[2004/05/29 21:29:39, 6, pid=25769] param/loadparm.c:lp_file_list_changed(2665) lp_file_list_changed() file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf last mod_time: Tue May 25 09:46:28 2004 file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.UNKNOWN.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf last mod_time: Sat May 15 22:32:24 2004 file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/smbd last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/smbd last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf last mod_time: Sat May 29 21:27:30 2004 [2004/05/29 21:29:39, 2, pid=25769] lib/interface.c:add_interface(79) added interface ip=140.142.15.168 bcast=140.142.15.191 nmask=255.255.255.224 [2004/05/29 21:29:39, 2, pid=25769] lib/interface.c:add_interface(79) added interface ip=198.48.88.162 bcast=198.48.88.255 nmask=255.255.255.0 [2004/05/29 21:29:39, 5, pid=25769] lib/hash.c:hash_table_init(67) Hash size = 521. [2004/05/29 21:29:39, 5, pid=25769] lib/util.c:init_names(270) Netbios name list:- my_netbios_names[0]="CANON" [2004/05/29 21:29:39, 3, pid=25769] smbd/server.c:main(787) loaded services [2004/05/29 21:29:39, 3, pid=25769] smbd/server.c:main(802) Becoming a daemon. [2004/05/29 21:29:39, 8, pid=25770] lib/util.c:fcntl_lock(1656) fcntl_lock 6 13 0 1 1 [2004/05/29 21:29:39, 8, pid=25770] lib/util.c:fcntl_lock(1691) fcntl_lock: Lock call successful [2004/05/29 21:29:39, 2, pid=25770] lib/tallocmsg.c:register_msg_pool_usage(57) Registered MSG_REQ_POOL_USAGE [2004/05/29 21:29:39, 2, pid=25770] lib/dmallocmsg.c:register_dmalloc_msgs(71) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2004/05/29 21:29:39, 5, pid=25770] lib/gencache.c:gencache_init(59) Opening cache file at /var/locks/gencache.tdb [2004/05/29 21:29:39, 5, pid=25770] libsmb/namecache.c:namecache_enable(58) namecache_enable: enabling netbios namecache, timeout 660 seconds [2004/05/29 21:29:39, 10, pid=25770] registry/reg_cachehook.c:reghook_cache_add(60) reghook_cache_add: Adding key [/HKLM/SYSTEM/CurrentControlSet/Control/Print] [2004/05/29 21:29:39, 8, pid=25770] lib/adt_tree.c:sorted_tree_add(247) sorted_tree_add: Enter [2004/05/29 21:29:39, 10, pid=25770] lib/adt_tree.c:sorted_tree_add(314) sorted_tree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree [2004/05/29 21:29:39, 8, pid=25770] lib/adt_tree.c:sorted_tree_add(316) sorted_tree_add: Exit [2004/05/29 21:29:39, 10, pid=25770] printing/nt_printing.c:update_c_setprinter(425) update_c_setprinter: c_setprinter = 0 [2004/05/29 21:29:39, 5, pid=25770] smbd/connection.c:claim_connection(170) claiming 0 [2004/05/29 21:29:39, 10, pid=25770] lib/util_sock.c:open_socket_in(700) bind succeeded on port 445 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_KEEPALIVE = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_REUSEADDR = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_BROADCAST = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option TCP_NODELAY = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option IPTOS_LOWDELAY = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option IPTOS_THROUGHPUT = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_SNDBUF = 65536 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_RCVBUF = 87380 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_SNDLOWAT = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_RCVLOWAT = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_SNDTIMEO = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_RCVTIMEO = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_KEEPALIVE = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_REUSEADDR = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_BROADCAST = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option TCP_NODELAY = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option IPTOS_LOWDELAY = 16 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option IPTOS_THROUGHPUT = 16 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_SNDBUF = 65536 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_RCVBUF = 87380 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_SNDLOWAT = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_RCVLOWAT = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_SNDTIMEO = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_RCVTIMEO = 0 [2004/05/29 21:29:39, 10, pid=25770] lib/util_sock.c:open_socket_in(700) bind succeeded on port 139 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_KEEPALIVE = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_REUSEADDR = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_BROADCAST = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option TCP_NODELAY = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option IPTOS_LOWDELAY = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option IPTOS_THROUGHPUT = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_SNDBUF = 65536 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_RCVBUF = 87380 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_SNDLOWAT = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_RCVLOWAT = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_SNDTIMEO = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_RCVTIMEO = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_KEEPALIVE = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_REUSEADDR = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_BROADCAST = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option TCP_NODELAY = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option IPTOS_LOWDELAY = 16 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option IPTOS_THROUGHPUT = 16 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_SNDBUF = 65536 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_RCVBUF = 87380 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_SNDLOWAT = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_RCVLOWAT = 1 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_SNDTIMEO = 0 [2004/05/29 21:29:39, 5, pid=25770] lib/util_sock.c:print_socket_options(130) socket option SO_RCVTIMEO = 0 [2004/05/29 21:29:39, 2, pid=25770] smbd/server.c:open_sockets_smbd(324) waiting for a connection [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_KEEPALIVE = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_REUSEADDR = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_BROADCAST = 0 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option TCP_NODELAY = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option IPTOS_LOWDELAY = 16 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option IPTOS_THROUGHPUT = 16 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_SNDBUF = 65536 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_RCVBUF = 87380 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_SNDLOWAT = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_RCVLOWAT = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_SNDTIMEO = 0 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_RCVTIMEO = 0 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_KEEPALIVE = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_REUSEADDR = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_BROADCAST = 0 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option TCP_NODELAY = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option IPTOS_LOWDELAY = 16 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option IPTOS_THROUGHPUT = 16 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_SNDBUF = 65536 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_RCVBUF = 87380 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_SNDLOWAT = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_RCVLOWAT = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_SNDTIMEO = 0 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_RCVTIMEO = 0 [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_context_list(763) Trying to load: smbpasswd [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend ldapsam [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'ldapsam' [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend ldapsam_compat [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'ldapsam_compat' [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend smbpasswd [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'smbpasswd' [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend tdbsam [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'tdbsam' [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(93) Attempting to register passdb backend guest [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:smb_register_passdb(106) Successfully added passdb backend 'guest' [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_methods_name(648) Attempting to find an passdb backend to match smbpasswd (smbpasswd) [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_methods_name(669) Found pdb backend smbpasswd [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_methods_name(672) pdb backend smbpasswd has a valid init [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_methods_name(648) Attempting to find an passdb backend to match guest (guest) [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_methods_name(669) Found pdb backend guest [2004/05/29 21:29:45, 5, pid=25784] passdb/pdb_interface.c:make_pdb_methods_name(672) pdb backend guest has a valid init [2004/05/29 21:29:45, 6, pid=25784] param/loadparm.c:lp_file_list_changed(2665) lp_file_list_changed() file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf last mod_time: Tue May 25 09:46:28 2004 file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.UNKNOWN.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf last mod_time: Sat May 15 22:32:24 2004 file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf last mod_time: Sat May 29 21:27:30 2004 [2004/05/29 21:29:45, 3, pid=25784] smbd/oplock.c:init_oplocks(1226) open_oplock_ipc: opening loopback UDP socket. [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:open_socket_in(700) bind succeeded on port 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/oplock_linux.c:linux_init_kernel_oplocks(303) Linux kernel oplocks enabled [2004/05/29 21:29:45, 3, pid=25784] smbd/oplock.c:init_oplocks(1257) open_oplock ipc: pid = 25784, global_oplock_port = 37640 [2004/05/29 21:29:45, 4, pid=25784] lib/time.c:get_serverzone(122) Serverzone is 25200 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 133 [2004/05/29 21:29:45, 3, pid=25784] lib/access.c:check_access(313) check_access: no hostnames in host allow/deny list. [2004/05/29 21:29:45, 2, pid=25784] lib/access.c:check_access(324) Allowed connection from (140.142.110.103) [2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889) got message type 0x0 of len 0x85 [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890) Transaction 0 of length 137 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=133 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=98 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [060] 32 00 2. [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685) switch message SMBnegprot (pid 25784) [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(455) Requested protocol [PC NETWORK PROGRAM 1.0] [2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(455) Requested protocol [LANMAN1.0] [2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(455) Requested protocol [Windows for Workgroups 3.1a] [2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(455) Requested protocol [LM1.2X002] [2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(455) Requested protocol [LANMAN2.1] [2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(455) Requested protocol [NT LM 0.12] [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:set_remote_arch(1839) set_remote_arch: Client arch is 'Win2K' [2004/05/29 21:29:45, 6, pid=25784] param/loadparm.c:lp_file_list_changed(2665) lp_file_list_changed() file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf last mod_time: Tue May 25 09:46:28 2004 file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.Win2K.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf last mod_time: Sat May 15 22:32:24 2004 file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf last mod_time: Sat May 29 21:27:30 2004 [2004/05/29 21:29:45, 6, pid=25784] param/loadparm.c:lp_file_list_changed(2665) lp_file_list_changed() file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf last mod_time: Tue May 25 09:46:28 2004 file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.Win2K.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf last mod_time: Sat May 15 22:32:24 2004 file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/140.142.110.103 last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf last mod_time: Sat May 29 21:27:30 2004 [2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_nt1(329) using SPNEGO [2004/05/29 21:29:45, 3, pid=25784] smbd/negprot.c:reply_negprot(532) Selected protocol NT LM 0.12 [2004/05/29 21:29:45, 5, pid=25784] smbd/negprot.c:reply_negprot(538) negprot index=5 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=173 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=47104 (0xB800) smb_vwv[ 8]= 100 (0x64) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=60290 (0xEB82) smb_vwv[13]=65211 (0xFEBB) smb_vwv[14]=50245 (0xC445) smb_vwv[15]=41985 (0xA401) smb_vwv[16]=26625 (0x6801) smb_bcc=104 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 63 61 6E 6F 6E 00 00 00 00 00 00 00 00 00 00 00 canon... ........ [010] 60 56 06 06 2B 06 01 05 05 02 A0 4C 30 4A A0 24 `V..+... .. L0J $ [020] 30 22 06 09 2A 86 48 86 F7 12 01 02 02 06 09 2A 0"..*.H. ÷......* [030] 86 48 82 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H.÷.... ..+..... [040] 37 02 02 0A A3 22 30 20 A0 1E 1B 1C 63 61 6E 6F 7...£"0  ...cano [050] 6E 24 40 4E 45 42 55 4C 41 2E 57 41 53 48 49 4E n$@NEBUL A.WASHIN [060] 47 54 4F 4E 2E 45 44 55 GTON.EDU [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(22,177) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(22,177) wrote 177 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 242 [2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889) got message type 0x0 of len 0xf2 [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890) Transaction 1 of length 246 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=242 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=2432 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 242 (0xF2) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 81 (0x51) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=183 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 60 4F 06 06 2B 06 01 05 05 02 A0 45 30 43 A0 0E `O..+... .. E0C . [010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 31 0...+... ..7...¢1 [020] 04 2F 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 B2 ./NTLMSS P......² [030] 08 E0 06 00 06 00 29 00 00 00 09 00 09 00 20 00 .à....). ...... . [040] 00 00 4B 4C 45 45 4E 45 58 5F 51 4E 45 42 55 4C ..KLEENE X_QNEBUL [050] 41 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 AW.i.n.d .o.w.s. [060] 00 32 00 30 00 30 00 32 00 20 00 53 00 65 00 72 .2.0.0.2 . .S.e.r [070] 00 76 00 69 00 63 00 65 00 20 00 50 00 61 00 63 .v.i.c.e . .P.a.c [080] 00 6B 00 20 00 31 00 20 00 32 00 36 00 30 00 30 .k. .1. .2.6.0.0 [090] 00 00 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 ...W.i.n .d.o.w.s [0A0] 00 20 00 32 00 30 00 30 00 32 00 20 00 35 00 2E . .2.0.0 .2. .5.. [0B0] 00 31 00 00 00 00 00 .1..... [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685) switch message SMBsesssetupX (pid 25784) [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_sesssetup_and_X(649) wct=12 flg2=0xc807 [2004/05/29 21:29:45, 2, pid=25784] smbd/sesssetup.c:setup_new_vc_session(602) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(529) Doing spnego session setup [2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(560) NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:set_remote_arch(1839) set_remote_arch: Client arch is 'WinXP' [2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_spnego_negotiate(438) Got OID 1 3 6 1 4 1 311 2 2 10 [2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_spnego_negotiate(441) Got secblob of size 47 [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:make_auth_context_subsystem(498) Making default auth method list for security=ADS [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45) Attempting to register auth backend rhosts [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57) Successfully added auth method 'rhosts' [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45) Attempting to register auth backend hostsequiv [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57) Successfully added auth method 'hostsequiv' [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam' [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45) Attempting to register auth backend sam_ignoredomain [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57) Successfully added auth method 'sam_ignoredomain' [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45) Attempting to register auth backend unix [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57) Successfully added auth method 'unix' [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45) Attempting to register auth backend winbind [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57) Successfully added auth method 'winbind' [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45) Attempting to register auth backend smbserver [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57) Successfully added auth method 'smbserver' [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45) Attempting to register auth backend trustdomain [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57) Successfully added auth method 'trustdomain' [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45) Attempting to register auth backend ntdomain [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57) Successfully added auth method 'ntdomain' [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(45) Attempting to register auth backend guest [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:smb_register_auth(57) Successfully added auth method 'guest' [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(384) load_auth_module: Attempting to find an auth method to match guest [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(409) load_auth_module: auth method guest has a valid init [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(384) load_auth_module: Attempting to find an auth method to match sam [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(409) load_auth_module: auth method sam has a valid init [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(384) load_auth_module: Attempting to find an auth method to match winbind:ntdomain [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(384) load_auth_module: Attempting to find an auth method to match ntdomain [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(409) load_auth_module: auth method ntdomain has a valid init [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:load_auth_module(409) load_auth_module: auth method winbind has a valid init [2004/05/29 21:29:45, 3, pid=25784] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0xe008b297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module guest did not want to specify a challenge [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module sam did not want to specify a challenge [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:get_ntlm_challenge(95) auth_get_challenge: module winbind did not want to specify a challenge [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:get_ntlm_challenge(135) auth_context challenge created by random [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:get_ntlm_challenge(136) challenge is: [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:dump_data(1864) [000] F9 33 FE 5D F2 6D DD 56 ù3þ]òmÝV [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(22,312) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(22,312) wrote 312 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 342 [2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889) got message type 0x0 of len 0x156 [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890) Transaction 2 of length 346 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=342 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=2496 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 342 (0x156) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 180 (0xB4) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=283 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] A1 81 B1 30 81 AE A2 81 AB 04 81 A8 4E 54 4C 4D ¡.±0.®¢. «..¨NTLM [010] 53 53 50 00 03 00 00 00 18 00 18 00 68 00 00 00 SSP..... ....h... [020] 18 00 18 00 80 00 00 00 0C 00 0C 00 40 00 00 00 ........ ....@... [030] 0A 00 0A 00 4C 00 00 00 12 00 12 00 56 00 00 00 ....L... ....V... [040] 10 00 10 00 98 00 00 00 15 82 88 60 4E 00 45 00 ........ ...`N.E. [050] 42 00 55 00 4C 00 41 00 65 00 72 00 69 00 63 00 B.U.L.A. e.r.i.c. [060] 68 00 4B 00 4C 00 45 00 45 00 4E 00 45 00 58 00 h.K.L.E. E.N.E.X. [070] 5F 00 51 00 57 FB 97 5A A1 F8 65 7E 00 00 00 00 _.Q.Wû.Z ¡øe~.... [080] 00 00 00 00 00 00 00 00 00 00 00 00 15 25 24 F5 ........ .....%$õ [090] 9B DC 9C 11 7B 84 0C CE 41 94 1F E7 28 61 89 BA .Ü..{..Î A..ç(a.º [0A0] 87 E5 38 8C E1 4D 05 E4 B3 49 C7 C5 04 EF FC F1 .å8.áM.ä ³IÇÅ.ïüñ [0B0] 20 DF 2D 66 00 57 00 69 00 6E 00 64 00 6F 00 77 ß-f.W.i .n.d.o.w [0C0] 00 73 00 20 00 32 00 30 00 30 00 32 00 20 00 53 .s. .2.0 .0.2. .S [0D0] 00 65 00 72 00 76 00 69 00 63 00 65 00 20 00 50 .e.r.v.i .c.e. .P [0E0] 00 61 00 63 00 6B 00 20 00 31 00 20 00 32 00 36 .a.c.k. .1. .2.6 [0F0] 00 30 00 30 00 00 00 57 00 69 00 6E 00 64 00 6F .0.0...W .i.n.d.o [100] 00 77 00 73 00 20 00 32 00 30 00 30 00 32 00 20 .w.s. .2 .0.0.2. [110] 00 35 00 2E 00 31 00 00 00 00 00 .5...1.. ... [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685) switch message SMBsesssetupX (pid 25784) [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_sesssetup_and_X(649) wct=12 flg2=0xc807 [2004/05/29 21:29:45, 2, pid=25784] smbd/sesssetup.c:setup_new_vc_session(602) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(529) Doing spnego session setup [2004/05/29 21:29:45, 3, pid=25784] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(560) NativeOS=[Windows 2002 Service Pack 1 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2004/05/29 21:29:45, 3, pid=25784] libsmb/ntlmssp.c:ntlmssp_server_auth(615) Got user=[erich] domain=[NEBULA] workstation=[KLEENEX_Q] len1=24 len2=24 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(66) auth_context challenge set by NTLMSSP callback (NTLM2) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_ntlmssp.c:auth_ntlmssp_set_challenge(67) challenge is: [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:dump_data(1864) [000] F7 45 18 E1 AA 9A A2 96 ÷E.áª.¢. [2004/05/29 21:29:45, 6, pid=25784] param/loadparm.c:lp_file_list_changed(2665) lp_file_list_changed() file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf last mod_time: Tue May 25 09:46:28 2004 file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.WinXP.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf last mod_time: Sat May 15 22:32:24 2004 file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/kleenex_q last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/kleenex_q last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf last mod_time: Sat May 29 21:27:30 2004 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:make_user_info_map(225) make_user_info_map: Mapping user [NEBULA]\[erich] from workstation [KLEENEX_Q] [2004/05/29 21:29:45, 10, pid=25784] lib/gencache.c:gencache_get(264) Returning valid cache entry: key = TDOMCACHE/TIMESTAMP, value = 1085890806, timeout = Sat May 29 21:30:06 2004 [2004/05/29 21:29:45, 10, pid=25784] libsmb/trustdom_cache.c:update_trustdom_cache(309) update_trustdom_cache: not time to update trustdom_cache yet [2004/05/29 21:29:45, 10, pid=25784] lib/gencache.c:gencache_get(286) Cache entry with key = TDOM/NEBULA couldn't be found [2004/05/29 21:29:45, 5, pid=25784] libsmb/trustdom_cache.c:trustdom_cache_fetch(172) no entry for trusted domain NEBULA found. [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:make_user_info(133) attempting to make a user_info for erich (erich) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:make_user_info(143) making strings for erich's user_info struct [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:make_user_info(185) making blobs for erich's user_info struct [2004/05/29 21:29:45, 10, pid=25784] auth/auth_util.c:make_user_info(201) made an encrypted user_info for erich (erich) [2004/05/29 21:29:45, 3, pid=25784] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user [NEBULA]\[erich]@[KLEENEX_Q] with the new password interface [2004/05/29 21:29:45, 3, pid=25784] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: [NEBULA]\[erich]@[KLEENEX_Q] [2004/05/29 21:29:45, 10, pid=25784] auth/auth.c:check_ntlm_password(231) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2004/05/29 21:29:45, 10, pid=25784] auth/auth.c:check_ntlm_password(233) challenge is: [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:dump_data(1864) [000] F7 45 18 E1 AA 9A A2 96 ÷E.áª.¢. [2004/05/29 21:29:45, 10, pid=25784] auth/auth.c:check_ntlm_password(259) check_ntlm_password: guest had nothing to say [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_myname(1712) is_myname("NEBULA") returns 0 [2004/05/29 21:29:45, 6, pid=25784] auth/auth_sam.c:check_samstrict_security(310) check_samstrict_security: NEBULA is not one of my local names (ROLE_DOMAIN_MEMBER) [2004/05/29 21:29:45, 10, pid=25784] auth/auth.c:check_ntlm_password(259) check_ntlm_password: sam had nothing to say [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 4, pid=25784] passdb/secrets.c:secrets_fetch_trust_account_password(261) Using cleartext machine password [2004/05/29 21:29:45, 4, pid=25784] libsmb/namequery_dc.c:ads_dc_name(43) ads_dc_name: domain=NEBULA [2004/05/29 21:29:45, 6, pid=25784] libads/ldap.c:ads_find_dc(147) ads_find_dc: looking for realm 'NEBULA.WASHINGTON.EDU' [2004/05/29 21:29:45, 8, pid=25784] libsmb/namequery.c:get_sorted_dc_list(1402) get_sorted_dc_list: attempting lookup using [ads] [2004/05/29 21:29:45, 10, pid=25784] libsmb/namequery.c:internal_resolve_name(1013) internal_resolve_name: looking up NEBULA.WASHINGTON.EDU#1c [2004/05/29 21:29:45, 10, pid=25784] lib/gencache.c:gencache_get(264) Returning valid cache entry: key = NBT/NEBULA.WASHINGTON.EDU#1C, value = 172.22.2.4:389,140.142.3.131:389,140.142.15.166:389,140.142.3.72:389, timeout = Sat May 29 21:31:06 2004 [2004/05/29 21:29:45, 5, pid=25784] libsmb/namecache.c:namecache_fetch(201) name NEBULA.WASHINGTON.EDU#1C found. [2004/05/29 21:29:45, 8, pid=25784] libsmb/namequery.c:get_dc_list(1300) Adding 4 DC's from auto lookup [2004/05/29 21:29:45, 10, pid=25784] libsmb/namequery.c:remove_duplicate_addrs2(319) remove_duplicate_addrs2: looking for duplicate address/port pairs [2004/05/29 21:29:45, 4, pid=25784] libsmb/namequery.c:get_dc_list(1376) get_dc_list: returning 4 ip addresses in an unordered list [2004/05/29 21:29:45, 4, pid=25784] libsmb/namequery.c:get_dc_list(1377) get_dc_list: 172.22.2.4:389 140.142.3.131:389 140.142.15.166:389 140.142.3.72:389 [2004/05/29 21:29:45, 5, pid=25784] libads/ldap.c:ads_try_connect(56) ads_try_connect: trying ldap server '140.142.15.166' port 389 [2004/05/29 21:29:45, 3, pid=25784] libads/ldap.c:ads_connect(218) Connected to LDAP server 140.142.15.166 [2004/05/29 21:29:45, 3, pid=25784] libads/ldap.c:ads_server_info(2029) got ldap server name lagoon@NEBULA.WASHINGTON.EDU, using bind path: dc=NEBULA,dc=WASHINGTON,dc=EDU [2004/05/29 21:29:45, 4, pid=25784] libads/ldap.c:ads_server_info(2035) time offset is 0 seconds [2004/05/29 21:29:45, 4, pid=25784] libsmb/namequery_dc.c:ads_dc_name(63) ads_dc_name: using server='LAGOON' IP=140.142.15.166 [2004/05/29 21:29:45, 10, pid=25784] passdb/secrets.c:secrets_named_mutex(704) secrets_named_mutex: got mutex for LAGOON [2004/05/29 21:29:45, 3, pid=25784] libsmb/cliconnect.c:cli_start_connection(1373) Connecting to host=LAGOON [2004/05/29 21:29:45, 3, pid=25784] lib/util_sock.c:open_socket_out(735) Connecting to 140.142.15.166 at port 445 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_KEEPALIVE = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_REUSEADDR = 0 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_BROADCAST = 0 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option TCP_NODELAY = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option IPTOS_LOWDELAY = 16 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option IPTOS_THROUGHPUT = 16 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_SNDBUF = 65536 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_RCVBUF = 87380 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_SNDLOWAT = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_RCVLOWAT = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_SNDTIMEO = 0 [2004/05/29 21:29:45, 5, pid=25784] lib/util_sock.c:print_socket_options(130) socket option SO_RCVTIMEO = 0 [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,183) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,183) wrote 183 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 186 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=186 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=25784 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 243 (0xF3) smb_vwv[11]= 640 (0x280) smb_vwv[12]=64392 (0xFB88) smb_vwv[13]=65211 (0xFEBB) smb_vwv[14]=50245 (0xC445) smb_vwv[15]=41985 (0xA401) smb_vwv[16]= 1 (0x1) smb_bcc=117 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] E8 8A 41 85 CC 49 D5 47 A1 84 26 CA E8 65 2A 55 è.A.ÌIÕG ¡.&Êèe*U [010] 60 63 06 06 2B 06 01 05 05 02 A0 59 30 57 A0 30 `c..+... .. Y0W 0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. ÷......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H.÷.... ..*.H.÷. [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 23 30 21 A0 1F 1B 1D 6C 61 67 6F 6F 6E 24 40 £#0! ... lagoon$@ [060] 4E 45 42 55 4C 41 2E 57 41 53 48 49 4E 47 54 4F NEBULA.W ASHINGTO [070] 4E 2E 45 44 55 N.EDU [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=186 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=25784 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]= 243 (0xF3) smb_vwv[11]= 640 (0x280) smb_vwv[12]=64392 (0xFB88) smb_vwv[13]=65211 (0xFEBB) smb_vwv[14]=50245 (0xC445) smb_vwv[15]=41985 (0xA401) smb_vwv[16]= 1 (0x1) smb_bcc=117 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] E8 8A 41 85 CC 49 D5 47 A1 84 26 CA E8 65 2A 55 è.A.ÌIÕG ¡.&Êèe*U [010] 60 63 06 06 2B 06 01 05 05 02 A0 59 30 57 A0 30 `c..+... .. Y0W 0 [020] 30 2E 06 09 2A 86 48 82 F7 12 01 02 02 06 09 2A 0...*.H. ÷......* [030] 86 48 86 F7 12 01 02 02 06 0A 2A 86 48 86 F7 12 .H.÷.... ..*.H.÷. [040] 01 02 02 03 06 0A 2B 06 01 04 01 82 37 02 02 0A ......+. ....7... [050] A3 23 30 21 A0 1F 1B 1D 6C 61 67 6F 6F 6E 24 40 £#0! ... lagoon$@ [060] 4E 45 42 55 4C 41 2E 57 41 53 48 49 4E 47 54 4F NEBULA.W ASHINGTO [070] 4E 2E 45 44 55 N.EDU [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,92) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,92) wrote 92 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 129 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=129 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=25784 smb_uid=4097 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 129 (0x81) smb_vwv[ 2]= 0 (0x0) smb_bcc=88 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 15 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n [040] 00 61 00 67 00 65 00 72 00 00 00 4E 00 45 00 42 .a.g.e.r ...N.E.B [050] 00 55 00 4C 00 41 00 00 .U.L.A.. [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=129 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=25784 smb_uid=4097 smb_mid=2 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 129 (0x81) smb_vwv[ 2]= 0 (0x0) smb_bcc=88 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 15 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 20 .W.i.n.d .o.w.s. [010] 00 35 00 2E 00 30 00 00 00 57 00 69 00 6E 00 64 .5...0.. .W.i.n.d [020] 00 6F 00 77 00 73 00 20 00 32 00 30 00 30 00 30 .o.w.s. .2.0.0.0 [030] 00 20 00 4C 00 41 00 4E 00 20 00 4D 00 61 00 6E . .L.A.N . .M.a.n [040] 00 61 00 67 00 65 00 72 00 00 00 4E 00 45 00 42 .a.g.e.r ...N.E.B [050] 00 55 00 4C 00 41 00 00 .U.L.A.. [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,80) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,80) wrote 80 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 48 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=48 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=3 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 48 (0x30) smb_vwv[ 2]= 1 (0x1) smb_bcc=7 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 49 50 43 00 00 00 00 IPC.... [2004/05/29 21:29:45, 10, pid=25784] libsmb/clientgen.c:cli_init_creds(212) cli_init_creds: user domain [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,108) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,108) wrote 108 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 103 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=4 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 320 (0x140) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_pipe_bind(1305) Bind RPC Pipe[4000]: \PIPE\NETLOGON [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:valid_pipe_name(1203) Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4.Í« ï..#EgÏû [010] 01 00 00 00 .... [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:valid_pipe_name(1206) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]..ë.É. .è..+.H` [010] 02 00 00 00 .... [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0b [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0048 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_rb [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_bba [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0010 max_tsize: 10b8 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0012 max_rsize: 10b8 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0014 assoc_gid: 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0018 num_elements: 00000001 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 001c context_id : 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 001e num_syntaxes: 01 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 00001f smb_io_rpc_iface [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0020 data : 12345678 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0024 data : 1234 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0026 data : abcd [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0028 data : ef 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 002a data : 01 23 45 67 cf fb [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0030 version: 00000001 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000034 smb_io_rpc_iface [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000034 smb_io_uuid uuid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0034 data : 8a885d04 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0038 data : 1ceb [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 003a data : 11c9 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 003c data : 9f e8 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 003e data : 08 00 2b 10 48 60 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0044 version: 00000002 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(410) rpc_api_pipe: fnum:4000 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=5 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16384 (0x4000) smb_bcc=87 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H .......¸ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 .¸...... .......x [030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.Í«ï ..#EgÏû. [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]..ë .É..è..+ [050] 10 48 60 02 00 00 00 .H`.... [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,158) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,158) wrote 158 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 124 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 0D 57 26 01 0C 00 5C 50 49 50 45 .¸.¸..W& ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..ë.É ..è..+.H [040] 60 02 00 00 00 `.... [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=5 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [010] 00 B8 10 B8 10 0D 57 26 01 0C 00 5C 50 49 50 45 .¸.¸..W& ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..ë.É ..è..+.H [040] 60 02 00 00 00 `.... [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_check_hdr(134) rpc_check_hdr: rdata->data_size = 68 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr rpc_hdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0044 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000001 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(483) rpc_api_pipe: len left: 0 smbtrans read: 68 [2004/05/29 21:29:45, 6, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(525) rpc_api_pipe: fragment first and last both set [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_pipe_bind(1381) rpc_pipe_bind: rpc_api_pipe returned OK. [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_ba [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_bba [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0010 max_tsize: 10b8 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0012 max_rsize: 10b8 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0014 assoc_gid: 0126570d [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_rpc_addr_str [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0018 len: 000c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 001a str: \PIPE\lsass. [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000026 smb_io_rpc_results [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0028 num_results: 01 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 002c result : 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 002e reason : 0000 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_rpc_iface [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_uuid uuid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0030 data : 8a885d04 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0034 data : 1ceb [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0036 data : 11c9 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0038 data : 9f e8 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 003a data : 08 00 2b 10 48 60 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0040 version: 00000002 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:check_bind_response(1257) bind_rpc_pipe: accepted! [2004/05/29 21:29:45, 4, pid=25784] rpc_client/cli_netlogon.c:cli_net_req_chal(45) cli_net_req_chal: LSA Request Challenge from CANON to LAGOON: 46D9822322981BA9 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_net.c:init_q_req_chal(621) init_q_req_chal: 621 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_net.c:init_q_req_chal(630) init_q_req_chal: 630 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 net_io_q_req_chal [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0000 undoc_buffer: 00000001 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0004 uni_max_len: 00000009 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0008 offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c uni_str_len: 00000009 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0010 buffer : \.\.L.A.G.O.O.N... [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000022 smb_io_unistr2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0024 uni_max_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0028 offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 002c uni_str_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0030 buffer : C.A.N.O.N... [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 00003c smb_io_chal [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 003c data: 46 d9 82 23 22 98 1b a9 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:create_rpc_request(841) create_rpc_request: opnum: 0x4 data_len: 0x5c [2004/05/29 21:29:45, 10, pid=25784] rpc_client/cli_pipe.c:create_rpc_request(858) create_rpc_request: data_len: 5c auth_len: 0 alloc_hint: 4c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 005c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000002 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_req hdr_req [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 0000004c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0016 opnum : 0004 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(410) rpc_api_pipe: fnum:4000 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=174 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 92 (0x5C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 92 (0x5C) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16384 (0x4000) smb_bcc=107 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 5C 00 00 00 02 00 00 00 4C .......\ .......L [020] 00 00 00 00 00 04 00 01 00 00 00 09 00 00 00 00 ........ ........ [030] 00 00 00 09 00 00 00 5C 00 5C 00 4C 00 41 00 47 .......\ .\.L.A.G [040] 00 4F 00 4F 00 4E 00 00 00 00 00 06 00 00 00 00 .O.O.N.. ........ [050] 00 00 00 06 00 00 00 43 00 41 00 4E 00 4F 00 4E .......C .A.N.O.N [060] 00 00 00 46 D9 82 23 22 98 1B A9 ...FÙ.#" ..© [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,178) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,178) wrote 178 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 92 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 05 00 02 03 10 00 00 00 24 00 00 00 02 00 00 ........ .$...... [010] 00 0C 00 00 00 00 00 00 00 46 8C 84 7C 5E 98 06 ........ .F..|^.. [020] 68 00 00 00 00 h.... [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=92 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 36 (0x24) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 36 (0x24) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=37 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 05 00 02 03 10 00 00 00 24 00 00 00 02 00 00 ........ .$...... [010] 00 0C 00 00 00 00 00 00 00 46 8C 84 7C 5E 98 06 ........ .F..|^.. [020] 68 00 00 00 00 h.... [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_check_hdr(134) rpc_check_hdr: rdata->data_size = 36 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr rpc_hdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0024 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000002 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 0000000c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(483) rpc_api_pipe: len left: 0 smbtrans read: 36 [2004/05/29 21:29:45, 6, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(525) rpc_api_pipe: fragment first and last both set [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000018 net_io_r_req_chal [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_chal [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0018 data: 46 8c 84 7c 5e 98 06 68 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_ntstatus(665) 0020 status: NT_STATUS_OK [2004/05/29 21:29:45, 4, pid=25784] libsmb/credentials.c:cred_session_key(59) cred_session_key [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_session_key(61) clnt_chal: 46D9822322981BA9 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_session_key(62) srv_chal : 468C847C5E980668 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_session_key(63) clnt+srv : 8C6507A080302211 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_session_key(64) sess_key : 697D9E5A8F985D1A [2004/05/29 21:29:45, 4, pid=25784] libsmb/credentials.c:cred_create(90) cred_create [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(92) sess_key : 697D9E5A8F985D1A [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(93) stor_cred: 46D9822322981BA9 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(94) timestamp: 0 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(95) timecred : 46D9822322981BA9 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(96) calc_cred: 64A5EC4A228AB957 [2004/05/29 21:29:45, 4, pid=25784] rpc_client/cli_netlogon.c:cli_net_auth2(102) cli_net_auth2: srv:\\LAGOON acct:CANON$ sc:2 mc: CANON chal 64A5EC4A228AB957 neg: 400701ff [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_net.c:init_q_auth_2(742) init_q_auth_2: 742 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_misc.c:init_log_info(1336) make_log_info 1336 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_net.c:init_q_auth_2(748) init_q_auth_2: 748 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 net_io_q_auth_2 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_log_info [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0000 undoc_buffer: 00000001 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 unistr2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0004 uni_max_len: 00000009 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0008 offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c uni_str_len: 00000009 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0010 buffer : \.\.L.A.G.O.O.N... [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000022 smb_io_unistr2 unistr2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0024 uni_max_len: 00000007 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0028 offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 002c uni_str_len: 00000007 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0030 buffer : C.A.N.O.N.$... [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 003e sec_chan: 0002 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000040 smb_io_unistr2 unistr2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0040 uni_max_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0044 offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0048 uni_str_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 004c buffer : C.A.N.O.N... [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000058 smb_io_chal [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0058 data: 64 a5 ec 4a 22 8a b9 57 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000060 net_io_neg_flags [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0060 neg_flags: 400701ff [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:create_rpc_request(841) create_rpc_request: opnum: 0xf data_len: 0x7c [2004/05/29 21:29:45, 10, pid=25784] rpc_client/cli_pipe.c:create_rpc_request(858) create_rpc_request: data_len: 7c auth_len: 0 alloc_hint: 6c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 007c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000003 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_req hdr_req [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 0000006c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0016 opnum : 000f [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(410) rpc_api_pipe: fnum:4000 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=206 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 124 (0x7C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 124 (0x7C) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16384 (0x4000) smb_bcc=139 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 7C 00 00 00 03 00 00 00 6C .......| .......l [020] 00 00 00 00 00 0F 00 01 00 00 00 09 00 00 00 00 ........ ........ [030] 00 00 00 09 00 00 00 5C 00 5C 00 4C 00 41 00 47 .......\ .\.L.A.G [040] 00 4F 00 4F 00 4E 00 00 00 00 00 07 00 00 00 00 .O.O.N.. ........ [050] 00 00 00 07 00 00 00 43 00 41 00 4E 00 4F 00 4E .......C .A.N.O.N [060] 00 24 00 00 00 02 00 06 00 00 00 00 00 00 00 06 .$...... ........ [070] 00 00 00 43 00 41 00 4E 00 4F 00 4E 00 00 00 64 ...C.A.N .O.N...d [080] A5 EC 4A 22 8A B9 57 FF 01 07 40 ¥ìJ".¹Wÿ ..@ [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,210) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,210) wrote 210 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 96 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 ........ .(...... [010] 00 10 00 00 00 00 00 00 00 EE 13 21 63 E9 BB 0C ........ .î.!cé». [020] E8 FF 01 07 40 00 00 00 00 èÿ..@... . [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 40 (0x28) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 40 (0x28) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 05 00 02 03 10 00 00 00 28 00 00 00 03 00 00 ........ .(...... [010] 00 10 00 00 00 00 00 00 00 EE 13 21 63 E9 BB 0C ........ .î.!cé». [020] E8 FF 01 07 40 00 00 00 00 èÿ..@... . [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_check_hdr(134) rpc_check_hdr: rdata->data_size = 40 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr rpc_hdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0028 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000003 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00000010 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(483) rpc_api_pipe: len left: 0 smbtrans read: 40 [2004/05/29 21:29:45, 6, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(525) rpc_api_pipe: fragment first and last both set [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000018 net_io_r_auth_2 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_chal [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0018 data: ee 13 21 63 e9 bb 0c e8 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000020 net_io_neg_flags [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0020 neg_flags: 400701ff [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_ntstatus(665) 0024 status: NT_STATUS_OK [2004/05/29 21:29:45, 4, pid=25784] libsmb/credentials.c:cred_create(90) cred_create [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(92) sess_key : 697D9E5A8F985D1A [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(93) stor_cred: 468C847C5E980668 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(94) timestamp: 0 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(95) timecred : 468C847C5E980668 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(96) calc_cred: EE132163E9BB0CE8 [2004/05/29 21:29:45, 4, pid=25784] libsmb/credentials.c:cred_assert(121) cred_assert [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_assert(123) challenge : EE132163E9BB0CE8 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_assert(124) calculated: EE132163E9BB0CE8 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_assert(128) credentials check ok [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,108) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,108) wrote 108 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 103 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=103 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=8 smt_wct=34 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 103 (0x67) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 320 (0x140) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 0 (0x0) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 0 (0x0) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]=32768 (0x8000) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_vwv[24]= 16 (0x10) smb_vwv[25]= 0 (0x0) smb_vwv[26]= 0 (0x0) smb_vwv[27]= 0 (0x0) smb_vwv[28]= 0 (0x0) smb_vwv[29]= 0 (0x0) smb_vwv[30]= 0 (0x0) smb_vwv[31]= 512 (0x200) smb_vwv[32]=65280 (0xFF00) smb_vwv[33]= 5 (0x5) smb_bcc=0 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_pipe_bind(1305) Bind RPC Pipe[4001]: \PIPE\NETLOGON [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:valid_pipe_name(1203) Bind Abstract Syntax: [000] 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB xV4.4.Í« ï..#EgÏû [010] 01 00 00 00 .... [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:valid_pipe_name(1206) Bind Transfer Syntax: [000] 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 60 .]..ë.É. .è..+.H` [010] 02 00 00 00 .... [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_auth hdr_auth [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0000 auth_type : 44 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0001 auth_level : 06 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0002 padding : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0003 reserved : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0004 auth_context : 00000001 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_auth_netsec_neg netsec_neg [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0008 type1: 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c type2: 00000003 [2004/05/29 21:29:45, 6, pid=25784] lib/util.c:dump_data(1864) [000] 4E 45 42 55 4C 41 NEBULA [2004/05/29 21:29:45, 6, pid=25784] lib/util.c:dump_data(1864) [000] 43 41 4E 4F 4E CANON [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0b [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0065 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0015 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000004 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_rb [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_bba [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0010 max_tsize: 10b8 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0012 max_rsize: 10b8 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0014 assoc_gid: 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0018 num_elements: 00000001 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 001c context_id : 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 001e num_syntaxes: 01 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 00001f smb_io_rpc_iface [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_uuid uuid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0020 data : 12345678 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0024 data : 1234 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0026 data : abcd [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0028 data : ef 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 002a data : 01 23 45 67 cf fb [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0030 version: 00000001 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000034 smb_io_rpc_iface [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000034 smb_io_uuid uuid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0034 data : 8a885d04 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0038 data : 1ceb [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 003a data : 11c9 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 003c data : 9f e8 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 003e data : 08 00 2b 10 48 60 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0044 version: 00000002 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(410) rpc_api_pipe: fnum:4001 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=183 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=9 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 101 (0x65) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 101 (0x65) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16385 (0x4001) smb_bcc=116 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 0B 03 10 00 00 00 65 00 15 00 04 00 00 00 B8 .......e .......¸ [020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 78 .¸...... .......x [030] 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 V4.4.Í«ï ..#EgÏû. [040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]..ë .É..è..+ [050] 10 48 60 02 00 00 00 44 06 00 00 01 00 00 00 00 .H`....D ........ [060] 00 00 00 03 00 00 00 4E 45 42 55 4C 41 00 43 41 .......N EBULA.CA [070] 4E 4F 4E 00 NON. [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,187) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,187) wrote 187 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 144 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 88 (0x58) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 88 (0x58) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=89 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 05 00 0C 03 10 00 00 00 58 00 0C 00 04 00 00 ........ .X...... [010] 00 B8 10 B8 10 0E 57 26 01 0C 00 5C 50 49 50 45 .¸.¸..W& ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..ë.É ..è..+.H [040] 60 02 00 00 00 44 06 00 00 01 00 00 00 01 00 00 `....D.. ........ [050] 00 00 00 00 00 00 00 54 00 .......T . [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=144 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=9 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 88 (0x58) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 88 (0x58) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=89 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 05 00 0C 03 10 00 00 00 58 00 0C 00 04 00 00 ........ .X...... [010] 00 B8 10 B8 10 0E 57 26 01 0C 00 5C 50 49 50 45 .¸.¸..W& ...\PIPE [020] 5C 6C 73 61 73 73 00 00 00 01 00 00 00 00 00 00 \lsass.. ........ [030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..ë.É ..è..+.H [040] 60 02 00 00 00 44 06 00 00 01 00 00 00 01 00 00 `....D.. ........ [050] 00 00 00 00 00 00 00 54 00 .......T . [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_check_hdr(134) rpc_check_hdr: rdata->data_size = 88 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr rpc_hdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 0c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0058 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 000c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000004 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(483) rpc_api_pipe: len left: 0 smbtrans read: 88 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_auth_pipe(212) rpc_auth_pipe: pkt_type: 12 len: 88 auth_len: 12 NTLMSSP No schannel Yes sign Yes seal Yes [2004/05/29 21:29:45, 10, pid=25784] rpc_client/cli_pipe.c:rpc_auth_pipe(219) rpc_auth_pipe: packet: [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_auth auth_hdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0000 auth_type : 44 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0001 auth_level : 06 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0002 padding : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0003 reserved : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0004 auth_context : 00000001 [2004/05/29 21:29:45, 6, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(525) rpc_api_pipe: fragment first and last both set [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_pipe_bind(1381) rpc_pipe_bind: rpc_api_pipe returned OK. [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_ba [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_bba [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0010 max_tsize: 10b8 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0012 max_rsize: 10b8 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0014 assoc_gid: 0126570e [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_rpc_addr_str [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0018 len: 000c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 001a str: \PIPE\lsass. [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000026 smb_io_rpc_results [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0028 num_results: 01 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 002c result : 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 002e reason : 0000 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_rpc_iface [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_uuid uuid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0030 data : 8a885d04 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0034 data : 1ceb [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0036 data : 11c9 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0038 data : 9f e8 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 003a data : 08 00 2b 10 48 60 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0040 version: 00000002 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:check_bind_response(1257) bind_rpc_pipe: accepted! [2004/05/29 21:29:45, 4, pid=25784] libsmb/credentials.c:cred_create(90) cred_create [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(92) sess_key : 697D9E5A8F985D1A [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(93) stor_cred: 64A5EC4A228AB957 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(94) timestamp: 40b96339 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(95) timecred : 9D08A68B228AB957 [2004/05/29 21:29:45, 5, pid=25784] libsmb/credentials.c:cred_create(96) calc_cred: 893AD686CDC190EB [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_net.c:init_id_info2(1125) init_id_info2: 1125 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_misc.c:init_logon_id(1515) make_logon_id: 1515 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_net.c:init_sam_info(1231) init_sam_info: 1231 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_misc.c:init_clnt_info2(1430) make_clnt_info: 1430 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_misc.c:init_clnt_srv(1275) init_clnt_srv: 1275 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 net_io_q_sam_logon [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_sam_info [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_clnt_info2 [2004/05/29 21:29:45, 8, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_clnt_srv [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0000 undoc_buffer : 00000001 [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000004 smb_io_unistr2 unistr2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0004 uni_max_len: 00000009 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0008 offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c uni_str_len: 00000009 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0010 buffer : \.\.L.A.G.O.O.N... [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0024 undoc_buffer2: 00000001 [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000028 smb_io_unistr2 unistr2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0028 uni_max_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 002c offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0030 uni_str_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0034 buffer : C.A.N.O.N... [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0040 ptr_cred: 00000001 [2004/05/29 21:29:45, 8, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000044 smb_io_cred [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000044 smb_io_chal [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0044 data: 89 3a d6 86 cd c1 90 eb [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 00004c smb_io_utime [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 004c time: 40b96339 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0050 ptr_rtn_cred : 00000001 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000054 smb_io_cred [2004/05/29 21:29:45, 8, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000054 smb_io_chal [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0054 data: 00 00 00 00 00 00 00 00 [2004/05/29 21:29:45, 8, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 00005c smb_io_utime [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 005c time: 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0060 logon_level : 0002 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000062 smb_io_sam_info logon_info [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0062 switch_value : 0002 [2004/05/29 21:29:45, 8, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000064 net_io_id_info2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0064 ptr_id_info2: 00000001 [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000068 smb_io_unihdr unihdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0068 uni_str_len: 000c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 006a uni_max_len: 000c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 006c buffer : 00000001 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0070 param_ctrl: 00000000 [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000074 smb_io_logon_id [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0074 low : 0000dead [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0078 high: 0000beef [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 00007c smb_io_unihdr unihdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 007c uni_str_len: 000a [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 007e uni_max_len: 000a [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0080 buffer : 00000001 [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000084 smb_io_unihdr unihdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0084 uni_str_len: 0016 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0086 uni_max_len: 0016 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0088 buffer : 00000001 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 008c lm_chal: f7 45 18 e1 aa 9a a2 96 [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000094 smb_io_strhdr hdr_nt_chal_resp [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0094 str_str_len: 0018 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0096 str_max_len: 0018 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0098 buffer : 00000001 [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 00009c smb_io_strhdr hdr_lm_chal_resp [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 009c str_str_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 009e str_max_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00a0 buffer : 00000000 [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000a4 smb_io_unistr2 uni_domain_name [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00a4 uni_max_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00a8 offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00ac uni_str_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 00b0 buffer : N.E.B.U.L.A. [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000bc smb_io_unistr2 uni_user_name [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00bc uni_max_len: 00000005 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00c0 offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00c4 uni_str_len: 00000005 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 00c8 buffer : e.r.i.c.h. [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000d2 smb_io_unistr2 uni_wksta_name [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00d4 uni_max_len: 0000000b [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00d8 offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00dc uni_str_len: 0000000b [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 00e0 buffer : \.\.K.L.E.E.N.E.X._.Q. [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000f6 smb_io_string2 nt_chal_resp [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00f8 str_max_len: 00000018 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00fc offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0100 str_str_len: 00000018 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_string2(961) 0104 buffer : .%$õ.Ü..{..ÎA..ç(a.º.å8. [2004/05/29 21:29:45, 9, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 00011c smb_io_string2 - NULL lm_chal_resp [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 011c validation_level: 0003 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000120 smb_io_rpc_hdr_auth hdr_auth [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0120 auth_type : 44 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0121 auth_level : 06 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0122 padding : 02 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0123 reserved : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0124 auth_context : 00000001 [2004/05/29 21:29:45, 10, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe_req(1023) SCHANNEL seq_num=0 [2004/05/29 21:29:45, 10, pid=25784] rpc_parse/parse_prs.c:netsec_encode(1462) SCHANNEL: netsec_encode seq_num=0 data_len=288 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000128 smb_io_rpc_auth_netsec_chk [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0128 sig : 77 00 7a 00 ff ff 00 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0130 seq_num: 19 b2 fa ec b9 af ad 90 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0138 packet_digest: 1a 24 44 ab bc 1c e5 8e [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0140 confounder: c0 8f db 92 4e af ad 4b [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:create_rpc_request(841) create_rpc_request: opnum: 0x2 data_len: 0x160 [2004/05/29 21:29:45, 10, pid=25784] rpc_client/cli_pipe.c:create_rpc_request(858) create_rpc_request: data_len: 160 auth_len: 20 alloc_hint: 128 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr hdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0160 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0020 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000005 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_req hdr_req [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 00000128 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0016 opnum : 0002 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(410) rpc_api_pipe: fnum:4001 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=434 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=10 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 352 (0x160) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 352 (0x160) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]=16385 (0x4001) smb_bcc=367 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [010] 00 00 03 10 00 00 00 60 01 20 00 05 00 00 00 28 .......` . .....( [020] 01 00 00 00 00 02 00 21 26 D8 61 3A 6E 1E 88 AB .......! &Øa:n..« [030] BC 5A 28 3A 8B A4 B8 BB EA AA F8 A6 41 92 CD 26 ¼Z(:.¤¸» êªø¦A.Í& [040] 5C D5 48 88 1B B9 55 6F F9 AF 73 24 69 6B 23 9C \ÕH..¹Uo ù¯s$ik#. [050] D3 B3 CB D5 45 10 A3 5B 4B 13 E3 93 0C C0 78 FC Ó³ËÕE.£[ K.ã..Àxü [060] 2C BF CC 86 E9 2E 55 CC 15 19 66 3D 09 1E EF A2 ,¿Ì.é.UÌ ..f=..ï¢ [070] 50 C0 57 9B 94 CF 76 82 91 AD 61 F5 05 07 82 63 PÀW..Ïv. .­aõ...c [080] 2C 2C CD 62 97 E5 75 FB C3 D1 11 D5 25 93 D4 CD ,,Íb.åuû ÃÑ.Õ%.ÔÍ [090] 72 FE 5F 74 9A 20 79 73 35 2E 86 C7 D2 F1 92 6F rþ_t. ys 5..ÇÒñ.o [0A0] A2 EA EF 13 2D DA AC DC 88 61 CA F0 F1 41 50 48 ¢êï.-Ú¬Ü .aÊðñAPH [0B0] BD 72 3A 3B 9C C3 CF C5 E7 2B D5 76 03 40 3F C4 ½r:;.ÃÏÅ ç+Õv.@?Ä [0C0] E3 D4 CF 03 AE 67 4B 81 94 1F 4D AE D3 D8 A8 9C ãÔÏ.®gK. ..M®Óب. [0D0] 5A 82 BB FC 19 BF 0B E6 AD C3 3B E7 B5 F6 C7 C2 Z.»ü.¿.æ ­Ã;çµöÇ [0E0] 54 07 10 62 6D D1 7B F4 50 73 7A 2B 83 53 4A 2C T..bmÑ{ô Psz+.SJ, [0F0] 61 56 C7 5C 6E 37 60 9A 31 09 E7 22 73 8F 85 5B aVÇ\n7`. 1.ç"s..[ [100] CC 99 CE 99 22 44 63 28 AD 7C 8B A9 49 FF E6 A3 Ì.Î."Dc( ­|.©Iÿæ£ [110] 52 C1 36 20 AD 8A 85 59 1E 24 2C F3 99 40 0F 75 RÁ6 ­..Y .$,ó.@.u [120] 33 A3 8A BB 7C BC 2D 1B A1 8F 59 95 E7 EF FC 72 3£.»|¼-. ¡.Y.çïür [130] C7 B6 23 C5 96 1A EE 44 4C 3B F8 E1 0D 45 43 D6 Ƕ#Å..îD L;øá.ECÖ [140] 9E EE BE 84 6B 16 4D 44 06 02 00 01 00 00 00 77 .î¾.k.MD .......w [150] 00 7A 00 FF FF 00 00 19 B2 FA EC B9 AF AD 90 1A .z.ÿÿ... ²ú칯­.. [160] 24 44 AB BC 1C E5 8E C0 8F DB 92 4E AF AD 4B $D«¼.å.À .Û.N¯­K [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,438) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,438) wrote 438 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 616 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=616 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=10 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 560 (0x230) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 560 (0x230) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=561 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 05 00 02 03 10 00 00 00 30 02 20 00 05 00 00 ........ .0. .... [010] 00 E4 01 00 00 00 00 00 00 E9 69 CA 87 D5 F5 22 .ä...... .éiÊ.Õõ" [020] 56 50 CC 34 4D D0 6C B8 04 A4 99 4E B9 8B E1 21 VPÌ4MÐl¸ .¤.N¹.á! [030] 29 5F 79 83 40 07 F4 DB 4B 69 CE 87 CF D4 81 51 )_y.@.ôÛ KiÎ.ÏÔ.Q [040] 3F C0 16 EB 20 BD BD A9 D9 A2 9B BC 8F 14 84 C7 ?À.ë ½½© Ù¢.¼...Ç [050] DE 14 8E 2D A2 1D E3 49 1B A0 5C EB B6 61 77 01 Þ..-¢.ãI . \ë¶aw. [060] 18 43 DE A4 7F E3 E9 B0 5E 1C 22 2A 17 FF 7B 71 .CÞ¤.ãé° ^."*.ÿ{q [070] B0 E4 AA 11 72 9C D7 64 67 4D C2 9E D7 EB D3 CC °äª.r.×d gMÂ.×ëÓÌ [080] 57 C8 6A 50 0A 4D 0F A9 E3 8D 8A 63 84 70 3C 41 WÈjP.M.© ã..c.p.ò5m( [0F0] 1A EB 26 66 5B CA 59 84 BE 97 A9 53 EB 19 CB 25 .ë&f[ÊY. ¾.©Së.Ë% [100] F5 DA 7F 5B A5 16 DC FE C4 80 FF A2 DF B0 B3 C1 õÚ.[¥.Üþ Ä.ÿ¢ß°³Á [110] 75 85 79 53 94 22 D9 1F 58 73 8D A3 73 AA C5 DA u.yS."Ù. Xs.£sªÅÚ [120] 1F 7F 8E 1E 88 CD 64 A5 65 93 8D A8 9A 6F 8A C8 .....Íd¥ e..¨.o.È [130] ED 79 1E 02 27 90 6B D4 47 1A BC 80 EF D1 2E C7 íy..'.kÔ G.¼.ïÑ.Ç [140] 22 01 5D 9B 4D 51 9F 7C D1 FE 2D DD B6 3F D9 FF ".].MQ.| Ñþ-ݶ?Ùÿ [150] CC 12 90 B3 6F 7C 56 7C F9 62 C3 2D 79 4B 9B 42 Ì..³o|V| ùbÃ-yK.B [160] F4 3C 6B F2 02 3B 9A F7 88 EB 4E C2 DF EC D1 43 ô.ò5m( [0F0] 1A EB 26 66 5B CA 59 84 BE 97 A9 53 EB 19 CB 25 .ë&f[ÊY. ¾.©Së.Ë% [100] F5 DA 7F 5B A5 16 DC FE C4 80 FF A2 DF B0 B3 C1 õÚ.[¥.Üþ Ä.ÿ¢ß°³Á [110] 75 85 79 53 94 22 D9 1F 58 73 8D A3 73 AA C5 DA u.yS."Ù. Xs.£sªÅÚ [120] 1F 7F 8E 1E 88 CD 64 A5 65 93 8D A8 9A 6F 8A C8 .....Íd¥ e..¨.o.È [130] ED 79 1E 02 27 90 6B D4 47 1A BC 80 EF D1 2E C7 íy..'.kÔ G.¼.ïÑ.Ç [140] 22 01 5D 9B 4D 51 9F 7C D1 FE 2D DD B6 3F D9 FF ".].MQ.| Ñþ-ݶ?Ùÿ [150] CC 12 90 B3 6F 7C 56 7C F9 62 C3 2D 79 4B 9B 42 Ì..³o|V| ùbÃ-yK.B [160] F4 3C 6B F2 02 3B 9A F7 88 EB 4E C2 DF EC D1 43 ôdata_size = 560 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr rpc_hdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0000 major : 05 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0001 minor : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0002 pkt_type : 02 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0003 flags : 03 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0004 pack_type0: 10 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0005 pack_type1: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0006 pack_type2: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0007 pack_type3: 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0008 frag_len : 0230 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 000a auth_len : 0020 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c call_id : 00000005 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_rpc_hdr_resp rpc_hdr_resp [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0010 alloc_hint: 000001e4 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0014 context_id: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0016 cancel_ct : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0017 reserved : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(483) rpc_api_pipe: len left: 0 smbtrans read: 560 [2004/05/29 21:29:45, 5, pid=25784] rpc_client/cli_pipe.c:rpc_auth_pipe(212) rpc_auth_pipe: pkt_type: 2 len: 560 auth_len: 32 NTLMSSP No schannel Yes sign Yes seal Yes [2004/05/29 21:29:45, 10, pid=25784] rpc_client/cli_pipe.c:rpc_auth_pipe(219) rpc_auth_pipe: packet: [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000000 smb_io_rpc_hdr_auth auth_hdr [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0000 auth_type : 44 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0001 auth_level : 06 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0002 padding : 0c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 0003 reserved : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0004 auth_context : 00000001 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0008 sig : 77 00 7a 00 ff ff 00 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0010 seq_num: 22 dd 2d d9 d7 89 27 c0 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0018 packet_digest: a4 c5 94 ba cd 33 9a 06 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0020 confounder: 1e 49 51 61 e6 1d 17 e3 [2004/05/29 21:29:45, 10, pid=25784] rpc_parse/parse_prs.c:netsec_decode(1539) SCHANNEL: netsec_encode seq_num=1 data_len=496 [2004/05/29 21:29:45, 10, pid=25784] rpc_parse/parse_prs.c:netsec_decode(1559) SCHANNEL: netsec_decode seq_num=1 data_len=496 [2004/05/29 21:29:45, 6, pid=25784] rpc_client/cli_pipe.c:rpc_api_pipe(525) rpc_api_pipe: fragment first and last both set [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000018 net_io_r_sam_logon [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0018 buffer_creds: 0b826b9c [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 00001c smb_io_cred [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 00001c smb_io_chal [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 001c data: 8c b6 c5 6d 4e 64 39 9d [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000024 smb_io_utime [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0024 time: 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0028 switch_value: 0003 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 00002c net_io_user_info3 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 002c ptr_user_info : 2bb37270 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_time logon time [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0030 low : b3577a98 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0034 high: 01c445d1 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000038 smb_io_time logoff time [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0038 low : ffffffff [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 003c high: 7fffffff [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000040 smb_io_time kickoff time [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0040 low : ffffffff [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0044 high: 7fffffff [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_time last set time [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0048 low : 0bcb68a2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 004c high: 01c398ef [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_time can change time [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0050 low : 0bcb68a2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0054 high: 01c398ef [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000058 smb_io_time must change time [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0058 low : ffffffff [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 005c high: 7fffffff [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000060 smb_io_unihdr hdr_user_name [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0060 uni_str_len: 000a [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0062 uni_max_len: 000c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0064 buffer : 2bb373e4 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000068 smb_io_unihdr hdr_full_name [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0068 uni_str_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 006a uni_max_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 006c buffer : 00000000 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000070 smb_io_unihdr hdr_logon_script [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0070 uni_str_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0072 uni_max_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0074 buffer : 00000000 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000078 smb_io_unihdr hdr_profile_path [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0078 uni_str_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 007a uni_max_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 007c buffer : 00000000 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000080 smb_io_unihdr hdr_home_dir [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0080 uni_str_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0082 uni_max_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0084 buffer : 00000000 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000088 smb_io_unihdr hdr_dir_drive [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0088 uni_str_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 008a uni_max_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 008c buffer : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0090 logon_count : 08b0 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0092 bad_pw_count : 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0094 user_rid : 000003ec [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0098 group_rid : 00000201 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 009c num_groups : 00000012 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00a0 buffer_groups : 2bb3733c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00a4 user_flgs : 00000120 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 00a8 user_sess_key: c0 d7 0c 14 5b 1c 13 b3 03 37 bf bf c8 77 e9 82 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000b8 smb_io_unihdr hdr_logon_srv [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 00b8 uni_str_len: 000c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 00ba uni_max_len: 000e [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00bc buffer : 2bb373f0 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000c0 smb_io_unihdr hdr_logon_dom [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 00c0 uni_str_len: 000c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 00c2 uni_max_len: 000e [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00c4 buffer : 2bb373fe [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00c8 buffer_dom_id : 2bb373cc [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 00cc padding : 1a 50 61 e9 06 27 0f 56 10 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00f4 num_other_sids: 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00f8 buffer_other_sids: 00000000 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000fc smb_io_unistr2 uni_user_name [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00fc uni_max_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0100 offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0104 uni_str_len: 00000005 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 0108 buffer : e.r.i.c.h. [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000112 smb_io_unistr2 - NULL uni_full_name [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000112 smb_io_unistr2 - NULL uni_logon_script [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000112 smb_io_unistr2 - NULL uni_profile_path [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000112 smb_io_unistr2 - NULL uni_home_dir [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000112 smb_io_unistr2 - NULL uni_dir_drive [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0114 num_groups2 : 00000012 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000118 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0118 g_rid: 00001320 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 011c attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000120 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0120 g_rid: 0000130a [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0124 attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000128 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0128 g_rid: 000013fd [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 012c attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000130 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0130 g_rid: 00001239 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0134 attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000138 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0138 g_rid: 000012c6 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 013c attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000140 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0140 g_rid: 000012c7 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0144 attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000148 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0148 g_rid: 00001249 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 014c attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000150 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0150 g_rid: 0000196a [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0154 attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000158 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0158 g_rid: 00001268 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 015c attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000160 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0160 g_rid: 00001251 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0164 attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000168 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0168 g_rid: 00001385 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 016c attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000170 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0170 g_rid: 000012de [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0174 attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000178 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0178 g_rid: 00000201 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 017c attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000180 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0180 g_rid: 00002030 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0184 attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000188 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0188 g_rid: 00001848 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 018c attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000190 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0190 g_rid: 00003d38 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0194 attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000198 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0198 g_rid: 0000042f [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 019c attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0001a0 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 01a0 g_rid: 000012cf [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 01a4 attr : 00000007 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0001a8 smb_io_unistr2 uni_logon_srv [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 01a8 uni_max_len: 00000007 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 01ac offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 01b0 uni_str_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 01b4 buffer : L.A.G.O.O.N. [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0001c0 smb_io_unistr2 uni_logon_dom [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 01c0 uni_max_len: 00000007 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 01c4 offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 01c8 uni_str_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 01cc buffer : N.E.B.U.L.A. [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0001d8 smb_io_dom_sid2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 01d8 num_auths: 00000004 [2004/05/29 21:29:45, 8, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0001dc smb_io_dom_sid sid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01dc sid_rev_num: 01 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01dd num_auths : 04 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01de id_auth[0] : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01df id_auth[1] : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01e0 id_auth[2] : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01e1 id_auth[3] : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01e2 id_auth[4] : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01e3 id_auth[5] : 05 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32s(862) 01e4 sub_auths : 00000015 0125690f 1de85f7e 4a515a19 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 01f4 auth_resp : 00000001 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_ntstatus(665) 01f8 status : NT_STATUS_OK [2004/05/29 21:29:45, 10, pid=25784] passdb/secrets.c:secrets_named_mutex_release(716) secrets_named_mutex: released mutex for LAGOON [2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam(293) Finding user NEBULA\erich [2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is nebula\erich [2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(230) Trying _Get_Pwnam(), username as given is NEBULA\erich [2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(239) Trying _Get_Pwnam(), username as uppercase is NEBULA\ERICH [2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(247) Checking combinations of 0 uppercase letters in nebula\erich [2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals didn't find user [NEBULA\erich]! [2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam(293) Finding user erich [2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is erich [2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [erich]! [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:fill_sam_account(960) fill_sam_account: located username was [erich] [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_username(612) pdb_set_username: setting username erich, was [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_init_flags(512) element 12 -> now SET [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_fullname(693) pdb_set_full_name: setting full name Eric Horst, was [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_init_flags(512) element 13 -> now SET [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_unix_homedir(828) pdb_set_unix_homedir: setting home dir /usr/users/erich, was NULL [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_init_flags(512) element 22 -> now SET [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_domain(639) pdb_set_domain: setting domain CANON, was [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_user_sid(539) pdb_set_user_sid: setting user sid S-1-5-21-2072067240-3800136619-3437914000-9130 [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_init_flags(512) element 18 -> now SET [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_compat.c:pdb_set_user_sid_from_rid(73) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2072067240-3800136619-3437914000-9130 from rid 9130 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_group_sid(575) pdb_set_group_sid: setting group sid S-1-5-21-2072067240-3800136619-3437914000-1031 [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_init_flags(512) element 19 -> now SET [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100) pdb_set_group_sid_from_rid: setting group sid S-1-5-21-2072067240-3800136619-3437914000-1031 from rid 1031 [2004/05/29 21:29:45, 4, pid=25784] lib/substitute.c:automount_server(323) Home server: canon [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_profile_path(747) pdb_set_profile_path: setting profile path \\canon\erich\profile, was [2004/05/29 21:29:45, 4, pid=25784] lib/substitute.c:automount_server(323) Home server: canon [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_homedir(801) pdb_set_homedir: setting home dir \\canon\erich, was [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_dir_drive(774) pdb_set_dir_drive: setting dir drive , was NULL [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_logon_script(720) pdb_set_logon_script: setting logon script , was [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_nt_username(666) pdb_set_nt_username: setting nt username erich, was [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_username(612) pdb_set_username: setting username erich, was erich [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_domain(639) pdb_set_domain: setting domain NEBULA, was CANON [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_user_sid(539) pdb_set_user_sid: setting user sid S-1-5-21-19228943-501768062-1246845465-1004 [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_group_sid(575) pdb_set_group_sid: setting group sid S-1-5-21-19228943-501768062-1246845465-513 [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_fullname(693) pdb_set_full_name: setting full name , was Eric Horst [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_logon_script(720) pdb_set_logon_script: setting logon script , was [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_profile_path(747) pdb_set_profile_path: setting profile path , was \\canon\erich\profile [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_homedir(801) pdb_set_homedir: setting home dir , was \\canon\erich [2004/05/29 21:29:45, 10, pid=25784] passdb/pdb_get_set.c:pdb_set_dir_drive(774) pdb_set_dir_drive: setting dir drive , was [2004/05/29 21:29:45, 10, pid=25784] lib/system_smbd.c:sys_getgrouplist(117) sys_getgrouplist: user [erich] [2004/05/29 21:29:45, 10, pid=25784] lib/system_smbd.c:sys_getgrouplist(126) sys_getgrouplist(): disabled winbindd for group lookup [user == erich] [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 8, pid=25784] lib/util_getent.c:remove_duplicate_gids(330) remove_duplicate_gids: Enter 17 gids [2004/05/29 21:29:45, 8, pid=25784] lib/util_getent.c:remove_duplicate_gids(348) remove_duplicate_gids: Exit 16 gids [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 4065 Primary group is 15 and contains 16 supplementary groups Group[ 0]: 0 Group[ 1]: 10 Group[ 2]: 15 Group[ 3]: 25 Group[ 4]: 34 Group[ 5]: 81 Group[ 6]: 349 Group[ 7]: 350 Group[ 8]: 358 Group[ 9]: 374 Group[ 10]: 426 Group[ 11]: 458 Group[ 12]: 573 Group[ 13]: 697 Group[ 14]: 739 Group[ 15]: 881 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 0 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (0) -> SID S-1-5-21-2072067240-3800136619-3437914000-1001. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 0 -> S-1-5-21-2072067240-3800136619-3437914000-1001 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 10 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (10) -> SID S-1-5-21-2072067240-3800136619-3437914000-1021. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 10 -> S-1-5-21-2072067240-3800136619-3437914000-1021 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 15 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (15) -> SID S-1-5-21-2072067240-3800136619-3437914000-1031. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 15 -> S-1-5-21-2072067240-3800136619-3437914000-1031 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 25 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (25) -> SID S-1-5-21-2072067240-3800136619-3437914000-1051. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 25 -> S-1-5-21-2072067240-3800136619-3437914000-1051 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 34 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (34) -> SID S-1-5-21-2072067240-3800136619-3437914000-1069. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 34 -> S-1-5-21-2072067240-3800136619-3437914000-1069 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 81 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (81) -> SID S-1-5-21-2072067240-3800136619-3437914000-1163. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 81 -> S-1-5-21-2072067240-3800136619-3437914000-1163 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 349 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (349) -> SID S-1-5-21-2072067240-3800136619-3437914000-1699. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 349 -> S-1-5-21-2072067240-3800136619-3437914000-1699 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 350 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (350) -> SID S-1-5-21-2072067240-3800136619-3437914000-1701. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 350 -> S-1-5-21-2072067240-3800136619-3437914000-1701 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 358 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (358) -> SID S-1-5-21-2072067240-3800136619-3437914000-1717. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 358 -> S-1-5-21-2072067240-3800136619-3437914000-1717 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 374 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (374) -> SID S-1-5-21-2072067240-3800136619-3437914000-1749. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 374 -> S-1-5-21-2072067240-3800136619-3437914000-1749 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 426 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (426) -> SID S-1-5-21-2072067240-3800136619-3437914000-1853. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 426 -> S-1-5-21-2072067240-3800136619-3437914000-1853 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 458 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (458) -> SID S-1-5-21-2072067240-3800136619-3437914000-1917. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 458 -> S-1-5-21-2072067240-3800136619-3437914000-1917 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 573 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (573) -> SID S-1-5-21-2072067240-3800136619-3437914000-2147. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 573 -> S-1-5-21-2072067240-3800136619-3437914000-2147 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 697 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (697) -> SID S-1-5-21-2072067240-3800136619-3437914000-2395. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 697 -> S-1-5-21-2072067240-3800136619-3437914000-2395 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 739 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (739) -> SID S-1-5-21-2072067240-3800136619-3437914000-2479. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 739 -> S-1-5-21-2072067240-3800136619-3437914000-2479 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:local_gid_to_sid(1222) local_gid_to_sid: Fall back to algorithmic mapping: 881 -> S-1-0-0 [2004/05/29 21:29:45, 8, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1188) algorithmic_gid_to_sid: falling back to RID algorithm [2004/05/29 21:29:45, 10, pid=25784] passdb/passdb.c:algorithmic_gid_to_sid(1192) algorithmic_gid_to_sid: gid (881) -> SID S-1-5-21-2072067240-3800136619-3437914000-2763. [2004/05/29 21:29:45, 10, pid=25784] passdb/lookup_sid.c:gid_to_sid(365) gid_to_sid: local 881 -> S-1-5-21-2072067240-3800136619-3437914000-2763 [2004/05/29 21:29:45, 10, pid=25784] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-19228943-501768062-1246845465-1004 contains 22 SIDs SID[ 0]: S-1-5-21-19228943-501768062-1246845465-1004 SID[ 1]: S-1-5-21-19228943-501768062-1246845465-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-19228943-501768062-1246845465-4896 SID[ 6]: S-1-5-21-19228943-501768062-1246845465-4874 SID[ 7]: S-1-5-21-19228943-501768062-1246845465-5117 SID[ 8]: S-1-5-21-19228943-501768062-1246845465-4665 SID[ 9]: S-1-5-21-19228943-501768062-1246845465-4806 SID[ 10]: S-1-5-21-19228943-501768062-1246845465-4807 SID[ 11]: S-1-5-21-19228943-501768062-1246845465-4681 SID[ 12]: S-1-5-21-19228943-501768062-1246845465-6506 SID[ 13]: S-1-5-21-19228943-501768062-1246845465-4712 SID[ 14]: S-1-5-21-19228943-501768062-1246845465-4689 SID[ 15]: S-1-5-21-19228943-501768062-1246845465-4997 SID[ 16]: S-1-5-21-19228943-501768062-1246845465-4830 SID[ 17]: S-1-5-21-19228943-501768062-1246845465-8240 SID[ 18]: S-1-5-21-19228943-501768062-1246845465-6216 SID[ 19]: S-1-5-21-19228943-501768062-1246845465-15672 SID[ 20]: S-1-5-21-19228943-501768062-1246845465-1071 SID[ 21]: S-1-5-21-19228943-501768062-1246845465-4815 [2004/05/29 21:29:45, 10, pid=25784] libsmb/samlogon_cache.c:netsamlogon_cache_store(132) netsamlogon_cache_store: SID [S-1-5-21-19228943-501768062-1246845465-1004] [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0000 timestamp: 40b96339 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000004 net_io_user_info3 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0004 ptr_user_info : 2bb37270 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000008 smb_io_time logon time [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0008 low : b3577a98 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 000c high: 01c445d1 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000010 smb_io_time logoff time [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0010 low : ffffffff [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0014 high: 7fffffff [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000018 smb_io_time kickoff time [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0018 low : ffffffff [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 001c high: 7fffffff [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000020 smb_io_time last set time [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0020 low : 0bcb68a2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0024 high: 01c398ef [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000028 smb_io_time can change time [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0028 low : 0bcb68a2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 002c high: 01c398ef [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000030 smb_io_time must change time [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0030 low : ffffffff [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0034 high: 7fffffff [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000038 smb_io_unihdr hdr_user_name [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0038 uni_str_len: 000a [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 003a uni_max_len: 000c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 003c buffer : 2bb373e4 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000040 smb_io_unihdr hdr_full_name [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0040 uni_str_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0042 uni_max_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0044 buffer : 00000000 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000048 smb_io_unihdr hdr_logon_script [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0048 uni_str_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 004a uni_max_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 004c buffer : 00000000 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000050 smb_io_unihdr hdr_profile_path [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0050 uni_str_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0052 uni_max_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0054 buffer : 00000000 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000058 smb_io_unihdr hdr_home_dir [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0058 uni_str_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 005a uni_max_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 005c buffer : 00000000 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000060 smb_io_unihdr hdr_dir_drive [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0060 uni_str_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0062 uni_max_len: 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0064 buffer : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0068 logon_count : 08b0 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 006a bad_pw_count : 0000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 006c user_rid : 000003ec [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0070 group_rid : 00000201 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0074 num_groups : 00000012 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0078 buffer_groups : 2bb3733c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 007c user_flgs : 00000120 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 0080 user_sess_key: 44 77 57 ea c9 ae 09 6e 6b 0c ce b7 2d 11 63 89 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000090 smb_io_unihdr hdr_logon_srv [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0090 uni_str_len: 000c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0092 uni_max_len: 000e [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0094 buffer : 2bb373f0 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000098 smb_io_unihdr hdr_logon_dom [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 0098 uni_str_len: 000c [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint16(606) 009a uni_max_len: 000e [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 009c buffer : 2bb373fe [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00a0 buffer_dom_id : 2bb373cc [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8s(722) 00a4 padding : 9e f0 3a 17 94 95 15 8b 78 39 71 08 e5 66 8a 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00cc num_other_sids: 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00d0 buffer_other_sids: 00000000 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000d4 smb_io_unistr2 uni_user_name [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00d4 uni_max_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00d8 offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00dc uni_str_len: 00000005 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 00e0 buffer : e.r.i.c.h. [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000ea smb_io_unistr2 - NULL uni_full_name [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000ea smb_io_unistr2 - NULL uni_logon_script [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000ea smb_io_unistr2 - NULL uni_profile_path [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000ea smb_io_unistr2 - NULL uni_home_dir [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000ea smb_io_unistr2 - NULL uni_dir_drive [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00ec num_groups2 : 00000012 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000f0 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00f0 g_rid: 00001320 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00f4 attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0000f8 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00f8 g_rid: 0000130a [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 00fc attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000100 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0100 g_rid: 000013fd [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0104 attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000108 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0108 g_rid: 00001239 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 010c attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000110 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0110 g_rid: 000012c6 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0114 attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000118 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0118 g_rid: 000012c7 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 011c attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000120 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0120 g_rid: 00001249 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0124 attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000128 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0128 g_rid: 0000196a [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 012c attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000130 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0130 g_rid: 00001268 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0134 attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000138 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0138 g_rid: 00001251 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 013c attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000140 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0140 g_rid: 00001385 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0144 attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000148 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0148 g_rid: 000012de [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 014c attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000150 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0150 g_rid: 00000201 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0154 attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000158 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0158 g_rid: 00002030 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 015c attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000160 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0160 g_rid: 00001848 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0164 attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000168 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0168 g_rid: 00003d38 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 016c attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000170 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0170 g_rid: 0000042f [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0174 attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000178 smb_io_gid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0178 g_rid: 000012cf [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 017c attr : 00000007 [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000180 smb_io_unistr2 uni_logon_srv [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0180 uni_max_len: 00000007 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0184 offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0188 uni_str_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 018c buffer : L.A.G.O.O.N. [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 000198 smb_io_unistr2 uni_logon_dom [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 0198 uni_max_len: 00000007 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 019c offset : 00000000 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 01a0 uni_str_len: 00000006 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:dbg_rw_punival(807) 01a4 buffer : N.E.B.U.L.A. [2004/05/29 21:29:45, 6, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0001b0 smb_io_dom_sid2 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32(635) 01b0 num_auths: 00000004 [2004/05/29 21:29:45, 7, pid=25784] rpc_parse/parse_prs.c:prs_debug(82) 0001b4 smb_io_dom_sid sid [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01b4 sid_rev_num: 01 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01b5 num_auths : 04 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01b6 id_auth[0] : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01b7 id_auth[1] : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01b8 id_auth[2] : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01b9 id_auth[3] : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01ba id_auth[4] : 00 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint8(577) 01bb id_auth[5] : 05 [2004/05/29 21:29:45, 5, pid=25784] rpc_parse/parse_prs.c:prs_uint32s(862) 01bc sub_auths : 00000015 0125690f 1de85f7e 4a515a19 [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,45) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,45) wrote 45 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 35 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=11 smt_wct=0 smb_bcc=0 [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,43) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,43) wrote 43 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 39 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=25784 smb_uid=4097 smb_mid=12 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 39 (0x27) smb_bcc=0 [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,45) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,45) wrote 45 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 35 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=35 smb_com=0x4 smb_rcls=2 smb_reh=0 smb_err=91 smb_flg=136 smb_flg2=34817 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=13 smt_wct=0 smb_bcc=0 [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(18,39) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(18,39) wrote 39 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 35 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=2049 smb_pid=25784 smb_uid=4097 smb_mid=14 smt_wct=0 smb_bcc=0 [2004/05/29 21:29:45, 3, pid=25784] auth/auth.c:check_ntlm_password(268) check_ntlm_password: winbind authentication for user [erich] succeeded [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:push_sec_ctx(256) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 3, pid=25784] smbd/uid.c:push_conn_ctx(351) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:pop_sec_ctx(386) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 5, pid=25784] auth/auth.c:check_ntlm_password(292) check_ntlm_password: PAM Account for user [erich] succeeded [2004/05/29 21:29:45, 2, pid=25784] auth/auth.c:check_ntlm_password(305) check_ntlm_password: authentication for user [erich] -> [erich] -> [erich] succeeded [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:free_user_info(1298) attempting to free (and zero) a user_info structure [2004/05/29 21:29:45, 10, pid=25784] auth/auth_util.c:free_user_info(1301) structure was created for erich [2004/05/29 21:29:45, 10, pid=25784] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(117) Got NT session key of length 16 [2004/05/29 21:29:45, 10, pid=25784] auth/auth_ntlmssp.c:auth_ntlmssp_check_password(123) Got LM session key of length 16 [2004/05/29 21:29:45, 10, pid=25784] libsmb/ntlmssp.c:ntlmssp_server_auth(678) ntlmssp_server_auth: Created NTLM2 session key. [2004/05/29 21:29:45, 3, pid=25784] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319) NTLMSSP Sign/Seal - Initialising with flags: [2004/05/29 21:29:45, 3, pid=25784] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2004/05/29 21:29:45, 10, pid=25784] smbd/password.c:register_vuid(158) register_vuid: allocated vuid = 100 [2004/05/29 21:29:45, 10, pid=25784] smbd/password.c:register_vuid(220) register_vuid: (4065,15) erich erich NEBULA guest=0 [2004/05/29 21:29:45, 3, pid=25784] smbd/password.c:register_vuid(222) User name: erich Real name: [2004/05/29 21:29:45, 3, pid=25784] smbd/password.c:register_vuid(241) UNIX uid 4065 is UNIX user erich, and will be vuid 100 [2004/05/29 21:29:45, 7, pid=25784] param/loadparm.c:lp_servicenumber(4022) lp_servicenumber: couldn't find erich [2004/05/29 21:29:45, 3, pid=25784] smbd/password.c:register_vuid(265) Adding/updating homes service for user 'erich' using home directory: '/usr/users/erich' [2004/05/29 21:29:45, 7, pid=25784] param/loadparm.c:lp_servicenumber(4022) lp_servicenumber: couldn't find homes [2004/05/29 21:29:45, 6, pid=25784] param/loadparm.c:lp_file_list_changed(2665) lp_file_list_changed() file /usr/local/lib/samba/services.%h.conf -> /usr/local/lib/samba/services.canon.conf last mod_time: Tue May 25 09:46:28 2004 file /usr/lib/samba/disable.%a.conf -> /usr/lib/samba/disable.WinXP.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/services.COMMON.conf -> /usr/local/lib/samba/services.COMMON.conf last mod_time: Sat May 15 22:32:24 2004 file /var/tmp/samba/confs/%m -> /var/tmp/samba/confs/kleenex_q last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/confs/%m -> /usr/local/lib/samba/confs/kleenex_q last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/global.%h.conf -> /usr/local/lib/samba/global.canon.conf last mod_time: Wed Dec 31 16:00:00 1969 file /usr/local/lib/samba/smb.conf -> /usr/local/lib/samba/smb.conf last mod_time: Sat May 29 21:27:30 2004 [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(22,104) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(22,104) wrote 104 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 106 [2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889) got message type 0x0 of len 0x6a [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890) Transaction 3 of length 110 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=106 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=2560 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 106 (0x6A) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=63 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 5C 00 5C 00 31 00 34 00 30 00 2E 00 31 00 34 .\.\.1.4 .0...1.4 [010] 00 32 00 2E 00 31 00 35 00 2E 00 31 00 36 00 38 .2...1.5 ...1.6.8 [020] 00 5C 00 4E 00 45 00 42 00 55 00 4C 00 41 00 48 .\.N.E.B .U.L.A.H [030] 00 4F 00 4D 00 45 00 00 00 3F 3F 3F 3F 3F 00 .O.M.E.. .?????. [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685) switch message SMBtconX (pid 25784) [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:29:45, 4, pid=25784] smbd/reply.c:reply_tcon_and_X(381) Client requested device type [?????] for share [NEBULAHOME] [2004/05/29 21:29:45, 5, pid=25784] smbd/service.c:make_connection(783) making a connection to 'normal' service nebulahome [2004/05/29 21:29:45, 3, pid=25784] lib/access.c:check_access(313) check_access: no hostnames in host allow/deny list. [2004/05/29 21:29:45, 2, pid=25784] lib/access.c:check_access(324) Allowed connection from (140.142.110.103) [2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam(293) Finding user erich [2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is erich [2004/05/29 21:29:45, 5, pid=25784] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [erich]! [2004/05/29 21:29:45, 3, pid=25784] smbd/service.c:make_connection_snum(457) Connect path is '/usr/local/lib/samba/nebula-home' for service [nebulahome] [2004/05/29 21:29:45, 4, pid=25784] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for nebulahome [2004/05/29 21:29:45, 10, pid=25784] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/05/29 21:29:45, 10, pid=25784] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000002, for NT token with 22 entries and first sid S-1-5-21-19228943-501768062-1246845465-1004. [2004/05/29 21:29:45, 3, pid=25784] lib/util_seaccess.c:se_access_check(251) [2004/05/29 21:29:45, 3, pid=25784] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-19228943-501768062-1246845465-1004 se_access_check: also S-1-5-21-19228943-501768062-1246845465-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4896 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4874 se_access_check: also S-1-5-21-19228943-501768062-1246845465-5117 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4665 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4806 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4807 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4681 se_access_check: also S-1-5-21-19228943-501768062-1246845465-6506 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4712 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4689 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4997 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4830 se_access_check: also S-1-5-21-19228943-501768062-1246845465-8240 se_access_check: also S-1-5-21-19228943-501768062-1246845465-6216 se_access_check: also S-1-5-21-19228943-501768062-1246845465-15672 se_access_check: also S-1-5-21-19228943-501768062-1246845465-1071 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4815 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 2 [2004/05/29 21:29:45, 5, pid=25784] lib/util_seaccess.c:se_access_check(309) se_access_check: access (2) granted. [2004/05/29 21:29:45, 3, pid=25784] smbd/vfs.c:vfs_init_default(203) Initialising default vfs hooks [2004/05/29 21:29:45, 3, pid=25784] smbd/vfs.c:vfs_init_custom(229) Initialising custom vfs hooks from [extd_audit] [2004/05/29 21:29:45, 5, pid=25784] lib/module.c:smb_probe_module(101) Probing module 'extd_audit' [2004/05/29 21:29:45, 5, pid=25784] lib/module.c:smb_probe_module(112) Probing module 'extd_audit': Trying to load from /usr/local/lib/vfs/extd_audit.so [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:smb_register_vfs(193) Successfully added vfs backend 'extd_audit' [2004/05/29 21:29:45, 10, pid=25784] modules/vfs_extd_audit.c:init_module(339) vfs_extd_audit: Debug class number of 'extd_audit': 16 [2004/05/29 21:29:45, 2, pid=25784] lib/module.c:do_smb_load_module(63) Module '/usr/local/lib/vfs/extd_audit.so' loaded Successfully loaded vfs module [extd_audit] with the new modules system [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275) Checking operation #0 (type 0, layer 2) Accepting operation type 0 from module extd_audit [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275) Checking operation #1 (type 1, layer 2) Accepting operation type 1 from module extd_audit [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275) Checking operation #2 (type 6, layer 2) Accepting operation type 6 from module extd_audit [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275) Checking operation #3 (type 8, layer 2) Accepting operation type 8 from module extd_audit [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275) Checking operation #4 (type 9, layer 2) Accepting operation type 9 from module extd_audit [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275) Checking operation #5 (type 11, layer 2) Accepting operation type 11 from module extd_audit [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275) Checking operation #6 (type 12, layer 2) Accepting operation type 12 from module extd_audit [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275) Checking operation #7 (type 19, layer 2) Accepting operation type 19 from module extd_audit [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275) Checking operation #8 (type 24, layer 2) Accepting operation type 24 from module extd_audit [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275) Checking operation #9 (type 25, layer 2) Accepting operation type 25 from module extd_audit [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275) Checking operation #10 (type 26, layer 2) Accepting operation type 26 from module extd_audit [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275) Checking operation #11 (type 43, layer 2) Accepting operation type 43 from module extd_audit [2004/05/29 21:29:45, 5, pid=25784] smbd/vfs.c:vfs_init_custom(275) Checking operation #12 (type 44, layer 2) Accepting operation type 44 from module extd_audit [2004/05/29 21:29:45, 5, pid=25784] smbd/connection.c:claim_connection(170) claiming nebulahome 0 [2004/05/29 21:29:45, 10, pid=25784] smbd/uid.c:is_share_read_only_for_user(99) is_share_read_only_for_user: share nebulahome is read-only for unix user erich [2004/05/29 21:29:45, 4, pid=25784] rpc_server/srv_srvsvc_nt.c:get_share_security(217) get_share_security: using default secdesc for nebulahome [2004/05/29 21:29:45, 10, pid=25784] lib/util_seaccess.c:se_map_generic(176) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2004/05/29 21:29:45, 10, pid=25784] lib/util_seaccess.c:se_access_check(234) se_access_check: requested access 0x00000001, for NT token with 22 entries and first sid S-1-5-21-19228943-501768062-1246845465-1004. [2004/05/29 21:29:45, 3, pid=25784] lib/util_seaccess.c:se_access_check(251) [2004/05/29 21:29:45, 3, pid=25784] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-19228943-501768062-1246845465-1004 se_access_check: also S-1-5-21-19228943-501768062-1246845465-513 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-11 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4896 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4874 se_access_check: also S-1-5-21-19228943-501768062-1246845465-5117 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4665 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4806 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4807 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4681 se_access_check: also S-1-5-21-19228943-501768062-1246845465-6506 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4712 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4689 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4997 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4830 se_access_check: also S-1-5-21-19228943-501768062-1246845465-8240 se_access_check: also S-1-5-21-19228943-501768062-1246845465-6216 se_access_check: also S-1-5-21-19228943-501768062-1246845465-15672 se_access_check: also S-1-5-21-19228943-501768062-1246845465-1071 se_access_check: also S-1-5-21-19228943-501768062-1246845465-4815 se_access_check: ACE 0: type 0, flags = 0x00, SID = S-1-1-0 mask = 101f01ff, current desired = 1 [2004/05/29 21:29:45, 5, pid=25784] lib/util_seaccess.c:se_access_check(309) se_access_check: access (1) granted. [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-19228943-501768062-1246845465-1004 contains 22 SIDs SID[ 0]: S-1-5-21-19228943-501768062-1246845465-1004 SID[ 1]: S-1-5-21-19228943-501768062-1246845465-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-19228943-501768062-1246845465-4896 SID[ 6]: S-1-5-21-19228943-501768062-1246845465-4874 SID[ 7]: S-1-5-21-19228943-501768062-1246845465-5117 SID[ 8]: S-1-5-21-19228943-501768062-1246845465-4665 SID[ 9]: S-1-5-21-19228943-501768062-1246845465-4806 SID[ 10]: S-1-5-21-19228943-501768062-1246845465-4807 SID[ 11]: S-1-5-21-19228943-501768062-1246845465-4681 SID[ 12]: S-1-5-21-19228943-501768062-1246845465-6506 SID[ 13]: S-1-5-21-19228943-501768062-1246845465-4712 SID[ 14]: S-1-5-21-19228943-501768062-1246845465-4689 SID[ 15]: S-1-5-21-19228943-501768062-1246845465-4997 SID[ 16]: S-1-5-21-19228943-501768062-1246845465-4830 SID[ 17]: S-1-5-21-19228943-501768062-1246845465-8240 SID[ 18]: S-1-5-21-19228943-501768062-1246845465-6216 SID[ 19]: S-1-5-21-19228943-501768062-1246845465-15672 SID[ 20]: S-1-5-21-19228943-501768062-1246845465-1071 SID[ 21]: S-1-5-21-19228943-501768062-1246845465-4815 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 4065 Primary group is 15 and contains 16 supplementary groups Group[ 0]: 0 Group[ 1]: 10 Group[ 2]: 15 Group[ 3]: 25 Group[ 4]: 34 Group[ 5]: 81 Group[ 6]: 349 Group[ 7]: 350 Group[ 8]: 358 Group[ 9]: 374 Group[ 10]: 426 Group[ 11]: 458 Group[ 12]: 573 Group[ 13]: 697 Group[ 14]: 739 Group[ 15]: 881 [2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_user(267) change_to_user uid=(4065,4065) gid=(0,15) [2004/05/29 21:29:45, 1, pid=25784] smbd/service.c:make_connection_snum(619) kleenex_q (140.142.110.103) connect to service nebulahome initially as user erich (uid=4065, gid=15) (pid 25784) [2004/05/29 21:29:45, 10, pid=25784] modules/vfs_extd_audit.c:audit_connect(112) Connected to service nebulahome as user erich [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:29:45, 2, pid=25784] smbd/reply.c:reply_tcon_and_X(424) Serving nebulahome as a Dfs root [2004/05/29 21:29:45, 3, pid=25784] smbd/reply.c:reply_tcon_and_X(429) tconX service=NEBULAHOME [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=54 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=2560 smt_wct=3 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 3 (0x3) smb_bcc=13 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 41 3A 00 4E 00 54 00 46 00 53 00 00 00 A:.N.T.F .S... [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(22,58) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(22,58) wrote 58 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 128 [2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889) got message type 0x0 of len 0x80 [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890) Transaction 4 of length 132 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=128 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=2624 smt_wct=15 smb_vwv[ 0]= 60 (0x3C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 60 (0x3C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=63 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 00 00 EC 03 00 00 00 00 5C 00 31 00 34 00 30 ...ì.... .\.1.4.0 [010] 00 2E 00 31 00 34 00 32 00 2E 00 31 00 35 00 2E ...1.4.2 ...1.5.. [020] 00 31 00 36 00 38 00 5C 00 6E 00 65 00 62 00 75 .1.6.8.\ .n.e.b.u [030] 00 6C 00 61 00 68 00 6F 00 6D 00 65 00 00 00 .l.a.h.o .m.e... [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 25784) [2004/05/29 21:29:45, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (4065, 15) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(491) NT user token of user S-1-5-21-19228943-501768062-1246845465-1004 contains 22 SIDs SID[ 0]: S-1-5-21-19228943-501768062-1246845465-1004 SID[ 1]: S-1-5-21-19228943-501768062-1246845465-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-19228943-501768062-1246845465-4896 SID[ 6]: S-1-5-21-19228943-501768062-1246845465-4874 SID[ 7]: S-1-5-21-19228943-501768062-1246845465-5117 SID[ 8]: S-1-5-21-19228943-501768062-1246845465-4665 SID[ 9]: S-1-5-21-19228943-501768062-1246845465-4806 SID[ 10]: S-1-5-21-19228943-501768062-1246845465-4807 SID[ 11]: S-1-5-21-19228943-501768062-1246845465-4681 SID[ 12]: S-1-5-21-19228943-501768062-1246845465-6506 SID[ 13]: S-1-5-21-19228943-501768062-1246845465-4712 SID[ 14]: S-1-5-21-19228943-501768062-1246845465-4689 SID[ 15]: S-1-5-21-19228943-501768062-1246845465-4997 SID[ 16]: S-1-5-21-19228943-501768062-1246845465-4830 SID[ 17]: S-1-5-21-19228943-501768062-1246845465-8240 SID[ 18]: S-1-5-21-19228943-501768062-1246845465-6216 SID[ 19]: S-1-5-21-19228943-501768062-1246845465-15672 SID[ 20]: S-1-5-21-19228943-501768062-1246845465-1071 SID[ 21]: S-1-5-21-19228943-501768062-1246845465-4815 [2004/05/29 21:29:45, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 4065 Primary group is 15 and contains 16 supplementary groups Group[ 0]: 0 Group[ 1]: 10 Group[ 2]: 15 Group[ 3]: 25 Group[ 4]: 34 Group[ 5]: 81 Group[ 6]: 349 Group[ 7]: 350 Group[ 8]: 358 Group[ 9]: 374 Group[ 10]: 426 Group[ 11]: 458 Group[ 12]: 573 Group[ 13]: 697 Group[ 14]: 739 Group[ 15]: 881 [2004/05/29 21:29:45, 5, pid=25784] smbd/uid.c:change_to_user(267) change_to_user uid=(4065,4065) gid=(0,15) [2004/05/29 21:29:45, 4, pid=25784] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to /usr/local/lib/samba/nebula-home [2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2331) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(90) temp in parse_processed_dfs_path: .140.142.15.168/nebulahome. after trimming \'s [2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(99) parse_processed_dfs_path: hostname: 140.142.15.168 [2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(395) dfs_redirect: Not redirecting 140.142.15.168/nebulahome. [2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(400) dfs_redirect: Path converted to non-dfs path [2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(114) unix_convert called on file "" [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508) is_in_path: . [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2362) call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(270) dos_mode: . [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508) is_in_path: . [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(302) dos_mode returning d [2004/05/29 21:29:45, 10, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2478) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2488) SMB_QFBI - create: Sat May 29 21:19:49 2004 access: Sat May 29 21:28:07 2004 write: Sat May 29 21:19:49 2004 change: Sat May 29 21:19:49 2004 mode: 10 [2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(535) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(537) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(22,104) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(22,104) wrote 104 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 70 [2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889) got message type 0x0 of len 0x46 [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890) Transaction 5 of length 74 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=70 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=2688 smt_wct=15 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 560 (0x230) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 2 (0x2) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 3 (0x3) smb_bcc=5 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 01 00 00 05 01 ..... [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 25784) [2004/05/29 21:29:45, 4, pid=25784] smbd/uid.c:change_to_user(186) change_to_user: Skipping user change - already user [2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfsinfo(1804) call_trans2qfsinfo: level = 261 [2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(535) t2_rep: params_sent_thistime = 0, data_sent_thistime = 20, useable_space = 131012 [2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(537) t2_rep: params_to_send = 0, data_to_send = 20, paramsize = 0, datasize = 20 [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(22,80) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(22,80) wrote 80 [2004/05/29 21:29:45, 4, pid=25784] smbd/trans2.c:call_trans2qfsinfo(2087) SMBtrans2 info_level = 261 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 128 [2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889) got message type 0x0 of len 0x80 [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890) Transaction 6 of length 132 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=128 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=2752 smt_wct=15 smb_vwv[ 0]= 60 (0x3C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 60 (0x3C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=63 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 00 00 EC 03 00 00 00 00 5C 00 31 00 34 00 30 ...ì.... .\.1.4.0 [010] 00 2E 00 31 00 34 00 32 00 2E 00 31 00 35 00 2E ...1.4.2 ...1.5.. [020] 00 31 00 36 00 38 00 5C 00 6E 00 65 00 62 00 75 .1.6.8.\ .n.e.b.u [030] 00 6C 00 61 00 68 00 6F 00 6D 00 65 00 00 00 .l.a.h.o .m.e... [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 25784) [2004/05/29 21:29:45, 4, pid=25784] smbd/uid.c:change_to_user(186) change_to_user: Skipping user change - already user [2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2331) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(90) temp in parse_processed_dfs_path: .140.142.15.168/nebulahome. after trimming \'s [2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(99) parse_processed_dfs_path: hostname: 140.142.15.168 [2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(395) dfs_redirect: Not redirecting 140.142.15.168/nebulahome. [2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(400) dfs_redirect: Path converted to non-dfs path [2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(114) unix_convert called on file "" [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508) is_in_path: . [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2362) call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(270) dos_mode: . [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508) is_in_path: . [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(302) dos_mode returning d [2004/05/29 21:29:45, 10, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2478) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2488) SMB_QFBI - create: Sat May 29 21:19:49 2004 access: Sat May 29 21:28:07 2004 write: Sat May 29 21:19:49 2004 change: Sat May 29 21:19:49 2004 mode: 10 [2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(535) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(537) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(22,104) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(22,104) wrote 104 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 128 [2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889) got message type 0x0 of len 0x80 [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890) Transaction 7 of length 132 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=128 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=2816 smt_wct=15 smb_vwv[ 0]= 60 (0x3C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 60 (0x3C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=63 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 00 00 EC 03 00 00 00 00 5C 00 31 00 34 00 30 ...ì.... .\.1.4.0 [010] 00 2E 00 31 00 34 00 32 00 2E 00 31 00 35 00 2E ...1.4.2 ...1.5.. [020] 00 31 00 36 00 38 00 5C 00 6E 00 65 00 62 00 75 .1.6.8.\ .n.e.b.u [030] 00 6C 00 61 00 68 00 6F 00 6D 00 65 00 00 00 .l.a.h.o .m.e... [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 25784) [2004/05/29 21:29:45, 4, pid=25784] smbd/uid.c:change_to_user(186) change_to_user: Skipping user change - already user [2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2331) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(90) temp in parse_processed_dfs_path: .140.142.15.168/nebulahome. after trimming \'s [2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(99) parse_processed_dfs_path: hostname: 140.142.15.168 [2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(395) dfs_redirect: Not redirecting 140.142.15.168/nebulahome. [2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(400) dfs_redirect: Path converted to non-dfs path [2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(114) unix_convert called on file "" [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508) is_in_path: . [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2362) call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(270) dos_mode: . [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508) is_in_path: . [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(302) dos_mode returning d [2004/05/29 21:29:45, 10, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2478) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2488) SMB_QFBI - create: Sat May 29 21:19:49 2004 access: Sat May 29 21:28:07 2004 write: Sat May 29 21:19:49 2004 change: Sat May 29 21:19:49 2004 mode: 10 [2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(535) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(537) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(22,104) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(22,104) wrote 104 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 128 [2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889) got message type 0x0 of len 0x80 [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890) Transaction 8 of length 132 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=128 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=2880 smt_wct=15 smb_vwv[ 0]= 60 (0x3C) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 60 (0x3C) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=63 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 00 00 00 EC 03 00 00 00 00 5C 00 31 00 34 00 30 ...ì.... .\.1.4.0 [010] 00 2E 00 31 00 34 00 32 00 2E 00 31 00 35 00 2E ...1.4.2 ...1.5.. [020] 00 31 00 36 00 38 00 5C 00 6E 00 65 00 62 00 75 .1.6.8.\ .n.e.b.u [030] 00 6C 00 61 00 68 00 6F 00 6D 00 65 00 00 00 .l.a.h.o .m.e... [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 25784) [2004/05/29 21:29:45, 4, pid=25784] smbd/uid.c:change_to_user(186) change_to_user: Skipping user change - already user [2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2331) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(90) temp in parse_processed_dfs_path: .140.142.15.168/nebulahome. after trimming \'s [2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(99) parse_processed_dfs_path: hostname: 140.142.15.168 [2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(395) dfs_redirect: Not redirecting 140.142.15.168/nebulahome. [2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(400) dfs_redirect: Path converted to non-dfs path [2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(114) unix_convert called on file "" [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508) is_in_path: . [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2362) call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0 [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(270) dos_mode: . [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508) is_in_path: . [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(302) dos_mode returning d [2004/05/29 21:29:45, 10, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2478) call_trans2qfilepathinfo: SMB_FILE_BASIC_INFORMATION [2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:call_trans2qfilepathinfo(2488) SMB_QFBI - create: Sat May 29 21:19:49 2004 access: Sat May 29 21:28:07 2004 write: Sat May 29 21:19:49 2004 change: Sat May 29 21:19:49 2004 mode: 10 [2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(535) t2_rep: params_sent_thistime = 2, data_sent_thistime = 40, useable_space = 131010 [2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(537) t2_rep: params_to_send = 2, data_to_send = 40, paramsize = 2, datasize = 40 [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(22,104) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(22,104) wrote 104 [2004/05/29 21:29:45, 10, pid=25784] lib/util_sock.c:read_smb_length_return_keepalive(488) got smb length of 152 [2004/05/29 21:29:45, 6, pid=25784] smbd/process.c:process_smb(889) got message type 0x0 of len 0x98 [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:process_smb(890) Transaction 9 of length 156 [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(456) [2004/05/29 21:29:45, 5, pid=25784] lib/util.c:show_msg(466) size=152 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=1 smb_pid=788 smb_uid=100 smb_mid=2944 smt_wct=15 smb_vwv[ 0]= 84 (0x54) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 84 (0x54) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 1 (0x1) smb_bcc=87 [2004/05/29 21:29:45, 10, pid=25784] lib/util.c:dump_data(1864) [000] 63 00 2E 16 00 56 05 06 00 04 01 00 00 00 00 5C c....V.. .......\ [010] 00 31 00 34 00 30 00 2E 00 31 00 34 00 32 00 2E .1.4.0.. .1.4.2.. [020] 00 31 00 35 00 2E 00 31 00 36 00 38 00 5C 00 6E .1.5...1 .6.8.\.n [030] 00 65 00 62 00 75 00 6C 00 61 00 68 00 6F 00 6D .e.b.u.l .a.h.o.m [040] 00 65 00 5C 00 4D 00 59 00 48 00 4F 00 4D 00 45 .e.\.M.Y .H.O.M.E [050] 00 22 00 2A 00 00 00 .".*... [2004/05/29 21:29:45, 3, pid=25784] smbd/process.c:switch_message(685) switch message SMBtrans2 (pid 25784) [2004/05/29 21:29:45, 4, pid=25784] smbd/uid.c:change_to_user(186) change_to_user: Skipping user change - already user [2004/05/29 21:29:45, 3, pid=25784] smbd/trans2.c:call_trans2findfirst(1355) call_trans2findfirst: dirtype = 22, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384 [2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(90) temp in parse_processed_dfs_path: .140.142.15.168/nebulahome/MYHOME"*. after trimming \'s [2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(99) parse_processed_dfs_path: hostname: 140.142.15.168 [2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(111) parse_processed_dfs_path: servicename: nebulahome [2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:parse_processed_dfs_path(116) parse_processed_dfs_path: rest of the path: MYHOME"* [2004/05/29 21:29:45, 10, pid=25784] smbd/msdfs.c:resolve_dfs_path(307) resolve_dfs_path: Conn path = /usr/local/lib/samba/nebula-home req_path = MYHOME"* [2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(114) unix_convert called on file "MYHOME"*" [2004/05/29 21:29:45, 10, pid=25784] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [MYHOME"*] [2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(177) unix_convert begin: name = MYHOME"*, dirpath = , start = MYHOME"* [2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled(269) is_mangled MYHOME"* ? [2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component MYHOME"* (len 8) ? [2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled(269) is_mangled MYHOME"* ? [2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component MYHOME"* (len 8) ? [2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(312) New file MYHOME"* [2004/05/29 21:29:45, 5, pid=25784] smbd/msdfs.c:is_msdfs_link(244) is_msdfs_link: MYHOME"* does not exist. [2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(395) dfs_redirect: Not redirecting 140.142.15.168/nebulahome/MYHOME"*. [2004/05/29 21:29:45, 3, pid=25784] smbd/msdfs.c:dfs_redirect(400) dfs_redirect: Path converted to non-dfs path MYHOME"* [2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(114) unix_convert called on file "MYHOME"*" [2004/05/29 21:29:45, 10, pid=25784] smbd/statcache.c:stat_cache_lookup(251) stat_cache_lookup: lookup failed for name [MYHOME"*] [2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(177) unix_convert begin: name = MYHOME"*, dirpath = , start = MYHOME"* [2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled(269) is_mangled MYHOME"* ? [2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component MYHOME"* (len 8) ? [2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled(269) is_mangled MYHOME"* ? [2004/05/29 21:29:45, 10, pid=25784] smbd/mangle_hash2.c:is_mangled_component(208) is_mangled_component MYHOME"* (len 8) ? [2004/05/29 21:29:45, 5, pid=25784] smbd/filename.c:unix_convert(312) New file MYHOME"* [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508) is_in_path: MYHOME"* [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:call_trans2findfirst(1400) dir=./, mask = MYHOME"* [2004/05/29 21:29:45, 5, pid=25784] smbd/dir.c:start_dir(334) start_dir dir=./ [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508) is_in_path: ./ [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:29:45, 10, pid=25784] modules/vfs_extd_audit.c:audit_opendir(141) vfs_extd_audit: opendir ./ [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508) is_in_path: myhome [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:29:45, 3, pid=25784] smbd/dir.c:dptr_create(491) creating new dirptr 256 for path ./, expect_close = 1 [2004/05/29 21:29:45, 4, pid=25784] smbd/trans2.c:call_trans2findfirst(1430) dptr_num is 256, wcard = MYHOME"*, attr = 22 [2004/05/29 21:29:45, 8, pid=25784] smbd/trans2.c:call_trans2findfirst(1435) dirpath=<./> dontdescend=<> [2004/05/29 21:29:45, 8, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(879) get_lanman2_dir_entry:readdir on dirptr 0x8368a10 now at offset 1 [2004/05/29 21:29:45, 10, pid=25784] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(MYHOME"*,.) -> -1 [2004/05/29 21:29:45, 8, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(879) get_lanman2_dir_entry:readdir on dirptr 0x8368a10 now at offset 2 [2004/05/29 21:29:45, 10, pid=25784] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(MYHOME"*,.) -> -1 [2004/05/29 21:29:45, 8, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(879) get_lanman2_dir_entry:readdir on dirptr 0x8368a10 now at offset 3 [2004/05/29 21:29:45, 10, pid=25784] lib/ms_fnmatch.c:ms_fnmatch(240) ms_fnmatch(MYHOME"*,myhome) -> 0 [2004/05/29 21:29:45, 5, pid=25784] smbd/msdfs.c:is_msdfs_link(258) is_msdfs_link: ./myhome -> msdfs:kodak5.cac.washington.edu\homes [2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(931) get_lanman2_dir_entry: Masquerading msdfs link ./myhome as a directory [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(270) dos_mode: ./myhome [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode_from_sbuf(151) dos_mode_from_sbuf returning d [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1508) is_in_path: ./myhome [2004/05/29 21:29:45, 8, pid=25784] lib/util.c:is_in_path(1512) is_in_path: no name list. [2004/05/29 21:29:45, 8, pid=25784] smbd/dosmode.c:dos_mode(302) dos_mode returning d [2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(964) get_lanman2_dir_entry found ./myhome fname=myhome [2004/05/29 21:29:45, 10, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(1048) get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO [2004/05/29 21:29:45, 8, pid=25784] smbd/trans2.c:get_lanman2_dir_entry(879) get_lanman2_dir_entry:readdir on dirptr 0x8368a10 now at offset 3 [2004/05/29 21:29:45, 5, pid=25784] smbd/trans2.c:call_trans2findfirst(1481) call_trans2findfirst - (2) closing dptr_num 256 [2004/05/29 21:29:45, 4, pid=25784] smbd/dir.c:dptr_close_internal(224) closing dptr key 256 [2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(535) t2_rep: params_sent_thistime = 10, data_sent_thistime = 108, useable_space = 131010 [2004/05/29 21:29:45, 9, pid=25784] smbd/trans2.c:send_trans2_replies(537) t2_rep: params_to_send = 10, data_to_send = 108, paramsize = 10, datasize = 108 [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(432) write_socket(22,180) [2004/05/29 21:29:45, 6, pid=25784] lib/util_sock.c:write_socket(435) write_socket(22,180) wrote 180 [2004/05/29 21:29:45, 4, pid=25784] smbd/trans2.c:call_trans2findfirst(1511) SMBtrans2 mask=MYHOME"* directory=./ dirtype=22 numentries=1 [2004/05/29 21:29:55, 10, pid=25784] smbd/process.c:async_processing(122) async_processing: Doing async processing. [2004/05/29 21:29:55, 5, pid=25784] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/05/29 21:29:55, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:55, 5, pid=25784] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:29:55, 2, pid=25784] smbd/server.c:exit_server(568) Closing connections [2004/05/29 21:29:55, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:55, 5, pid=25784] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:29:55, 1, pid=25784] smbd/service.c:close_cnum(801) kleenex_q (140.142.110.103) closed connection to service nebulahome [2004/05/29 21:29:55, 10, pid=25784] modules/vfs_extd_audit.c:audit_disconnect(122) Disconnected from VFS module extd_audit [2004/05/29 21:29:55, 3, pid=25784] smbd/connection.c:yield_connection(69) Yielding connection to nebulahome [2004/05/29 21:29:55, 4, pid=25784] smbd/vfs.c:vfs_ChDir(654) vfs_ChDir to / [2004/05/29 21:29:55, 3, pid=25784] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:debug_nt_user_token(486) NT user token: (NULL) [2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:debug_unix_user_token(505) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2004/05/29 21:29:55, 5, pid=25784] smbd/uid.c:change_to_root_user(282) change_to_root_user: now uid=(0,0) gid=(0,0) [2004/05/29 21:29:55, 5, pid=25784] auth/auth_util.c:free_server_info(1324) attempting to free (and zero) a server_info structure [2004/05/29 21:29:55, 3, pid=25784] smbd/connection.c:yield_connection(69) Yielding connection to [2004/05/29 21:29:55, 3, pid=25784] smbd/connection.c:yield_connection(76) yield_connection: tdb_delete for name failed with error Record does not exist. [2004/05/29 21:29:55, 5, pid=25784] smbd/oplock.c:receive_local_message(107) receive_local_message: doing select with timeout of 1 ms [2004/05/29 21:29:55, 3, pid=25784] smbd/server.c:exit_server(611) Server exit (Caught TERM signal)