:14,  3] smbd/connection.c:42(yield_connection)
>  deleting connection record returned NT_STATUS_NOT_FOUND
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key C0320000FFFFFFFF0000
>[2009/10/02 12:00:14,  3] smbd/server.c:845(exit_server_common)
>  Server exit (termination signal)
>[2009/10/02 12:00:14,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:14,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:14,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:14,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:14,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /export/netroot
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 11080000000000008000
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c64b23c0
>[2009/10/02 12:00:14, 10] locking/locking.c:552(parse_share_modes)
>  parse_share_modes: delete_on_close: 0, owrt: Wed Sep 30 15:03:43 2009 CEST, cwrt: Thu Jan  1 01:00:00 1970 CET, tok: 0, num_share_modes: 2
>[2009/10/02 12:00:14, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[0]:  pid = 12993, share_access = 0x7, private_options = 0x1, access_mask = 0x100081, mid = 0x0, type= 0x0, gen_id = 13, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:14, 10] locking/locking.c:649(parse_share_modes)
>  parse_share_modes: share_mode_entry[1]: UNUSED pid = 12993, share_access = 0x3, private_options = 0x200000, access_mask = 0x100080, mid = 0x0, type= 0x40, gen_id = 24, uid = 1001, flags = 0, file_id 811:80:0
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 11080000000000008000
>[2009/10/02 12:00:14,  5] lib/util.c:632(show_msg)
>[2009/10/02 12:00:14,  5] lib/util.c:642(show_msg)
>  size=71
>  smb_com=0xa0
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=3
>  smb_pid=1488
>  smb_uid=100
>  smb_mid=18496
>  smt_wct=18
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_bcc=0
>[2009/10/02 12:00:14, 10] smbd/notify_inotify.c:354(watch_destructor)
>  Deleting inotify watch 1
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 6E6F7469667920617272
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c6477760
>[2009/10/02 12:00:14, 10] smbd/notify_internal.c:177(notify_load)
>  notify_load:
>[2009/10/02 12:00:14,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       notify->array: struct notify_array
>          num_depths               : 0x00000003 (3)
>          depth: ARRAY(3)
>              depth: struct notify_depth
>                  max_mask                 : 0x00000000 (0)
>                  max_mask_subdir          : 0x00000000 (0)
>                  num_entries              : 0x00000000 (0)
>                  entries: ARRAY(0)
>              depth: struct notify_depth
>                  max_mask                 : 0x00000000 (0)
>                  max_mask_subdir          : 0x00000000 (0)
>                  num_entries              : 0x00000000 (0)
>                  entries: ARRAY(0)
>              depth: struct notify_depth
>                  max_mask                 : 0x00000000 (0)
>                  max_mask_subdir          : 0x00000017 (23)
>                  num_entries              : 0x00000001 (1)
>                  entries: ARRAY(1)
>                      entries: struct notify_entry
>                          server: struct server_id
>                              id                       : 0x000032c1 (12993)
>                          filter                   : 0x00000000 (0)
>                          subdir_filter            : 0x00000017 (23)
>                          dir_fd                   : 0xffffffff (4294967295)
>                          dir_id: struct file_id
>                              devid                    : 0x0000000000000811 (2065)
>                              inode                    : 0x0000000000000080 (128)
>                              extid                    : 0x0000000000000000 (0)
>                          path                     : '/export/netroot'
>                          path_len                 : 0x0000000f (15)
>                          private_data             : 0x7f61c648d410
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 6E6F7469667920617272
>[2009/10/02 12:00:14,  5] smbd/files.c:484(file_free)
>  freed files structure 4590 (0 used)
>[2009/10/02 12:00:14,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:14,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:14,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:14,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:14,  1] smbd/service.c:1222(close_cnum)
>  platypus (192.168.3.182) closed connection to service root
>[2009/10/02 12:00:14,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to root
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key C132000003000000726F
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c6477c80
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key C132000003000000726F
>[2009/10/02 12:00:14,  4] smbd/vfs.c:753(vfs_ChDir)
>  vfs_ChDir to /
>[2009/10/02 12:00:14,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2009/10/02 12:00:14,  5] auth/token_util.c:522(debug_nt_user_token)
>  NT user token: (NULL)
>[2009/10/02 12:00:14,  5] auth/token_util.c:548(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2009/10/02 12:00:14,  5] smbd/uid.c:368(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2009/10/02 12:00:14,  5] lib/messages.c:329(messaging_deregister)
>  Deregistering messaging pointer for type 784 - private_data=0x7f61c64b0e60
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 49442F31323939332F31
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c6493400
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 49442F31323939332F31
>[2009/10/02 12:00:14,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to 
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key C1320000FFFFFFFF0000
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f61c6485a10
>[2009/10/02 12:00:14, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key C1320000FFFFFFFF0000
>[2009/10/02 12:00:14,  3] smbd/server.c:845(exit_server_common)
>  Server exit (termination signal)

Actions: View

Attachments on bug 6775: 4775 | 4776 | 4955 | 4956