[2004/05/29 21:30:48, 6, pid=25846] param/loadparm.c:lp_file_list_changed(2665) lp_file_list_changed() file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf last mod_time: Tue May 25 09:46:28 2004 file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.UNKNOWN.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf last mod_time: Sat May 15 22:32:24 2004 file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/smbd last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/smbd last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf last mod_time: Sat May 29 21:27:30 2004 [2004/05/29 21:30:48, 2, pid=25846] lib/interface.c:add_interface(79) added interface ip=140.142.15.168 bcast=140.142.15.191 nmask=255.255.255.224 [2004/05/29 21:30:48, 2, pid=25846] lib/interface.c:add_interface(79) added interface ip=198.48.88.162 bcast=198.48.88.255 nmask=255.255.255.0 [2004/05/29 21:30:48, 5, pid=25846] lib/hash.c:hash_table_init(67) Hash size = 521. [2004/05/29 21:30:48, 5, pid=25846] lib/util.c:init_names(270) Netbios name list:- my_netbios_names[0]="CANON" [2004/05/29 21:30:48, 3, pid=25846] smbd/server.c:main(787) loaded services [2004/05/29 21:30:48, 3, pid=25846] smbd/server.c:main(802) Becoming a daemon. [2004/05/29 21:30:48, 8, pid=25847] lib/util.c:fcntl_lock(1656) fcntl_lock 6 13 0 1 1 [2004/05/29 21:30:48, 8, pid=25847] lib/util.c:fcntl_lock(1691) fcntl_lock: Lock call successful [2004/05/29 21:30:48, 2, pid=25847] lib/tallocmsg.c:register_msg_pool_usage(57) Registered MSG_REQ_POOL_USAGE [2004/05/29 21:30:48, 2, pid=25847] lib/dmallocmsg.c:register_dmalloc_msgs(71) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2004/05/29 21:30:48, 5, pid=25847] lib/gencache.c:gencache_init(59) Opening cache file at /var/locks/gencache.tdb [2004/05/29 21:30:48, 5, pid=25847] libsmb/namecache.c:namecache_enable(58) namecache_enable: enabling netbios namecache, timeout 660 seconds [2004/05/29 21:30:48, 10, pid=25847] registry/reg_cachehook.c:reghook_cache_add(60) reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Control/Print] [2004/05/29 21:30:48, 8, pid=25847] lib/adt_tree.c:sorted_tree_add(247) sorted_tree_add: Enter [2004/05/29 21:30:48, 10, pid=25847] lib/adt_tree.c:sorted_tree_add(314) sorted_tree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree [2004/05/29 21:30:48, 8, pid=25847] lib/adt_tree.c:sorted_tree_add(316) sorted_tree_add: Exit [2004/05/29 21:30:48, 10, pid=25847] printing/nt_printing.c:update_c_setprinter(425) update_c_setprinter: c_setprinter = 0 [2004/05/29 21:30:48, 5, pid=25847] smbd/connection.c:claim_connection(170) claiming 0 [2004/05/29 21:30:48, 10, pid=25847] lib/util_sock.c:open_socket_in(700) bind succeeded on port 445 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_KEEPALIVE = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_REUSEADDR = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_BROADCAST = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option TCP_NODELAY = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option IPTOS_LOWDELAY = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option IPTOS_THROUGHPUT = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_SNDBUF = 65536 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_RCVBUF = 87380 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_SNDLOWAT = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_RCVLOWAT = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_SNDTIMEO = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_RCVTIMEO = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_KEEPALIVE = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_REUSEADDR = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_BROADCAST = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option TCP_NODELAY = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option IPTOS_LOWDELAY = 16 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option IPTOS_THROUGHPUT = 16 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_SNDBUF = 65536 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_RCVBUF = 87380 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_SNDLOWAT = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_RCVLOWAT = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_SNDTIMEO = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_RCVTIMEO = 0 [2004/05/29 21:30:48, 10, pid=25847] lib/util_sock.c:open_socket_in(700) bind succeeded on port 139 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_KEEPALIVE = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_REUSEADDR = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_BROADCAST = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option TCP_NODELAY = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option IPTOS_LOWDELAY = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option IPTOS_THROUGHPUT = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_SNDBUF = 65536 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_RCVBUF = 87380 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_SNDLOWAT = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_RCVLOWAT = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_SNDTIMEO = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_RCVTIMEO = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_KEEPALIVE = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_REUSEADDR = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_BROADCAST = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option TCP_NODELAY = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option IPTOS_LOWDELAY = 16 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option IPTOS_THROUGHPUT = 16 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_SNDBUF = 65536 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_RCVBUF = 87380 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_SNDLOWAT = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_RCVLOWAT = 1 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_SNDTIMEO = 0 [2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130) socket option SO_RCVTIMEO = 0 [2004/05/29 21:30:48, 2, pid=25847] smbd/server.c:open_sockets_smbd(324) waiting for a connection [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_KEEPALIVE = 1 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_REUSEADDR = 1 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_BROADCAST = 0 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option TCP_NODELAY = 1 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option IPTOS_LOWDELAY = 16 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option IPTOS_THROUGHPUT = 16 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_SNDBUF = 65536 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_RCVBUF = 87380 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_SNDLOWAT = 1 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_RCVLOWAT = 1 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_SNDTIMEO = 0 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_RCVTIMEO = 0 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_KEEPALIVE = 1 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_REUSEADDR = 1 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_BROADCAST = 0 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option TCP_NODELAY = 1 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option IPTOS_LOWDELAY = 16 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option IPTOS_THROUGHPUT = 16 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_SNDBUF = 65536 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_RCVBUF = 87380 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_SNDLOWAT = 1 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_RCVLOWAT = 1 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_SNDTIMEO = 0 [2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130) socket option SO_RCVTIMEO = 0 [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_context_list(763) Trying to load: smbpasswd [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend ldapsam [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'ldapsam' [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend ldapsam_compat [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'ldapsam_compat' [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend smbpasswd [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'smbpasswd' [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend tdbsam [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'tdbsam' [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend guest [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'guest' [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_methods_name(648) Attempting to find an passdb backend to match smbpasswd (smbpasswd) [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_methods_name(669) Found pdb backend smbpasswd [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_methods_name(672) pdb backend smbpasswd has a valid init [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_methods_name(648) Attempting to find an passdb backend to match guest (guest) [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_methods_name(669) Found pdb backend guest [2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_methods_name(672) pdb backend guest has a valid init [2004/05/29 21:30:57, 6, pid=25850] param/loadparm.c:lp_file_list_changed(2665) lp_file_list_changed() file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf last mod_time: Tue May 25 09:46:28 2004 file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.UNKNOWN.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf last mod_time: Sat May 15 22:32:24 2004 file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf last mod_time: Sat May 29 21:27:30 2004 [2004/05/29 21:30:57, 3, pid=25850] smbd/oplock.c:init_oplocks(1226) open_oplock_ipc: opening loopback UDP socket. [2004/05/29 21:30:57, 10, pid=25850] lib/util_sock.c:open_socket_in(700) bind succeeded on port 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/oplock_linux.c:linux_init_kernel_oplocks(303) Linux kernel oplocks enabled [2004/05/29 21:30:57, 3, pid=25850] smbd/oplock.c:init_oplocks(1257) open_oplock ipc: pid = 25850, global_oplock_port = 37641 [2004/05/29 21:30:57, 4, pid=25850] lib/time.c:get_serverzone(122) Serverzone is 25200 [2004/05/29 21:30:57, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 133 [2004/05/29 21:30:57, 3, pid=25850] lib/access.c:check_access(313) check_access: no hostnames in host allow/deny list. [2004/05/29 21:30:57, 2, pid=25850] lib/access.c:check_access(324) Allowed connection from (140.142.110.103) [2004/05/29 21:30:57, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x85 [2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 0 of length 137 [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864) [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [060] 32 00 2. [2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBnegprot (pid 25850) [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 5, pid=25850] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(455) Requested protocol [PC NETWORK PROGRAM 1.0] [2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(455) Requested protocol [LANMAN1.0] [2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(455) Requested protocol [Windows for Workgroups 3.1a] [2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(455) Requested protocol [LM1.2X002] [2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(455) Requested protocol [LANMAN2.1] [2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(455) Requested protocol [NT LM 0.12] [2004/05/29 21:30:57, 10, pid=25850] lib/util.c:set_remote_arch(1839) set_remote_arch: Client arch is 'Win2K' [2004/05/29 21:30:57, 6, pid=25850] param/loadparm.c:lp_file_list_changed(2665) lp_file_list_changed() file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf last mod_time: Tue May 25 09:46:28 2004 file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.Win2K.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf last mod_time: Sat May 15 22:32:24 2004 file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf last mod_time: Sat May 29 21:27:30 2004 [2004/05/29 21:30:57, 6, pid=25850] param/loadparm.c:lp_file_list_changed(2665) lp_file_list_changed() file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf last mod_time: Tue May 25 09:46:28 2004 file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.Win2K.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf last mod_time: Sat May 15 22:32:24 2004 file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf last mod_time: Sat May 29 21:27:30 2004 [2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_nt1(329) using SPNEGO [2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(532) Selected protocol NT LM 0.12 [2004/05/29 21:30:57, 5, pid=25850] smbd/negprot.c:reply_negprot(538) negprot index=5 [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466) size=173 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=64000 (0xFA00) smb_vwv[ 8]= 100 (0x64) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=54742 (0xD5D6) smb_vwv[13]=65254 (0xFEE6) smb_vwv[14]=50245 (0xC445) smb_vwv[15]=41985 (0xA401) smb_vwv[16]=26625 (0x6801) smb_bcc=104 [2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864) [000] 63 61 6E 6F 6E 00 00 00 00 00 00 00 00 00 00 00 canon... ........ [010] 60 56 06 06 2B 06 01 05 05 02 A0 4C 30 4A A0 24 `V..+... .. L0J $ [020] 30 22 06 09 2A 86 48 86 F7 12 01 02 02 06 09 2A 0"..*.H. ÷......* [030] 86 48 82 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H.÷.... ..+..... [040] 37 02 02 0A A3 22 30 20 A0 1E 1B 1C 63 61 6E 6F 7...£"0  ...cano [050] 6E 24 40 4E 45 42 55 4C 41 2E 57 41 53 48 49 4E n$@NEBUL A.WASHIN [060] 47 54 4F 4E 2E 45 44 55 GTON.EDU [2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,177) [2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,177) wrote 177 [2004/05/29 21:30:57, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 1650 [2004/05/29 21:30:57, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x672 [2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 1 of length 1654 [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466) size=1650 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=2816 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1650 (0x672) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1488 (0x5D0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=1591 [2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864) [000] 60 82 05 CC 06 06 2B 06 01 05 05 02 A0 82 05 C0 `..Ì..+. .... ..À [010] 30 82 05 BC A0 24 30 22 06 09 2A 86 48 82 F7 12 0..¼ $0" ..*.H.÷. [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H .÷...... [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 05 92 04 82 +.....7. ..¢..... [040] 05 8E 60 82 05 8A 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H.÷... [050] 02 01 00 6E 82 05 79 30 82 05 75 A0 03 02 01 05 ...n..y0 ..u .... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ¡....¢.. .. ...£. [070] 04 9D 61 82 04 99 30 82 04 95 A0 03 02 01 05 A1 ..a...0. .. ....¡ [080] 17 1B 15 4E 45 42 55 4C 41 2E 57 41 53 48 49 4E ...NEBUL A.WASHIN [090] 47 54 4F 4E 2E 45 44 55 A2 2B 30 29 A0 03 02 01 GTON.EDU ¢+0) ... [0A0] 02 A1 22 30 20 1B 04 63 69 66 73 1B 18 63 61 6E .¡"0 ..c ifs..can [0B0] 6F 6E 2E 63 61 63 2E 77 61 73 68 69 6E 67 74 6F on.cac.w ashingto [0C0] 6E 2E 65 64 75 A3 82 04 46 30 82 04 42 A0 03 02 n.edu£.. F0..B .. [0D0] 01 03 A1 03 02 01 02 A2 82 04 34 04 82 04 30 4F ..¡....¢ ..4...0O [0E0] 1E A9 59 B6 46 56 C4 FA 1C 62 91 FC 9D 7F AF A5 .©Y¶FVÄú .b.ü..¯¥ [0F0] 0D 3C 83 C7 0C 22 76 DF 85 CC 8E 8F 3D 38 4D 37 .<.Ç."vß .Ì..=8M7 [100] D1 9A F1 E2 7B 6B C4 31 78 8B 64 CE 53 93 43 8E Ñ.ñâ{kÄ1 x.dÎS.C. [110] 6D 39 F2 CE 77 4D C4 E8 A9 A6 9B 6D F1 CD 3A 14 m9òÎwMÄè ©¦.mñÍ:. [120] 43 ED 6F 05 C4 DA C4 A0 96 B6 74 6F 0D B2 B4 23 Cío.ÄÚÄ  .¶to.²´# [130] DE 48 BB 5B 7B 8A 93 82 50 F1 78 D7 7D 1B 51 F2 ÞH»[{... Pñx×}.Qò [140] 66 9B 37 27 CD 47 16 AF 37 AE 96 1C 6B 8B 0A EA f.7'ÍG.¯ 7®..k..ê [150] 12 81 86 B4 74 86 27 0D 75 7B F6 FC 80 BE CB 7C ...´t.'. u{öü.¾Ë| [160] D6 B8 29 94 62 C7 1A D9 3C 6D 75 E2 6D AF DF E4 Ö¸).bÇ.Ù Äk´ÌÔ ».6...P. [1B0] B0 D4 0E 44 8E 9F E7 24 04 7D 7F AD 0A 2B 5E 03 °Ô.D..ç$ .}.­.+^. [1C0] 2B 16 77 73 77 4B C5 B7 12 D7 30 F9 8A B7 12 8E +.wswKÅ· .×0ù.·.. [1D0] 4F 27 6F E2 7C F1 9F E7 FC C4 33 3E 84 C4 99 54 O'oâ|ñ.ç üÄ3>.Ä.T [1E0] 4D 0F F6 E9 45 24 B7 FC 99 E8 5F AF F0 27 74 E9 M.öéE$·ü .è_¯ð'té [1F0] 6A 8B F0 18 92 66 94 99 37 DF 45 ED E2 E2 94 E6 j.ð..f.. 7ßEíââ.æ [2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBsesssetupX (pid 25850) [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 5, pid=25850] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X(649) wct=12 flg2=0xc807 [2004/05/29 21:30:57, 2, pid=25850] smbd/sesssetup.c:setup_new_vc_session(602) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(529) Doing spnego session setup [2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(560) NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2004/05/29 21:30:57, 10, pid=25850] lib/util.c:set_remote_arch(1839) set_remote_arch: Client arch is 'WinXP' [2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438) Got OID 1 2 840 48018 1 2 2 [2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438) Got OID 1 2 840 113554 1 2 2 [2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438) Got OID 1 3 6 1 4 1 311 2 2 10 [2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(441) Got secblob of size 1422 [2004/05/29 21:30:57, 10, pid=25850] passdb/secrets.c:secrets_named_mutex(704) secrets_named_mutex: got mutex for replay cache mutex [2004/05/29 21:30:57, 10, pid=25850] libads/kerberos_verify.c:ads_verify_ticket(185) ads_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2004/05/29 21:30:57, 10, pid=25850] libads/kerberos_verify.c:ads_verify_ticket(178) ads_verify_ticket: enc type [3] decrypted message ! [2004/05/29 21:30:57, 10, pid=25850] passdb/secrets.c:secrets_named_mutex_release(716) secrets_named_mutex: released mutex for replay cache mutex [2004/05/29 21:30:57, 10, pid=25850] libsmb/clikrb5.c:get_krb5_smb_session_key(442) Got KRB5 session key of length 8 [2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:decode_pac_data(602) dump_pac_data [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 pac_io_pac_data pac data [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0000 num_buffers: 00000004 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0004 version: 00000000 [2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000008 pac_io_pac_info_hdr pac data [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0008 type: 00000001 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 000c size: 000002a8 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0010 offset: 00000048 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0014 offsethi: 00000000 [2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000018 pac_io_pac_info_hdr pac data [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0018 type: 0000000a [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 001c size: 00000014 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0020 offset: 000002f0 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0024 offsethi: 00000000 [2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000028 pac_io_pac_info_hdr pac data [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0028 type: 00000006 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 002c size: 00000014 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0030 offset: 00000308 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0034 offsethi: 00000000 [2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000038 pac_io_pac_info_hdr pac data [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0038 type: 00000007 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 003c size: 00000014 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0040 offset: 00000320 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0044 offsethi: 00000000 [2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000048 pac_io_pac_info_hdr_ctr pac data [2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(467) PAC_TYPE_LOGON_INFO [2004/05/29 21:30:57, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000048 pac_io_pac_logon_info pac data [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0048 unknown: 00081001 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 004c unknown: cccccccc [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0050 bufferlen: 00000298 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0054 bufferlenhi: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0058 pointer: 00020000 [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00005c smb_io_time logon_time [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 005c low : 994f2122 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0060 high: 01c445fb [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000064 smb_io_time logoff_time [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0064 low : ffffffff [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0068 high: 7fffffff [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_time kickoff_time [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 006c low : ffffffff [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0070 high: 7fffffff [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000074 smb_io_time pass_last_set_time [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0074 low : 0bcb68a2 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0078 high: 01c398ef [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00007c smb_io_time pass_can_change_time [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 007c low : 0bcb68a2 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0080 high: 01c398ef [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000084 smb_io_time pass_must_change_time [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0084 low : ffffffff [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0088 high: 7fffffff [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00008c smb_io_unihdr hdr_user_name [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 008c uni_str_len: 000a [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 008e uni_max_len: 000a [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0090 buffer : 00020004 [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000094 smb_io_unihdr hdr_full_name [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0094 uni_str_len: 0014 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0096 uni_max_len: 0014 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0098 buffer : 00020008 [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00009c smb_io_unihdr hdr_logon_script [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 009c uni_str_len: 0012 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 009e uni_max_len: 0012 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00a0 buffer : 0002000c [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000a4 smb_io_unihdr hdr_profile_path [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00a4 uni_str_len: 0000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00a6 uni_max_len: 0000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00a8 buffer : 00020010 [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000ac smb_io_unihdr hdr_home_dir [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00ac uni_str_len: 0056 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00ae uni_max_len: 0056 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00b0 buffer : 00020014 [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000b4 smb_io_unihdr hdr_dir_drive [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00b4 uni_str_len: 0004 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00b6 uni_max_len: 0004 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00b8 buffer : 00020018 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00bc logon_count: 0455 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00be reserved12: 0000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00c0 user_rid: 000003ec [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00c4 group_rid: 00000201 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00c8 group_count: 00000012 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00cc group_mem_ptr: 0002001c [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00d0 user_flags: 00000020 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00d4 reserved13.0: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00d8 reserved13.1: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00dc reserved13.2: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00e0 reserved13.3: 00000000 [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000e4 smb_io_unihdr hdr_dom_controller [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00e4 uni_str_len: 000a [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00e6 uni_max_len: 000c [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00e8 buffer : 00020020 [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000ec smb_io_unihdr hdr_dom_name [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00ec uni_str_len: 000c [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00ee uni_max_len: 000e [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00f0 buffer : 00020024 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00f4 ptr_dom_sid: 00020028 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00f8 reserved16.0: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00fc reserved16.1: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0100 reserved17: 00000210 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0104 reserved18.0: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0108 reserved18.1: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 010c reserved18.2: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0110 reserved18.3: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0114 reserved18.4: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0118 reserved18.5: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 011c reserved18.6: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0120 sid_count: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0124 ptr_extra_sids: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0128 ptr_res_group_dom_sid: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 012c res_group_count: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0130 ptr_res_groups: 00000000 [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000134 smb_io_unistr2 uni_user_name [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0134 uni_max_len: 00000005 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0138 offset : 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 013c uni_str_len: 00000005 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0140 buffer : e.r.i.c.h. [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00014a smb_io_unistr2 uni_full_name [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 014c uni_max_len: 0000000a [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0150 offset : 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0154 uni_str_len: 0000000a [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0158 buffer : E.r.i.c. .H.o.r.s.t. [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00016c smb_io_unistr2 uni_logon_script [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 016c uni_max_len: 00000009 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0170 offset : 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0174 uni_str_len: 00000009 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0178 buffer : l.o.g.o.n...b.a.t. [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00018a smb_io_unistr2 uni_profile_path [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 018c uni_max_len: 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0190 offset : 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0194 uni_str_len: 00000000 [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000198 smb_io_unistr2 uni_home_dir [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0198 uni_max_len: 0000002b [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 019c offset : 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01a0 uni_str_len: 0000002b [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 01a4 buffer : \.\.e.r.i.c.h...h.o.m.e.d.i.r...n.e.b.u.l.a...w.a.s.h.i.n.g.t.o.n...e.d.u.\.h.o.m.e.s. [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001fa smb_io_unistr2 uni_dir_drive [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01fc uni_max_len: 00000002 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0200 offset : 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0204 uni_str_len: 00000002 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0208 buffer : H.:. [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00020c pac_io_group_membership_array group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 020c count: 00000012 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000210 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0210 rid: 00001320 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0214 attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000218 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0218 rid: 0000130a [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 021c attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000220 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0220 rid: 000013fd [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0224 attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000228 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0228 rid: 00001239 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 022c attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000230 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0230 rid: 000012c6 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0234 attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000238 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0238 rid: 000012c7 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 023c attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000240 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0240 rid: 00001249 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0244 attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000248 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0248 rid: 0000196a [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 024c attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000250 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0250 rid: 00001268 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0254 attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000258 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0258 rid: 00001251 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 025c attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000260 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0260 rid: 00001385 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0264 attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000268 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0268 rid: 000012de [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 026c attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000270 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0270 rid: 00000201 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0274 attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000278 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0278 rid: 00002030 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 027c attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000280 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0280 rid: 00001848 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0284 attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000288 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0288 rid: 00003d38 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 028c attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000290 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0290 rid: 0000042f [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0294 attrs: 00000007 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000298 pac_io_group_membership group membership [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0298 rid: 000012cf [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 029c attrs: 00000007 [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0002a0 smb_io_unistr2 uni_dom_controller [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 02a0 uni_max_len: 00000006 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 02a4 offset : 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 02a8 uni_str_len: 00000005 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 02ac buffer : O.R.I.O.N. [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0002b6 smb_io_unistr2 uni_dom_name [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 02b8 uni_max_len: 00000007 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 02bc offset : 00000000 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 02c0 uni_str_len: 00000006 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 02c4 buffer : N.E.B.U.L.A. [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0002d0 smb_io_dom_sid2 dom_sid [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 02d0 num_auths: 00000004 [2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0002d4 smb_io_dom_sid sid [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 02d4 sid_rev_num: 01 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 02d5 num_auths : 04 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 02d6 id_auth[0] : 00 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 02d7 id_auth[1] : 00 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 02d8 id_auth[2] : 00 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 02d9 id_auth[3] : 00 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 02da id_auth[4] : 00 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 02db id_auth[5] : 05 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32s(862) 02dc sub_auths : 00000015 0125690f 1de85f7e 4a515a19 [2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0002ec pac_io_pac_info_hdr_ctr pac data [2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452) offset in header(x2f0) and data(x2ec) do not match [2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(510) PAC_TYPE_UNKNOWN_10 [2004/05/29 21:30:57, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0002f0 pac_io_unknown_type_10 pac data [2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0002f0 smb_io_time unknown_time [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 02f0 low : 990b9f00 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 02f4 high: 01c445fb [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 02f8 len: 000a [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16s(765) 02fa name: e.r.i.c.h. [2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000304 pac_io_pac_info_hdr_ctr pac data [2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452) offset in header(x308) and data(x304) do not match [2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(481) PAC_TYPE_SERVER_CHECKSUM [2004/05/29 21:30:57, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000308 pac_io_pac_signature_data pac data [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0308 type: ffffff76 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722) 030c signature: ad d4 22 0e f5 86 d0 a8 bb a7 20 65 c8 fe b1 26 [2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00031c pac_io_pac_info_hdr_ctr pac data [2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452) offset in header(x320) and data(x31c) do not match [2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(495) PAC_TYPE_PRIVSVR_CHECKSUM [2004/05/29 21:30:57, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000320 pac_io_pac_signature_data pac data [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0320 type: ffffff76 [2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722) 0324 signature: bf dc 15 f1 4e c6 41 b5 39 aa 05 2e e2 b0 18 55 [2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(180) Ticket name is [erich@NEBULA.WASHINGTON.EDU] [2004/05/29 21:30:57, 10, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(221) Mapping [NEBULA.WASHINGTON.EDU] to short name [2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(237) Could not find short name -- winbind not running? [2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam(293) Finding user NEBULA.WASHINGTON.EDU\erich [2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is nebula.washington.edu\erich [2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(230) Trying _Get_Pwnam(), username as given is NEBULA.WASHINGTON.EDU\erich [2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(239) Trying _Get_Pwnam(), username as uppercase is NEBULA.WASHINGTON.EDU\ERICH [2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(247) Checking combinations of 0 uppercase letters in nebula.washington.edu\erich [2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals didn't find user [NEBULA.WASHINGTON.EDU\erich]! [2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam(293) Finding user erich [2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is erich [2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [erich]! [2004/05/29 21:30:57, 6, pid=25850] param/loadparm.c:lp_file_list_changed(2665) lp_file_list_changed() file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf last mod_time: Tue May 25 09:46:28 2004 file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.WinXP.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf last mod_time: Sat May 15 22:32:24 2004 file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf last mod_time: Sat May 29 21:27:30 2004 [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_username(612) pdb_set_username: setting username erich, was [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_init_flags(512) element 12 -> now SET [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_fullname(693) pdb_set_full_name: setting full name Eric Horst, was [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_init_flags(512) element 13 -> now SET [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_unix_homedir(828) pdb_set_unix_homedir: setting home dir /usr/users/erich, was NULL [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_init_flags(512) element 22 -> now SET [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_domain(639) pdb_set_domain: setting domain CANON, was [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_user_sid(539) pdb_set_user_sid: setting user sid S-1-5-21-2072067240-3800136619-3437914000-9130 [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_init_flags(512) element 18 -> now SET [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2072067240-3800136619-3437914000-9130 from rid 9130 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_group_sid(575) pdb_set_group_sid: setting group sid S-1-5-21-2072067240-3800136619-3437914000-1031 [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_init_flags(512) element 19 -> now SET [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-2072067240-3800136619-3437914000-1031 from rid 1031 [2004/05/29 21:30:57, 4, pid=25850] lib/substitute.c:automount_server(323) Home server: canon [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_profile_path(747) pdb_set_profile_path: setting profile path \\canon\erich\profile, was [2004/05/29 21:30:57, 4, pid=25850] lib/substitute.c:automount_server(323) Home server: canon [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_homedir(801) pdb_set_homedir: setting home dir \\canon\erich, was [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_dir_drive(774) pdb_set_dir_drive: setting dir drive , was NULL [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_logon_script(720) pdb_set_logon_script: setting logon script , was [2004/05/29 21:30:57, 10, pid=25850] lib/system_smbd.c:sys_getgrouplist(117) sys_getgrouplist: user [erich] [2004/05/29 21:30:57, 10, pid=25850] lib/system_smbd.c:sys_getgrouplist(126) sys_getgrouplist(): disabled winbindd for group lookup [user == erich] [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 8, pid=25850] lib/util_getent.c:remove_duplicate_gids(330) remove_duplicate_gids: Enter 17 gids [2004/05/29 21:30:57, 8, pid=25850] lib/util_getent.c:remove_duplicate_gids(348) remove_duplicate_gids: Exit 16 gids [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 4065 Primary group is 15 and contains 16 supplementary groups Group[ 0]: 0 Group[ 1]: 10 Group[ 2]: 15 Group[ 3]: 25 Group[ 4]: 34 Group[ 5]: 81 Group[ 6]: 349 Group[ 7]: 350 Group[ 8]: 358 Group[ 9]: 374 Group[ 10]: 426 Group[ 11]: 458 Group[ 12]: 573 Group[ 13]: 697 Group[ 14]: 739 Group[ 15]: 881 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 0 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (0) -> SID S-1-5-21-2072067240-3800136619-3437914000-1001. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 0 -> S-1-5-21-2072067240-3800136619-3437914000-1001 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 10 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (10) -> SID S-1-5-21-2072067240-3800136619-3437914000-1021. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 10 -> S-1-5-21-2072067240-3800136619-3437914000-1021 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 15 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (15) -> SID S-1-5-21-2072067240-3800136619-3437914000-1031. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 15 -> S-1-5-21-2072067240-3800136619-3437914000-1031 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 25 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (25) -> SID S-1-5-21-2072067240-3800136619-3437914000-1051. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 25 -> S-1-5-21-2072067240-3800136619-3437914000-1051 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 34 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (34) -> SID S-1-5-21-2072067240-3800136619-3437914000-1069. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 34 -> S-1-5-21-2072067240-3800136619-3437914000-1069 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 81 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (81) -> SID S-1-5-21-2072067240-3800136619-3437914000-1163. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 81 -> S-1-5-21-2072067240-3800136619-3437914000-1163 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 349 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (349) -> SID S-1-5-21-2072067240-3800136619-3437914000-1699. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 349 -> S-1-5-21-2072067240-3800136619-3437914000-1699 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 350 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (350) -> SID S-1-5-21-2072067240-3800136619-3437914000-1701. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 350 -> S-1-5-21-2072067240-3800136619-3437914000-1701 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 358 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (358) -> SID S-1-5-21-2072067240-3800136619-3437914000-1717. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 358 -> S-1-5-21-2072067240-3800136619-3437914000-1717 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 374 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (374) -> SID S-1-5-21-2072067240-3800136619-3437914000-1749. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 374 -> S-1-5-21-2072067240-3800136619-3437914000-1749 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 426 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (426) -> SID S-1-5-21-2072067240-3800136619-3437914000-1853. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 426 -> S-1-5-21-2072067240-3800136619-3437914000-1853 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 458 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (458) -> SID S-1-5-21-2072067240-3800136619-3437914000-1917. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 458 -> S-1-5-21-2072067240-3800136619-3437914000-1917 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 573 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (573) -> SID S-1-5-21-2072067240-3800136619-3437914000-2147. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 573 -> S-1-5-21-2072067240-3800136619-3437914000-2147 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 697 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (697) -> SID S-1-5-21-2072067240-3800136619-3437914000-2395. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 697 -> S-1-5-21-2072067240-3800136619-3437914000-2395 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 739 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (739) -> SID S-1-5-21-2072067240-3800136619-3437914000-2479. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 739 -> S-1-5-21-2072067240-3800136619-3437914000-2479 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 881 -> S-1-0-0 [2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (881) -> SID S-1-5-21-2072067240-3800136619-3437914000-2763. [2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 881 -> S-1-5-21-2072067240-3800136619-3437914000-2763 [2004/05/29 21:30:57, 10, pid=25850] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130 contains 20 SIDs SID[ 0]: S-1-5-21-2072067240-3800136619-3437914000-9130 SID[ 1]: S-1-5-21-2072067240-3800136619-3437914000-1031 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2072067240-3800136619-3437914000-1001 SID[ 6]: S-1-5-21-2072067240-3800136619-3437914000-1021 SID[ 7]: S-1-5-21-2072067240-3800136619-3437914000-1051 SID[ 8]: S-1-5-21-2072067240-3800136619-3437914000-1069 SID[ 9]: S-1-5-21-2072067240-3800136619-3437914000-1163 SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699 SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701 SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717 SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749 SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853 SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917 SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147 SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395 SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479 SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763 [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_domain(639) pdb_set_domain: setting domain NEBULA.WASHINGTON.EDU, was CANON [2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_init_flags(512) element 14 -> now SET [2004/05/29 21:30:57, 10, pid=25850] smbd/password.c:register_vuid(158) register_vuid: allocated vuid = 100 [2004/05/29 21:30:57, 10, pid=25850] smbd/password.c:register_vuid(220) register_vuid: (4065,15) erich erich NEBULA.WASHINGTON.EDU guest=0 [2004/05/29 21:30:57, 3, pid=25850] smbd/password.c:register_vuid(222) User name: erich Real name: Eric Horst [2004/05/29 21:30:57, 3, pid=25850] smbd/password.c:register_vuid(241) UNIX uid 4065 is UNIX user erich, and will be vuid 100 [2004/05/29 21:30:57, 7, pid=25850] param/loadparm.c:lp_servicenumber(4022) lp_servicenumber: couldn't find erich [2004/05/29 21:30:57, 3, pid=25850] smbd/password.c:register_vuid(265) Adding/updating homes service for user 'erich' using home directory: '/usr/users/erich' [2004/05/29 21:30:57, 7, pid=25850] param/loadparm.c:lp_servicenumber(4022) lp_servicenumber: couldn't find homes [2004/05/29 21:30:57, 6, pid=25850] param/loadparm.c:lp_file_list_changed(2665) lp_file_list_changed() file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf last mod_time: Tue May 25 09:46:28 2004 file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.WinXP.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf last mod_time: Sat May 15 22:32:24 2004 file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf last mod_time: Sat May 29 21:27:30 2004 [2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,246) [2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,246) wrote 246 [2004/05/29 21:30:57, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 126 [2004/05/29 21:30:57, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x7e [2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 2 of length 130 [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466) size=126 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=2880 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 126 (0x7E) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=83 [2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864) [000] 00 5C 00 5C 00 43 00 41 00 4E 00 4F 00 4E 00 2E .\.\.C.A .N.O.N.. [010] 00 43 00 41 00 43 00 2E 00 57 00 41 00 53 00 48 .C.A.C.. .W.A.S.H [020] 00 49 00 4E 00 47 00 54 00 4F 00 4E 00 2E 00 45 .I.N.G.T .O.N...E [030] 00 44 00 55 00 5C 00 4E 00 45 00 42 00 55 00 4C .D.U.\.N .E.B.U.L [040] 00 41 00 48 00 4F 00 4D 00 45 00 00 00 3F 3F 3F .A.H.O.M .E...??? [050] 3F 3F 00 ??. [2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBtconX (pid 25850) [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 5, pid=25850] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:30:57, 4, pid=25850] smbd/reply.c:reply_tcon_and_X(381) Client requested device type [?????] for share [NEBULAHOME] [2004/05/29 21:30:57, 5, pid=25850] smbd/service.c:make_connection(783) making a connection to 'normal' service nebulahome [2004/05/29 21:30:57, 3, pid=25850] lib/access.c:check_access(313) check_access: no hostnames in host allow/deny list. [2004/05/29 21:30:57, 2, pid=25850] lib/access.c:check_access(324) Allowed connection from (140.142.110.103) [2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam(293) Finding user erich [2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is erich [2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [erich]! [2004/05/29 21:30:57, 3, pid=25850] smbd/service.c:make_connection_snum(457) Connect path is '/usr/local/lib/samba/nebula-home' for service [nebulahome] [2004/05/29 21:30:57, 4, pid=25850] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for nebulahome [2004/05/29 21:30:57, 10, pid=25850] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/05/29 21:30:57, 10, pid=25850] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 20 entries and first sid S-1-5-21-2072067240-3800136619-3437914000-9130. [2004/05/29 21:30:57, 3, pid=25850] lib/util_seaccess.c:se_access_check(251) [2004/05/29 21:30:57, 3, pid=25850] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-2072067240-3800136619-3437914000-9130 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1031 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1001 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1021 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1051 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1069 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1163 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1699 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1701 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1717 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1749 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1853 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1917 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2147 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2395 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2479 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2763 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2004/05/29 21:30:57, 5, pid=25850] lib/util_seaccess.c:se_access_check(309) se_access_check: access (2) granted. [2004/05/29 21:30:57, 3, pid=25850] smbd/vfs.c:vfs_init_default(203) Initialising default vfs hooks [2004/05/29 21:30:57, 3, pid=25850] smbd/vfs.c:vfs_init_custom(229) Initialising custom vfs hooks from [extd_audit] [2004/05/29 21:30:57, 5, pid=25850] lib/module.c:smb_probe_module(101) Probing module 'extd_audit' [2004/05/29 21:30:57, 5, pid=25850] lib/module.c:smb_probe_module(112) Probing module 'extd_audit': Trying to load from /usr/local/lib/vfs/extd_audit.so [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:smb_register_vfs(193) Successfully added vfs backend 'extd_audit' [2004/05/29 21:30:57, 10, pid=25850] modules/vfs_extd_audit.c:init_module(339) vfs_extd_audit: Debug class number of 'extd_audit': 16 [2004/05/29 21:30:57, 2, pid=25850] lib/module.c:do_smb_load_module(63) Module '/usr/local/lib/vfs/extd_audit.so' loaded Successfully loaded vfs module [extd_audit] with the new modules system [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #0 (type 0, layer 2) Accepting operation type 0 from module extd_audit [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #1 (type 1, layer 2) Accepting operation type 1 from module extd_audit [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #2 (type 6, layer 2) Accepting operation type 6 from module extd_audit [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #3 (type 8, layer 2) Accepting operation type 8 from module extd_audit [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #4 (type 9, layer 2) Accepting operation type 9 from module extd_audit [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #5 (type 11, layer 2) Accepting operation type 11 from module extd_audit [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #6 (type 12, layer 2) Accepting operation type 12 from module extd_audit [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #7 (type 19, layer 2) Accepting operation type 19 from module extd_audit [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #8 (type 24, layer 2) Accepting operation type 24 from module extd_audit [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #9 (type 25, layer 2) Accepting operation type 25 from module extd_audit [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #10 (type 26, layer 2) Accepting operation type 26 from module extd_audit [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #11 (type 43, layer 2) Accepting operation type 43 from module extd_audit [2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #12 (type 44, layer 2) Accepting operation type 44 from module extd_audit [2004/05/29 21:30:57, 5, pid=25850] smbd/connection.c:claim_connection(170) claiming nebulahome 0 [2004/05/29 21:30:57, 10, pid=25850] smbd/uid.c:is_share_read_only_for_user(99) is_share_read_only_for_user: share nebulahome is read-only for unix user erich [2004/05/29 21:30:57, 4, pid=25850] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for nebulahome [2004/05/29 21:30:57, 10, pid=25850] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/05/29 21:30:57, 10, pid=25850] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 20 entries and first sid S-1-5-21-2072067240-3800136619-3437914000-9130. [2004/05/29 21:30:57, 3, pid=25850] lib/util_seaccess.c:se_access_check(251) [2004/05/29 21:30:57, 3, pid=25850] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-2072067240-3800136619-3437914000-9130 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1031 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1001 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1021 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1051 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1069 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1163 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1699 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1701 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1717 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1749 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1853 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1917 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2147 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2395 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2479 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2763 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2004/05/29 21:30:57, 5, pid=25850] lib/util_seaccess.c:se_access_check(309) se_access_check: access (1) granted. [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130 contains 20 SIDs SID[ 0]: S-1-5-21-2072067240-3800136619-3437914000-9130 SID[ 1]: S-1-5-21-2072067240-3800136619-3437914000-1031 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2072067240-3800136619-3437914000-1001 SID[ 6]: S-1-5-21-2072067240-3800136619-3437914000-1021 SID[ 7]: S-1-5-21-2072067240-3800136619-3437914000-1051 SID[ 8]: S-1-5-21-2072067240-3800136619-3437914000-1069 SID[ 9]: S-1-5-21-2072067240-3800136619-3437914000-1163 SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699 SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701 SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717 SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749 SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853 SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917 SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147 SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395 SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479 SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 4065 Primary group is 15 and contains 16 supplementary groups Group[ 0]: 0 Group[ 1]: 10 Group[ 2]: 15 Group[ 3]: 25 Group[ 4]: 34 Group[ 5]: 81 Group[ 6]: 349 Group[ 7]: 350 Group[ 8]: 358 Group[ 9]: 374 Group[ 10]: 426 Group[ 11]: 458 Group[ 12]: 573 Group[ 13]: 697 Group[ 14]: 739 Group[ 15]: 881 [2004/05/29 21:30:57, 5, pid=25850] smbd/uid.c:change_to_user(267) change_to_user uid=(4065,4065) gid=(0,15) [2004/05/29 21:30:57, 1, pid=25850] smbd/service.c:make_connection_snum(619) 140.142.110.103 (140.142.110.103) connect to service nebulahome initially as user erich (uid=4065, gid=15) (pid 25850) [2004/05/29 21:30:57, 10, pid=25850] modules/vfs_extd_audit.c:audit_connect(112) Connected to service nebulahome as user erich [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:57, 5, pid=25850] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:30:57, 2, pid=25850] smbd/reply.c:reply_tcon_and_X(424) Serving nebulahome as a Dfs root [2004/05/29 21:30:57, 3, pid=25850] smbd/reply.c:reply_tcon_and_X(429) tconX service=NEBULAHOME [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466) size=54 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=2880 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 3 (0x3) smb_bcc=13 [2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864) [000] 41 3A 00 4E 00 54 00 46 00 53 00 00 00 A:.N.T.F .S... [2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,58) [2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,58) wrote 58 [2004/05/29 21:30:57, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 76 [2004/05/29 21:30:57, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x4c [2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 3 of length 80 [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466) size=76 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=2944 smt_wct=15 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 8 (0x8) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=11 [2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864) [000] 00 52 00 EC 03 00 00 00 00 00 00 .R.ì.... ... [2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 25850) [2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130 contains 20 SIDs SID[ 0]: S-1-5-21-2072067240-3800136619-3437914000-9130 SID[ 1]: S-1-5-21-2072067240-3800136619-3437914000-1031 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2072067240-3800136619-3437914000-1001 SID[ 6]: S-1-5-21-2072067240-3800136619-3437914000-1021 SID[ 7]: S-1-5-21-2072067240-3800136619-3437914000-1051 SID[ 8]: S-1-5-21-2072067240-3800136619-3437914000-1069 SID[ 9]: S-1-5-21-2072067240-3800136619-3437914000-1163 SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699 SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701 SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717 SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749 SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853 SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917 SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147 SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395 SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479 SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763 [2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 4065 Primary group is 15 and contains 16 supplementary groups Group[ 0]: 0 Group[ 1]: 10 Group[ 2]: 15 Group[ 3]: 25 Group[ 4]: 34 Group[ 5]: 81 Group[ 6]: 349 Group[ 7]: 350 Group[ 8]: 358 Group[ 9]: 374 Group[ 10]: 426 Group[ 11]: 458 Group[ 12]: 573 Group[ 13]: 697 Group[ 14]: 739 Group[ 15]: 881 [2004/05/29 21:30:57, 5, pid=25850] smbd/uid.c:change_to_user(267) change_to_user uid=(4065,4065) gid=(0,15) [2004/05/29 21:30:57, 4, pid=25850] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /usr/local/lib/samba/nebula-home [2004/05/29 21:30:57, 3, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2331) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/05/29 21:30:57, 5, pid=25850] smbd/filename.c:unix_convert(114) unix_convert called on file "" [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: . [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:57, 3, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2362) call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 [2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(270) dos_mode: . [2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: . [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(302) dos_mode returning d [2004/05/29 21:30:57, 10, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2478) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2488) SMB_QFBI - create: Sat May 29 21:19:49 2004 access: Sat May 29 21:29:45 2004 write: Sat May 29 21:19:49 2004 change: Sat May 29 21:19:49 2004 mode: 10 [2004/05/29 21:30:57, 9, pid=25850] smbd/trans2.c:send_trans2_replies(535) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/05/29 21:30:57, 9, pid=25850] smbd/trans2.c:send_trans2_replies(537) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,104) [2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,104) wrote 104 [2004/05/29 21:30:57, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 86 [2004/05/29 21:30:57, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x56 [2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 4 of length 90 [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466) size=86 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=3008 smt_wct=15 smb_vwv[ 0]= 18 (0x12) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 18 (0x12) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=21 [2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864) [000] 00 72 00 16 00 56 05 06 00 04 01 00 00 00 00 5C .r...V.. .......\ [010] 00 2A 00 00 00 .*... [2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 25850) [2004/05/29 21:30:57, 4, pid=25850] smbd/uid.c:change_to_user(186) change_to_user: Skipping user change - already user [2004/05/29 21:30:57, 3, pid=25850] smbd/trans2.c:call_trans2findfirst(1355) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 [2004/05/29 21:30:57, 5, pid=25850] smbd/filename.c:unix_convert(114) unix_convert called on file "*" [2004/05/29 21:30:57, 10, pid=25850] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [*] [2004/05/29 21:30:57, 5, pid=25850] smbd/filename.c:unix_convert(177) unix_convert begin: name = *, dirpath = , start = * [2004/05/29 21:30:57, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269) is_mangled * ? [2004/05/29 21:30:57, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component * (len 1) ? [2004/05/29 21:30:57, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269) is_mangled * ? [2004/05/29 21:30:57, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component * (len 1) ? [2004/05/29 21:30:57, 5, pid=25850] smbd/filename.c:unix_convert(312) New file * [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: * [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:call_trans2findfirst(1400) dir=./, mask = * [2004/05/29 21:30:57, 5, pid=25850] smbd/dir.c:start_dir(334) start_dir dir=./ [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: ./ [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:57, 10, pid=25850] modules/vfs_extd_audit.c:audit_opendir(141) vfs_extd_audit: opendir ./ [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: myhome [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:57, 3, pid=25850] smbd/dir.c:dptr_create(491) creating new dirptr 256 for path ./, expect_close = 1 [2004/05/29 21:30:57, 4, pid=25850] smbd/trans2.c:call_trans2findfirst(1430) dptr_num is 256, wcard = *, attr = 22 [2004/05/29 21:30:57, 8, pid=25850] smbd/trans2.c:call_trans2findfirst(1435) dirpath=<./> dontdescend=<> [2004/05/29 21:30:57, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879) get_lanman2_dir_entry:readdir on dirptr 0x8340be0 now at offset 1 [2004/05/29 21:30:57, 10, pid=25850] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,.) -> 0 [2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(270) dos_mode: ./. [2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: ./. [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(302) dos_mode returning d [2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(964) get_lanman2_dir_entry found ./. fname=. [2004/05/29 21:30:57, 10, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(1048) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2004/05/29 21:30:57, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879) get_lanman2_dir_entry:readdir on dirptr 0x8340be0 now at offset 2 [2004/05/29 21:30:57, 10, pid=25850] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,.) -> 0 [2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(270) dos_mode: ./.. [2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: ./.. [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(302) dos_mode returning d [2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(964) get_lanman2_dir_entry found ./.. fname=.. [2004/05/29 21:30:57, 10, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(1048) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2004/05/29 21:30:57, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879) get_lanman2_dir_entry:readdir on dirptr 0x8340be0 now at offset 3 [2004/05/29 21:30:57, 10, pid=25850] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(*,myhome) -> 0 [2004/05/29 21:30:57, 5, pid=25850] smbd/msdfs.c:is_msdfs_link(258) is_msdfs_link: ./myhome -> msdfs:kodak5.cac.washington.edu\homes [2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(931) get_lanman2_dir_entry: Masquerading msdfs link ./myhome as a directory [2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(270) dos_mode: ./myhome [2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: ./myhome [2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(302) dos_mode returning d [2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(964) get_lanman2_dir_entry found ./myhome fname=myhome [2004/05/29 21:30:57, 10, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(1048) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2004/05/29 21:30:57, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879) get_lanman2_dir_entry:readdir on dirptr 0x8340be0 now at offset 3 [2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:call_trans2findfirst(1481) call_trans2findfirst - (2) closing dptr_num 256 [2004/05/29 21:30:57, 4, pid=25850] smbd/dir.c:dptr_close_internal(224) closing dptr key 256 [2004/05/29 21:30:57, 9, pid=25850] smbd/trans2.c:send_trans2_replies(535) t2_rep: params_sent_thistime = 10, data_sent_thistime = 304, useable_space = 131010 [2004/05/29 21:30:57, 9, pid=25850] smbd/trans2.c:send_trans2_replies(537) t2_rep: params_to_send = 10, data_to_send = 304, paramsize = 10, datasize = 304 [2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,376) [2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,376) wrote 376 [2004/05/29 21:30:57, 4, pid=25850] smbd/trans2.c:call_trans2findfirst(1511) SMBtrans2 mask=* directory=./ dirtype=22 numentries=3 [2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 70 [2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x46 [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 5 of length 74 [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=3072 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864) [000] 01 00 00 05 01 ..... [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 25850) [2004/05/29 21:30:59, 4, pid=25850] smbd/uid.c:change_to_user(186) change_to_user: Skipping user change - already user [2004/05/29 21:30:59, 3, pid=25850] smbd/trans2.c:call_trans2qfsinfo(1804) call_trans2qfsinfo: level = 261 [2004/05/29 21:30:59, 9, pid=25850] smbd/trans2.c:send_trans2_replies(535) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2004/05/29 21:30:59, 9, pid=25850] smbd/trans2.c:send_trans2_replies(537) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,80) [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,80) wrote 80 [2004/05/29 21:30:59, 4, pid=25850] smbd/trans2.c:call_trans2qfsinfo(2087) SMBtrans2 info_level = 261 [2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 1434 [2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x59a [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 6 of length 1438 [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=1434 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=3136 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1434 (0x59A) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1272 (0x4F8) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=1375 [2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864) [000] 60 82 04 F4 06 06 2B 06 01 05 05 02 A0 82 04 E8 `..ô..+. .... ..è [010] 30 82 04 E4 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..ä $0" ..*.H.÷. [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H .÷...... [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BA 04 82 +.....7. ..¢..º.. [040] 04 B6 60 82 04 B2 06 09 2A 86 48 86 F7 12 01 02 .¶`..².. *.H.÷... [050] 02 01 00 6E 82 04 A1 30 82 04 9D A0 03 02 01 05 ...n..¡0 ... .... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ¡....¢.. .. ...£. [070] 03 BD 61 82 03 B9 30 82 03 B5 A0 03 02 01 05 A1 .½a..¹0. .µ ....¡ [080] 17 1B 15 4E 45 42 55 4C 41 2E 57 41 53 48 49 4E ...NEBUL A.WASHIN [090] 47 54 4F 4E 2E 45 44 55 A2 2B 30 29 A0 03 02 01 GTON.EDU ¢+0) ... [0A0] 02 A1 22 30 20 1B 04 63 69 66 73 1B 18 63 61 6E .¡"0 ..c ifs..can [0B0] 6F 6E 2E 63 61 63 2E 77 61 73 68 69 6E 67 74 6F on.cac.w ashingto [0C0] 6E 2E 65 64 75 A3 82 03 66 30 82 03 62 A0 03 02 n.edu£.. f0..b .. [0D0] 01 03 A1 03 02 01 02 A2 82 03 54 04 82 03 50 86 ..¡....¢ ..T...P. [0E0] 7D CE EE 8A E9 AE D5 5C 58 BF 8B EE DA 0F E5 05 }Îî.é®Õ\ X¿.îÚ.å. [0F0] 6C 20 D0 30 6E A2 1B 84 95 AE E7 26 AF CA 58 A0 l Ð0n¢.. .®ç&¯ÊX  [100] 14 F9 FA CE 61 B2 4C D4 BF 1C 8E FD 44 0E 44 E0 .ùúÎa²LÔ ¿..ýD.Dà [110] 40 53 43 D7 82 A8 3C 38 8F 6A 70 09 26 CB E8 CF @SC×.¨<8 .jp.&ËèÏ [120] 9C 23 7C BB 67 89 B4 C0 37 73 00 0F 97 CF 14 E0 .#|»g.´À 7s...Ï.à [130] 9C 99 D5 20 75 47 97 66 CD 0C 49 BB F8 61 15 9E ..Õ uG.f Í.I»øa.. [140] DB DD 22 B5 5C DC 81 5B C1 0D 1B EF 72 0A D4 88 ÛÝ"µ\Ü.[ Á..ïr.Ô. [150] 66 C0 14 F8 87 62 F4 B3 E7 34 78 67 F3 B2 92 A9 fÀ.ø.bô³ ç4xgó².© [160] AA 7B 81 BA 1F FD 33 E0 93 F6 8F 09 45 DE 62 B6 ª{.º.ý3à .ö..EÞb¶ [170] D2 C8 AF 35 A4 22 1B 48 1C FD AD F4 C4 54 B4 A3 Òȯ5¤".H .ý­ôÄT´£ [180] F9 E4 42 AB CC 16 6E F5 DE 33 C7 E3 BF 37 05 C9 ùäB«Ì.nõ Þ3Çã¿7.É [190] FE 4A 05 27 6D 27 0D 43 F0 6B 9B 17 94 6D 50 6E þJ.'m'.C ðk...mPn [1A0] 08 14 33 4C 53 F1 94 CB D5 17 F5 A2 59 B7 D2 10 ..3LSñ.Ë Õ.õ¢Y·Ò. [1B0] CC 60 4B 31 52 FC 72 DA B3 5F CA FA 0A 69 D6 33 Ì`K1RürÚ ³_Êú.iÖ3 [1C0] A2 50 03 8E B6 66 E4 B5 1C 81 95 88 FA DD 27 13 ¢P..¶fäµ ....úÝ'. [1D0] B6 A5 E0 31 89 76 09 BF BA 7B 38 10 38 AF D3 CF ¶¥à1.v.¿ º{8.8¯ÓÏ [1E0] 6D 99 86 2F F4 90 C1 BB 0C C3 6D 5D 82 32 3C 09 m../ô.Á» .Ãm].2<. [1F0] 51 88 ED 22 01 B8 C0 70 9F 69 27 62 6A CC ED 34 Q.í".¸Àp .i'bjÌí4 [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBsesssetupX (pid 25850) [2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X(649) wct=12 flg2=0xc807 [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(529) Doing spnego session setup [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(560) NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438) Got OID 1 2 840 48018 1 2 2 [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438) Got OID 1 2 840 113554 1 2 2 [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438) Got OID 1 3 6 1 4 1 311 2 2 10 [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(441) Got secblob of size 1206 [2004/05/29 21:30:59, 10, pid=25850] passdb/secrets.c:secrets_named_mutex(704) secrets_named_mutex: got mutex for replay cache mutex [2004/05/29 21:30:59, 10, pid=25850] libads/kerberos_verify.c:ads_verify_ticket(185) ads_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2004/05/29 21:30:59, 10, pid=25850] libads/kerberos_verify.c:ads_verify_ticket(178) ads_verify_ticket: enc type [3] decrypted message ! [2004/05/29 21:30:59, 10, pid=25850] passdb/secrets.c:secrets_named_mutex_release(716) secrets_named_mutex: released mutex for replay cache mutex [2004/05/29 21:30:59, 10, pid=25850] libsmb/clikrb5.c:get_krb5_smb_session_key(442) Got KRB5 session key of length 8 [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:decode_pac_data(602) dump_pac_data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 pac_io_pac_data pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0000 num_buffers: 00000004 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0004 version: 00000000 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000008 pac_io_pac_info_hdr pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0008 type: 00000001 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 000c size: 000001c0 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0010 offset: 00000048 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0014 offsethi: 00000000 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000018 pac_io_pac_info_hdr pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0018 type: 0000000a [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 001c size: 0000001e [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0020 offset: 00000208 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0024 offsethi: 00000000 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000028 pac_io_pac_info_hdr pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0028 type: 00000006 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 002c size: 00000014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0030 offset: 00000228 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0034 offsethi: 00000000 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000038 pac_io_pac_info_hdr pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0038 type: 00000007 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 003c size: 00000014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0040 offset: 00000240 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0044 offsethi: 00000000 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000048 pac_io_pac_info_hdr_ctr pac data [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(467) PAC_TYPE_LOGON_INFO [2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000048 pac_io_pac_logon_info pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0048 unknown: 00081001 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 004c unknown: cccccccc [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0050 bufferlen: 000001b0 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0054 bufferlenhi: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0058 pointer: 00020000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00005c smb_io_time logon_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 005c low : 094d3ef4 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0060 high: 01c445ca [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000064 smb_io_time logoff_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0064 low : ffffffff [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0068 high: 7fffffff [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_time kickoff_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 006c low : ffffffff [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0070 high: 7fffffff [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000074 smb_io_time pass_last_set_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0074 low : 7dbd84f0 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0078 high: 01c4412f [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00007c smb_io_time pass_can_change_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 007c low : 7dbd84f0 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0080 high: 01c4412f [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000084 smb_io_time pass_must_change_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0084 low : ffffffff [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0088 high: 7fffffff [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00008c smb_io_unihdr hdr_user_name [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 008c uni_str_len: 0014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 008e uni_max_len: 0014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0090 buffer : 00020004 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000094 smb_io_unihdr hdr_full_name [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0094 uni_str_len: 0014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0096 uni_max_len: 0014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0098 buffer : 00020008 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00009c smb_io_unihdr hdr_logon_script [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 009c uni_str_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 009e uni_max_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00a0 buffer : 0002000c [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000a4 smb_io_unihdr hdr_profile_path [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00a4 uni_str_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00a6 uni_max_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00a8 buffer : 00020010 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000ac smb_io_unihdr hdr_home_dir [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00ac uni_str_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00ae uni_max_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00b0 buffer : 00020014 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000b4 smb_io_unihdr hdr_dir_drive [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00b4 uni_str_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00b6 uni_max_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00b8 buffer : 00020018 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00bc logon_count: 0117 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00be reserved12: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00c0 user_rid: 0000451e [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00c4 group_rid: 00000203 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00c8 group_count: 00000002 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00cc group_mem_ptr: 0002001c [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00d0 user_flags: 00000020 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00d4 reserved13.0: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00d8 reserved13.1: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00dc reserved13.2: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00e0 reserved13.3: 00000000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000e4 smb_io_unihdr hdr_dom_controller [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00e4 uni_str_len: 000a [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00e6 uni_max_len: 000c [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00e8 buffer : 00020020 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000ec smb_io_unihdr hdr_dom_name [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00ec uni_str_len: 000c [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00ee uni_max_len: 000e [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00f0 buffer : 00020024 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00f4 ptr_dom_sid: 00020028 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00f8 reserved16.0: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00fc reserved16.1: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0100 reserved17: 00000080 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0104 reserved18.0: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0108 reserved18.1: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 010c reserved18.2: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0110 reserved18.3: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0114 reserved18.4: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0118 reserved18.5: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 011c reserved18.6: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0120 sid_count: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0124 ptr_extra_sids: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0128 ptr_res_group_dom_sid: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 012c res_group_count: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0130 ptr_res_groups: 00000000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000134 smb_io_unistr2 uni_user_name [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0134 uni_max_len: 0000000a [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0138 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 013c uni_str_len: 0000000a [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0140 buffer : K.L.E.E.N.E.X._.Q.$. [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000154 smb_io_unistr2 uni_full_name [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0154 uni_max_len: 0000000a [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0158 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 015c uni_str_len: 0000000a [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0160 buffer : K.L.E.E.N.E.X._.Q.$. [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000174 smb_io_unistr2 uni_logon_script [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0174 uni_max_len: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0178 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 017c uni_str_len: 00000000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000180 smb_io_unistr2 uni_profile_path [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0180 uni_max_len: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0184 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0188 uni_str_len: 00000000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00018c smb_io_unistr2 uni_home_dir [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 018c uni_max_len: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0190 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0194 uni_str_len: 00000000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000198 smb_io_unistr2 uni_dir_drive [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0198 uni_max_len: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 019c offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01a0 uni_str_len: 00000000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001a4 pac_io_group_membership_array group membership [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01a4 count: 00000002 [2004/05/29 21:30:59, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001a8 pac_io_group_membership group membership [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01a8 rid: 00004527 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01ac attrs: 00000007 [2004/05/29 21:30:59, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001b0 pac_io_group_membership group membership [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01b0 rid: 00000203 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01b4 attrs: 00000007 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001b8 smb_io_unistr2 uni_dom_controller [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01b8 uni_max_len: 00000006 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01bc offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01c0 uni_str_len: 00000005 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 01c4 buffer : O.R.I.O.N. [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001ce smb_io_unistr2 uni_dom_name [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01d0 uni_max_len: 00000007 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01d4 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01d8 uni_str_len: 00000006 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 01dc buffer : N.E.B.U.L.A. [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001e8 smb_io_dom_sid2 dom_sid [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01e8 num_auths: 00000004 [2004/05/29 21:30:59, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001ec smb_io_dom_sid sid [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01ec sid_rev_num: 01 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01ed num_auths : 04 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01ee id_auth[0] : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01ef id_auth[1] : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01f0 id_auth[2] : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01f1 id_auth[3] : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01f2 id_auth[4] : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01f3 id_auth[5] : 05 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32s(862) 01f4 sub_auths : 00000015 0125690f 1de85f7e 4a515a19 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000204 pac_io_pac_info_hdr_ctr pac data [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452) offset in header(x208) and data(x204) do not match [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(510) PAC_TYPE_UNKNOWN_10 [2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000208 pac_io_unknown_type_10 pac data [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000208 smb_io_time unknown_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0208 low : 59798e80 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 020c high: 01c445cc [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0210 len: 0014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16s(765) 0212 name: k.l.e.e.n.e.x._.q.$. [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000226 pac_io_pac_info_hdr_ctr pac data [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(481) PAC_TYPE_SERVER_CHECKSUM [2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000228 pac_io_pac_signature_data pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0228 type: ffffff76 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722) 022c signature: 75 96 39 1b db 4f b0 10 a2 b3 8f d2 b2 4b c4 4f [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00023c pac_io_pac_info_hdr_ctr pac data [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452) offset in header(x240) and data(x23c) do not match [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(495) PAC_TYPE_PRIVSVR_CHECKSUM [2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000240 pac_io_pac_signature_data pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0240 type: ffffff76 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722) 0244 signature: 1b 96 ac 5f 95 24 ed 57 f5 50 06 d8 33 ea 2c fb [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(180) Ticket name is [kleenex_q$@NEBULA.WASHINGTON.EDU] [2004/05/29 21:30:59, 10, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(221) Mapping [NEBULA.WASHINGTON.EDU] to short name [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(237) Could not find short name -- winbind not running? [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam(293) Finding user NEBULA.WASHINGTON.EDU\kleenex_q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is nebula.washington.edu\kleenex_q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(230) Trying _Get_Pwnam(), username as given is NEBULA.WASHINGTON.EDU\kleenex_q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(239) Trying _Get_Pwnam(), username as uppercase is NEBULA.WASHINGTON.EDU\KLEENEX_Q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(247) Checking combinations of 0 uppercase letters in nebula.washington.edu\kleenex_q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals didn't find user [NEBULA.WASHINGTON.EDU\kleenex_q$]! [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam(293) Finding user kleenex_q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is kleenex_q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(239) Trying _Get_Pwnam(), username as uppercase is KLEENEX_Q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(247) Checking combinations of 0 uppercase letters in kleenex_q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals didn't find user [kleenex_q$]! [2004/05/29 21:30:59, 1, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(248) Username NEBULA.WASHINGTON.EDU\kleenex_q$ is invalid on this system [2004/05/29 21:30:59, 3, pid=25850] smbd/error.c:error_packet(118) error packet at smbd/sesssetup.c(252) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=3136 smt_wct=0 smb_bcc=0 [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,39) [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,39) wrote 39 [2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 114 [2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x72 [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 7 of length 118 [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=114 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=3200 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 114 (0x72) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=71 [2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864) [000] 00 5C 00 5C 00 43 00 41 00 4E 00 4F 00 4E 00 2E .\.\.C.A .N.O.N.. [010] 00 43 00 41 00 43 00 2E 00 57 00 41 00 53 00 48 .C.A.C.. .W.A.S.H [020] 00 49 00 4E 00 47 00 54 00 4F 00 4E 00 2E 00 45 .I.N.G.T .O.N...E [030] 00 44 00 55 00 5C 00 49 00 50 00 43 00 24 00 00 .D.U.\.I .P.C.$.. [040] 00 3F 3F 3F 3F 3F 00 .?????. [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBtconX (pid 25850) [2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:30:59, 4, pid=25850] smbd/reply.c:reply_tcon_and_X(381) Client requested device type [?????] for share [IPC$] [2004/05/29 21:30:59, 5, pid=25850] smbd/service.c:make_connection(783) making a connection to 'normal' service ipc$ [2004/05/29 21:30:59, 3, pid=25850] lib/access.c:check_access(313) check_access: no hostnames in host allow/deny list. [2004/05/29 21:30:59, 2, pid=25850] lib/access.c:check_access(324) Allowed connection from (140.142.110.103) [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam(293) Finding user erich [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is erich [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [erich]! [2004/05/29 21:30:59, 3, pid=25850] smbd/service.c:make_connection_snum(457) Connect path is '/tmp' for service [IPC$] [2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2004/05/29 21:30:59, 10, pid=25850] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/05/29 21:30:59, 10, pid=25850] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 20 entries and first sid S-1-5-21-2072067240-3800136619-3437914000-9130. [2004/05/29 21:30:59, 3, pid=25850] lib/util_seaccess.c:se_access_check(251) [2004/05/29 21:30:59, 3, pid=25850] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-2072067240-3800136619-3437914000-9130 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1031 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1001 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1021 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1051 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1069 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1163 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1699 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1701 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1717 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1749 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1853 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1917 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2147 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2395 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2479 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2763 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2004/05/29 21:30:59, 5, pid=25850] lib/util_seaccess.c:se_access_check(309) se_access_check: access (2) granted. [2004/05/29 21:30:59, 3, pid=25850] smbd/vfs.c:vfs_init_default(203) Initialising default vfs hooks [2004/05/29 21:30:59, 3, pid=25850] smbd/vfs.c:vfs_init_custom(229) Initialising custom vfs hooks from [extd_audit] Successfully loaded vfs module [extd_audit] with the new modules system [2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #0 (type 0, layer 2) Accepting operation type 0 from module extd_audit [2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #1 (type 1, layer 2) Accepting operation type 1 from module extd_audit [2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #2 (type 6, layer 2) Accepting operation type 6 from module extd_audit [2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #3 (type 8, layer 2) Accepting operation type 8 from module extd_audit [2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #4 (type 9, layer 2) Accepting operation type 9 from module extd_audit [2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #5 (type 11, layer 2) Accepting operation type 11 from module extd_audit [2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #6 (type 12, layer 2) Accepting operation type 12 from module extd_audit [2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #7 (type 19, layer 2) Accepting operation type 19 from module extd_audit [2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #8 (type 24, layer 2) Accepting operation type 24 from module extd_audit [2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #9 (type 25, layer 2) Accepting operation type 25 from module extd_audit [2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #10 (type 26, layer 2) Accepting operation type 26 from module extd_audit [2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #11 (type 43, layer 2) Accepting operation type 43 from module extd_audit [2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275) Checking operation #12 (type 44, layer 2) Accepting operation type 44 from module extd_audit [2004/05/29 21:30:59, 5, pid=25850] smbd/connection.c:claim_connection(170) claiming IPC$ 0 [2004/05/29 21:30:59, 10, pid=25850] smbd/uid.c:is_share_read_only_for_user(99) is_share_read_only_for_user: share IPC$ is read-only for unix user erich [2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for IPC$ [2004/05/29 21:30:59, 10, pid=25850] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/05/29 21:30:59, 10, pid=25850] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 20 entries and first sid S-1-5-21-2072067240-3800136619-3437914000-9130. [2004/05/29 21:30:59, 3, pid=25850] lib/util_seaccess.c:se_access_check(251) [2004/05/29 21:30:59, 3, pid=25850] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-2072067240-3800136619-3437914000-9130 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1031 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1001 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1021 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1051 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1069 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1163 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1699 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1701 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1717 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1749 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1853 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1917 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2147 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2395 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2479 se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2763 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2004/05/29 21:30:59, 5, pid=25850] lib/util_seaccess.c:se_access_check(309) se_access_check: access (1) granted. [2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130 contains 20 SIDs SID[ 0]: S-1-5-21-2072067240-3800136619-3437914000-9130 SID[ 1]: S-1-5-21-2072067240-3800136619-3437914000-1031 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2072067240-3800136619-3437914000-1001 SID[ 6]: S-1-5-21-2072067240-3800136619-3437914000-1021 SID[ 7]: S-1-5-21-2072067240-3800136619-3437914000-1051 SID[ 8]: S-1-5-21-2072067240-3800136619-3437914000-1069 SID[ 9]: S-1-5-21-2072067240-3800136619-3437914000-1163 SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699 SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701 SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717 SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749 SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853 SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917 SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147 SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395 SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479 SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763 [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 4065 Primary group is 15 and contains 16 supplementary groups Group[ 0]: 0 Group[ 1]: 10 Group[ 2]: 15 Group[ 3]: 25 Group[ 4]: 34 Group[ 5]: 81 Group[ 6]: 349 Group[ 7]: 350 Group[ 8]: 358 Group[ 9]: 374 Group[ 10]: 426 Group[ 11]: 458 Group[ 12]: 573 Group[ 13]: 697 Group[ 14]: 739 Group[ 15]: 881 [2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_user(267) change_to_user uid=(4065,4065) gid=(0,15) [2004/05/29 21:30:59, 3, pid=25850] smbd/service.c:make_connection_snum(619) 140.142.110.103 (140.142.110.103) connect to service IPC$ initially as user erich (uid=4065, gid=15) (pid 25850) [2004/05/29 21:30:59, 10, pid=25850] modules/vfs_extd_audit.c:audit_connect(112) Connected to service IPC$ as user erich [2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:30:59, 3, pid=25850] smbd/reply.c:reply_tcon_and_X(429) tconX service=IPC$ [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=3200 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864) [000] 49 50 43 00 00 00 00 IPC.... [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,52) [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,52) wrote 52 [2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 100 [2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x64 [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 8 of length 104 [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=100 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=100 smb_mid=3264 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 3584 (0xE00) smb_vwv[ 3]= 5632 (0x1600) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]=16384 (0x4000) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=17 [2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864) [000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [010] 00 . [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBntcreateX (pid 25850) [2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130 contains 20 SIDs SID[ 0]: S-1-5-21-2072067240-3800136619-3437914000-9130 SID[ 1]: S-1-5-21-2072067240-3800136619-3437914000-1031 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2072067240-3800136619-3437914000-1001 SID[ 6]: S-1-5-21-2072067240-3800136619-3437914000-1021 SID[ 7]: S-1-5-21-2072067240-3800136619-3437914000-1051 SID[ 8]: S-1-5-21-2072067240-3800136619-3437914000-1069 SID[ 9]: S-1-5-21-2072067240-3800136619-3437914000-1163 SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699 SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701 SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717 SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749 SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853 SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917 SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147 SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395 SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479 SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763 [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 4065 Primary group is 15 and contains 16 supplementary groups Group[ 0]: 0 Group[ 1]: 10 Group[ 2]: 15 Group[ 3]: 25 Group[ 4]: 34 Group[ 5]: 81 Group[ 6]: 349 Group[ 7]: 350 Group[ 8]: 358 Group[ 9]: 374 Group[ 10]: 426 Group[ 11]: 458 Group[ 12]: 573 Group[ 13]: 697 Group[ 14]: 739 Group[ 15]: 881 [2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_user(267) change_to_user uid=(4065,4065) gid=(0,15) [2004/05/29 21:30:59, 4, pid=25850] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /tmp [2004/05/29 21:30:59, 10, pid=25850] smbd/nttrans.c:reply_ntcreate_and_X(609) reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0 [2004/05/29 21:30:59, 4, pid=25850] smbd/nttrans.c:nt_open_pipe(499) nt_open_pipe: Opening pipe \srvsvc. [2004/05/29 21:30:59, 3, pid=25850] smbd/nttrans.c:nt_open_pipe(516) nt_open_pipe: Known pipe srvsvc opening. [2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178) Open pipe requested srvsvc (pipes_open=0) [2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(279) Create pipe requested srvsvc [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77) init_pipe_handles: created handle list for pipe srvsvc [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93) init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc [2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(372) Created internal pipe srvsvc (pipes_open=0) [2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(258) Opened pipe srvsvc with handle 7779 (pipes_open=1) [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(264) open pipes: name srvsvc pnum=7779 [2004/05/29 21:30:59, 5, pid=25850] smbd/nttrans.c:do_ntcreate_pipe_open(564) do_ntcreate_pipe_open: open pipe = \srvsvc [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=100 smb_mid=3264 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=30976 (0x7900) smb_vwv[ 3]= 375 (0x177) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 0 (0x0) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,107) [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,107) wrote 107 [2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 136 [2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x88 [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 9 of length 140 [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=136 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=3328 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30585 (0x7779) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 72 (0x48) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 72 (0x48) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=73 [2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864) [000] EE 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 î....... .H...... [010] 00 B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 .¸.¸.... ........ [020] 00 C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 .ÈO2Kp.Ó ..xZG¿ná [030] 88 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. .ë.É..è. [040] 00 2B 10 48 60 02 00 00 00 .+.H`... . [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBwriteX (pid 25850) [2004/05/29 21:30:59, 4, pid=25850] smbd/uid.c:change_to_user(186) change_to_user: Skipping user change - already user [2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1156) search for pipe pnum=7779 [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1160) pipe name srvsvc pnum=7779 (pipes_open=1) [2004/05/29 21:30:59, 6, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 7779 name: srvsvc open: Yes len: 72 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 72 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 56 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0b [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0048 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 11, flags = 3 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 56 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 56, incoming data = 56 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 11 [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe.c:api_pipe_bind_req(875) api_pipe_bind_req: decode request. 875 [2004/05/29 21:30:59, 3, pid=25850] rpc_server/srv_pipe.c:api_pipe_bind_req(886) api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_rb [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0000 max_tsize: 10b8 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0002 max_rsize: 10b8 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0004 assoc_gid: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0008 num_elements: 00000001 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 000c context_id : 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 000e num_syntaxes: 01 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00000f smb_io_rpc_iface [2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_uuid uuid [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0010 data : 4b324fc8 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0014 data : 1670 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0016 data : 01d3 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722) 0018 data : 12 78 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722) 001a data : 5a 47 bf 6e e1 88 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0020 version: 00000003 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_rpc_iface [2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_uuid uuid [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0024 data : 8a885d04 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0028 data : 1ceb [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 002a data : 11c9 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722) 002c data : 9f e8 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722) 002e data : 08 00 2b 10 48 60 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0034 version: 00000002 [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe.c:api_pipe_bind_req(1016) api_pipe_bind_req: make response. 1016 [2004/05/29 21:30:59, 3, pid=25850] rpc_server/srv_pipe.c:check_bind_req(758) check_bind_req for \PIPE\srvsvc [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_ba [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_bba [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0000 max_tsize: 10b8 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0002 max_rsize: 10b8 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0004 assoc_gid: 000053f0 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_addr_str [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0008 len: 000d [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722) 000a str: \PIPE\ntsvcs. [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000017 smb_io_rpc_results [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0018 num_results: 01 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 001c result : 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 001e reason : 0000 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_rpc_iface [2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0020 data : 8a885d04 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0024 data : 1ceb [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0026 data : 11c9 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722) 0028 data : 9f e8 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722) 002a data : 08 00 2b 10 48 60 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0030 version: 00000002 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0c [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0044 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 56 [2004/05/29 21:30:59, 3, pid=25850] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=7779 nwritten=72 [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=47 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=3328 smt_wct=6 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 72 (0x48) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_bcc=0 [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,51) [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,51) wrote 51 [2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 59 [2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x3b [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 10 of length 63 [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=3392 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]=30585 (0x7779) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBreadX (pid 25850) [2004/05/29 21:30:59, 4, pid=25850] smbd/uid.c:change_to_user(186) change_to_user: Skipping user change - already user [2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1156) search for pipe pnum=7779 [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1160) pipe name srvsvc pnum=7779 (pipes_open=1) [2004/05/29 21:30:59, 6, pid=25850] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 7779 name: srvsvc len: 1024 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(970) read_from_pipe: srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2004/05/29 21:30:59, 3, pid=25850] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=7779 min=1024 max=1024 nread=68 [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=127 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=3392 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 68 (0x44) smb_vwv[ 6]= 59 (0x3B) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=68 [2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864) [000] 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 00 ........ D....... [010] B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 5C ¸.¸.ðS.. ..\PIPE\ [020] 6E 74 73 76 63 73 00 00 01 00 00 00 00 00 00 00 ntsvcs.. ........ [030] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]..ë.É. .è..+.H` [040] 02 00 00 00 .... [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,131) [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,131) wrote 131 [2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 220 [2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0xdc [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 11 of length 224 [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=220 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=788 smb_uid=100 smb_mid=3456 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 136 (0x88) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 84 (0x54) smb_vwv[11]= 136 (0x88) smb_vwv[12]= 84 (0x54) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=30585 (0x7779) smb_bcc=153 [2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 DA .\.P.I.P .E.\...Ú [010] 15 05 00 00 03 10 00 00 00 88 00 00 00 01 00 00 ........ ........ [020] 00 70 00 00 00 00 00 10 00 D0 DD DA 00 1B 00 00 .p...... .ÐÝÚ.... [030] 00 00 00 00 00 1B 00 00 00 5C 00 5C 00 63 00 61 ........ .\.\.c.a [040] 00 6E 00 6F 00 6E 00 2E 00 63 00 61 00 63 00 2E .n.o.n.. .c.a.c.. [050] 00 77 00 61 00 73 00 68 00 69 00 6E 00 67 00 74 .w.a.s.h .i.n.g.t [060] 00 6F 00 6E 00 2E 00 65 00 64 00 75 00 00 00 00 .o.n...e .d.u.... [070] 00 0B 00 00 00 00 00 00 00 0B 00 00 00 6E 00 65 ........ .....n.e [080] 00 62 00 75 00 6C 00 61 00 68 00 6F 00 6D 00 65 .b.u.l.a .h.o.m.e [090] 00 00 00 00 00 01 00 00 00 ........ . [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBtrans (pid 25850) [2004/05/29 21:30:59, 4, pid=25850] smbd/uid.c:change_to_user(186) change_to_user: Skipping user change - already user [2004/05/29 21:30:59, 3, pid=25850] smbd/ipc.c:reply_trans(538) trans <\PIPE\> data=136 params=0 setup=2 [2004/05/29 21:30:59, 5, pid=25850] smbd/ipc.c:reply_trans(557) calling named_pipe [2004/05/29 21:30:59, 3, pid=25850] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2004/05/29 21:30:59, 5, pid=25850] smbd/ipc.c:api_fd_reply(267) api_fd_reply [2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1156) search for pipe pnum=7779 [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1160) pipe name srvsvc pnum=7779 (pipes_open=1) [2004/05/29 21:30:59, 3, pid=25850] smbd/ipc.c:api_fd_reply(296) Got API command 0x26 on pipe "srvsvc" (pnum 7779) [2004/05/29 21:30:59, 10, pid=25850] smbd/ipc.c:api_fd_reply(301) api_fd_reply: p:0x8341a50 max_trans_reply: 1024 [2004/05/29 21:30:59, 6, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_pipe(854) write_to_pipe: 7779 name: srvsvc open: Yes len: 136 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 136 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 136 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401) fill_rpc_header: data_to_copy = 136, len_needed_to_complete_hdr = 16, receive_len = 0 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 16 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 120 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 120 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0088 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488) unmarshall_rpc_header: using little-endian RPC [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517) unmarshall_rpc_header: type = 0, flags = 3 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 0 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876) write_to_pipe: data_left = 120 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_incoming_data(779) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 120, incoming data = 120 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722) process_complete_pdu: processing packet type 0 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_req req [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0000 alloc_hint: 00000070 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0004 context_id: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0006 opnum : 0010 [2004/05/29 21:30:59, 3, pid=25850] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 0 [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe.c:api_pipe_request(1494) Requested \PIPE\srvsvc [2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe.c:api_rpcTNP(1528) api_rpcTNP: srvsvc op 0x10 - api_rpcTNP: rpc command: SRV_NET_SHARE_GET_INFO [2004/05/29 21:30:59, 6, pid=25850] rpc_server/srv_pipe.c:api_rpcTNP(1554) api_rpc_cmds[7].fn == 0x80f98d9 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_q_net_share_get_info [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0000 ptr_srv_name: 00daddd0 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0004 uni_max_len: 0000001b [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0008 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 000c uni_str_len: 0000001b [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0010 buffer : \.\.c.a.n.o.n...c.a.c...w.a.s.h.i.n.g.t.o.n...e.d.u... [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000046 smb_io_unistr2 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0048 uni_max_len: 0000000b [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 004c offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0050 uni_str_len: 0000000b [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0054 buffer : n.e.b.u.l.a.h.o.m.e... [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 006c info_level: 00000001 [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1391) _srv_net_share_get_info: 1391 [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_get_info(737) init_srv_r_net_share_get_info: 737 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_srv.c:init_srv_share_info1(142) init_srv_share_info1: nebulahome 0 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_srv.c:init_srv_share_info1_str(101) init_srv_share_info1_str [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1397) _srv_net_share_get_info: 1397 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_r_net_share_get_info [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 srv_io_srv_share_info info [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0000 switch_value : 00000001 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0004 ptr_share_ctr: 00000001 [2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000008 srv_io_share_info1 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0008 ptr_netname: 00000001 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 000c type : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0010 ptr_remark : 00000001 [2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000014 srv_io_share_info1_str [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000014 smb_io_unistr2 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0014 uni_max_len: 0000000b [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0018 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 001c uni_str_len: 0000000b [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0020 buffer : n.e.b.u.l.a.h.o.m.e... [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000038 smb_io_unistr2 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0038 uni_max_len: 00000001 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 003c offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0040 uni_str_len: 00000001 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0044 buffer : .. [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_werror(695) 0048 status: WERR_OK [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe.c:api_rpcTNP(1575) api_rpcTNP: called srvsvc successfully [2004/05/29 21:30:59, 3, pid=25850] rpc_server/srv_pipe_hnd.c:free_pipe_context(544) free_pipe_context: destroying talloc pool of size 1100 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880) write_to_pipe: data_used = 120 [2004/05/29 21:30:59, 6, pid=25850] rpc_server/srv_pipe_hnd.c:read_from_pipe(911) read_from_pipe: 7779 name: srvsvc len: 1024 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984) read_from_pipe: srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 76. [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0064 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp resp [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 0000004c [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/05/29 21:30:59, 5, pid=25850] smbd/ipc.c:copy_trans_params_and_data(62) copy_trans_params_and_data: params[0..0] data[0..100] [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=156 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=788 smb_uid=100 smb_mid=3456 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 100 (0x64) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 100 (0x64) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=101 [2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864) [000] 00 05 00 02 03 10 00 00 00 64 00 00 00 01 00 00 ........ .d...... [010] 00 4C 00 00 00 00 00 00 00 01 00 00 00 01 00 00 .L...... ........ [020] 00 01 00 00 00 00 00 00 00 01 00 00 00 0B 00 00 ........ ........ [030] 00 00 00 00 00 0B 00 00 00 6E 00 65 00 62 00 75 ........ .n.e.b.u [040] 00 6C 00 61 00 68 00 6F 00 6D 00 65 00 00 00 00 .l.a.h.o .m.e.... [050] 00 01 00 00 00 00 00 00 00 01 00 00 00 00 00 00 ........ ........ [060] 00 00 00 00 00 ..... [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,160) [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,160) wrote 160 [2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 41 [2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x29 [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 12 of length 45 [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=3520 smt_wct=3 smb_vwv[ 0]=30585 (0x7779) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBclose (pid 25850) [2004/05/29 21:30:59, 4, pid=25850] smbd/uid.c:change_to_user(186) change_to_user: Skipping user change - already user [2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1156) search for pipe pnum=7779 [2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1160) pipe name srvsvc pnum=7779 (pipes_open=1) [2004/05/29 21:30:59, 5, pid=25850] smbd/pipes.c:reply_pipe_close(258) reply_pipe_close: pnum:7779 [2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235) close_policy_by_pipe: deleted handle list for pipe srvsvc [2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1083) closed pipe name srvsvc pnum=7779 (pipes_open=0) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2 smb_pid=65279 smb_uid=100 smb_mid=3520 smt_wct=0 smb_bcc=0 [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,39) [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,39) wrote 39 [2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 100 [2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x64 [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 13 of length 104 [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=100 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=3584 smt_wct=15 smb_vwv[ 0]= 32 (0x20) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 32 (0x20) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=35 [2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864) [000] 00 00 00 16 00 56 05 06 00 04 01 00 00 00 00 5C .....V.. .......\ [010] 00 4D 00 59 00 48 00 4F 00 4D 00 45 00 22 00 2A .M.Y.H.O .M.E.".* [020] 00 00 00 ... [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 25850) [2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130 contains 20 SIDs SID[ 0]: S-1-5-21-2072067240-3800136619-3437914000-9130 SID[ 1]: S-1-5-21-2072067240-3800136619-3437914000-1031 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2072067240-3800136619-3437914000-1001 SID[ 6]: S-1-5-21-2072067240-3800136619-3437914000-1021 SID[ 7]: S-1-5-21-2072067240-3800136619-3437914000-1051 SID[ 8]: S-1-5-21-2072067240-3800136619-3437914000-1069 SID[ 9]: S-1-5-21-2072067240-3800136619-3437914000-1163 SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699 SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701 SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717 SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749 SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853 SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917 SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147 SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395 SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479 SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763 [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 4065 Primary group is 15 and contains 16 supplementary groups Group[ 0]: 0 Group[ 1]: 10 Group[ 2]: 15 Group[ 3]: 25 Group[ 4]: 34 Group[ 5]: 81 Group[ 6]: 349 Group[ 7]: 350 Group[ 8]: 358 Group[ 9]: 374 Group[ 10]: 426 Group[ 11]: 458 Group[ 12]: 573 Group[ 13]: 697 Group[ 14]: 739 Group[ 15]: 881 [2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_user(267) change_to_user uid=(4065,4065) gid=(0,15) [2004/05/29 21:30:59, 4, pid=25850] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /usr/local/lib/samba/nebula-home [2004/05/29 21:30:59, 3, pid=25850] smbd/trans2.c:call_trans2findfirst(1355) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 [2004/05/29 21:30:59, 5, pid=25850] smbd/filename.c:unix_convert(114) unix_convert called on file "MYHOME"*" [2004/05/29 21:30:59, 10, pid=25850] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [MYHOME"*] [2004/05/29 21:30:59, 5, pid=25850] smbd/filename.c:unix_convert(177) unix_convert begin: name = MYHOME"*, dirpath = , start = MYHOME"* [2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269) is_mangled MYHOME"* ? [2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component MYHOME"* (len 8) ? [2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269) is_mangled MYHOME"* ? [2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component MYHOME"* (len 8) ? [2004/05/29 21:30:59, 5, pid=25850] smbd/filename.c:unix_convert(312) New file MYHOME"* [2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: MYHOME"* [2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:59, 5, pid=25850] smbd/trans2.c:call_trans2findfirst(1400) dir=./, mask = MYHOME"* [2004/05/29 21:30:59, 5, pid=25850] smbd/dir.c:start_dir(334) start_dir dir=./ [2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: ./ [2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:59, 10, pid=25850] modules/vfs_extd_audit.c:audit_opendir(141) vfs_extd_audit: opendir ./ [2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: myhome [2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:59, 3, pid=25850] smbd/dir.c:dptr_create(491) creating new dirptr 256 for path ./, expect_close = 1 [2004/05/29 21:30:59, 4, pid=25850] smbd/trans2.c:call_trans2findfirst(1430) dptr_num is 256, wcard = MYHOME"*, attr = 22 [2004/05/29 21:30:59, 8, pid=25850] smbd/trans2.c:call_trans2findfirst(1435) dirpath=<./> dontdescend=<> [2004/05/29 21:30:59, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879) get_lanman2_dir_entry:readdir on dirptr 0x8331b78 now at offset 1 [2004/05/29 21:30:59, 10, pid=25850] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(MYHOME"*,.) -> -1 [2004/05/29 21:30:59, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879) get_lanman2_dir_entry:readdir on dirptr 0x8331b78 now at offset 2 [2004/05/29 21:30:59, 10, pid=25850] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(MYHOME"*,.) -> -1 [2004/05/29 21:30:59, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879) get_lanman2_dir_entry:readdir on dirptr 0x8331b78 now at offset 3 [2004/05/29 21:30:59, 10, pid=25850] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(MYHOME"*,myhome) -> 0 [2004/05/29 21:30:59, 5, pid=25850] smbd/msdfs.c:is_msdfs_link(258) is_msdfs_link: ./myhome -> msdfs:kodak5.cac.washington.edu\homes [2004/05/29 21:30:59, 5, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(931) get_lanman2_dir_entry: Masquerading msdfs link ./myhome as a directory [2004/05/29 21:30:59, 8, pid=25850] smbd/dosmode.c:dos_mode(270) dos_mode: ./myhome [2004/05/29 21:30:59, 8, pid=25850] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: ./myhome [2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:59, 8, pid=25850] smbd/dosmode.c:dos_mode(302) dos_mode returning d [2004/05/29 21:30:59, 5, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(964) get_lanman2_dir_entry found ./myhome fname=myhome [2004/05/29 21:30:59, 10, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(1048) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2004/05/29 21:30:59, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879) get_lanman2_dir_entry:readdir on dirptr 0x8331b78 now at offset 3 [2004/05/29 21:30:59, 5, pid=25850] smbd/trans2.c:call_trans2findfirst(1481) call_trans2findfirst - (2) closing dptr_num 256 [2004/05/29 21:30:59, 4, pid=25850] smbd/dir.c:dptr_close_internal(224) closing dptr key 256 [2004/05/29 21:30:59, 9, pid=25850] smbd/trans2.c:send_trans2_replies(535) t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010 [2004/05/29 21:30:59, 9, pid=25850] smbd/trans2.c:send_trans2_replies(537) t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108 [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,180) [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,180) wrote 180 [2004/05/29 21:30:59, 4, pid=25850] smbd/trans2.c:call_trans2findfirst(1511) SMBtrans2 mask=MYHOME"* directory=./ dirtype=22 numentries=1 [2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 90 [2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x5a [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 14 of length 94 [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=90 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=3648 smt_wct=15 smb_vwv[ 0]= 22 (0x16) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 22 (0x16) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=25 [2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864) [000] 00 72 00 EC 03 00 00 00 00 5C 00 6D 00 79 00 68 .r.ì.... .\.m.y.h [010] 00 6F 00 6D 00 65 00 00 00 .o.m.e.. . [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 25850) [2004/05/29 21:30:59, 4, pid=25850] smbd/uid.c:change_to_user(186) change_to_user: Skipping user change - already user [2004/05/29 21:30:59, 3, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2331) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/05/29 21:30:59, 5, pid=25850] smbd/filename.c:unix_convert(114) unix_convert called on file "myhome" [2004/05/29 21:30:59, 10, pid=25850] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [MYHOME] [2004/05/29 21:30:59, 5, pid=25850] smbd/filename.c:unix_convert(177) unix_convert begin: name = myhome, dirpath = , start = myhome [2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269) is_mangled myhome ? [2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component myhome (len 6) ? [2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269) is_mangled myhome ? [2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component myhome (len 6) ? [2004/05/29 21:30:59, 10, pid=25850] modules/vfs_extd_audit.c:audit_opendir(141) vfs_extd_audit: opendir . [2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: myhome [2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:59, 5, pid=25850] smbd/statcache.c:stat_cache_add(178) stat_cache_add: Added entry MYHOME -> myhome [2004/05/29 21:30:59, 5, pid=25850] smbd/filename.c:unix_convert(377) conversion finished myhome -> myhome [2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: myhome [2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:30:59, 3, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2353) call_trans2qfilepathinfo: SMB_VFS_STAT of myhome failed (No such file or directory) [2004/05/29 21:30:59, 10, pid=25850] smbd/trans2.c:set_bad_path_error(2213) set_bad_path_error: err = 2 bad_path = 0 [2004/05/29 21:30:59, 3, pid=25850] smbd/error.c:error_packet(94) error string = No such file or directory [2004/05/29 21:30:59, 3, pid=25850] smbd/error.c:error_packet(118) error packet at smbd/trans2.c(2219) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=3648 smt_wct=0 smb_bcc=0 [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,39) [2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,39) wrote 39 [2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 1434 [2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x59a [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 15 of length 1438 [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466) size=1434 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=3712 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1434 (0x59A) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1272 (0x4F8) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=1375 [2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864) [000] 60 82 04 F4 06 06 2B 06 01 05 05 02 A0 82 04 E8 `..ô..+. .... ..è [010] 30 82 04 E4 A0 24 30 22 06 09 2A 86 48 82 F7 12 0..ä $0" ..*.H.÷. [020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H .÷...... [030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 BA 04 82 +.....7. ..¢..º.. [040] 04 B6 60 82 04 B2 06 09 2A 86 48 86 F7 12 01 02 .¶`..².. *.H.÷... [050] 02 01 00 6E 82 04 A1 30 82 04 9D A0 03 02 01 05 ...n..¡0 ... .... [060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ¡....¢.. .. ...£. [070] 03 BD 61 82 03 B9 30 82 03 B5 A0 03 02 01 05 A1 .½a..¹0. .µ ....¡ [080] 17 1B 15 4E 45 42 55 4C 41 2E 57 41 53 48 49 4E ...NEBUL A.WASHIN [090] 47 54 4F 4E 2E 45 44 55 A2 2B 30 29 A0 03 02 01 GTON.EDU ¢+0) ... [0A0] 02 A1 22 30 20 1B 04 63 69 66 73 1B 18 63 61 6E .¡"0 ..c ifs..can [0B0] 6F 6E 2E 63 61 63 2E 77 61 73 68 69 6E 67 74 6F on.cac.w ashingto [0C0] 6E 2E 65 64 75 A3 82 03 66 30 82 03 62 A0 03 02 n.edu£.. f0..b .. [0D0] 01 03 A1 03 02 01 02 A2 82 03 54 04 82 03 50 86 ..¡....¢ ..T...P. [0E0] 7D CE EE 8A E9 AE D5 5C 58 BF 8B EE DA 0F E5 05 }Îî.é®Õ\ X¿.îÚ.å. [0F0] 6C 20 D0 30 6E A2 1B 84 95 AE E7 26 AF CA 58 A0 l Ð0n¢.. .®ç&¯ÊX  [100] 14 F9 FA CE 61 B2 4C D4 BF 1C 8E FD 44 0E 44 E0 .ùúÎa²LÔ ¿..ýD.Dà [110] 40 53 43 D7 82 A8 3C 38 8F 6A 70 09 26 CB E8 CF @SC×.¨<8 .jp.&ËèÏ [120] 9C 23 7C BB 67 89 B4 C0 37 73 00 0F 97 CF 14 E0 .#|»g.´À 7s...Ï.à [130] 9C 99 D5 20 75 47 97 66 CD 0C 49 BB F8 61 15 9E ..Õ uG.f Í.I»øa.. [140] DB DD 22 B5 5C DC 81 5B C1 0D 1B EF 72 0A D4 88 ÛÝ"µ\Ü.[ Á..ïr.Ô. [150] 66 C0 14 F8 87 62 F4 B3 E7 34 78 67 F3 B2 92 A9 fÀ.ø.bô³ ç4xgó².© [160] AA 7B 81 BA 1F FD 33 E0 93 F6 8F 09 45 DE 62 B6 ª{.º.ý3à .ö..EÞb¶ [170] D2 C8 AF 35 A4 22 1B 48 1C FD AD F4 C4 54 B4 A3 Òȯ5¤".H .ý­ôÄT´£ [180] F9 E4 42 AB CC 16 6E F5 DE 33 C7 E3 BF 37 05 C9 ùäB«Ì.nõ Þ3Çã¿7.É [190] FE 4A 05 27 6D 27 0D 43 F0 6B 9B 17 94 6D 50 6E þJ.'m'.C ðk...mPn [1A0] 08 14 33 4C 53 F1 94 CB D5 17 F5 A2 59 B7 D2 10 ..3LSñ.Ë Õ.õ¢Y·Ò. [1B0] CC 60 4B 31 52 FC 72 DA B3 5F CA FA 0A 69 D6 33 Ì`K1RürÚ ³_Êú.iÖ3 [1C0] A2 50 03 8E B6 66 E4 B5 1C 81 95 88 FA DD 27 13 ¢P..¶fäµ ....úÝ'. [1D0] B6 A5 E0 31 89 76 09 BF BA 7B 38 10 38 AF D3 CF ¶¥à1.v.¿ º{8.8¯ÓÏ [1E0] 6D 99 86 2F F4 90 C1 BB 0C C3 6D 5D 82 32 3C 09 m../ô.Á» .Ãm].2<. [1F0] 51 88 ED 22 01 B8 C0 70 9F 69 27 62 6A CC ED 34 Q.í".¸Àp .i'bjÌí4 [2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBsesssetupX (pid 25850) [2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X(649) wct=12 flg2=0xc807 [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(529) Doing spnego session setup [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(560) NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438) Got OID 1 2 840 48018 1 2 2 [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438) Got OID 1 2 840 113554 1 2 2 [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438) Got OID 1 3 6 1 4 1 311 2 2 10 [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(441) Got secblob of size 1206 [2004/05/29 21:30:59, 10, pid=25850] passdb/secrets.c:secrets_named_mutex(704) secrets_named_mutex: got mutex for replay cache mutex [2004/05/29 21:30:59, 10, pid=25850] libads/kerberos_verify.c:ads_verify_ticket(185) ads_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type [2004/05/29 21:30:59, 10, pid=25850] libads/kerberos_verify.c:ads_verify_ticket(178) ads_verify_ticket: enc type [3] decrypted message ! [2004/05/29 21:30:59, 10, pid=25850] passdb/secrets.c:secrets_named_mutex_release(716) secrets_named_mutex: released mutex for replay cache mutex [2004/05/29 21:30:59, 10, pid=25850] libsmb/clikrb5.c:get_krb5_smb_session_key(442) Got KRB5 session key of length 8 [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:decode_pac_data(602) dump_pac_data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000000 pac_io_pac_data pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0000 num_buffers: 00000004 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0004 version: 00000000 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000008 pac_io_pac_info_hdr pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0008 type: 00000001 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 000c size: 000001c0 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0010 offset: 00000048 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0014 offsethi: 00000000 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000018 pac_io_pac_info_hdr pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0018 type: 0000000a [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 001c size: 0000001e [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0020 offset: 00000208 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0024 offsethi: 00000000 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000028 pac_io_pac_info_hdr pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0028 type: 00000006 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 002c size: 00000014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0030 offset: 00000228 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0034 offsethi: 00000000 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000038 pac_io_pac_info_hdr pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0038 type: 00000007 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 003c size: 00000014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0040 offset: 00000240 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0044 offsethi: 00000000 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000048 pac_io_pac_info_hdr_ctr pac data [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(467) PAC_TYPE_LOGON_INFO [2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000048 pac_io_pac_logon_info pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0048 unknown: 00081001 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 004c unknown: cccccccc [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0050 bufferlen: 000001b0 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0054 bufferlenhi: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0058 pointer: 00020000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00005c smb_io_time logon_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 005c low : 094d3ef4 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0060 high: 01c445ca [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000064 smb_io_time logoff_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0064 low : ffffffff [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0068 high: 7fffffff [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00006c smb_io_time kickoff_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 006c low : ffffffff [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0070 high: 7fffffff [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000074 smb_io_time pass_last_set_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0074 low : 7dbd84f0 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0078 high: 01c4412f [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00007c smb_io_time pass_can_change_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 007c low : 7dbd84f0 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0080 high: 01c4412f [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000084 smb_io_time pass_must_change_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0084 low : ffffffff [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0088 high: 7fffffff [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00008c smb_io_unihdr hdr_user_name [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 008c uni_str_len: 0014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 008e uni_max_len: 0014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0090 buffer : 00020004 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000094 smb_io_unihdr hdr_full_name [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0094 uni_str_len: 0014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0096 uni_max_len: 0014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0098 buffer : 00020008 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00009c smb_io_unihdr hdr_logon_script [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 009c uni_str_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 009e uni_max_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00a0 buffer : 0002000c [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000a4 smb_io_unihdr hdr_profile_path [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00a4 uni_str_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00a6 uni_max_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00a8 buffer : 00020010 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000ac smb_io_unihdr hdr_home_dir [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00ac uni_str_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00ae uni_max_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00b0 buffer : 00020014 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000b4 smb_io_unihdr hdr_dir_drive [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00b4 uni_str_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00b6 uni_max_len: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00b8 buffer : 00020018 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00bc logon_count: 0117 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00be reserved12: 0000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00c0 user_rid: 0000451e [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00c4 group_rid: 00000203 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00c8 group_count: 00000002 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00cc group_mem_ptr: 0002001c [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00d0 user_flags: 00000020 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00d4 reserved13.0: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00d8 reserved13.1: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00dc reserved13.2: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00e0 reserved13.3: 00000000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000e4 smb_io_unihdr hdr_dom_controller [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00e4 uni_str_len: 000a [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00e6 uni_max_len: 000c [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00e8 buffer : 00020020 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0000ec smb_io_unihdr hdr_dom_name [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00ec uni_str_len: 000c [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 00ee uni_max_len: 000e [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00f0 buffer : 00020024 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00f4 ptr_dom_sid: 00020028 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00f8 reserved16.0: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 00fc reserved16.1: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0100 reserved17: 00000080 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0104 reserved18.0: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0108 reserved18.1: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 010c reserved18.2: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0110 reserved18.3: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0114 reserved18.4: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0118 reserved18.5: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 011c reserved18.6: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0120 sid_count: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0124 ptr_extra_sids: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0128 ptr_res_group_dom_sid: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 012c res_group_count: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0130 ptr_res_groups: 00000000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000134 smb_io_unistr2 uni_user_name [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0134 uni_max_len: 0000000a [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0138 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 013c uni_str_len: 0000000a [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0140 buffer : K.L.E.E.N.E.X._.Q.$. [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000154 smb_io_unistr2 uni_full_name [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0154 uni_max_len: 0000000a [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0158 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 015c uni_str_len: 0000000a [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0160 buffer : K.L.E.E.N.E.X._.Q.$. [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000174 smb_io_unistr2 uni_logon_script [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0174 uni_max_len: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0178 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 017c uni_str_len: 00000000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000180 smb_io_unistr2 uni_profile_path [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0180 uni_max_len: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0184 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0188 uni_str_len: 00000000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00018c smb_io_unistr2 uni_home_dir [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 018c uni_max_len: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0190 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0194 uni_str_len: 00000000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000198 smb_io_unistr2 uni_dir_drive [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0198 uni_max_len: 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 019c offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01a0 uni_str_len: 00000000 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001a4 pac_io_group_membership_array group membership [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01a4 count: 00000002 [2004/05/29 21:30:59, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001a8 pac_io_group_membership group membership [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01a8 rid: 00004527 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01ac attrs: 00000007 [2004/05/29 21:30:59, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001b0 pac_io_group_membership group membership [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01b0 rid: 00000203 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01b4 attrs: 00000007 [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001b8 smb_io_unistr2 uni_dom_controller [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01b8 uni_max_len: 00000006 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01bc offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01c0 uni_str_len: 00000005 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 01c4 buffer : O.R.I.O.N. [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001ce smb_io_unistr2 uni_dom_name [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01d0 uni_max_len: 00000007 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01d4 offset : 00000000 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01d8 uni_str_len: 00000006 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807) 01dc buffer : N.E.B.U.L.A. [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001e8 smb_io_dom_sid2 dom_sid [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 01e8 num_auths: 00000004 [2004/05/29 21:30:59, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 0001ec smb_io_dom_sid sid [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01ec sid_rev_num: 01 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01ed num_auths : 04 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01ee id_auth[0] : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01ef id_auth[1] : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01f0 id_auth[2] : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01f1 id_auth[3] : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01f2 id_auth[4] : 00 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577) 01f3 id_auth[5] : 05 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32s(862) 01f4 sub_auths : 00000015 0125690f 1de85f7e 4a515a19 [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000204 pac_io_pac_info_hdr_ctr pac data [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452) offset in header(x208) and data(x204) do not match [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(510) PAC_TYPE_UNKNOWN_10 [2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000208 pac_io_unknown_type_10 pac data [2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000208 smb_io_time unknown_time [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0208 low : 59798e80 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 020c high: 01c445cc [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606) 0210 len: 0014 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16s(765) 0212 name: k.l.e.e.n.e.x._.q.$. [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000226 pac_io_pac_info_hdr_ctr pac data [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(481) PAC_TYPE_SERVER_CHECKSUM [2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000228 pac_io_pac_signature_data pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0228 type: ffffff76 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722) 022c signature: 75 96 39 1b db 4f b0 10 a2 b3 8f d2 b2 4b c4 4f [2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 00023c pac_io_pac_info_hdr_ctr pac data [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452) offset in header(x240) and data(x23c) do not match [2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(495) PAC_TYPE_PRIVSVR_CHECKSUM [2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82) 000240 pac_io_pac_signature_data pac data [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635) 0240 type: ffffff76 [2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722) 0244 signature: 1b 96 ac 5f 95 24 ed 57 f5 50 06 d8 33 ea 2c fb [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(180) Ticket name is [kleenex_q$@NEBULA.WASHINGTON.EDU] [2004/05/29 21:30:59, 10, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(221) Mapping [NEBULA.WASHINGTON.EDU] to short name [2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(237) Could not find short name -- winbind not running? [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam(293) Finding user NEBULA.WASHINGTON.EDU\kleenex_q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is nebula.washington.edu\kleenex_q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(230) Trying _Get_Pwnam(), username as given is NEBULA.WASHINGTON.EDU\kleenex_q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(239) Trying _Get_Pwnam(), username as uppercase is NEBULA.WASHINGTON.EDU\KLEENEX_Q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(247) Checking combinations of 0 uppercase letters in nebula.washington.edu\kleenex_q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals didn't find user [NEBULA.WASHINGTON.EDU\kleenex_q$]! [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam(293) Finding user kleenex_q$ [2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is kleenex_q$ [2004/05/29 21:31:00, 5, pid=25850] lib/username.c:Get_Pwnam_internals(239) Trying _Get_Pwnam(), username as uppercase is KLEENEX_Q$ [2004/05/29 21:31:00, 5, pid=25850] lib/username.c:Get_Pwnam_internals(247) Checking combinations of 0 uppercase letters in kleenex_q$ [2004/05/29 21:31:00, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals didn't find user [kleenex_q$]! [2004/05/29 21:31:00, 1, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(248) Username NEBULA.WASHINGTON.EDU\kleenex_q$ is invalid on this system [2004/05/29 21:31:00, 3, pid=25850] smbd/error.c:error_packet(118) error packet at smbd/sesssetup.c(252) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE [2004/05/29 21:31:00, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:31:00, 5, pid=25850] lib/util.c:show_msg(466) size=35 smb_com=0x73 smb_rcls=109 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=3712 smt_wct=0 smb_bcc=0 [2004/05/29 21:31:00, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,39) [2004/05/29 21:31:00, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,39) wrote 39 [2004/05/29 21:31:00, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 90 [2004/05/29 21:31:00, 6, pid=25850] smbd/process.c:process_smb(889) got message type 0x0 of len 0x5a [2004/05/29 21:31:00, 3, pid=25850] smbd/process.c:process_smb(890) Transaction 16 of length 94 [2004/05/29 21:31:00, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:31:00, 5, pid=25850] lib/util.c:show_msg(466) size=90 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=3776 smt_wct=15 smb_vwv[ 0]= 22 (0x16) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 22 (0x16) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=25 [2004/05/29 21:31:00, 10, pid=25850] lib/util.c:dump_data(1864) [000] 02 00 00 EC 03 00 00 00 00 5C 00 6D 00 79 00 68 ...ì.... .\.m.y.h [010] 00 6F 00 6D 00 65 00 00 00 .o.m.e.. . [2004/05/29 21:31:00, 3, pid=25850] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 25850) [2004/05/29 21:31:00, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0 [2004/05/29 21:31:00, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130 contains 20 SIDs SID[ 0]: S-1-5-21-2072067240-3800136619-3437914000-9130 SID[ 1]: S-1-5-21-2072067240-3800136619-3437914000-1031 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-2072067240-3800136619-3437914000-1001 SID[ 6]: S-1-5-21-2072067240-3800136619-3437914000-1021 SID[ 7]: S-1-5-21-2072067240-3800136619-3437914000-1051 SID[ 8]: S-1-5-21-2072067240-3800136619-3437914000-1069 SID[ 9]: S-1-5-21-2072067240-3800136619-3437914000-1163 SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699 SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701 SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717 SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749 SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853 SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917 SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147 SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395 SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479 SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763 [2004/05/29 21:31:00, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 4065 Primary group is 15 and contains 16 supplementary groups Group[ 0]: 0 Group[ 1]: 10 Group[ 2]: 15 Group[ 3]: 25 Group[ 4]: 34 Group[ 5]: 81 Group[ 6]: 349 Group[ 7]: 350 Group[ 8]: 358 Group[ 9]: 374 Group[ 10]: 426 Group[ 11]: 458 Group[ 12]: 573 Group[ 13]: 697 Group[ 14]: 739 Group[ 15]: 881 [2004/05/29 21:31:00, 5, pid=25850] smbd/uid.c:change_to_user(267) change_to_user uid=(4065,4065) gid=(0,15) [2004/05/29 21:31:00, 3, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2331) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/05/29 21:31:00, 5, pid=25850] smbd/filename.c:unix_convert(114) unix_convert called on file "myhome" [2004/05/29 21:31:00, 10, pid=25850] smbd/statcache.c:stat_cache_lookup(281) stat_cache_lookup: lookup succeeded for name [MYHOME] -> [myhome] [2004/05/29 21:31:00, 5, pid=25850] smbd/filename.c:unix_convert(177) unix_convert begin: name = myhome, dirpath = , start = myhome [2004/05/29 21:31:00, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269) is_mangled myhome ? [2004/05/29 21:31:00, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component myhome (len 6) ? [2004/05/29 21:31:00, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269) is_mangled myhome ? [2004/05/29 21:31:00, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component myhome (len 6) ? [2004/05/29 21:31:00, 10, pid=25850] modules/vfs_extd_audit.c:audit_opendir(141) vfs_extd_audit: opendir . [2004/05/29 21:31:00, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: myhome [2004/05/29 21:31:00, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:31:00, 5, pid=25850] smbd/statcache.c:stat_cache_add(178) stat_cache_add: Added entry MYHOME -> myhome [2004/05/29 21:31:00, 5, pid=25850] smbd/filename.c:unix_convert(377) conversion finished myhome -> myhome [2004/05/29 21:31:00, 8, pid=25850] lib/util.c:is_in_path(1508) is_in_path: myhome [2004/05/29 21:31:00, 8, pid=25850] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:31:00, 3, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2353) call_trans2qfilepathinfo: SMB_VFS_STAT of myhome failed (No such file or directory) [2004/05/29 21:31:00, 10, pid=25850] smbd/trans2.c:set_bad_path_error(2213) set_bad_path_error: err = 2 bad_path = 0 [2004/05/29 21:31:00, 3, pid=25850] smbd/error.c:error_packet(94) error string = No such file or directory [2004/05/29 21:31:00, 3, pid=25850] smbd/error.c:error_packet(118) error packet at smbd/trans2.c(2219) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND [2004/05/29 21:31:00, 5, pid=25850] lib/util.c:show_msg(456) [2004/05/29 21:31:00, 5, pid=25850] lib/util.c:show_msg(466) size=35 smb_com=0x32 smb_rcls=52 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51265 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=3776 smt_wct=0 smb_bcc=0 [2004/05/29 21:31:00, 6, pid=25850] lib/util_sock.c:write_socket(432) write_socket(22,39) [2004/05/29 21:31:00, 6, pid=25850] lib/util_sock.c:write_socket(435) write_socket(22,39) wrote 39 [2004/05/29 21:31:08, 10, pid=25850] smbd/process.c:async_processing(122) async_processing: Doing async processing. [2004/05/29 21:31:08, 5, pid=25850] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/05/29 21:31:08, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:31:08, 5, pid=25850] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:31:08, 2, pid=25850] smbd/server.c:exit_server(568) Closing connections [2004/05/29 21:31:08, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:31:08, 5, pid=25850] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:31:08, 3, pid=25850] smbd/service.c:close_cnum(801) 140.142.110.103 (140.142.110.103) closed connection to service IPC$ [2004/05/29 21:31:08, 10, pid=25850] modules/vfs_extd_audit.c:audit_disconnect(122) Disconnected from VFS module extd_audit [2004/05/29 21:31:08, 3, pid=25850] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2004/05/29 21:31:08, 4, pid=25850] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to / [2004/05/29 21:31:08, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:31:08, 5, pid=25850] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:31:08, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:31:08, 5, pid=25850] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:31:08, 1, pid=25850] smbd/service.c:close_cnum(801) 140.142.110.103 (140.142.110.103) closed connection to service nebulahome [2004/05/29 21:31:08, 10, pid=25850] modules/vfs_extd_audit.c:audit_disconnect(122) Disconnected from VFS module extd_audit [2004/05/29 21:31:08, 3, pid=25850] smbd/connection.c:yield_connection(69) Yielding connection to nebulahome [2004/05/29 21:31:08, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:31:08, 5, pid=25850] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:free_server_info(1324) attempting to free (and zero) a server_info structure [2004/05/29 21:31:08, 3, pid=25850] smbd/connection.c:yield_connection(69) Yielding connection to [2004/05/29 21:31:08, 3, pid=25850] smbd/connection.c:yield_connection(76) yield_connection: tdb_delete for name failed with error Record does not exist. [2004/05/29 21:31:08, 5, pid=25850] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/05/29 21:31:08, 3, pid=25850] smbd/server.c:exit_server(611) Server exit (Caught TERM signal)