Attachment 529 Details for Bug 1406 – Debug level 10 of failure case

Debug level 10 of failure case

testdata.fail (text/plain), 246.19 KB, created by Eric Horst on 2004-05-28 14:32:09 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Eric Horst

Created: 2004-05-28 14:32:09 UTC

Size: 246.19 KB

patch

obsolete

>[2004/05/29 21:30:48, 6, pid=25846] param/loadparm.c:lp_file_list_changed(2665)
>  lp_file_list_changed()
>  file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf  last mod_time: Tue May 25 09:46:28 2004
>  
>  file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.UNKNOWN.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf  last mod_time: Sat May 15 22:32:24 2004
>  
>  file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/smbd  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/smbd  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf  last mod_time: Sat May 29 21:27:30 2004
>  
>[2004/05/29 21:30:48, 2, pid=25846] lib/interface.c:add_interface(79)
>  added interface ip=140.142.15.168 bcast=140.142.15.191 nmask=255.255.255.224
>[2004/05/29 21:30:48, 2, pid=25846] lib/interface.c:add_interface(79)
>  added interface ip=198.48.88.162 bcast=198.48.88.255 nmask=255.255.255.0
>[2004/05/29 21:30:48, 5, pid=25846] lib/hash.c:hash_table_init(67)
>  Hash size = 521.
>[2004/05/29 21:30:48, 5, pid=25846] lib/util.c:init_names(270)
>  Netbios name list:-
>  my_netbios_names[0]="CANON"
>[2004/05/29 21:30:48, 3, pid=25846] smbd/server.c:main(787)
>  loaded services
>[2004/05/29 21:30:48, 3, pid=25846] smbd/server.c:main(802)
>  Becoming a daemon.
>[2004/05/29 21:30:48, 8, pid=25847] lib/util.c:fcntl_lock(1656)
>  fcntl_lock 6 13 0 1 1
>[2004/05/29 21:30:48, 8, pid=25847] lib/util.c:fcntl_lock(1691)
>  fcntl_lock: Lock call successful
>[2004/05/29 21:30:48, 2, pid=25847] lib/tallocmsg.c:register_msg_pool_usage(57)
>  Registered MSG_REQ_POOL_USAGE
>[2004/05/29 21:30:48, 2, pid=25847] lib/dmallocmsg.c:register_dmalloc_msgs(71)
>  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
>[2004/05/29 21:30:48, 5, pid=25847] lib/gencache.c:gencache_init(59)
>  Opening cache file at /var/locks/gencache.tdb
>[2004/05/29 21:30:48, 5, pid=25847] libsmb/namecache.c:namecache_enable(58)
>  namecache_enable: enabling netbios namecache, timeout 660 seconds
>[2004/05/29 21:30:48, 10, pid=25847] registry/reg_cachehook.c:reghook_cache_add(60)
>  reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Control/Print]
>[2004/05/29 21:30:48, 8, pid=25847] lib/adt_tree.c:sorted_tree_add(247)
>  sorted_tree_add: Enter
>[2004/05/29 21:30:48, 10, pid=25847] lib/adt_tree.c:sorted_tree_add(314)
>  sorted_tree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree
>[2004/05/29 21:30:48, 8, pid=25847] lib/adt_tree.c:sorted_tree_add(316)
>  sorted_tree_add: Exit
>[2004/05/29 21:30:48, 10, pid=25847] printing/nt_printing.c:update_c_setprinter(425)
>  update_c_setprinter: c_setprinter = 0
>[2004/05/29 21:30:48, 5, pid=25847] smbd/connection.c:claim_connection(170)
>  claiming  0
>[2004/05/29 21:30:48, 10, pid=25847] lib/util_sock.c:open_socket_in(700)
>  bind succeeded on port 445
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_KEEPALIVE = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_REUSEADDR = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_BROADCAST = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option TCP_NODELAY = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_LOWDELAY = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_THROUGHPUT = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDBUF = 65536
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVBUF = 87380
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDLOWAT = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVLOWAT = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDTIMEO = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVTIMEO = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_KEEPALIVE = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_REUSEADDR = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_BROADCAST = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option TCP_NODELAY = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_LOWDELAY = 16
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_THROUGHPUT = 16
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDBUF = 65536
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVBUF = 87380
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDLOWAT = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVLOWAT = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDTIMEO = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVTIMEO = 0
>[2004/05/29 21:30:48, 10, pid=25847] lib/util_sock.c:open_socket_in(700)
>  bind succeeded on port 139
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_KEEPALIVE = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_REUSEADDR = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_BROADCAST = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option TCP_NODELAY = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_LOWDELAY = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_THROUGHPUT = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDBUF = 65536
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVBUF = 87380
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDLOWAT = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVLOWAT = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDTIMEO = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVTIMEO = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_KEEPALIVE = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_REUSEADDR = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_BROADCAST = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option TCP_NODELAY = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_LOWDELAY = 16
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_THROUGHPUT = 16
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDBUF = 65536
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVBUF = 87380
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDLOWAT = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVLOWAT = 1
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDTIMEO = 0
>[2004/05/29 21:30:48, 5, pid=25847] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVTIMEO = 0
>[2004/05/29 21:30:48, 2, pid=25847] smbd/server.c:open_sockets_smbd(324)
>  waiting for a connection
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_KEEPALIVE = 1
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_REUSEADDR = 1
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_BROADCAST = 0
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option TCP_NODELAY = 1
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_LOWDELAY = 16
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_THROUGHPUT = 16
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDBUF = 65536
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVBUF = 87380
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDLOWAT = 1
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVLOWAT = 1
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDTIMEO = 0
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVTIMEO = 0
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_KEEPALIVE = 1
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_REUSEADDR = 1
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_BROADCAST = 0
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option TCP_NODELAY = 1
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_LOWDELAY = 16
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option IPTOS_THROUGHPUT = 16
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDBUF = 65536
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVBUF = 87380
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDLOWAT = 1
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVLOWAT = 1
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_SNDTIMEO = 0
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_sock.c:print_socket_options(130)
>  socket option SO_RCVTIMEO = 0
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_context_list(763)
>  Trying to load: smbpasswd
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(93)
>  Attempting to register passdb backend ldapsam
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(106)
>  Successfully added passdb backend 'ldapsam'
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(93)
>  Attempting to register passdb backend ldapsam_compat
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(106)
>  Successfully added passdb backend 'ldapsam_compat'
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(93)
>  Attempting to register passdb backend smbpasswd
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(106)
>  Successfully added passdb backend 'smbpasswd'
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(93)
>  Attempting to register passdb backend tdbsam
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(106)
>  Successfully added passdb backend 'tdbsam'
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(93)
>  Attempting to register passdb backend guest
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:smb_register_passdb(106)
>  Successfully added passdb backend 'guest'
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_methods_name(648)
>  Attempting to find an passdb backend to match smbpasswd (smbpasswd)
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_methods_name(669)
>  Found pdb backend smbpasswd
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_methods_name(672)
>  pdb backend smbpasswd has a valid init
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_methods_name(648)
>  Attempting to find an passdb backend to match guest (guest)
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_methods_name(669)
>  Found pdb backend guest
>[2004/05/29 21:30:57, 5, pid=25850] passdb/pdb_interface.c:make_pdb_methods_name(672)
>  pdb backend guest has a valid init
>[2004/05/29 21:30:57, 6, pid=25850] param/loadparm.c:lp_file_list_changed(2665)
>  lp_file_list_changed()
>  file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf  last mod_time: Tue May 25 09:46:28 2004
>  
>  file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.UNKNOWN.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf  last mod_time: Sat May 15 22:32:24 2004
>  
>  file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf  last mod_time: Sat May 29 21:27:30 2004
>  
>[2004/05/29 21:30:57, 3, pid=25850] smbd/oplock.c:init_oplocks(1226)
>  open_oplock_ipc: opening loopback UDP socket.
>[2004/05/29 21:30:57, 10, pid=25850] lib/util_sock.c:open_socket_in(700)
>  bind succeeded on port 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
>  Linux kernel oplocks enabled
>[2004/05/29 21:30:57, 3, pid=25850] smbd/oplock.c:init_oplocks(1257)
>  open_oplock ipc: pid = 25850, global_oplock_port = 37641
>[2004/05/29 21:30:57, 4, pid=25850] lib/time.c:get_serverzone(122)
>  Serverzone is 25200
>[2004/05/29 21:30:57, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 133
>[2004/05/29 21:30:57, 3, pid=25850] lib/access.c:check_access(313)
>  check_access: no hostnames in host allow/deny list.
>[2004/05/29 21:30:57, 2, pid=25850] lib/access.c:check_access(324)
>  Allowed connection from  (140.142.110.103)
>[2004/05/29 21:30:57, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x85
>[2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 0 of length 137
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466)
>  size=133
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51283
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=0
>  smt_wct=0
>  smb_bcc=98
>[2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 02 50 43 20 4E 45 54 57  4F 52 4B 20 50 52 4F 47  .PC NETW ORK PROG
>  [010] 52 41 4D 20 31 2E 30 00  02 4C 41 4E 4D 41 4E 31  RAM 1.0. .LANMAN1
>  [020] 2E 30 00 02 57 69 6E 64  6F 77 73 20 66 6F 72 20  .0..Wind ows for 
>  [030] 57 6F 72 6B 67 72 6F 75  70 73 20 33 2E 31 61 00  Workgrou ps 3.1a.
>  [040] 02 4C 4D 31 2E 32 58 30  30 32 00 02 4C 41 4E 4D  .LM1.2X0 02..LANM
>  [050] 41 4E 32 2E 31 00 02 4E  54 20 4C 4D 20 30 2E 31  AN2.1..N T LM 0.1
>  [060] 32 00                                             2. 
>[2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBnegprot (pid 25850)
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 5, pid=25850] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(455)
>  Requested protocol [PC NETWORK PROGRAM 1.0]
>[2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(455)
>  Requested protocol [LANMAN1.0]
>[2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(455)
>  Requested protocol [Windows for Workgroups 3.1a]
>[2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(455)
>  Requested protocol [LM1.2X002]
>[2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(455)
>  Requested protocol [LANMAN2.1]
>[2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(455)
>  Requested protocol [NT LM 0.12]
>[2004/05/29 21:30:57, 10, pid=25850] lib/util.c:set_remote_arch(1839)
>  set_remote_arch: Client arch is 'Win2K'
>[2004/05/29 21:30:57, 6, pid=25850] param/loadparm.c:lp_file_list_changed(2665)
>  lp_file_list_changed()
>  file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf  last mod_time: Tue May 25 09:46:28 2004
>  
>  file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.Win2K.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf  last mod_time: Sat May 15 22:32:24 2004
>  
>  file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf  last mod_time: Sat May 29 21:27:30 2004
>  
>[2004/05/29 21:30:57, 6, pid=25850] param/loadparm.c:lp_file_list_changed(2665)
>  lp_file_list_changed()
>  file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf  last mod_time: Tue May 25 09:46:28 2004
>  
>  file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.Win2K.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf  last mod_time: Sat May 15 22:32:24 2004
>  
>  file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf  last mod_time: Sat May 29 21:27:30 2004
>  
>[2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_nt1(329)
>  using SPNEGO
>[2004/05/29 21:30:57, 3, pid=25850] smbd/negprot.c:reply_negprot(532)
>  Selected protocol NT LM 0.12
>[2004/05/29 21:30:57, 5, pid=25850] smbd/negprot.c:reply_negprot(538)
>  negprot index=5
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466)
>  size=173
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=0
>  smt_wct=17
>  smb_vwv[ 0]=    5 (0x5)
>  smb_vwv[ 1]=12803 (0x3203)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=64000 (0xFA00)
>  smb_vwv[ 8]=  100 (0x64)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=33011 (0x80F3)
>  smb_vwv[11]=32896 (0x8080)
>  smb_vwv[12]=54742 (0xD5D6)
>  smb_vwv[13]=65254 (0xFEE6)
>  smb_vwv[14]=50245 (0xC445)
>  smb_vwv[15]=41985 (0xA401)
>  smb_vwv[16]=26625 (0x6801)
>  smb_bcc=104
>[2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 63 61 6E 6F 6E 00 00 00  00 00 00 00 00 00 00 00  canon... ........
>  [010] 60 56 06 06 2B 06 01 05  05 02 A0 4C 30 4A A0 24  `V..+... .. L0J $
>  [020] 30 22 06 09 2A 86 48 86  F7 12 01 02 02 06 09 2A  0"..*.H. ÷......*
>  [030] 86 48 82 F7 12 01 02 02  06 0A 2B 06 01 04 01 82  .H.÷.... ..+.....
>  [040] 37 02 02 0A A3 22 30 20  A0 1E 1B 1C 63 61 6E 6F  7...£"0   ...cano
>  [050] 6E 24 40 4E 45 42 55 4C  41 2E 57 41 53 48 49 4E  n$@NEBUL A.WASHIN
>  [060] 47 54 4F 4E 2E 45 44 55                           GTON.EDU 
>[2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,177)
>[2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,177) wrote 177
>[2004/05/29 21:30:57, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 1650
>[2004/05/29 21:30:57, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x672
>[2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 1 of length 1654
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466)
>  size=1650
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=2816
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]= 1650 (0x672)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]= 1488 (0x5D0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=40960 (0xA000)
>  smb_bcc=1591
>[2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 60 82 05 CC 06 06 2B 06  01 05 05 02 A0 82 05 C0  `..Ì..+. .... ..À
>  [010] 30 82 05 BC A0 24 30 22  06 09 2A 86 48 82 F7 12  0..¼ $0" ..*.H.÷.
>  [020] 01 02 02 06 09 2A 86 48  86 F7 12 01 02 02 06 0A  .....*.H .÷......
>  [030] 2B 06 01 04 01 82 37 02  02 0A A2 82 05 92 04 82  +.....7. ..¢.....
>  [040] 05 8E 60 82 05 8A 06 09  2A 86 48 86 F7 12 01 02  ..`..... *.H.÷...
>  [050] 02 01 00 6E 82 05 79 30  82 05 75 A0 03 02 01 05  ...n..y0 ..u ....
>  [060] A1 03 02 01 0E A2 07 03  05 00 20 00 00 00 A3 82  ¡....¢.. .. ...£.
>  [070] 04 9D 61 82 04 99 30 82  04 95 A0 03 02 01 05 A1  ..a...0. .. ....¡
>  [080] 17 1B 15 4E 45 42 55 4C  41 2E 57 41 53 48 49 4E  ...NEBUL A.WASHIN
>  [090] 47 54 4F 4E 2E 45 44 55  A2 2B 30 29 A0 03 02 01  GTON.EDU ¢+0) ...
>  [0A0] 02 A1 22 30 20 1B 04 63  69 66 73 1B 18 63 61 6E  .¡"0 ..c ifs..can
>  [0B0] 6F 6E 2E 63 61 63 2E 77  61 73 68 69 6E 67 74 6F  on.cac.w ashingto
>  [0C0] 6E 2E 65 64 75 A3 82 04  46 30 82 04 42 A0 03 02  n.edu£.. F0..B ..
>  [0D0] 01 03 A1 03 02 01 02 A2  82 04 34 04 82 04 30 4F  ..¡....¢ ..4...0O
>  [0E0] 1E A9 59 B6 46 56 C4 FA  1C 62 91 FC 9D 7F AF A5  .©Y¶FVÄú .b.ü..¯¥
>  [0F0] 0D 3C 83 C7 0C 22 76 DF  85 CC 8E 8F 3D 38 4D 37  .<.Ç."vß .Ì..=8M7
>  [100] D1 9A F1 E2 7B 6B C4 31  78 8B 64 CE 53 93 43 8E  Ñ.ñâ{kÄ1 x.dÎS.C.
>  [110] 6D 39 F2 CE 77 4D C4 E8  A9 A6 9B 6D F1 CD 3A 14  m9òÎwMÄè ©¦.mñÍ:.
>  [120] 43 ED 6F 05 C4 DA C4 A0  96 B6 74 6F 0D B2 B4 23  Cío.ÄÚÄ  .¶to.²´#
>  [130] DE 48 BB 5B 7B 8A 93 82  50 F1 78 D7 7D 1B 51 F2  ÞH»[{... Pñx×}.Qò
>  [140] 66 9B 37 27 CD 47 16 AF  37 AE 96 1C 6B 8B 0A EA  f.7'ÍG.¯ 7®..k..ê
>  [150] 12 81 86 B4 74 86 27 0D  75 7B F6 FC 80 BE CB 7C  ...´t.'. u{öü.¾Ë|
>  [160] D6 B8 29 94 62 C7 1A D9  3C 6D 75 E2 6D AF DF E4  Ö¸).bÇ.Ù <muâm¯ßä
>  [170] 48 4A 48 75 D1 D1 95 72  03 D3 AB 28 1C 8C 4A 8A  HJHuÑÑ.r .Ó«(..J.
>  [180] F7 B1 27 2F E6 18 A9 49  DA CD 2B 41 A8 45 56 4B  ÷±'/æ.©I ÚÍ+A¨EVK
>  [190] D0 F0 1B 37 36 63 CB 4C  D4 C7 1B 8E C4 5A 1C 58  Ðð.76cËL ÔÇ..ÄZ.X
>  [1A0] 6F 6D 3E C4 6B B4 CC D4  BB 8B 36 8A 81 8F 50 9D  om>Äk´ÌÔ ».6...P.
>  [1B0] B0 D4 0E 44 8E 9F E7 24  04 7D 7F AD 0A 2B 5E 03  °Ô.D..ç$ .}..+^.
>  [1C0] 2B 16 77 73 77 4B C5 B7  12 D7 30 F9 8A B7 12 8E  +.wswKÅ· .×0ù.·..
>  [1D0] 4F 27 6F E2 7C F1 9F E7  FC C4 33 3E 84 C4 99 54  O'oâ|ñ.ç üÄ3>.Ä.T
>  [1E0] 4D 0F F6 E9 45 24 B7 FC  99 E8 5F AF F0 27 74 E9  M.öéE$·ü .è_¯ð'té
>  [1F0] 6A 8B F0 18 92 66 94 99  37 DF 45 ED E2 E2 94 E6  j.ð..f.. 7ßEíââ.æ
>[2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBsesssetupX (pid 25850)
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 5, pid=25850] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X(649)
>  wct=12 flg2=0xc807
>[2004/05/29 21:30:57, 2, pid=25850] smbd/sesssetup.c:setup_new_vc_session(602)
>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(529)
>  Doing spnego session setup
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(560)
>  NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2004/05/29 21:30:57, 10, pid=25850] lib/util.c:set_remote_arch(1839)
>  set_remote_arch: Client arch is 'WinXP'
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438)
>  Got OID 1 2 840 48018 1 2 2
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438)
>  Got OID 1 2 840 113554 1 2 2
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438)
>  Got OID 1 3 6 1 4 1 311 2 2 10
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(441)
>  Got secblob of size 1422
>[2004/05/29 21:30:57, 10, pid=25850] passdb/secrets.c:secrets_named_mutex(704)
>  secrets_named_mutex: got mutex for replay cache mutex
>[2004/05/29 21:30:57, 10, pid=25850] libads/kerberos_verify.c:ads_verify_ticket(185)
>  ads_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type
>[2004/05/29 21:30:57, 10, pid=25850] libads/kerberos_verify.c:ads_verify_ticket(178)
>  ads_verify_ticket: enc type [3] decrypted message !
>[2004/05/29 21:30:57, 10, pid=25850] passdb/secrets.c:secrets_named_mutex_release(716)
>  secrets_named_mutex: released mutex for replay cache mutex
>[2004/05/29 21:30:57, 10, pid=25850] libsmb/clikrb5.c:get_krb5_smb_session_key(442)
>  Got KRB5 session key of length 8
>[2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:decode_pac_data(602)
>  dump_pac_data
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 pac_io_pac_data pac data
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      0000 num_buffers: 00000004
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      0004 version: 00000000
>[2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000008 pac_io_pac_info_hdr pac data
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0008 type: 00000001
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          000c size: 000002a8
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0010 offset: 00000048
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0014 offsethi: 00000000
>[2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 pac_io_pac_info_hdr pac data
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0018 type: 0000000a
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          001c size: 00000014
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0020 offset: 000002f0
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0024 offsethi: 00000000
>[2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000028 pac_io_pac_info_hdr pac data
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0028 type: 00000006
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          002c size: 00000014
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0030 offset: 00000308
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0034 offsethi: 00000000
>[2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000038 pac_io_pac_info_hdr pac data
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0038 type: 00000007
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          003c size: 00000014
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0040 offset: 00000320
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0044 offsethi: 00000000
>[2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000048 pac_io_pac_info_hdr_ctr pac data
>[2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(467)
>  PAC_TYPE_LOGON_INFO
>[2004/05/29 21:30:57, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000048 pac_io_pac_logon_info pac data
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0048 unknown: 00081001
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              004c unknown: cccccccc
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0050 bufferlen: 00000298
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0054 bufferlenhi: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0058 pointer: 00020000
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00005c smb_io_time logon_time
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  005c low : 994f2122
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0060 high: 01c445fb
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000064 smb_io_time logoff_time
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0064 low : ffffffff
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0068 high: 7fffffff
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00006c smb_io_time kickoff_time
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  006c low : ffffffff
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0070 high: 7fffffff
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000074 smb_io_time pass_last_set_time
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0074 low : 0bcb68a2
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0078 high: 01c398ef
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00007c smb_io_time pass_can_change_time
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  007c low : 0bcb68a2
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0080 high: 01c398ef
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000084 smb_io_time pass_must_change_time
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0084 low : ffffffff
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0088 high: 7fffffff
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00008c smb_io_unihdr hdr_user_name
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  008c uni_str_len: 000a
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  008e uni_max_len: 000a
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0090 buffer     : 00020004
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000094 smb_io_unihdr hdr_full_name
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  0094 uni_str_len: 0014
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  0096 uni_max_len: 0014
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0098 buffer     : 00020008
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00009c smb_io_unihdr hdr_logon_script
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  009c uni_str_len: 0012
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  009e uni_max_len: 0012
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00a0 buffer     : 0002000c
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000a4 smb_io_unihdr hdr_profile_path
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00a4 uni_str_len: 0000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00a6 uni_max_len: 0000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00a8 buffer     : 00020010
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000ac smb_io_unihdr hdr_home_dir
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00ac uni_str_len: 0056
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00ae uni_max_len: 0056
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00b0 buffer     : 00020014
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000b4 smb_io_unihdr hdr_dir_drive
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00b4 uni_str_len: 0004
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00b6 uni_max_len: 0004
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00b8 buffer     : 00020018
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              00bc logon_count: 0455
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              00be reserved12: 0000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00c0 user_rid: 000003ec
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00c4 group_rid: 00000201
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00c8 group_count: 00000012
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00cc group_mem_ptr: 0002001c
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00d0 user_flags: 00000020
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00d4 reserved13.0: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00d8 reserved13.1: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00dc reserved13.2: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00e0 reserved13.3: 00000000
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000e4 smb_io_unihdr hdr_dom_controller
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00e4 uni_str_len: 000a
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00e6 uni_max_len: 000c
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00e8 buffer     : 00020020
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000ec smb_io_unihdr hdr_dom_name
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00ec uni_str_len: 000c
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00ee uni_max_len: 000e
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00f0 buffer     : 00020024
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00f4 ptr_dom_sid: 00020028
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00f8 reserved16.0: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00fc reserved16.1: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0100 reserved17: 00000210
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0104 reserved18.0: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0108 reserved18.1: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              010c reserved18.2: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0110 reserved18.3: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0114 reserved18.4: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0118 reserved18.5: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              011c reserved18.6: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0120 sid_count: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0124 ptr_extra_sids: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0128 ptr_res_group_dom_sid: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              012c res_group_count: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0130 ptr_res_groups: 00000000
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000134 smb_io_unistr2 uni_user_name
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0134 uni_max_len: 00000005
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0138 offset     : 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  013c uni_str_len: 00000005
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  0140 buffer     : e.r.i.c.h.
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00014a smb_io_unistr2 uni_full_name
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  014c uni_max_len: 0000000a
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0150 offset     : 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0154 uni_str_len: 0000000a
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  0158 buffer     : E.r.i.c. .H.o.r.s.t.
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00016c smb_io_unistr2 uni_logon_script
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  016c uni_max_len: 00000009
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0170 offset     : 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0174 uni_str_len: 00000009
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  0178 buffer     : l.o.g.o.n...b.a.t.
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00018a smb_io_unistr2 uni_profile_path
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  018c uni_max_len: 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0190 offset     : 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0194 uni_str_len: 00000000
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000198 smb_io_unistr2 uni_home_dir
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0198 uni_max_len: 0000002b
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  019c offset     : 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01a0 uni_str_len: 0000002b
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  01a4 buffer     : \.\.e.r.i.c.h...h.o.m.e.d.i.r...n.e.b.u.l.a...w.a.s.h.i.n.g.t.o.n...e.d.u.\.h.o.m.e.s.
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0001fa smb_io_unistr2 uni_dir_drive
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01fc uni_max_len: 00000002
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0200 offset     : 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0204 uni_str_len: 00000002
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  0208 buffer     : H.:.
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00020c pac_io_group_membership_array group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  020c count: 00000012
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000210 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0210 rid: 00001320
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0214 attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000218 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0218 rid: 0000130a
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      021c attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000220 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0220 rid: 000013fd
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0224 attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000228 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0228 rid: 00001239
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      022c attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000230 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0230 rid: 000012c6
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0234 attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000238 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0238 rid: 000012c7
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      023c attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000240 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0240 rid: 00001249
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0244 attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000248 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0248 rid: 0000196a
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      024c attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000250 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0250 rid: 00001268
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0254 attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000258 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0258 rid: 00001251
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      025c attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000260 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0260 rid: 00001385
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0264 attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000268 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0268 rid: 000012de
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      026c attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000270 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0270 rid: 00000201
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0274 attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000278 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0278 rid: 00002030
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      027c attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000280 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0280 rid: 00001848
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0284 attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000288 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0288 rid: 00003d38
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      028c attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000290 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0290 rid: 0000042f
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0294 attrs: 00000007
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  000298 pac_io_group_membership group membership
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      0298 rid: 000012cf
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      029c attrs: 00000007
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0002a0 smb_io_unistr2 uni_dom_controller
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  02a0 uni_max_len: 00000006
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  02a4 offset     : 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  02a8 uni_str_len: 00000005
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  02ac buffer     : O.R.I.O.N.
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0002b6 smb_io_unistr2 uni_dom_name
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  02b8 uni_max_len: 00000007
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  02bc offset     : 00000000
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  02c0 uni_str_len: 00000006
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  02c4 buffer     : N.E.B.U.L.A.
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0002d0 smb_io_dom_sid2 dom_sid
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  02d0 num_auths: 00000004
>[2004/05/29 21:30:57, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  0002d4 smb_io_dom_sid sid
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      02d4 sid_rev_num: 01
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      02d5 num_auths  : 04
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      02d6 id_auth[0] : 00
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      02d7 id_auth[1] : 00
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      02d8 id_auth[2] : 00
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      02d9 id_auth[3] : 00
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      02da id_auth[4] : 00
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      02db id_auth[5] : 05
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32s(862)
>                      02dc sub_auths : 00000015 0125690f 1de85f7e 4a515a19 
>[2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      0002ec pac_io_pac_info_hdr_ctr pac data
>[2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452)
>  offset in header(x2f0) and data(x2ec) do not match
>[2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(510)
>  PAC_TYPE_UNKNOWN_10
>[2004/05/29 21:30:57, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          0002f0 pac_io_unknown_type_10 pac data
>[2004/05/29 21:30:57, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0002f0 smb_io_time unknown_time
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  02f0 low : 990b9f00
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  02f4 high: 01c445fb
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              02f8 len: 000a
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16s(765)
>              02fa name: e.r.i.c.h.
>[2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000304 pac_io_pac_info_hdr_ctr pac data
>[2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452)
>  offset in header(x308) and data(x304) do not match
>[2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(481)
>  PAC_TYPE_SERVER_CHECKSUM
>[2004/05/29 21:30:57, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000308 pac_io_pac_signature_data pac data
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0308 type: ffffff76
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722)
>              030c signature: ad d4 22 0e f5 86 d0 a8 bb a7 20 65 c8 fe b1 26 
>[2004/05/29 21:30:57, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      00031c pac_io_pac_info_hdr_ctr pac data
>[2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452)
>  offset in header(x320) and data(x31c) do not match
>[2004/05/29 21:30:57, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(495)
>  PAC_TYPE_PRIVSVR_CHECKSUM
>[2004/05/29 21:30:57, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000320 pac_io_pac_signature_data pac data
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0320 type: ffffff76
>[2004/05/29 21:30:57, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722)
>              0324 signature: bf dc 15 f1 4e c6 41 b5 39 aa 05 2e e2 b0 18 55 
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(180)
>  Ticket name is [erich@NEBULA.WASHINGTON.EDU]
>[2004/05/29 21:30:57, 10, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(221)
>  Mapping [NEBULA.WASHINGTON.EDU] to short name
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(237)
>  Could not find short name -- winbind not running?
>[2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam(293)
>  Finding user NEBULA.WASHINGTON.EDU\erich
>[2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is nebula.washington.edu\erich
>[2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(230)
>  Trying _Get_Pwnam(), username as given is NEBULA.WASHINGTON.EDU\erich
>[2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(239)
>  Trying _Get_Pwnam(), username as uppercase is NEBULA.WASHINGTON.EDU\ERICH
>[2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(247)
>  Checking combinations of 0 uppercase letters in nebula.washington.edu\erich
>[2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals didn't find user [NEBULA.WASHINGTON.EDU\erich]!
>[2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam(293)
>  Finding user erich
>[2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is erich
>[2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [erich]!
>[2004/05/29 21:30:57, 6, pid=25850] param/loadparm.c:lp_file_list_changed(2665)
>  lp_file_list_changed()
>  file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf  last mod_time: Tue May 25 09:46:28 2004
>  
>  file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.WinXP.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf  last mod_time: Sat May 15 22:32:24 2004
>  
>  file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf  last mod_time: Sat May 29 21:27:30 2004
>  
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_username(612)
>  pdb_set_username: setting username erich, was 
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_init_flags(512)
>  element 12 -> now SET
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_fullname(693)
>  pdb_set_full_name: setting full name Eric Horst, was 
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_init_flags(512)
>  element 13 -> now SET
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_unix_homedir(828)
>  pdb_set_unix_homedir: setting home dir /usr/users/erich, was NULL
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_init_flags(512)
>  element 22 -> now SET
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_domain(639)
>  pdb_set_domain: setting domain CANON, was 
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_user_sid(539)
>  pdb_set_user_sid: setting user sid S-1-5-21-2072067240-3800136619-3437914000-9130
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_init_flags(512)
>  element 18 -> now SET
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-2072067240-3800136619-3437914000-9130 from rid 9130
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_group_sid(575)
>  pdb_set_group_sid: setting group sid S-1-5-21-2072067240-3800136619-3437914000-1031
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_init_flags(512)
>  element 19 -> now SET
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)
>  pdb_set_group_sid_from_rid:
>  	setting group sid S-1-5-21-2072067240-3800136619-3437914000-1031 from rid 1031
>[2004/05/29 21:30:57, 4, pid=25850] lib/substitute.c:automount_server(323)
>  Home server: canon
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_profile_path(747)
>  pdb_set_profile_path: setting profile path \\canon\erich\profile, was 
>[2004/05/29 21:30:57, 4, pid=25850] lib/substitute.c:automount_server(323)
>  Home server: canon
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_homedir(801)
>  pdb_set_homedir: setting home dir \\canon\erich, was 
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_dir_drive(774)
>  pdb_set_dir_drive: setting dir drive , was NULL
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_logon_script(720)
>  pdb_set_logon_script: setting logon script , was 
>[2004/05/29 21:30:57, 10, pid=25850] lib/system_smbd.c:sys_getgrouplist(117)
>  sys_getgrouplist: user [erich]
>[2004/05/29 21:30:57, 10, pid=25850] lib/system_smbd.c:sys_getgrouplist(126)
>  sys_getgrouplist(): disabled winbindd for group lookup [user == erich]
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 8, pid=25850] lib/util_getent.c:remove_duplicate_gids(330)
>  remove_duplicate_gids: Enter 17 gids
>[2004/05/29 21:30:57, 8, pid=25850] lib/util_getent.c:remove_duplicate_gids(348)
>  remove_duplicate_gids: Exit 16 gids
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 4065
>  Primary group is 15 and contains 16 supplementary groups
>  Group[  0]: 0
>  Group[  1]: 10
>  Group[  2]: 15
>  Group[  3]: 25
>  Group[  4]: 34
>  Group[  5]: 81
>  Group[  6]: 349
>  Group[  7]: 350
>  Group[  8]: 358
>  Group[  9]: 374
>  Group[ 10]: 426
>  Group[ 11]: 458
>  Group[ 12]: 573
>  Group[ 13]: 697
>  Group[ 14]: 739
>  Group[ 15]: 881
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 0 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (0) -> SID S-1-5-21-2072067240-3800136619-3437914000-1001.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 0 -> S-1-5-21-2072067240-3800136619-3437914000-1001
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 10 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (10) -> SID S-1-5-21-2072067240-3800136619-3437914000-1021.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 10 -> S-1-5-21-2072067240-3800136619-3437914000-1021
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 15 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (15) -> SID S-1-5-21-2072067240-3800136619-3437914000-1031.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 15 -> S-1-5-21-2072067240-3800136619-3437914000-1031
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 25 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (25) -> SID S-1-5-21-2072067240-3800136619-3437914000-1051.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 25 -> S-1-5-21-2072067240-3800136619-3437914000-1051
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 34 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (34) -> SID S-1-5-21-2072067240-3800136619-3437914000-1069.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 34 -> S-1-5-21-2072067240-3800136619-3437914000-1069
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 81 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (81) -> SID S-1-5-21-2072067240-3800136619-3437914000-1163.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 81 -> S-1-5-21-2072067240-3800136619-3437914000-1163
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 349 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (349) -> SID S-1-5-21-2072067240-3800136619-3437914000-1699.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 349 -> S-1-5-21-2072067240-3800136619-3437914000-1699
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 350 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (350) -> SID S-1-5-21-2072067240-3800136619-3437914000-1701.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 350 -> S-1-5-21-2072067240-3800136619-3437914000-1701
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 358 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (358) -> SID S-1-5-21-2072067240-3800136619-3437914000-1717.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 358 -> S-1-5-21-2072067240-3800136619-3437914000-1717
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 374 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (374) -> SID S-1-5-21-2072067240-3800136619-3437914000-1749.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 374 -> S-1-5-21-2072067240-3800136619-3437914000-1749
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 426 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (426) -> SID S-1-5-21-2072067240-3800136619-3437914000-1853.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 426 -> S-1-5-21-2072067240-3800136619-3437914000-1853
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 458 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (458) -> SID S-1-5-21-2072067240-3800136619-3437914000-1917.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 458 -> S-1-5-21-2072067240-3800136619-3437914000-1917
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 573 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (573) -> SID S-1-5-21-2072067240-3800136619-3437914000-2147.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 573 -> S-1-5-21-2072067240-3800136619-3437914000-2147
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 697 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (697) -> SID S-1-5-21-2072067240-3800136619-3437914000-2395.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 697 -> S-1-5-21-2072067240-3800136619-3437914000-2395
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 739 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (739) -> SID S-1-5-21-2072067240-3800136619-3437914000-2479.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 739 -> S-1-5-21-2072067240-3800136619-3437914000-2479
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 3, pid=25850] smbd/uid.c:push_conn_ctx(351)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:local_gid_to_sid(1222)
>  local_gid_to_sid: Fall back to algorithmic mapping: 881 -> S-1-0-0
>[2004/05/29 21:30:57, 8, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1188)
>  algorithmic_gid_to_sid: falling back to RID algorithm
>[2004/05/29 21:30:57, 10, pid=25850] passdb/passdb.c:algorithmic_gid_to_sid(1192)
>  algorithmic_gid_to_sid:  gid (881) -> SID S-1-5-21-2072067240-3800136619-3437914000-2763.
>[2004/05/29 21:30:57, 10, pid=25850] passdb/lookup_sid.c:gid_to_sid(365)
>  gid_to_sid: local 881 -> S-1-5-21-2072067240-3800136619-3437914000-2763
>[2004/05/29 21:30:57, 10, pid=25850] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130
>  contains 20 SIDs
>  SID[  0]: S-1-5-21-2072067240-3800136619-3437914000-9130
>  SID[  1]: S-1-5-21-2072067240-3800136619-3437914000-1031
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2072067240-3800136619-3437914000-1001
>  SID[  6]: S-1-5-21-2072067240-3800136619-3437914000-1021
>  SID[  7]: S-1-5-21-2072067240-3800136619-3437914000-1051
>  SID[  8]: S-1-5-21-2072067240-3800136619-3437914000-1069
>  SID[  9]: S-1-5-21-2072067240-3800136619-3437914000-1163
>  SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699
>  SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701
>  SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717
>  SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749
>  SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853
>  SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917
>  SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147
>  SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395
>  SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479
>  SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_domain(639)
>  pdb_set_domain: setting domain NEBULA.WASHINGTON.EDU, was CANON
>[2004/05/29 21:30:57, 10, pid=25850] passdb/pdb_get_set.c:pdb_set_init_flags(512)
>  element 14 -> now SET
>[2004/05/29 21:30:57, 10, pid=25850] smbd/password.c:register_vuid(158)
>  register_vuid: allocated vuid = 100
>[2004/05/29 21:30:57, 10, pid=25850] smbd/password.c:register_vuid(220)
>  register_vuid: (4065,15) erich erich NEBULA.WASHINGTON.EDU guest=0
>[2004/05/29 21:30:57, 3, pid=25850] smbd/password.c:register_vuid(222)
>  User name: erich	Real name: Eric Horst
>[2004/05/29 21:30:57, 3, pid=25850] smbd/password.c:register_vuid(241)
>  UNIX uid 4065 is UNIX user erich, and will be vuid 100
>[2004/05/29 21:30:57, 7, pid=25850] param/loadparm.c:lp_servicenumber(4022)
>  lp_servicenumber: couldn't find erich
>[2004/05/29 21:30:57, 3, pid=25850] smbd/password.c:register_vuid(265)
>  Adding/updating homes service for user 'erich' using home directory: '/usr/users/erich'
>[2004/05/29 21:30:57, 7, pid=25850] param/loadparm.c:lp_servicenumber(4022)
>  lp_servicenumber: couldn't find homes
>[2004/05/29 21:30:57, 6, pid=25850] param/loadparm.c:lp_file_list_changed(2665)
>  lp_file_list_changed()
>  file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf  last mod_time: Tue May 25 09:46:28 2004
>  
>  file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.WinXP.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf  last mod_time: Sat May 15 22:32:24 2004
>  
>  file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf  last mod_time: Wed Dec 31 16:00:00 1969
>  
>  file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf  last mod_time: Sat May 29 21:27:30 2004
>  
>[2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,246)
>[2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,246) wrote 246
>[2004/05/29 21:30:57, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 126
>[2004/05/29 21:30:57, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x7e
>[2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 2 of length 130
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466)
>  size=126
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=2880
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  126 (0x7E)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=83
>[2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 00 5C 00 5C 00 43 00 41  00 4E 00 4F 00 4E 00 2E  .\.\.C.A .N.O.N..
>  [010] 00 43 00 41 00 43 00 2E  00 57 00 41 00 53 00 48  .C.A.C.. .W.A.S.H
>  [020] 00 49 00 4E 00 47 00 54  00 4F 00 4E 00 2E 00 45  .I.N.G.T .O.N...E
>  [030] 00 44 00 55 00 5C 00 4E  00 45 00 42 00 55 00 4C  .D.U.\.N .E.B.U.L
>  [040] 00 41 00 48 00 4F 00 4D  00 45 00 00 00 3F 3F 3F  .A.H.O.M .E...???
>  [050] 3F 3F 00                                          ??. 
>[2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBtconX (pid 25850)
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 5, pid=25850] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:30:57, 4, pid=25850] smbd/reply.c:reply_tcon_and_X(381)
>  Client requested device type [?????] for share [NEBULAHOME]
>[2004/05/29 21:30:57, 5, pid=25850] smbd/service.c:make_connection(783)
>  making a connection to 'normal' service nebulahome
>[2004/05/29 21:30:57, 3, pid=25850] lib/access.c:check_access(313)
>  check_access: no hostnames in host allow/deny list.
>[2004/05/29 21:30:57, 2, pid=25850] lib/access.c:check_access(324)
>  Allowed connection from  (140.142.110.103)
>[2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam(293)
>  Finding user erich
>[2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is erich
>[2004/05/29 21:30:57, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [erich]!
>[2004/05/29 21:30:57, 3, pid=25850] smbd/service.c:make_connection_snum(457)
>  Connect path is '/usr/local/lib/samba/nebula-home' for service [nebulahome]
>[2004/05/29 21:30:57, 4, pid=25850] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
>  get_share_security: using default secdesc for nebulahome
>[2004/05/29 21:30:57, 10, pid=25850] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2004/05/29 21:30:57, 10, pid=25850] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000002, for NT token with 20 entries and first sid S-1-5-21-2072067240-3800136619-3437914000-9130.
>[2004/05/29 21:30:57, 3, pid=25850] lib/util_seaccess.c:se_access_check(251)
>[2004/05/29 21:30:57, 3, pid=25850] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-2072067240-3800136619-3437914000-9130
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1031
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1001
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1021
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1051
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1069
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1163
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1699
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1701
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1717
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1749
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1853
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1917
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2147
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2395
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2479
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2763
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_seaccess.c:se_access_check(309)
>  se_access_check: access (2) granted.
>[2004/05/29 21:30:57, 3, pid=25850] smbd/vfs.c:vfs_init_default(203)
>  Initialising default vfs hooks
>[2004/05/29 21:30:57, 3, pid=25850] smbd/vfs.c:vfs_init_custom(229)
>  Initialising custom vfs hooks from [extd_audit]
>[2004/05/29 21:30:57, 5, pid=25850] lib/module.c:smb_probe_module(101)
>  Probing module 'extd_audit'
>[2004/05/29 21:30:57, 5, pid=25850] lib/module.c:smb_probe_module(112)
>  Probing module 'extd_audit': Trying to load from /usr/local/lib/vfs/extd_audit.so
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:smb_register_vfs(193)
>  Successfully added vfs backend 'extd_audit'
>[2004/05/29 21:30:57, 10, pid=25850] modules/vfs_extd_audit.c:init_module(339)
>  vfs_extd_audit: Debug class number of 'extd_audit': 16
>[2004/05/29 21:30:57, 2, pid=25850] lib/module.c:do_smb_load_module(63)
>  Module '/usr/local/lib/vfs/extd_audit.so' loaded
>  Successfully loaded vfs module [extd_audit] with the new modules system
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #0 (type 0, layer 2)
>  Accepting operation type 0 from module extd_audit
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #1 (type 1, layer 2)
>  Accepting operation type 1 from module extd_audit
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #2 (type 6, layer 2)
>  Accepting operation type 6 from module extd_audit
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #3 (type 8, layer 2)
>  Accepting operation type 8 from module extd_audit
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #4 (type 9, layer 2)
>  Accepting operation type 9 from module extd_audit
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #5 (type 11, layer 2)
>  Accepting operation type 11 from module extd_audit
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #6 (type 12, layer 2)
>  Accepting operation type 12 from module extd_audit
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #7 (type 19, layer 2)
>  Accepting operation type 19 from module extd_audit
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #8 (type 24, layer 2)
>  Accepting operation type 24 from module extd_audit
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #9 (type 25, layer 2)
>  Accepting operation type 25 from module extd_audit
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #10 (type 26, layer 2)
>  Accepting operation type 26 from module extd_audit
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #11 (type 43, layer 2)
>  Accepting operation type 43 from module extd_audit
>[2004/05/29 21:30:57, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #12 (type 44, layer 2)
>  Accepting operation type 44 from module extd_audit
>[2004/05/29 21:30:57, 5, pid=25850] smbd/connection.c:claim_connection(170)
>  claiming nebulahome 0
>[2004/05/29 21:30:57, 10, pid=25850] smbd/uid.c:is_share_read_only_for_user(99)
>  is_share_read_only_for_user: share nebulahome is read-only for unix user erich
>[2004/05/29 21:30:57, 4, pid=25850] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
>  get_share_security: using default secdesc for nebulahome
>[2004/05/29 21:30:57, 10, pid=25850] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2004/05/29 21:30:57, 10, pid=25850] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000001, for NT token with 20 entries and first sid S-1-5-21-2072067240-3800136619-3437914000-9130.
>[2004/05/29 21:30:57, 3, pid=25850] lib/util_seaccess.c:se_access_check(251)
>[2004/05/29 21:30:57, 3, pid=25850] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-2072067240-3800136619-3437914000-9130
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1031
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1001
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1021
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1051
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1069
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1163
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1699
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1701
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1717
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1749
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1853
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1917
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2147
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2395
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2479
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2763
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1
>[2004/05/29 21:30:57, 5, pid=25850] lib/util_seaccess.c:se_access_check(309)
>  se_access_check: access (1) granted.
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130
>  contains 20 SIDs
>  SID[  0]: S-1-5-21-2072067240-3800136619-3437914000-9130
>  SID[  1]: S-1-5-21-2072067240-3800136619-3437914000-1031
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2072067240-3800136619-3437914000-1001
>  SID[  6]: S-1-5-21-2072067240-3800136619-3437914000-1021
>  SID[  7]: S-1-5-21-2072067240-3800136619-3437914000-1051
>  SID[  8]: S-1-5-21-2072067240-3800136619-3437914000-1069
>  SID[  9]: S-1-5-21-2072067240-3800136619-3437914000-1163
>  SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699
>  SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701
>  SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717
>  SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749
>  SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853
>  SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917
>  SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147
>  SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395
>  SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479
>  SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 4065
>  Primary group is 15 and contains 16 supplementary groups
>  Group[  0]: 0
>  Group[  1]: 10
>  Group[  2]: 15
>  Group[  3]: 25
>  Group[  4]: 34
>  Group[  5]: 81
>  Group[  6]: 349
>  Group[  7]: 350
>  Group[  8]: 358
>  Group[  9]: 374
>  Group[ 10]: 426
>  Group[ 11]: 458
>  Group[ 12]: 573
>  Group[ 13]: 697
>  Group[ 14]: 739
>  Group[ 15]: 881
>[2004/05/29 21:30:57, 5, pid=25850] smbd/uid.c:change_to_user(267)
>  change_to_user uid=(4065,4065) gid=(0,15)
>[2004/05/29 21:30:57, 1, pid=25850] smbd/service.c:make_connection_snum(619)
>  140.142.110.103 (140.142.110.103) connect to service nebulahome initially as user erich (uid=4065, gid=15) (pid 25850)
>[2004/05/29 21:30:57, 10, pid=25850] modules/vfs_extd_audit.c:audit_connect(112)
>  Connected to service nebulahome as user erich
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:57, 5, pid=25850] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:30:57, 2, pid=25850] smbd/reply.c:reply_tcon_and_X(424)
>  Serving nebulahome as a Dfs root
>[2004/05/29 21:30:57, 3, pid=25850] smbd/reply.c:reply_tcon_and_X(429)
>  tconX service=NEBULAHOME 
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466)
>  size=54
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=2880
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    3 (0x3)
>  smb_bcc=13
>[2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 41 3A 00 4E 00 54 00 46  00 53 00 00 00           A:.N.T.F .S...
>[2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,58)
>[2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,58) wrote 58
>[2004/05/29 21:30:57, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 76
>[2004/05/29 21:30:57, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x4c
>[2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 3 of length 80
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466)
>  size=76
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=2944
>  smt_wct=15
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    8 (0x8)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=11
>[2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 00 52 00 EC 03 00 00 00  00 00 00                 .R.ì.... ...
>[2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 25850)
>[2004/05/29 21:30:57, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130
>  contains 20 SIDs
>  SID[  0]: S-1-5-21-2072067240-3800136619-3437914000-9130
>  SID[  1]: S-1-5-21-2072067240-3800136619-3437914000-1031
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2072067240-3800136619-3437914000-1001
>  SID[  6]: S-1-5-21-2072067240-3800136619-3437914000-1021
>  SID[  7]: S-1-5-21-2072067240-3800136619-3437914000-1051
>  SID[  8]: S-1-5-21-2072067240-3800136619-3437914000-1069
>  SID[  9]: S-1-5-21-2072067240-3800136619-3437914000-1163
>  SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699
>  SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701
>  SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717
>  SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749
>  SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853
>  SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917
>  SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147
>  SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395
>  SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479
>  SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763
>[2004/05/29 21:30:57, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 4065
>  Primary group is 15 and contains 16 supplementary groups
>  Group[  0]: 0
>  Group[  1]: 10
>  Group[  2]: 15
>  Group[  3]: 25
>  Group[  4]: 34
>  Group[  5]: 81
>  Group[  6]: 349
>  Group[  7]: 350
>  Group[  8]: 358
>  Group[  9]: 374
>  Group[ 10]: 426
>  Group[ 11]: 458
>  Group[ 12]: 573
>  Group[ 13]: 697
>  Group[ 14]: 739
>  Group[ 15]: 881
>[2004/05/29 21:30:57, 5, pid=25850] smbd/uid.c:change_to_user(267)
>  change_to_user uid=(4065,4065) gid=(0,15)
>[2004/05/29 21:30:57, 4, pid=25850] smbd/vfs.c:vfs_ChDir(654)
>  vfs_ChDir to /usr/local/lib/samba/nebula-home
>[2004/05/29 21:30:57, 3, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2331)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2004/05/29 21:30:57, 5, pid=25850] smbd/filename.c:unix_convert(114)
>  unix_convert called on file ""
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: .
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:57, 3, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2362)
>  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
>[2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(270)
>  dos_mode: .
>[2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning d
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: .
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(302)
>  dos_mode returning d
>[2004/05/29 21:30:57, 10, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2478)
>  call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION
>[2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2488)
>  SMB_QFBI - create: Sat May 29 21:19:49 2004
>   access: Sat May 29 21:29:45 2004
>   write: Sat May 29 21:19:49 2004
>   change: Sat May 29 21:19:49 2004
>   mode: 10
>[2004/05/29 21:30:57, 9, pid=25850] smbd/trans2.c:send_trans2_replies(535)
>  t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010
>[2004/05/29 21:30:57, 9, pid=25850] smbd/trans2.c:send_trans2_replies(537)
>  t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40
>[2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,104)
>[2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,104) wrote 104
>[2004/05/29 21:30:57, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 86
>[2004/05/29 21:30:57, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x56
>[2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 4 of length 90
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:57, 5, pid=25850] lib/util.c:show_msg(466)
>  size=86
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=3008
>  smt_wct=15
>  smb_vwv[ 0]=   18 (0x12)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   18 (0x12)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=21
>[2004/05/29 21:30:57, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 00 72 00 16 00 56 05 06  00 04 01 00 00 00 00 5C  .r...V.. .......\
>  [010] 00 2A 00 00 00                                    .*... 
>[2004/05/29 21:30:57, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 25850)
>[2004/05/29 21:30:57, 4, pid=25850] smbd/uid.c:change_to_user(186)
>  change_to_user: Skipping user change - already user
>[2004/05/29 21:30:57, 3, pid=25850] smbd/trans2.c:call_trans2findfirst(1355)
>  call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2004/05/29 21:30:57, 5, pid=25850] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "*"
>[2004/05/29 21:30:57, 10, pid=25850] smbd/statcache.c:stat_cache_lookup(251)
>  stat_cache_lookup: lookup failed for name [*]
>[2004/05/29 21:30:57, 5, pid=25850] smbd/filename.c:unix_convert(177)
>  unix_convert begin: name = *, dirpath = , start = *
>[2004/05/29 21:30:57, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269)
>  is_mangled * ?
>[2004/05/29 21:30:57, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208)
>  is_mangled_component * (len 1) ?
>[2004/05/29 21:30:57, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269)
>  is_mangled * ?
>[2004/05/29 21:30:57, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208)
>  is_mangled_component * (len 1) ?
>[2004/05/29 21:30:57, 5, pid=25850] smbd/filename.c:unix_convert(312)
>  New file *
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: *
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:call_trans2findfirst(1400)
>  dir=./, mask = *
>[2004/05/29 21:30:57, 5, pid=25850] smbd/dir.c:start_dir(334)
>  start_dir dir=./
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: ./
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:57, 10, pid=25850] modules/vfs_extd_audit.c:audit_opendir(141)
>  vfs_extd_audit: opendir ./  
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: myhome
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:57, 3, pid=25850] smbd/dir.c:dptr_create(491)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2004/05/29 21:30:57, 4, pid=25850] smbd/trans2.c:call_trans2findfirst(1430)
>  dptr_num is 256, wcard = *, attr = 22
>[2004/05/29 21:30:57, 8, pid=25850] smbd/trans2.c:call_trans2findfirst(1435)
>  dirpath=<./> dontdescend=<>
>[2004/05/29 21:30:57, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879)
>  get_lanman2_dir_entry:readdir on dirptr 0x8340be0 now at offset 1
>[2004/05/29 21:30:57, 10, pid=25850] lib/ms_fnmatch.c:ms_fnmatch(240)
>  ms_fnmatch(*,.) -> 0
>[2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(270)
>  dos_mode: ./.
>[2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning d
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: ./.
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(302)
>  dos_mode returning d
>[2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(964)
>  get_lanman2_dir_entry found ./. fname=.
>[2004/05/29 21:30:57, 10, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(1048)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2004/05/29 21:30:57, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879)
>  get_lanman2_dir_entry:readdir on dirptr 0x8340be0 now at offset 2
>[2004/05/29 21:30:57, 10, pid=25850] lib/ms_fnmatch.c:ms_fnmatch(240)
>  ms_fnmatch(*,.) -> 0
>[2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(270)
>  dos_mode: ./..
>[2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning d
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: ./..
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(302)
>  dos_mode returning d
>[2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(964)
>  get_lanman2_dir_entry found ./.. fname=..
>[2004/05/29 21:30:57, 10, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(1048)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2004/05/29 21:30:57, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879)
>  get_lanman2_dir_entry:readdir on dirptr 0x8340be0 now at offset 3
>[2004/05/29 21:30:57, 10, pid=25850] lib/ms_fnmatch.c:ms_fnmatch(240)
>  ms_fnmatch(*,myhome) -> 0
>[2004/05/29 21:30:57, 5, pid=25850] smbd/msdfs.c:is_msdfs_link(258)
>  is_msdfs_link: ./myhome -> msdfs:kodak5.cac.washington.edu\homes
>[2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(931)
>  get_lanman2_dir_entry: Masquerading msdfs link ./myhome as a directory
>[2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(270)
>  dos_mode: ./myhome
>[2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning d
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: ./myhome
>[2004/05/29 21:30:57, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:57, 8, pid=25850] smbd/dosmode.c:dos_mode(302)
>  dos_mode returning d
>[2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(964)
>  get_lanman2_dir_entry found ./myhome fname=myhome
>[2004/05/29 21:30:57, 10, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(1048)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2004/05/29 21:30:57, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879)
>  get_lanman2_dir_entry:readdir on dirptr 0x8340be0 now at offset 3
>[2004/05/29 21:30:57, 5, pid=25850] smbd/trans2.c:call_trans2findfirst(1481)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2004/05/29 21:30:57, 4, pid=25850] smbd/dir.c:dptr_close_internal(224)
>  closing dptr key 256
>[2004/05/29 21:30:57, 9, pid=25850] smbd/trans2.c:send_trans2_replies(535)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 304, useable_space = 131010
>[2004/05/29 21:30:57, 9, pid=25850] smbd/trans2.c:send_trans2_replies(537)
>  t2_rep: params_to_send = 10, data_to_send = 304, paramsize = 10, datasize = 304
>[2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,376)
>[2004/05/29 21:30:57, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,376) wrote 376
>[2004/05/29 21:30:57, 4, pid=25850] smbd/trans2.c:call_trans2findfirst(1511)
>  SMBtrans2 mask=* directory=./ dirtype=22 numentries=3
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 70
>[2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x46
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 5 of length 74
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=70
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=3072
>  smt_wct=15
>  smb_vwv[ 0]=    2 (0x2)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  560 (0x230)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    2 (0x2)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    3 (0x3)
>  smb_bcc=5
>[2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 01 00 00 05 01                                    ..... 
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 25850)
>[2004/05/29 21:30:59, 4, pid=25850] smbd/uid.c:change_to_user(186)
>  change_to_user: Skipping user change - already user
>[2004/05/29 21:30:59, 3, pid=25850] smbd/trans2.c:call_trans2qfsinfo(1804)
>  call_trans2qfsinfo: level = 261
>[2004/05/29 21:30:59, 9, pid=25850] smbd/trans2.c:send_trans2_replies(535)
>  t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012
>[2004/05/29 21:30:59, 9, pid=25850] smbd/trans2.c:send_trans2_replies(537)
>  t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,80)
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,80) wrote 80
>[2004/05/29 21:30:59, 4, pid=25850] smbd/trans2.c:call_trans2qfsinfo(2087)
>  SMBtrans2 info_level = 261
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 1434
>[2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x59a
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 6 of length 1438
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=1434
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=3136
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]= 1434 (0x59A)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]= 1272 (0x4F8)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=40960 (0xA000)
>  smb_bcc=1375
>[2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 60 82 04 F4 06 06 2B 06  01 05 05 02 A0 82 04 E8  `..ô..+. .... ..è
>  [010] 30 82 04 E4 A0 24 30 22  06 09 2A 86 48 82 F7 12  0..ä $0" ..*.H.÷.
>  [020] 01 02 02 06 09 2A 86 48  86 F7 12 01 02 02 06 0A  .....*.H .÷......
>  [030] 2B 06 01 04 01 82 37 02  02 0A A2 82 04 BA 04 82  +.....7. ..¢..º..
>  [040] 04 B6 60 82 04 B2 06 09  2A 86 48 86 F7 12 01 02  .¶`..².. *.H.÷...
>  [050] 02 01 00 6E 82 04 A1 30  82 04 9D A0 03 02 01 05  ...n..¡0 ... ....
>  [060] A1 03 02 01 0E A2 07 03  05 00 20 00 00 00 A3 82  ¡....¢.. .. ...£.
>  [070] 03 BD 61 82 03 B9 30 82  03 B5 A0 03 02 01 05 A1  .½a..¹0. .µ ....¡
>  [080] 17 1B 15 4E 45 42 55 4C  41 2E 57 41 53 48 49 4E  ...NEBUL A.WASHIN
>  [090] 47 54 4F 4E 2E 45 44 55  A2 2B 30 29 A0 03 02 01  GTON.EDU ¢+0) ...
>  [0A0] 02 A1 22 30 20 1B 04 63  69 66 73 1B 18 63 61 6E  .¡"0 ..c ifs..can
>  [0B0] 6F 6E 2E 63 61 63 2E 77  61 73 68 69 6E 67 74 6F  on.cac.w ashingto
>  [0C0] 6E 2E 65 64 75 A3 82 03  66 30 82 03 62 A0 03 02  n.edu£.. f0..b ..
>  [0D0] 01 03 A1 03 02 01 02 A2  82 03 54 04 82 03 50 86  ..¡....¢ ..T...P.
>  [0E0] 7D CE EE 8A E9 AE D5 5C  58 BF 8B EE DA 0F E5 05  }Îî.é®Õ\ X¿.îÚ.å.
>  [0F0] 6C 20 D0 30 6E A2 1B 84  95 AE E7 26 AF CA 58 A0  l Ð0n¢.. .®ç&¯ÊX 
>  [100] 14 F9 FA CE 61 B2 4C D4  BF 1C 8E FD 44 0E 44 E0  .ùúÎa²LÔ ¿..ýD.Dà
>  [110] 40 53 43 D7 82 A8 3C 38  8F 6A 70 09 26 CB E8 CF  @SC×.¨<8 .jp.&ËèÏ
>  [120] 9C 23 7C BB 67 89 B4 C0  37 73 00 0F 97 CF 14 E0  .#|»g.´À 7s...Ï.à
>  [130] 9C 99 D5 20 75 47 97 66  CD 0C 49 BB F8 61 15 9E  ..Õ uG.f Í.I»øa..
>  [140] DB DD 22 B5 5C DC 81 5B  C1 0D 1B EF 72 0A D4 88  ÛÝ"µ\Ü.[ Á..ïr.Ô.
>  [150] 66 C0 14 F8 87 62 F4 B3  E7 34 78 67 F3 B2 92 A9  fÀ.ø.bô³ ç4xgó².©
>  [160] AA 7B 81 BA 1F FD 33 E0  93 F6 8F 09 45 DE 62 B6  ª{.º.ý3à .ö..EÞb¶
>  [170] D2 C8 AF 35 A4 22 1B 48  1C FD AD F4 C4 54 B4 A3  ÒÈ¯5¤".H .ýôÄT´£
>  [180] F9 E4 42 AB CC 16 6E F5  DE 33 C7 E3 BF 37 05 C9  ùäB«Ì.nõ Þ3Çã¿7.É
>  [190] FE 4A 05 27 6D 27 0D 43  F0 6B 9B 17 94 6D 50 6E  þJ.'m'.C ðk...mPn
>  [1A0] 08 14 33 4C 53 F1 94 CB  D5 17 F5 A2 59 B7 D2 10  ..3LSñ.Ë Õ.õ¢Y·Ò.
>  [1B0] CC 60 4B 31 52 FC 72 DA  B3 5F CA FA 0A 69 D6 33  Ì`K1RürÚ ³_Êú.iÖ3
>  [1C0] A2 50 03 8E B6 66 E4 B5  1C 81 95 88 FA DD 27 13  ¢P..¶fäµ ....úÝ'.
>  [1D0] B6 A5 E0 31 89 76 09 BF  BA 7B 38 10 38 AF D3 CF  ¶¥à1.v.¿ º{8.8¯ÓÏ
>  [1E0] 6D 99 86 2F F4 90 C1 BB  0C C3 6D 5D 82 32 3C 09  m../ô.Á» .Ãm].2<.
>  [1F0] 51 88 ED 22 01 B8 C0 70  9F 69 27 62 6A CC ED 34  Q.í".¸Àp .i'bjÌí4
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBsesssetupX (pid 25850)
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X(649)
>  wct=12 flg2=0xc807
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(529)
>  Doing spnego session setup
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(560)
>  NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438)
>  Got OID 1 2 840 48018 1 2 2
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438)
>  Got OID 1 2 840 113554 1 2 2
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438)
>  Got OID 1 3 6 1 4 1 311 2 2 10
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(441)
>  Got secblob of size 1206
>[2004/05/29 21:30:59, 10, pid=25850] passdb/secrets.c:secrets_named_mutex(704)
>  secrets_named_mutex: got mutex for replay cache mutex
>[2004/05/29 21:30:59, 10, pid=25850] libads/kerberos_verify.c:ads_verify_ticket(185)
>  ads_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type
>[2004/05/29 21:30:59, 10, pid=25850] libads/kerberos_verify.c:ads_verify_ticket(178)
>  ads_verify_ticket: enc type [3] decrypted message !
>[2004/05/29 21:30:59, 10, pid=25850] passdb/secrets.c:secrets_named_mutex_release(716)
>  secrets_named_mutex: released mutex for replay cache mutex
>[2004/05/29 21:30:59, 10, pid=25850] libsmb/clikrb5.c:get_krb5_smb_session_key(442)
>  Got KRB5 session key of length 8
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:decode_pac_data(602)
>  dump_pac_data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 pac_io_pac_data pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      0000 num_buffers: 00000004
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      0004 version: 00000000
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000008 pac_io_pac_info_hdr pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0008 type: 00000001
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          000c size: 000001c0
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0010 offset: 00000048
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0014 offsethi: 00000000
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 pac_io_pac_info_hdr pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0018 type: 0000000a
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          001c size: 0000001e
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0020 offset: 00000208
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0024 offsethi: 00000000
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000028 pac_io_pac_info_hdr pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0028 type: 00000006
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          002c size: 00000014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0030 offset: 00000228
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0034 offsethi: 00000000
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000038 pac_io_pac_info_hdr pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0038 type: 00000007
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          003c size: 00000014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0040 offset: 00000240
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0044 offsethi: 00000000
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000048 pac_io_pac_info_hdr_ctr pac data
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(467)
>  PAC_TYPE_LOGON_INFO
>[2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000048 pac_io_pac_logon_info pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0048 unknown: 00081001
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              004c unknown: cccccccc
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0050 bufferlen: 000001b0
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0054 bufferlenhi: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0058 pointer: 00020000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00005c smb_io_time logon_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  005c low : 094d3ef4
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0060 high: 01c445ca
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000064 smb_io_time logoff_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0064 low : ffffffff
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0068 high: 7fffffff
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00006c smb_io_time kickoff_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  006c low : ffffffff
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0070 high: 7fffffff
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000074 smb_io_time pass_last_set_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0074 low : 7dbd84f0
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0078 high: 01c4412f
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00007c smb_io_time pass_can_change_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  007c low : 7dbd84f0
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0080 high: 01c4412f
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000084 smb_io_time pass_must_change_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0084 low : ffffffff
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0088 high: 7fffffff
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00008c smb_io_unihdr hdr_user_name
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  008c uni_str_len: 0014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  008e uni_max_len: 0014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0090 buffer     : 00020004
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000094 smb_io_unihdr hdr_full_name
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  0094 uni_str_len: 0014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  0096 uni_max_len: 0014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0098 buffer     : 00020008
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00009c smb_io_unihdr hdr_logon_script
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  009c uni_str_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  009e uni_max_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00a0 buffer     : 0002000c
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000a4 smb_io_unihdr hdr_profile_path
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00a4 uni_str_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00a6 uni_max_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00a8 buffer     : 00020010
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000ac smb_io_unihdr hdr_home_dir
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00ac uni_str_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00ae uni_max_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00b0 buffer     : 00020014
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000b4 smb_io_unihdr hdr_dir_drive
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00b4 uni_str_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00b6 uni_max_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00b8 buffer     : 00020018
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              00bc logon_count: 0117
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              00be reserved12: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00c0 user_rid: 0000451e
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00c4 group_rid: 00000203
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00c8 group_count: 00000002
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00cc group_mem_ptr: 0002001c
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00d0 user_flags: 00000020
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00d4 reserved13.0: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00d8 reserved13.1: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00dc reserved13.2: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00e0 reserved13.3: 00000000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000e4 smb_io_unihdr hdr_dom_controller
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00e4 uni_str_len: 000a
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00e6 uni_max_len: 000c
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00e8 buffer     : 00020020
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000ec smb_io_unihdr hdr_dom_name
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00ec uni_str_len: 000c
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00ee uni_max_len: 000e
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00f0 buffer     : 00020024
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00f4 ptr_dom_sid: 00020028
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00f8 reserved16.0: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00fc reserved16.1: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0100 reserved17: 00000080
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0104 reserved18.0: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0108 reserved18.1: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              010c reserved18.2: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0110 reserved18.3: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0114 reserved18.4: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0118 reserved18.5: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              011c reserved18.6: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0120 sid_count: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0124 ptr_extra_sids: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0128 ptr_res_group_dom_sid: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              012c res_group_count: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0130 ptr_res_groups: 00000000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000134 smb_io_unistr2 uni_user_name
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0134 uni_max_len: 0000000a
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0138 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  013c uni_str_len: 0000000a
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  0140 buffer     : K.L.E.E.N.E.X._.Q.$.
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000154 smb_io_unistr2 uni_full_name
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0154 uni_max_len: 0000000a
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0158 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  015c uni_str_len: 0000000a
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  0160 buffer     : K.L.E.E.N.E.X._.Q.$.
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000174 smb_io_unistr2 uni_logon_script
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0174 uni_max_len: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0178 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  017c uni_str_len: 00000000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000180 smb_io_unistr2 uni_profile_path
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0180 uni_max_len: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0184 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0188 uni_str_len: 00000000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00018c smb_io_unistr2 uni_home_dir
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  018c uni_max_len: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0190 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0194 uni_str_len: 00000000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000198 smb_io_unistr2 uni_dir_drive
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0198 uni_max_len: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  019c offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01a0 uni_str_len: 00000000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0001a4 pac_io_group_membership_array group membership
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01a4 count: 00000002
>[2004/05/29 21:30:59, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  0001a8 pac_io_group_membership group membership
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      01a8 rid: 00004527
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      01ac attrs: 00000007
>[2004/05/29 21:30:59, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  0001b0 pac_io_group_membership group membership
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      01b0 rid: 00000203
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      01b4 attrs: 00000007
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0001b8 smb_io_unistr2 uni_dom_controller
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01b8 uni_max_len: 00000006
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01bc offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01c0 uni_str_len: 00000005
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  01c4 buffer     : O.R.I.O.N.
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0001ce smb_io_unistr2 uni_dom_name
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01d0 uni_max_len: 00000007
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01d4 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01d8 uni_str_len: 00000006
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  01dc buffer     : N.E.B.U.L.A.
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0001e8 smb_io_dom_sid2 dom_sid
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01e8 num_auths: 00000004
>[2004/05/29 21:30:59, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  0001ec smb_io_dom_sid sid
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01ec sid_rev_num: 01
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01ed num_auths  : 04
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01ee id_auth[0] : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01ef id_auth[1] : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01f0 id_auth[2] : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01f1 id_auth[3] : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01f2 id_auth[4] : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01f3 id_auth[5] : 05
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32s(862)
>                      01f4 sub_auths : 00000015 0125690f 1de85f7e 4a515a19 
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000204 pac_io_pac_info_hdr_ctr pac data
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452)
>  offset in header(x208) and data(x204) do not match
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(510)
>  PAC_TYPE_UNKNOWN_10
>[2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000208 pac_io_unknown_type_10 pac data
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000208 smb_io_time unknown_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0208 low : 59798e80
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  020c high: 01c445cc
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              0210 len: 0014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16s(765)
>              0212 name: k.l.e.e.n.e.x._.q.$.
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000226 pac_io_pac_info_hdr_ctr pac data
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(481)
>  PAC_TYPE_SERVER_CHECKSUM
>[2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000228 pac_io_pac_signature_data pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0228 type: ffffff76
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722)
>              022c signature: 75 96 39 1b db 4f b0 10 a2 b3 8f d2 b2 4b c4 4f 
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      00023c pac_io_pac_info_hdr_ctr pac data
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452)
>  offset in header(x240) and data(x23c) do not match
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(495)
>  PAC_TYPE_PRIVSVR_CHECKSUM
>[2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000240 pac_io_pac_signature_data pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0240 type: ffffff76
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722)
>              0244 signature: 1b 96 ac 5f 95 24 ed 57 f5 50 06 d8 33 ea 2c fb 
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(180)
>  Ticket name is [kleenex_q$@NEBULA.WASHINGTON.EDU]
>[2004/05/29 21:30:59, 10, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(221)
>  Mapping [NEBULA.WASHINGTON.EDU] to short name
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(237)
>  Could not find short name -- winbind not running?
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam(293)
>  Finding user NEBULA.WASHINGTON.EDU\kleenex_q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is nebula.washington.edu\kleenex_q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(230)
>  Trying _Get_Pwnam(), username as given is NEBULA.WASHINGTON.EDU\kleenex_q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(239)
>  Trying _Get_Pwnam(), username as uppercase is NEBULA.WASHINGTON.EDU\KLEENEX_Q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(247)
>  Checking combinations of 0 uppercase letters in nebula.washington.edu\kleenex_q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals didn't find user [NEBULA.WASHINGTON.EDU\kleenex_q$]!
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam(293)
>  Finding user kleenex_q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is kleenex_q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(239)
>  Trying _Get_Pwnam(), username as uppercase is KLEENEX_Q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(247)
>  Checking combinations of 0 uppercase letters in kleenex_q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals didn't find user [kleenex_q$]!
>[2004/05/29 21:30:59, 1, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(248)
>  Username NEBULA.WASHINGTON.EDU\kleenex_q$ is invalid on this system
>[2004/05/29 21:30:59, 3, pid=25850] smbd/error.c:error_packet(118)
>  error packet at smbd/sesssetup.c(252) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x73
>  smb_rcls=109
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=3136
>  smt_wct=0
>  smb_bcc=0
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,39)
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,39) wrote 39
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 114
>[2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x72
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 7 of length 118
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=114
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=3200
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=  114 (0x72)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=71
>[2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 00 5C 00 5C 00 43 00 41  00 4E 00 4F 00 4E 00 2E  .\.\.C.A .N.O.N..
>  [010] 00 43 00 41 00 43 00 2E  00 57 00 41 00 53 00 48  .C.A.C.. .W.A.S.H
>  [020] 00 49 00 4E 00 47 00 54  00 4F 00 4E 00 2E 00 45  .I.N.G.T .O.N...E
>  [030] 00 44 00 55 00 5C 00 49  00 50 00 43 00 24 00 00  .D.U.\.I .P.C.$..
>  [040] 00 3F 3F 3F 3F 3F 00                              .?????. 
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBtconX (pid 25850)
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:30:59, 4, pid=25850] smbd/reply.c:reply_tcon_and_X(381)
>  Client requested device type [?????] for share [IPC$]
>[2004/05/29 21:30:59, 5, pid=25850] smbd/service.c:make_connection(783)
>  making a connection to 'normal' service ipc$
>[2004/05/29 21:30:59, 3, pid=25850] lib/access.c:check_access(313)
>  check_access: no hostnames in host allow/deny list.
>[2004/05/29 21:30:59, 2, pid=25850] lib/access.c:check_access(324)
>  Allowed connection from  (140.142.110.103)
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam(293)
>  Finding user erich
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is erich
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals did find user [erich]!
>[2004/05/29 21:30:59, 3, pid=25850] smbd/service.c:make_connection_snum(457)
>  Connect path is '/tmp' for service [IPC$]
>[2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
>  get_share_security: using default secdesc for IPC$
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000002, for NT token with 20 entries and first sid S-1-5-21-2072067240-3800136619-3437914000-9130.
>[2004/05/29 21:30:59, 3, pid=25850] lib/util_seaccess.c:se_access_check(251)
>[2004/05/29 21:30:59, 3, pid=25850] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-2072067240-3800136619-3437914000-9130
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1031
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1001
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1021
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1051
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1069
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1163
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1699
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1701
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1717
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1749
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1853
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1917
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2147
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2395
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2479
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2763
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2
>[2004/05/29 21:30:59, 5, pid=25850] lib/util_seaccess.c:se_access_check(309)
>  se_access_check: access (2) granted.
>[2004/05/29 21:30:59, 3, pid=25850] smbd/vfs.c:vfs_init_default(203)
>  Initialising default vfs hooks
>[2004/05/29 21:30:59, 3, pid=25850] smbd/vfs.c:vfs_init_custom(229)
>  Initialising custom vfs hooks from [extd_audit]
>  Successfully loaded vfs module [extd_audit] with the new modules system
>[2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #0 (type 0, layer 2)
>  Accepting operation type 0 from module extd_audit
>[2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #1 (type 1, layer 2)
>  Accepting operation type 1 from module extd_audit
>[2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #2 (type 6, layer 2)
>  Accepting operation type 6 from module extd_audit
>[2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #3 (type 8, layer 2)
>  Accepting operation type 8 from module extd_audit
>[2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #4 (type 9, layer 2)
>  Accepting operation type 9 from module extd_audit
>[2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #5 (type 11, layer 2)
>  Accepting operation type 11 from module extd_audit
>[2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #6 (type 12, layer 2)
>  Accepting operation type 12 from module extd_audit
>[2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #7 (type 19, layer 2)
>  Accepting operation type 19 from module extd_audit
>[2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #8 (type 24, layer 2)
>  Accepting operation type 24 from module extd_audit
>[2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #9 (type 25, layer 2)
>  Accepting operation type 25 from module extd_audit
>[2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #10 (type 26, layer 2)
>  Accepting operation type 26 from module extd_audit
>[2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #11 (type 43, layer 2)
>  Accepting operation type 43 from module extd_audit
>[2004/05/29 21:30:59, 5, pid=25850] smbd/vfs.c:vfs_init_custom(275)
>  Checking operation #12 (type 44, layer 2)
>  Accepting operation type 44 from module extd_audit
>[2004/05/29 21:30:59, 5, pid=25850] smbd/connection.c:claim_connection(170)
>  claiming IPC$ 0
>[2004/05/29 21:30:59, 10, pid=25850] smbd/uid.c:is_share_read_only_for_user(99)
>  is_share_read_only_for_user: share IPC$ is read-only for unix user erich
>[2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
>  get_share_security: using default secdesc for IPC$
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_seaccess.c:se_map_generic(176)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_seaccess.c:se_access_check(234)
>  se_access_check: requested access 0x00000001, for NT token with 20 entries and first sid S-1-5-21-2072067240-3800136619-3437914000-9130.
>[2004/05/29 21:30:59, 3, pid=25850] lib/util_seaccess.c:se_access_check(251)
>[2004/05/29 21:30:59, 3, pid=25850] lib/util_seaccess.c:se_access_check(252)
>  se_access_check: user sid is S-1-5-21-2072067240-3800136619-3437914000-9130
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1031
>  se_access_check: also S-1-1-0
>  se_access_check: also S-1-5-2
>  se_access_check: also S-1-5-11
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1001
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1021
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1051
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1069
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1163
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1699
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1701
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1717
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1749
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1853
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-1917
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2147
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2395
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2479
>  se_access_check: also S-1-5-21-2072067240-3800136619-3437914000-2763
>  se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1
>[2004/05/29 21:30:59, 5, pid=25850] lib/util_seaccess.c:se_access_check(309)
>  se_access_check: access (1) granted.
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130
>  contains 20 SIDs
>  SID[  0]: S-1-5-21-2072067240-3800136619-3437914000-9130
>  SID[  1]: S-1-5-21-2072067240-3800136619-3437914000-1031
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2072067240-3800136619-3437914000-1001
>  SID[  6]: S-1-5-21-2072067240-3800136619-3437914000-1021
>  SID[  7]: S-1-5-21-2072067240-3800136619-3437914000-1051
>  SID[  8]: S-1-5-21-2072067240-3800136619-3437914000-1069
>  SID[  9]: S-1-5-21-2072067240-3800136619-3437914000-1163
>  SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699
>  SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701
>  SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717
>  SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749
>  SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853
>  SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917
>  SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147
>  SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395
>  SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479
>  SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 4065
>  Primary group is 15 and contains 16 supplementary groups
>  Group[  0]: 0
>  Group[  1]: 10
>  Group[  2]: 15
>  Group[  3]: 25
>  Group[  4]: 34
>  Group[  5]: 81
>  Group[  6]: 349
>  Group[  7]: 350
>  Group[  8]: 358
>  Group[  9]: 374
>  Group[ 10]: 426
>  Group[ 11]: 458
>  Group[ 12]: 573
>  Group[ 13]: 697
>  Group[ 14]: 739
>  Group[ 15]: 881
>[2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_user(267)
>  change_to_user uid=(4065,4065) gid=(0,15)
>[2004/05/29 21:30:59, 3, pid=25850] smbd/service.c:make_connection_snum(619)
>  140.142.110.103 (140.142.110.103) connect to service IPC$ initially as user erich (uid=4065, gid=15) (pid 25850)
>[2004/05/29 21:30:59, 10, pid=25850] modules/vfs_extd_audit.c:audit_connect(112)
>  Connected to service IPC$ as user erich
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:30:59, 3, pid=25850] smbd/reply.c:reply_tcon_and_X(429)
>  tconX service=IPC$ 
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=48
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=3200
>  smt_wct=3
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_bcc=7
>[2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 49 50 43 00 00 00 00                              IPC.... 
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,52)
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,52) wrote 52
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 100
>[2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x64
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 8 of length 104
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=100
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=100
>  smb_mid=3264
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]= 3584 (0xE00)
>  smb_vwv[ 3]= 5632 (0x1600)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=16384 (0x4000)
>  smb_vwv[20]=16384 (0x4000)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=  256 (0x100)
>  smb_bcc=17
>[2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 00 5C 00 73 00 72 00 76  00 73 00 76 00 63 00 00  .\.s.r.v .s.v.c..
>  [010] 00                                                . 
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBntcreateX (pid 25850)
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130
>  contains 20 SIDs
>  SID[  0]: S-1-5-21-2072067240-3800136619-3437914000-9130
>  SID[  1]: S-1-5-21-2072067240-3800136619-3437914000-1031
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2072067240-3800136619-3437914000-1001
>  SID[  6]: S-1-5-21-2072067240-3800136619-3437914000-1021
>  SID[  7]: S-1-5-21-2072067240-3800136619-3437914000-1051
>  SID[  8]: S-1-5-21-2072067240-3800136619-3437914000-1069
>  SID[  9]: S-1-5-21-2072067240-3800136619-3437914000-1163
>  SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699
>  SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701
>  SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717
>  SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749
>  SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853
>  SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917
>  SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147
>  SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395
>  SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479
>  SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 4065
>  Primary group is 15 and contains 16 supplementary groups
>  Group[  0]: 0
>  Group[  1]: 10
>  Group[  2]: 15
>  Group[  3]: 25
>  Group[  4]: 34
>  Group[  5]: 81
>  Group[  6]: 349
>  Group[  7]: 350
>  Group[  8]: 358
>  Group[  9]: 374
>  Group[ 10]: 426
>  Group[ 11]: 458
>  Group[ 12]: 573
>  Group[ 13]: 697
>  Group[ 14]: 739
>  Group[ 15]: 881
>[2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_user(267)
>  change_to_user uid=(4065,4065) gid=(0,15)
>[2004/05/29 21:30:59, 4, pid=25850] smbd/vfs.c:vfs_ChDir(654)
>  vfs_ChDir to /tmp
>[2004/05/29 21:30:59, 10, pid=25850] smbd/nttrans.c:reply_ntcreate_and_X(609)
>  reply_ntcreateX: flags = 0x16, desired_access = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x400040 root_dir_fid = 0x0
>[2004/05/29 21:30:59, 4, pid=25850] smbd/nttrans.c:nt_open_pipe(499)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2004/05/29 21:30:59, 3, pid=25850] smbd/nttrans.c:nt_open_pipe(516)
>  nt_open_pipe: Known pipe srvsvc opening.
>[2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178)
>  Open pipe requested srvsvc (pipes_open=0)
>[2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(279)
>  Create pipe requested srvsvc
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(77)
>  init_pipe_handles: created handle list for pipe srvsvc
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_lsa_hnd.c:init_pipe_handle_list(93)
>  init_pipe_handles: pipe_handles ref count = 1 for pipe srvsvc
>[2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(372)
>  Created internal pipe srvsvc (pipes_open=0)
>[2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(258)
>  Opened pipe srvsvc with handle 7779 (pipes_open=1)
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(264)
>  open pipes: name srvsvc pnum=7779
>[2004/05/29 21:30:59, 5, pid=25850] smbd/nttrans.c:do_ntcreate_pipe_open(564)
>  do_ntcreate_pipe_open: open pipe = \srvsvc
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=103
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=100
>  smb_mid=3264
>  smt_wct=34
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=30976 (0x7900)
>  smb_vwv[ 3]=  375 (0x177)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=    0 (0x0)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=    0 (0x0)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=32768 (0x8000)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_vwv[24]=    0 (0x0)
>  smb_vwv[25]=    0 (0x0)
>  smb_vwv[26]=    0 (0x0)
>  smb_vwv[27]=    0 (0x0)
>  smb_vwv[28]=    0 (0x0)
>  smb_vwv[29]=    0 (0x0)
>  smb_vwv[30]=    0 (0x0)
>  smb_vwv[31]=  512 (0x200)
>  smb_vwv[32]=65280 (0xFF00)
>  smb_vwv[33]=    5 (0x5)
>  smb_bcc=0
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,107)
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,107) wrote 107
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 136
>[2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x88
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 9 of length 140
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=136
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=3328
>  smt_wct=14
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=30585 (0x7779)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=65535 (0xFFFF)
>  smb_vwv[ 6]=65535 (0xFFFF)
>  smb_vwv[ 7]=    8 (0x8)
>  smb_vwv[ 8]=   72 (0x48)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   72 (0x48)
>  smb_vwv[11]=   64 (0x40)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=73
>[2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] EE 05 00 0B 03 10 00 00  00 48 00 00 00 01 00 00  î....... .H......
>  [010] 00 B8 10 B8 10 00 00 00  00 01 00 00 00 00 00 01  .¸.¸.... ........
>  [020] 00 C8 4F 32 4B 70 16 D3  01 12 78 5A 47 BF 6E E1  .ÈO2Kp.Ó ..xZG¿ná
>  [030] 88 03 00 00 00 04 5D 88  8A EB 1C C9 11 9F E8 08  ......]. .ë.É..è.
>  [040] 00 2B 10 48 60 02 00 00  00                       .+.H`... .
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBwriteX (pid 25850)
>[2004/05/29 21:30:59, 4, pid=25850] smbd/uid.c:change_to_user(186)
>  change_to_user: Skipping user change - already user
>[2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1156)
>  search for pipe pnum=7779
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1160)
>  pipe name srvsvc pnum=7779 (pipes_open=1)
>[2004/05/29 21:30:59, 6, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_pipe(854)
>  write_to_pipe: 7779 name: srvsvc open: Yes len: 72
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
>  write_to_pipe: data_left = 72
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_incoming_data(779)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401)
>  fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
>  write_to_pipe: data_used = 16
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
>  write_to_pipe: data_left = 56
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_incoming_data(779)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 0b
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 0048
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000001
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488)
>  unmarshall_rpc_header: using little-endian RPC
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
>  write_to_pipe: data_used = 0
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
>  write_to_pipe: data_left = 56
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_incoming_data(779)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 56, incoming data = 56
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722)
>  process_complete_pdu: processing packet type 11
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe.c:api_pipe_bind_req(875)
>  api_pipe_bind_req: decode request. 875
>[2004/05/29 21:30:59, 3, pid=25850] rpc_server/srv_pipe.c:api_pipe_bind_req(886)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\ntsvcs
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr_rb 
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 smb_io_rpc_hdr_bba 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>          0000 max_tsize: 10b8
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>          0002 max_rsize: 10b8
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0004 assoc_gid: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      0008 num_elements: 00000001
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>      000c context_id  : 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      000e num_syntaxes: 01
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      00000f smb_io_rpc_iface 
>[2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000010 smb_io_uuid uuid
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0010 data   : 4b324fc8
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              0014 data   : 1670
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              0016 data   : 01d3
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722)
>              0018 data   : 12 78 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722)
>              001a data   : 5a 47 bf 6e e1 88 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0020 version: 00000003
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000024 smb_io_rpc_iface 
>[2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000024 smb_io_uuid uuid
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0024 data   : 8a885d04
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              0028 data   : 1ceb
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              002a data   : 11c9
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722)
>              002c data   : 9f e8 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722)
>              002e data   : 08 00 2b 10 48 60 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0034 version: 00000002
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe.c:api_pipe_bind_req(1016)
>  api_pipe_bind_req: make response. 1016
>[2004/05/29 21:30:59, 3, pid=25850] rpc_server/srv_pipe.c:check_bind_req(758)
>  check_bind_req for \PIPE\srvsvc
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr_ba 
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 smb_io_rpc_hdr_bba 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>          0000 max_tsize: 10b8
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>          0002 max_rsize: 10b8
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0004 assoc_gid: 000053f0
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000008 smb_io_rpc_addr_str 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>          0008 len: 000d
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722)
>          000a str: \PIPE\ntsvcs.
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000017 smb_io_rpc_results 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>          0018 num_results: 01
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>          001c result     : 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>          001e reason     : 0000
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000020 smb_io_rpc_iface 
>[2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000020 smb_io_uuid uuid
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0020 data   : 8a885d04
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              0024 data   : 1ceb
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              0026 data   : 11c9
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722)
>              0028 data   : 9f e8 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722)
>              002a data   : 08 00 2b 10 48 60 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0030 version: 00000002
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 0c
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 0044
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000001
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
>  write_to_pipe: data_used = 56
>[2004/05/29 21:30:59, 3, pid=25850] smbd/pipes.c:reply_pipe_write_and_X(199)
>  writeX-IPC pnum=7779 nwritten=72
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=47
>  smb_com=0x2f
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=3328
>  smt_wct=6
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   72 (0x48)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_bcc=0
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,51)
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,51) wrote 51
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 59
>[2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x3b
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 10 of length 63
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=59
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=3392
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=57054 (0xDEDE)
>  smb_vwv[ 2]=30585 (0x7779)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]= 1024 (0x400)
>  smb_vwv[ 6]= 1024 (0x400)
>  smb_vwv[ 7]=65535 (0xFFFF)
>  smb_vwv[ 8]=65535 (0xFFFF)
>  smb_vwv[ 9]= 1024 (0x400)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=0
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBreadX (pid 25850)
>[2004/05/29 21:30:59, 4, pid=25850] smbd/uid.c:change_to_user(186)
>  change_to_user: Skipping user change - already user
>[2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1156)
>  search for pipe pnum=7779
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1160)
>  pipe name srvsvc pnum=7779 (pipes_open=1)
>[2004/05/29 21:30:59, 6, pid=25850] rpc_server/srv_pipe_hnd.c:read_from_pipe(911)
>  read_from_pipe: 7779 name: srvsvc len: 1024
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(970)
>  read_from_pipe: srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2004/05/29 21:30:59, 3, pid=25850] smbd/pipes.c:reply_pipe_read_and_X(242)
>  readX-IPC pnum=7779 min=1024 max=1024 nread=68
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=127
>  smb_com=0x2e
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=3392
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=   68 (0x44)
>  smb_vwv[ 6]=   59 (0x3B)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_bcc=68
>[2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 05 00 0C 03 10 00 00 00  44 00 00 00 01 00 00 00  ........ D.......
>  [010] B8 10 B8 10 F0 53 00 00  0D 00 5C 50 49 50 45 5C  ¸.¸.ðS.. ..\PIPE\
>  [020] 6E 74 73 76 63 73 00 00  01 00 00 00 00 00 00 00  ntsvcs.. ........
>  [030] 04 5D 88 8A EB 1C C9 11  9F E8 08 00 2B 10 48 60  .]..ë.É. .è..+.H`
>  [040] 02 00 00 00                                       .... 
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,131)
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,131) wrote 131
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 220
>[2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0xdc
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 11 of length 224
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=220
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=788
>  smb_uid=100
>  smb_mid=3456
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  136 (0x88)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   84 (0x54)
>  smb_vwv[11]=  136 (0x88)
>  smb_vwv[12]=   84 (0x54)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]=30585 (0x7779)
>  smb_bcc=153
>[2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 00 5C 00 50 00 49 00 50  00 45 00 5C 00 00 00 DA  .\.P.I.P .E.\...Ú
>  [010] 15 05 00 00 03 10 00 00  00 88 00 00 00 01 00 00  ........ ........
>  [020] 00 70 00 00 00 00 00 10  00 D0 DD DA 00 1B 00 00  .p...... .ÐÝÚ....
>  [030] 00 00 00 00 00 1B 00 00  00 5C 00 5C 00 63 00 61  ........ .\.\.c.a
>  [040] 00 6E 00 6F 00 6E 00 2E  00 63 00 61 00 63 00 2E  .n.o.n.. .c.a.c..
>  [050] 00 77 00 61 00 73 00 68  00 69 00 6E 00 67 00 74  .w.a.s.h .i.n.g.t
>  [060] 00 6F 00 6E 00 2E 00 65  00 64 00 75 00 00 00 00  .o.n...e .d.u....
>  [070] 00 0B 00 00 00 00 00 00  00 0B 00 00 00 6E 00 65  ........ .....n.e
>  [080] 00 62 00 75 00 6C 00 61  00 68 00 6F 00 6D 00 65  .b.u.l.a .h.o.m.e
>  [090] 00 00 00 00 00 01 00 00  00                       ........ .
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBtrans (pid 25850)
>[2004/05/29 21:30:59, 4, pid=25850] smbd/uid.c:change_to_user(186)
>  change_to_user: Skipping user change - already user
>[2004/05/29 21:30:59, 3, pid=25850] smbd/ipc.c:reply_trans(538)
>  trans <\PIPE\> data=136 params=0 setup=2
>[2004/05/29 21:30:59, 5, pid=25850] smbd/ipc.c:reply_trans(557)
>  calling named_pipe
>[2004/05/29 21:30:59, 3, pid=25850] smbd/ipc.c:named_pipe(334)
>  named pipe command on <> name
>[2004/05/29 21:30:59, 5, pid=25850] smbd/ipc.c:api_fd_reply(267)
>  api_fd_reply
>[2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1156)
>  search for pipe pnum=7779
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1160)
>  pipe name srvsvc pnum=7779 (pipes_open=1)
>[2004/05/29 21:30:59, 3, pid=25850] smbd/ipc.c:api_fd_reply(296)
>  Got API command 0x26 on pipe "srvsvc" (pnum 7779)
>[2004/05/29 21:30:59, 10, pid=25850] smbd/ipc.c:api_fd_reply(301)
>  api_fd_reply: p:0x8341a50 max_trans_reply: 1024
>[2004/05/29 21:30:59, 6, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_pipe(854)
>  write_to_pipe: 7779 name: srvsvc open: Yes len: 136
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
>  write_to_pipe: data_left = 136
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_incoming_data(779)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 136
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401)
>  fill_rpc_header: data_to_copy = 136, len_needed_to_complete_hdr = 16, receive_len = 0
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
>  write_to_pipe: data_used = 16
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
>  write_to_pipe: data_left = 120
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_incoming_data(779)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 120
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 0088
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000001
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488)
>  unmarshall_rpc_header: using little-endian RPC
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
>  write_to_pipe: data_used = 0
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(876)
>  write_to_pipe: data_left = 120
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_incoming_data(779)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 120, incoming data = 120
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722)
>  process_complete_pdu: processing packet type 0
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr_req req
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      0000 alloc_hint: 00000070
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>      0004 context_id: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>      0006 opnum     : 0010
>[2004/05/29 21:30:59, 3, pid=25850] rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
>  free_pipe_context: destroying talloc pool of size 0
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe.c:api_pipe_request(1494)
>  Requested \PIPE\srvsvc
>[2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe.c:api_rpcTNP(1528)
>  api_rpcTNP: srvsvc op 0x10 - api_rpcTNP: rpc command: SRV_NET_SHARE_GET_INFO
>[2004/05/29 21:30:59, 6, pid=25850] rpc_server/srv_pipe.c:api_rpcTNP(1554)
>  api_rpc_cmds[7].fn == 0x80f98d9
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 srv_io_q_net_share_get_info 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      0000 ptr_srv_name: 00daddd0
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000004 smb_io_unistr2 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0004 uni_max_len: 0000001b
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0008 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          000c uni_str_len: 0000001b
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>          0010 buffer     : \.\.c.a.n.o.n...c.a.c...w.a.s.h.i.n.g.t.o.n...e.d.u...
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000046 smb_io_unistr2 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0048 uni_max_len: 0000000b
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          004c offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0050 uni_str_len: 0000000b
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>          0054 buffer     : n.e.b.u.l.a.h.o.m.e...
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      006c info_level: 00000001
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1391)
>  _srv_net_share_get_info: 1391
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_srvsvc_nt.c:init_srv_r_net_share_get_info(737)
>  init_srv_r_net_share_get_info: 737
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_srv.c:init_srv_share_info1(142)
>  init_srv_share_info1: nebulahome        0 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_srv.c:init_srv_share_info1_str(101)
>  init_srv_share_info1_str
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_srvsvc_nt.c:_srv_net_share_get_info(1397)
>  _srv_net_share_get_info: 1397
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 srv_io_r_net_share_get_info 
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000000 srv_io_srv_share_info info  
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0000 switch_value : 00000001
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0004 ptr_share_ctr: 00000001
>[2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000008 srv_io_share_info1 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0008 ptr_netname: 00000001
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              000c type       : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0010 ptr_remark : 00000001
>[2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000014 srv_io_share_info1_str 
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000014 smb_io_unistr2 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0014 uni_max_len: 0000000b
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0018 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  001c uni_str_len: 0000000b
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  0020 buffer     : n.e.b.u.l.a.h.o.m.e...
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000038 smb_io_unistr2 
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0038 uni_max_len: 00000001
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  003c offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0040 uni_str_len: 00000001
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  0044 buffer     : ..
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_werror(695)
>      0048 status: WERR_OK
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe.c:api_rpcTNP(1575)
>  api_rpcTNP: called srvsvc successfully
>[2004/05/29 21:30:59, 3, pid=25850] rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
>  free_pipe_context: destroying talloc pool of size 1100
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(880)
>  write_to_pipe: data_used = 120
>[2004/05/29 21:30:59, 6, pid=25850] rpc_server/srv_pipe_hnd.c:read_from_pipe(911)
>  read_from_pipe: 7779 name: srvsvc len: 1024
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(984)
>  read_from_pipe: srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 76.
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 smb_io_rpc_hdr hdr
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0000 major     : 05
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0001 minor     : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0002 pkt_type  : 02
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0003 flags     : 03
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0004 pack_type0: 10
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0005 pack_type1: 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0006 pack_type2: 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0007 pack_type3: 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>      0008 frag_len  : 0064
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>      000a auth_len  : 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      000c call_id   : 00000001
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>  000010 smb_io_rpc_hdr_resp resp
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      0010 alloc_hint: 0000004c
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>      0014 context_id: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0016 cancel_ct : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>      0017 reserved  : 00
>[2004/05/29 21:30:59, 5, pid=25850] smbd/ipc.c:copy_trans_params_and_data(62)
>  copy_trans_params_and_data: params[0..0] data[0..100]
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=156
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=788
>  smb_uid=100
>  smb_mid=3456
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=  100 (0x64)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  100 (0x64)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=101
>[2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 00 05 00 02 03 10 00 00  00 64 00 00 00 01 00 00  ........ .d......
>  [010] 00 4C 00 00 00 00 00 00  00 01 00 00 00 01 00 00  .L...... ........
>  [020] 00 01 00 00 00 00 00 00  00 01 00 00 00 0B 00 00  ........ ........
>  [030] 00 00 00 00 00 0B 00 00  00 6E 00 65 00 62 00 75  ........ .n.e.b.u
>  [040] 00 6C 00 61 00 68 00 6F  00 6D 00 65 00 00 00 00  .l.a.h.o .m.e....
>  [050] 00 01 00 00 00 00 00 00  00 01 00 00 00 00 00 00  ........ ........
>  [060] 00 00 00 00 00                                    ..... 
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,160)
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,160) wrote 160
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 41
>[2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x29
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 12 of length 45
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=3520
>  smt_wct=3
>  smb_vwv[ 0]=30585 (0x7779)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBclose (pid 25850)
>[2004/05/29 21:30:59, 4, pid=25850] smbd/uid.c:change_to_user(186)
>  change_to_user: Skipping user change - already user
>[2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1156)
>  search for pipe pnum=7779
>[2004/05/29 21:30:59, 5, pid=25850] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1160)
>  pipe name srvsvc pnum=7779 (pipes_open=1)
>[2004/05/29 21:30:59, 5, pid=25850] smbd/pipes.c:reply_pipe_close(258)
>  reply_pipe_close: pnum:7779
>[2004/05/29 21:30:59, 10, pid=25850] rpc_server/srv_lsa_hnd.c:close_policy_by_pipe(235)
>  close_policy_by_pipe: deleted handle list for pipe srvsvc
>[2004/05/29 21:30:59, 4, pid=25850] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1083)
>  closed pipe name srvsvc pnum=7779 (pipes_open=0)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=2
>  smb_pid=65279
>  smb_uid=100
>  smb_mid=3520
>  smt_wct=0
>  smb_bcc=0
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,39)
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,39) wrote 39
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 100
>[2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x64
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 13 of length 104
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=100
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=3584
>  smt_wct=15
>  smb_vwv[ 0]=   32 (0x20)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=   10 (0xA)
>  smb_vwv[ 3]=16384 (0x4000)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   32 (0x20)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    1 (0x1)
>  smb_bcc=35
>[2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 00 00 00 16 00 56 05 06  00 04 01 00 00 00 00 5C  .....V.. .......\
>  [010] 00 4D 00 59 00 48 00 4F  00 4D 00 45 00 22 00 2A  .M.Y.H.O .M.E.".*
>  [020] 00 00 00                                          ... 
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 25850)
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130
>  contains 20 SIDs
>  SID[  0]: S-1-5-21-2072067240-3800136619-3437914000-9130
>  SID[  1]: S-1-5-21-2072067240-3800136619-3437914000-1031
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2072067240-3800136619-3437914000-1001
>  SID[  6]: S-1-5-21-2072067240-3800136619-3437914000-1021
>  SID[  7]: S-1-5-21-2072067240-3800136619-3437914000-1051
>  SID[  8]: S-1-5-21-2072067240-3800136619-3437914000-1069
>  SID[  9]: S-1-5-21-2072067240-3800136619-3437914000-1163
>  SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699
>  SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701
>  SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717
>  SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749
>  SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853
>  SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917
>  SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147
>  SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395
>  SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479
>  SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 4065
>  Primary group is 15 and contains 16 supplementary groups
>  Group[  0]: 0
>  Group[  1]: 10
>  Group[  2]: 15
>  Group[  3]: 25
>  Group[  4]: 34
>  Group[  5]: 81
>  Group[  6]: 349
>  Group[  7]: 350
>  Group[  8]: 358
>  Group[  9]: 374
>  Group[ 10]: 426
>  Group[ 11]: 458
>  Group[ 12]: 573
>  Group[ 13]: 697
>  Group[ 14]: 739
>  Group[ 15]: 881
>[2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_user(267)
>  change_to_user uid=(4065,4065) gid=(0,15)
>[2004/05/29 21:30:59, 4, pid=25850] smbd/vfs.c:vfs_ChDir(654)
>  vfs_ChDir to /usr/local/lib/samba/nebula-home
>[2004/05/29 21:30:59, 3, pid=25850] smbd/trans2.c:call_trans2findfirst(1355)
>  call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
>[2004/05/29 21:30:59, 5, pid=25850] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "MYHOME"*"
>[2004/05/29 21:30:59, 10, pid=25850] smbd/statcache.c:stat_cache_lookup(251)
>  stat_cache_lookup: lookup failed for name [MYHOME"*]
>[2004/05/29 21:30:59, 5, pid=25850] smbd/filename.c:unix_convert(177)
>  unix_convert begin: name = MYHOME"*, dirpath = , start = MYHOME"*
>[2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269)
>  is_mangled MYHOME"* ?
>[2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208)
>  is_mangled_component MYHOME"* (len 8) ?
>[2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269)
>  is_mangled MYHOME"* ?
>[2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208)
>  is_mangled_component MYHOME"* (len 8) ?
>[2004/05/29 21:30:59, 5, pid=25850] smbd/filename.c:unix_convert(312)
>  New file MYHOME"*
>[2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: MYHOME"*
>[2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:59, 5, pid=25850] smbd/trans2.c:call_trans2findfirst(1400)
>  dir=./, mask = MYHOME"*
>[2004/05/29 21:30:59, 5, pid=25850] smbd/dir.c:start_dir(334)
>  start_dir dir=./
>[2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: ./
>[2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:59, 10, pid=25850] modules/vfs_extd_audit.c:audit_opendir(141)
>  vfs_extd_audit: opendir ./  
>[2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: myhome
>[2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:59, 3, pid=25850] smbd/dir.c:dptr_create(491)
>  creating new dirptr 256 for path ./, expect_close = 1
>[2004/05/29 21:30:59, 4, pid=25850] smbd/trans2.c:call_trans2findfirst(1430)
>  dptr_num is 256, wcard = MYHOME"*, attr = 22
>[2004/05/29 21:30:59, 8, pid=25850] smbd/trans2.c:call_trans2findfirst(1435)
>  dirpath=<./> dontdescend=<>
>[2004/05/29 21:30:59, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879)
>  get_lanman2_dir_entry:readdir on dirptr 0x8331b78 now at offset 1
>[2004/05/29 21:30:59, 10, pid=25850] lib/ms_fnmatch.c:ms_fnmatch(240)
>  ms_fnmatch(MYHOME"*,.) -> -1
>[2004/05/29 21:30:59, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879)
>  get_lanman2_dir_entry:readdir on dirptr 0x8331b78 now at offset 2
>[2004/05/29 21:30:59, 10, pid=25850] lib/ms_fnmatch.c:ms_fnmatch(240)
>  ms_fnmatch(MYHOME"*,.) -> -1
>[2004/05/29 21:30:59, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879)
>  get_lanman2_dir_entry:readdir on dirptr 0x8331b78 now at offset 3
>[2004/05/29 21:30:59, 10, pid=25850] lib/ms_fnmatch.c:ms_fnmatch(240)
>  ms_fnmatch(MYHOME"*,myhome) -> 0
>[2004/05/29 21:30:59, 5, pid=25850] smbd/msdfs.c:is_msdfs_link(258)
>  is_msdfs_link: ./myhome -> msdfs:kodak5.cac.washington.edu\homes
>[2004/05/29 21:30:59, 5, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(931)
>  get_lanman2_dir_entry: Masquerading msdfs link ./myhome as a directory
>[2004/05/29 21:30:59, 8, pid=25850] smbd/dosmode.c:dos_mode(270)
>  dos_mode: ./myhome
>[2004/05/29 21:30:59, 8, pid=25850] smbd/dosmode.c:dos_mode_from_sbuf(151)
>  dos_mode_from_sbuf returning d
>[2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: ./myhome
>[2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:59, 8, pid=25850] smbd/dosmode.c:dos_mode(302)
>  dos_mode returning d
>[2004/05/29 21:30:59, 5, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(964)
>  get_lanman2_dir_entry found ./myhome fname=myhome
>[2004/05/29 21:30:59, 10, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(1048)
>  get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
>[2004/05/29 21:30:59, 8, pid=25850] smbd/trans2.c:get_lanman2_dir_entry(879)
>  get_lanman2_dir_entry:readdir on dirptr 0x8331b78 now at offset 3
>[2004/05/29 21:30:59, 5, pid=25850] smbd/trans2.c:call_trans2findfirst(1481)
>  call_trans2findfirst - (2) closing dptr_num 256
>[2004/05/29 21:30:59, 4, pid=25850] smbd/dir.c:dptr_close_internal(224)
>  closing dptr key 256
>[2004/05/29 21:30:59, 9, pid=25850] smbd/trans2.c:send_trans2_replies(535)
>  t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010
>[2004/05/29 21:30:59, 9, pid=25850] smbd/trans2.c:send_trans2_replies(537)
>  t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,180)
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,180) wrote 180
>[2004/05/29 21:30:59, 4, pid=25850] smbd/trans2.c:call_trans2findfirst(1511)
>  SMBtrans2 mask=MYHOME"* directory=./ dirtype=22 numentries=1
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 90
>[2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x5a
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 14 of length 94
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=90
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=3648
>  smt_wct=15
>  smb_vwv[ 0]=   22 (0x16)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   22 (0x16)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=25
>[2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 00 72 00 EC 03 00 00 00  00 5C 00 6D 00 79 00 68  .r.ì.... .\.m.y.h
>  [010] 00 6F 00 6D 00 65 00 00  00                       .o.m.e.. .
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 25850)
>[2004/05/29 21:30:59, 4, pid=25850] smbd/uid.c:change_to_user(186)
>  change_to_user: Skipping user change - already user
>[2004/05/29 21:30:59, 3, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2331)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2004/05/29 21:30:59, 5, pid=25850] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "myhome"
>[2004/05/29 21:30:59, 10, pid=25850] smbd/statcache.c:stat_cache_lookup(251)
>  stat_cache_lookup: lookup failed for name [MYHOME]
>[2004/05/29 21:30:59, 5, pid=25850] smbd/filename.c:unix_convert(177)
>  unix_convert begin: name = myhome, dirpath = , start = myhome
>[2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269)
>  is_mangled myhome ?
>[2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208)
>  is_mangled_component myhome (len 6) ?
>[2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269)
>  is_mangled myhome ?
>[2004/05/29 21:30:59, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208)
>  is_mangled_component myhome (len 6) ?
>[2004/05/29 21:30:59, 10, pid=25850] modules/vfs_extd_audit.c:audit_opendir(141)
>  vfs_extd_audit: opendir .  
>[2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: myhome
>[2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:59, 5, pid=25850] smbd/statcache.c:stat_cache_add(178)
>  stat_cache_add: Added entry MYHOME -> myhome
>[2004/05/29 21:30:59, 5, pid=25850] smbd/filename.c:unix_convert(377)
>  conversion finished myhome -> myhome
>[2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: myhome
>[2004/05/29 21:30:59, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:30:59, 3, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2353)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of myhome failed (No such file or directory)
>[2004/05/29 21:30:59, 10, pid=25850] smbd/trans2.c:set_bad_path_error(2213)
>  set_bad_path_error: err = 2 bad_path = 0
>[2004/05/29 21:30:59, 3, pid=25850] smbd/error.c:error_packet(94)
>  error string = No such file or directory
>[2004/05/29 21:30:59, 3, pid=25850] smbd/error.c:error_packet(118)
>  error packet at smbd/trans2.c(2219) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x32
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=3648
>  smt_wct=0
>  smb_bcc=0
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,39)
>[2004/05/29 21:30:59, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,39) wrote 39
>[2004/05/29 21:30:59, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 1434
>[2004/05/29 21:30:59, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x59a
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 15 of length 1438
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:30:59, 5, pid=25850] lib/util.c:show_msg(466)
>  size=1434
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=3712
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]= 1434 (0x59A)
>  smb_vwv[ 2]=16644 (0x4104)
>  smb_vwv[ 3]=   50 (0x32)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]= 1272 (0x4F8)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=  212 (0xD4)
>  smb_vwv[11]=40960 (0xA000)
>  smb_bcc=1375
>[2004/05/29 21:30:59, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 60 82 04 F4 06 06 2B 06  01 05 05 02 A0 82 04 E8  `..ô..+. .... ..è
>  [010] 30 82 04 E4 A0 24 30 22  06 09 2A 86 48 82 F7 12  0..ä $0" ..*.H.÷.
>  [020] 01 02 02 06 09 2A 86 48  86 F7 12 01 02 02 06 0A  .....*.H .÷......
>  [030] 2B 06 01 04 01 82 37 02  02 0A A2 82 04 BA 04 82  +.....7. ..¢..º..
>  [040] 04 B6 60 82 04 B2 06 09  2A 86 48 86 F7 12 01 02  .¶`..².. *.H.÷...
>  [050] 02 01 00 6E 82 04 A1 30  82 04 9D A0 03 02 01 05  ...n..¡0 ... ....
>  [060] A1 03 02 01 0E A2 07 03  05 00 20 00 00 00 A3 82  ¡....¢.. .. ...£.
>  [070] 03 BD 61 82 03 B9 30 82  03 B5 A0 03 02 01 05 A1  .½a..¹0. .µ ....¡
>  [080] 17 1B 15 4E 45 42 55 4C  41 2E 57 41 53 48 49 4E  ...NEBUL A.WASHIN
>  [090] 47 54 4F 4E 2E 45 44 55  A2 2B 30 29 A0 03 02 01  GTON.EDU ¢+0) ...
>  [0A0] 02 A1 22 30 20 1B 04 63  69 66 73 1B 18 63 61 6E  .¡"0 ..c ifs..can
>  [0B0] 6F 6E 2E 63 61 63 2E 77  61 73 68 69 6E 67 74 6F  on.cac.w ashingto
>  [0C0] 6E 2E 65 64 75 A3 82 03  66 30 82 03 62 A0 03 02  n.edu£.. f0..b ..
>  [0D0] 01 03 A1 03 02 01 02 A2  82 03 54 04 82 03 50 86  ..¡....¢ ..T...P.
>  [0E0] 7D CE EE 8A E9 AE D5 5C  58 BF 8B EE DA 0F E5 05  }Îî.é®Õ\ X¿.îÚ.å.
>  [0F0] 6C 20 D0 30 6E A2 1B 84  95 AE E7 26 AF CA 58 A0  l Ð0n¢.. .®ç&¯ÊX 
>  [100] 14 F9 FA CE 61 B2 4C D4  BF 1C 8E FD 44 0E 44 E0  .ùúÎa²LÔ ¿..ýD.Dà
>  [110] 40 53 43 D7 82 A8 3C 38  8F 6A 70 09 26 CB E8 CF  @SC×.¨<8 .jp.&ËèÏ
>  [120] 9C 23 7C BB 67 89 B4 C0  37 73 00 0F 97 CF 14 E0  .#|»g.´À 7s...Ï.à
>  [130] 9C 99 D5 20 75 47 97 66  CD 0C 49 BB F8 61 15 9E  ..Õ uG.f Í.I»øa..
>  [140] DB DD 22 B5 5C DC 81 5B  C1 0D 1B EF 72 0A D4 88  ÛÝ"µ\Ü.[ Á..ïr.Ô.
>  [150] 66 C0 14 F8 87 62 F4 B3  E7 34 78 67 F3 B2 92 A9  fÀ.ø.bô³ ç4xgó².©
>  [160] AA 7B 81 BA 1F FD 33 E0  93 F6 8F 09 45 DE 62 B6  ª{.º.ý3à .ö..EÞb¶
>  [170] D2 C8 AF 35 A4 22 1B 48  1C FD AD F4 C4 54 B4 A3  ÒÈ¯5¤".H .ýôÄT´£
>  [180] F9 E4 42 AB CC 16 6E F5  DE 33 C7 E3 BF 37 05 C9  ùäB«Ì.nõ Þ3Çã¿7.É
>  [190] FE 4A 05 27 6D 27 0D 43  F0 6B 9B 17 94 6D 50 6E  þJ.'m'.C ðk...mPn
>  [1A0] 08 14 33 4C 53 F1 94 CB  D5 17 F5 A2 59 B7 D2 10  ..3LSñ.Ë Õ.õ¢Y·Ò.
>  [1B0] CC 60 4B 31 52 FC 72 DA  B3 5F CA FA 0A 69 D6 33  Ì`K1RürÚ ³_Êú.iÖ3
>  [1C0] A2 50 03 8E B6 66 E4 B5  1C 81 95 88 FA DD 27 13  ¢P..¶fäµ ....úÝ'.
>  [1D0] B6 A5 E0 31 89 76 09 BF  BA 7B 38 10 38 AF D3 CF  ¶¥à1.v.¿ º{8.8¯ÓÏ
>  [1E0] 6D 99 86 2F F4 90 C1 BB  0C C3 6D 5D 82 32 3C 09  m../ô.Á» .Ãm].2<.
>  [1F0] 51 88 ED 22 01 B8 C0 70  9F 69 27 62 6A CC ED 34  Q.í".¸Àp .i'bjÌí4
>[2004/05/29 21:30:59, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBsesssetupX (pid 25850)
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:30:59, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:30:59, 5, pid=25850] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X(649)
>  wct=12 flg2=0xc807
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(529)
>  Doing spnego session setup
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(560)
>  NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438)
>  Got OID 1 2 840 48018 1 2 2
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438)
>  Got OID 1 2 840 113554 1 2 2
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(438)
>  Got OID 1 3 6 1 4 1 311 2 2 10
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_negotiate(441)
>  Got secblob of size 1206
>[2004/05/29 21:30:59, 10, pid=25850] passdb/secrets.c:secrets_named_mutex(704)
>  secrets_named_mutex: got mutex for replay cache mutex
>[2004/05/29 21:30:59, 10, pid=25850] libads/kerberos_verify.c:ads_verify_ticket(185)
>  ads_verify_ticket: enc type [16] failed to decrypt with error Bad encryption type
>[2004/05/29 21:30:59, 10, pid=25850] libads/kerberos_verify.c:ads_verify_ticket(178)
>  ads_verify_ticket: enc type [3] decrypted message !
>[2004/05/29 21:30:59, 10, pid=25850] passdb/secrets.c:secrets_named_mutex_release(716)
>  secrets_named_mutex: released mutex for replay cache mutex
>[2004/05/29 21:30:59, 10, pid=25850] libsmb/clikrb5.c:get_krb5_smb_session_key(442)
>  Got KRB5 session key of length 8
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:decode_pac_data(602)
>  dump_pac_data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>  000000 pac_io_pac_data pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      0000 num_buffers: 00000004
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>      0004 version: 00000000
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000008 pac_io_pac_info_hdr pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0008 type: 00000001
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          000c size: 000001c0
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0010 offset: 00000048
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0014 offsethi: 00000000
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000018 pac_io_pac_info_hdr pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0018 type: 0000000a
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          001c size: 0000001e
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0020 offset: 00000208
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0024 offsethi: 00000000
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000028 pac_io_pac_info_hdr pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0028 type: 00000006
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          002c size: 00000014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0030 offset: 00000228
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0034 offsethi: 00000000
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000038 pac_io_pac_info_hdr pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0038 type: 00000007
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          003c size: 00000014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0040 offset: 00000240
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>          0044 offsethi: 00000000
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000048 pac_io_pac_info_hdr_ctr pac data
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(467)
>  PAC_TYPE_LOGON_INFO
>[2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000048 pac_io_pac_logon_info pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0048 unknown: 00081001
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              004c unknown: cccccccc
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0050 bufferlen: 000001b0
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0054 bufferlenhi: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0058 pointer: 00020000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00005c smb_io_time logon_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  005c low : 094d3ef4
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0060 high: 01c445ca
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000064 smb_io_time logoff_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0064 low : ffffffff
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0068 high: 7fffffff
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00006c smb_io_time kickoff_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  006c low : ffffffff
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0070 high: 7fffffff
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000074 smb_io_time pass_last_set_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0074 low : 7dbd84f0
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0078 high: 01c4412f
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00007c smb_io_time pass_can_change_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  007c low : 7dbd84f0
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0080 high: 01c4412f
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000084 smb_io_time pass_must_change_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0084 low : ffffffff
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0088 high: 7fffffff
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00008c smb_io_unihdr hdr_user_name
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  008c uni_str_len: 0014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  008e uni_max_len: 0014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0090 buffer     : 00020004
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000094 smb_io_unihdr hdr_full_name
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  0094 uni_str_len: 0014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  0096 uni_max_len: 0014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0098 buffer     : 00020008
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00009c smb_io_unihdr hdr_logon_script
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  009c uni_str_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  009e uni_max_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00a0 buffer     : 0002000c
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000a4 smb_io_unihdr hdr_profile_path
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00a4 uni_str_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00a6 uni_max_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00a8 buffer     : 00020010
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000ac smb_io_unihdr hdr_home_dir
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00ac uni_str_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00ae uni_max_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00b0 buffer     : 00020014
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000b4 smb_io_unihdr hdr_dir_drive
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00b4 uni_str_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00b6 uni_max_len: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00b8 buffer     : 00020018
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              00bc logon_count: 0117
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              00be reserved12: 0000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00c0 user_rid: 0000451e
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00c4 group_rid: 00000203
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00c8 group_count: 00000002
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00cc group_mem_ptr: 0002001c
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00d0 user_flags: 00000020
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00d4 reserved13.0: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00d8 reserved13.1: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00dc reserved13.2: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00e0 reserved13.3: 00000000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000e4 smb_io_unihdr hdr_dom_controller
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00e4 uni_str_len: 000a
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00e6 uni_max_len: 000c
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00e8 buffer     : 00020020
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0000ec smb_io_unihdr hdr_dom_name
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00ec uni_str_len: 000c
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>                  00ee uni_max_len: 000e
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  00f0 buffer     : 00020024
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00f4 ptr_dom_sid: 00020028
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00f8 reserved16.0: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              00fc reserved16.1: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0100 reserved17: 00000080
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0104 reserved18.0: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0108 reserved18.1: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              010c reserved18.2: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0110 reserved18.3: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0114 reserved18.4: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0118 reserved18.5: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              011c reserved18.6: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0120 sid_count: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0124 ptr_extra_sids: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0128 ptr_res_group_dom_sid: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              012c res_group_count: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0130 ptr_res_groups: 00000000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000134 smb_io_unistr2 uni_user_name
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0134 uni_max_len: 0000000a
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0138 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  013c uni_str_len: 0000000a
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  0140 buffer     : K.L.E.E.N.E.X._.Q.$.
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000154 smb_io_unistr2 uni_full_name
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0154 uni_max_len: 0000000a
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0158 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  015c uni_str_len: 0000000a
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  0160 buffer     : K.L.E.E.N.E.X._.Q.$.
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000174 smb_io_unistr2 uni_logon_script
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0174 uni_max_len: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0178 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  017c uni_str_len: 00000000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000180 smb_io_unistr2 uni_profile_path
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0180 uni_max_len: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0184 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0188 uni_str_len: 00000000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              00018c smb_io_unistr2 uni_home_dir
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  018c uni_max_len: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0190 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0194 uni_str_len: 00000000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000198 smb_io_unistr2 uni_dir_drive
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0198 uni_max_len: 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  019c offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01a0 uni_str_len: 00000000
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0001a4 pac_io_group_membership_array group membership
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01a4 count: 00000002
>[2004/05/29 21:30:59, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  0001a8 pac_io_group_membership group membership
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      01a8 rid: 00004527
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      01ac attrs: 00000007
>[2004/05/29 21:30:59, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  0001b0 pac_io_group_membership group membership
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      01b0 rid: 00000203
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                      01b4 attrs: 00000007
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0001b8 smb_io_unistr2 uni_dom_controller
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01b8 uni_max_len: 00000006
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01bc offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01c0 uni_str_len: 00000005
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  01c4 buffer     : O.R.I.O.N.
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0001ce smb_io_unistr2 uni_dom_name
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01d0 uni_max_len: 00000007
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01d4 offset     : 00000000
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01d8 uni_str_len: 00000006
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:dbg_rw_punival(807)
>                  01dc buffer     : N.E.B.U.L.A.
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              0001e8 smb_io_dom_sid2 dom_sid
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  01e8 num_auths: 00000004
>[2004/05/29 21:30:59, 9, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>                  0001ec smb_io_dom_sid sid
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01ec sid_rev_num: 01
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01ed num_auths  : 04
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01ee id_auth[0] : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01ef id_auth[1] : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01f0 id_auth[2] : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01f1 id_auth[3] : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01f2 id_auth[4] : 00
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8(577)
>                      01f3 id_auth[5] : 05
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32s(862)
>                      01f4 sub_auths : 00000015 0125690f 1de85f7e 4a515a19 
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000204 pac_io_pac_info_hdr_ctr pac data
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452)
>  offset in header(x208) and data(x204) do not match
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(510)
>  PAC_TYPE_UNKNOWN_10
>[2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000208 pac_io_unknown_type_10 pac data
>[2004/05/29 21:30:59, 8, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>              000208 smb_io_time unknown_time
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  0208 low : 59798e80
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>                  020c high: 01c445cc
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16(606)
>              0210 len: 0014
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint16s(765)
>              0212 name: k.l.e.e.n.e.x._.q.$.
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      000226 pac_io_pac_info_hdr_ctr pac data
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(481)
>  PAC_TYPE_SERVER_CHECKSUM
>[2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000228 pac_io_pac_signature_data pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0228 type: ffffff76
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722)
>              022c signature: 75 96 39 1b db 4f b0 10 a2 b3 8f d2 b2 4b c4 4f 
>[2004/05/29 21:30:59, 6, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>      00023c pac_io_pac_info_hdr_ctr pac data
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(452)
>  offset in header(x240) and data(x23c) do not match
>[2004/05/29 21:30:59, 5, pid=25850] libads/authdata.c:pac_io_pac_info_hdr_ctr(495)
>  PAC_TYPE_PRIVSVR_CHECKSUM
>[2004/05/29 21:30:59, 7, pid=25850] rpc_parse/parse_prs.c:prs_debug(82)
>          000240 pac_io_pac_signature_data pac data
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint32(635)
>              0240 type: ffffff76
>[2004/05/29 21:30:59, 5, pid=25850] rpc_parse/parse_prs.c:prs_uint8s(722)
>              0244 signature: 1b 96 ac 5f 95 24 ed 57 f5 50 06 d8 33 ea 2c fb 
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(180)
>  Ticket name is [kleenex_q$@NEBULA.WASHINGTON.EDU]
>[2004/05/29 21:30:59, 10, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(221)
>  Mapping [NEBULA.WASHINGTON.EDU] to short name
>[2004/05/29 21:30:59, 3, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(237)
>  Could not find short name -- winbind not running?
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam(293)
>  Finding user NEBULA.WASHINGTON.EDU\kleenex_q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is nebula.washington.edu\kleenex_q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(230)
>  Trying _Get_Pwnam(), username as given is NEBULA.WASHINGTON.EDU\kleenex_q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(239)
>  Trying _Get_Pwnam(), username as uppercase is NEBULA.WASHINGTON.EDU\KLEENEX_Q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(247)
>  Checking combinations of 0 uppercase letters in nebula.washington.edu\kleenex_q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals didn't find user [NEBULA.WASHINGTON.EDU\kleenex_q$]!
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam(293)
>  Finding user kleenex_q$
>[2004/05/29 21:30:59, 5, pid=25850] lib/username.c:Get_Pwnam_internals(223)
>  Trying _Get_Pwnam(), username as lowercase is kleenex_q$
>[2004/05/29 21:31:00, 5, pid=25850] lib/username.c:Get_Pwnam_internals(239)
>  Trying _Get_Pwnam(), username as uppercase is KLEENEX_Q$
>[2004/05/29 21:31:00, 5, pid=25850] lib/username.c:Get_Pwnam_internals(247)
>  Checking combinations of 0 uppercase letters in kleenex_q$
>[2004/05/29 21:31:00, 5, pid=25850] lib/username.c:Get_Pwnam_internals(251)
>  Get_Pwnam_internals didn't find user [kleenex_q$]!
>[2004/05/29 21:31:00, 1, pid=25850] smbd/sesssetup.c:reply_spnego_kerberos(248)
>  Username NEBULA.WASHINGTON.EDU\kleenex_q$ is invalid on this system
>[2004/05/29 21:31:00, 3, pid=25850] smbd/error.c:error_packet(118)
>  error packet at smbd/sesssetup.c(252) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
>[2004/05/29 21:31:00, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:31:00, 5, pid=25850] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x73
>  smb_rcls=109
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=65279
>  smb_uid=0
>  smb_mid=3712
>  smt_wct=0
>  smb_bcc=0
>[2004/05/29 21:31:00, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,39)
>[2004/05/29 21:31:00, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,39) wrote 39
>[2004/05/29 21:31:00, 10, pid=25850] lib/util_sock.c:read_smb_length_return_keepalive(488)
>  got smb length of 90
>[2004/05/29 21:31:00, 6, pid=25850] smbd/process.c:process_smb(889)
>  got message type 0x0 of len 0x5a
>[2004/05/29 21:31:00, 3, pid=25850] smbd/process.c:process_smb(890)
>  Transaction 16 of length 94
>[2004/05/29 21:31:00, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:31:00, 5, pid=25850] lib/util.c:show_msg(466)
>  size=90
>  smb_com=0x32
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=24
>  smb_flg2=51207
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=3776
>  smt_wct=15
>  smb_vwv[ 0]=   22 (0x16)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    2 (0x2)
>  smb_vwv[ 3]=   40 (0x28)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   22 (0x16)
>  smb_vwv[10]=   68 (0x44)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    1 (0x1)
>  smb_vwv[14]=    5 (0x5)
>  smb_bcc=25
>[2004/05/29 21:31:00, 10, pid=25850] lib/util.c:dump_data(1864)
>  [000] 02 00 00 EC 03 00 00 00  00 5C 00 6D 00 79 00 68  ...ì.... .\.m.y.h
>  [010] 00 6F 00 6D 00 65 00 00  00                       .o.m.e.. .
>[2004/05/29 21:31:00, 3, pid=25850] smbd/process.c:switch_message(685)
>  switch message SMBtrans2 (pid 25850)
>[2004/05/29 21:31:00, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:31:00, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(491)
>  NT user token of user S-1-5-21-2072067240-3800136619-3437914000-9130
>  contains 20 SIDs
>  SID[  0]: S-1-5-21-2072067240-3800136619-3437914000-9130
>  SID[  1]: S-1-5-21-2072067240-3800136619-3437914000-1031
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-11
>  SID[  5]: S-1-5-21-2072067240-3800136619-3437914000-1001
>  SID[  6]: S-1-5-21-2072067240-3800136619-3437914000-1021
>  SID[  7]: S-1-5-21-2072067240-3800136619-3437914000-1051
>  SID[  8]: S-1-5-21-2072067240-3800136619-3437914000-1069
>  SID[  9]: S-1-5-21-2072067240-3800136619-3437914000-1163
>  SID[ 10]: S-1-5-21-2072067240-3800136619-3437914000-1699
>  SID[ 11]: S-1-5-21-2072067240-3800136619-3437914000-1701
>  SID[ 12]: S-1-5-21-2072067240-3800136619-3437914000-1717
>  SID[ 13]: S-1-5-21-2072067240-3800136619-3437914000-1749
>  SID[ 14]: S-1-5-21-2072067240-3800136619-3437914000-1853
>  SID[ 15]: S-1-5-21-2072067240-3800136619-3437914000-1917
>  SID[ 16]: S-1-5-21-2072067240-3800136619-3437914000-2147
>  SID[ 17]: S-1-5-21-2072067240-3800136619-3437914000-2395
>  SID[ 18]: S-1-5-21-2072067240-3800136619-3437914000-2479
>  SID[ 19]: S-1-5-21-2072067240-3800136619-3437914000-2763
>[2004/05/29 21:31:00, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 4065
>  Primary group is 15 and contains 16 supplementary groups
>  Group[  0]: 0
>  Group[  1]: 10
>  Group[  2]: 15
>  Group[  3]: 25
>  Group[  4]: 34
>  Group[  5]: 81
>  Group[  6]: 349
>  Group[  7]: 350
>  Group[  8]: 358
>  Group[  9]: 374
>  Group[ 10]: 426
>  Group[ 11]: 458
>  Group[ 12]: 573
>  Group[ 13]: 697
>  Group[ 14]: 739
>  Group[ 15]: 881
>[2004/05/29 21:31:00, 5, pid=25850] smbd/uid.c:change_to_user(267)
>  change_to_user uid=(4065,4065) gid=(0,15)
>[2004/05/29 21:31:00, 3, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2331)
>  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
>[2004/05/29 21:31:00, 5, pid=25850] smbd/filename.c:unix_convert(114)
>  unix_convert called on file "myhome"
>[2004/05/29 21:31:00, 10, pid=25850] smbd/statcache.c:stat_cache_lookup(281)
>  stat_cache_lookup: lookup succeeded for name [MYHOME] -> [myhome]
>[2004/05/29 21:31:00, 5, pid=25850] smbd/filename.c:unix_convert(177)
>  unix_convert begin: name = myhome, dirpath = , start = myhome
>[2004/05/29 21:31:00, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269)
>  is_mangled myhome ?
>[2004/05/29 21:31:00, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208)
>  is_mangled_component myhome (len 6) ?
>[2004/05/29 21:31:00, 10, pid=25850] smbd/mangle_hash2.c:is_mangled(269)
>  is_mangled myhome ?
>[2004/05/29 21:31:00, 10, pid=25850] smbd/mangle_hash2.c:is_mangled_component(208)
>  is_mangled_component myhome (len 6) ?
>[2004/05/29 21:31:00, 10, pid=25850] modules/vfs_extd_audit.c:audit_opendir(141)
>  vfs_extd_audit: opendir .  
>[2004/05/29 21:31:00, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: myhome
>[2004/05/29 21:31:00, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:31:00, 5, pid=25850] smbd/statcache.c:stat_cache_add(178)
>  stat_cache_add: Added entry MYHOME -> myhome
>[2004/05/29 21:31:00, 5, pid=25850] smbd/filename.c:unix_convert(377)
>  conversion finished myhome -> myhome
>[2004/05/29 21:31:00, 8, pid=25850] lib/util.c:is_in_path(1508)
>  is_in_path: myhome
>[2004/05/29 21:31:00, 8, pid=25850] lib/util.c:is_in_path(1512)
>  is_in_path: no name list.
>[2004/05/29 21:31:00, 3, pid=25850] smbd/trans2.c:call_trans2qfilepathinfo(2353)
>  call_trans2qfilepathinfo: SMB_VFS_STAT of myhome failed (No such file or directory)
>[2004/05/29 21:31:00, 10, pid=25850] smbd/trans2.c:set_bad_path_error(2213)
>  set_bad_path_error: err = 2 bad_path = 0
>[2004/05/29 21:31:00, 3, pid=25850] smbd/error.c:error_packet(94)
>  error string = No such file or directory
>[2004/05/29 21:31:00, 3, pid=25850] smbd/error.c:error_packet(118)
>  error packet at smbd/trans2.c(2219) cmd=50 (SMBtrans2) NT_STATUS_OBJECT_NAME_NOT_FOUND
>[2004/05/29 21:31:00, 5, pid=25850] lib/util.c:show_msg(456)
>[2004/05/29 21:31:00, 5, pid=25850] lib/util.c:show_msg(466)
>  size=35
>  smb_com=0x32
>  smb_rcls=52
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51265
>  smb_tid=1
>  smb_pid=788
>  smb_uid=100
>  smb_mid=3776
>  smt_wct=0
>  smb_bcc=0
>[2004/05/29 21:31:00, 6, pid=25850] lib/util_sock.c:write_socket(432)
>  write_socket(22,39)
>[2004/05/29 21:31:00, 6, pid=25850] lib/util_sock.c:write_socket(435)
>  write_socket(22,39) wrote 39
>[2004/05/29 21:31:08, 10, pid=25850] smbd/process.c:async_processing(122)
>  async_processing: Doing async processing.
>[2004/05/29 21:31:08, 5, pid=25850] smbd/oplock.c:receive_local_message(107)
>  receive_local_message: doing select with timeout of 1 ms
>[2004/05/29 21:31:08, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:31:08, 5, pid=25850] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:31:08, 2, pid=25850] smbd/server.c:exit_server(568)
>  Closing connections
>[2004/05/29 21:31:08, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:31:08, 5, pid=25850] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:31:08, 3, pid=25850] smbd/service.c:close_cnum(801)
>  140.142.110.103 (140.142.110.103) closed connection to service IPC$
>[2004/05/29 21:31:08, 10, pid=25850] modules/vfs_extd_audit.c:audit_disconnect(122)
>  Disconnected from VFS module extd_audit
>[2004/05/29 21:31:08, 3, pid=25850] smbd/connection.c:yield_connection(69)
>  Yielding connection to IPC$
>[2004/05/29 21:31:08, 4, pid=25850] smbd/vfs.c:vfs_ChDir(654)
>  vfs_ChDir to /
>[2004/05/29 21:31:08, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:31:08, 5, pid=25850] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:31:08, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:31:08, 5, pid=25850] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:31:08, 1, pid=25850] smbd/service.c:close_cnum(801)
>  140.142.110.103 (140.142.110.103) closed connection to service nebulahome
>[2004/05/29 21:31:08, 10, pid=25850] modules/vfs_extd_audit.c:audit_disconnect(122)
>  Disconnected from VFS module extd_audit
>[2004/05/29 21:31:08, 3, pid=25850] smbd/connection.c:yield_connection(69)
>  Yielding connection to nebulahome
>[2004/05/29 21:31:08, 3, pid=25850] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_nt_user_token(486)
>  NT user token: (NULL)
>[2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:debug_unix_user_token(505)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2004/05/29 21:31:08, 5, pid=25850] smbd/uid.c:change_to_root_user(282)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2004/05/29 21:31:08, 5, pid=25850] auth/auth_util.c:free_server_info(1324)
>  attempting to free (and zero) a server_info structure
>[2004/05/29 21:31:08, 3, pid=25850] smbd/connection.c:yield_connection(69)
>  Yielding connection to 
>[2004/05/29 21:31:08, 3, pid=25850] smbd/connection.c:yield_connection(76)
>  yield_connection: tdb_delete for name  failed with error Record does not exist.
>[2004/05/29 21:31:08, 5, pid=25850] smbd/oplock.c:receive_local_message(107)
>  receive_local_message: doing select with timeout of 1 ms
>[2004/05/29 21:31:08, 3, pid=25850] smbd/server.c:exit_server(611)
>  Server exit (Caught TERM signal)

Actions: View

Attachments on bug 1406: 529 | 530