[2010/04/27 16:57:51, 6, pid=12782] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Tue Apr 27 16:56:37 2010 [2010/04/27 16:57:51, 3, pid=12782] smbd/oplock.c:911(init_oplocks) init_oplocks: initializing messages. [2010/04/27 16:57:51, 3, pid=12782] smbd/oplock_linux.c:223(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/04/27 16:57:51, 10, pid=12782] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x97bd9a0 [2010/04/27 16:57:51, 10, pid=12782] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(keepalive) 0x97bd9a0 [2010/04/27 16:57:51, 10, pid=12782] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x97e27a0 [2010/04/27 16:57:51, 10, pid=12782] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(deadtime) 0x97e27a0 [2010/04/27 16:57:51, 10, pid=12782] lib/events.c:287(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x97e2458 [2010/04/27 16:57:51, 10, pid=12782] smbd/process.c:720(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x97e2458 [2010/04/27 16:57:51, 10, pid=12782] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 155 [2010/04/27 16:57:51, 6, pid=12782] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x9b [2010/04/27 16:57:51, 3, pid=12782] smbd/process.c:1459(process_smb) Transaction 0 of length 159 (0 toread) [2010/04/27 16:57:51, 5, pid=12782] lib/util.c:632(show_msg) [2010/04/27 16:57:51, 5, pid=12782] lib/util.c:642(show_msg) size=155 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51283 smb_tid=65535 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=120 [2010/04/27 16:57:51, 10, pid=12782] ../lib/util/util.c:304(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4C 41 4E 4D 41 4E 31 RAM 1.0. .LANMAN1 [0020] 2E 30 00 02 57 69 6E 64 6F 77 73 20 66 6F 72 20 .0..Wind ows for [0030] 57 6F 72 6B 67 72 6F 75 70 73 20 33 2E 31 61 00 Workgrou ps 3.1a. [0040] 02 4C 4D 31 2E 32 58 30 30 32 00 02 4C 41 4E 4D .LM1.2X0 02..LANM [0050] 41 4E 32 2E 31 00 02 4E 54 20 4C 4D 20 30 2E 31 AN2.1..N T LM 0.1 [0060] 32 00 02 53 4D 42 20 32 2E 30 30 32 00 02 53 4D 2..SMB 2 .002..SM [0070] 42 20 32 2E 3F 3F 3F 00 B 2.???. [2010/04/27 16:57:51, 3, pid=12782] smbd/process.c:1273(switch_message) switch message SMBnegprot (pid 12782) conn 0x0 [2010/04/27 16:57:51, 3, pid=12782] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/04/27 16:57:51, 5, pid=12782] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/04/27 16:57:51, 5, pid=12782] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/04/27 16:57:51, 5, pid=12782] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/04/27 16:57:51, 3, pid=12782] smbd/negprot.c:567(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/04/27 16:57:51, 3, pid=12782] smbd/negprot.c:567(reply_negprot) Requested protocol [LANMAN1.0] [2010/04/27 16:57:51, 3, pid=12782] smbd/negprot.c:567(reply_negprot) Requested protocol [Windows for Workgroups 3.1a] [2010/04/27 16:57:51, 3, pid=12782] smbd/negprot.c:567(reply_negprot) Requested protocol [LM1.2X002] [2010/04/27 16:57:51, 3, pid=12782] smbd/negprot.c:567(reply_negprot) Requested protocol [LANMAN2.1] [2010/04/27 16:57:51, 3, pid=12782] smbd/negprot.c:567(reply_negprot) Requested protocol [NT LM 0.12] [2010/04/27 16:57:51, 3, pid=12782] smbd/negprot.c:567(reply_negprot) Requested protocol [SMB 2.002] [2010/04/27 16:57:51, 3, pid=12782] smbd/negprot.c:567(reply_negprot) Requested protocol [SMB 2.???] [2010/04/27 16:57:51, 10, pid=12782] lib/util.c:1979(set_remote_arch) set_remote_arch: Client arch is 'Win2K' [2010/04/27 16:57:51, 6, pid=12782] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Tue Apr 27 16:56:37 2010 [2010/04/27 16:57:51, 5, pid=12782] smbd/connection.c:142(claim_connection) claiming [] [2010/04/27 16:57:51, 10, pid=12782] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key EE310000FFFFFFFFFFFF [2010/04/27 16:57:51, 10, pid=12782] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x9801ba0 [2010/04/27 16:57:51, 10, pid=12782] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key EE310000FFFFFFFFFFFF [2010/04/27 16:57:51, 6, pid=12782] param/loadparm.c:7017(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Tue Apr 27 16:56:37 2010 [2010/04/27 16:57:51, 3, pid=12782] smbd/negprot.c:387(reply_nt1) using SPNEGO [2010/04/27 16:57:51, 3, pid=12782] smbd/negprot.c:672(reply_negprot) Selected protocol NT LM 0.12 [2010/04/27 16:57:51, 5, pid=12782] smbd/negprot.c:679(reply_negprot) negprot index=5 [2010/04/27 16:57:51, 5, pid=12782] lib/util.c:632(show_msg) [2010/04/27 16:57:51, 5, pid=12782] lib/util.c:642(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51283 smb_tid=65535 smb_pid=65279 smb_uid=0 smb_mid=0 smt_wct=17 smb_vwv[ 0]= 5 (0x5) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=60928 (0xEE00) smb_vwv[ 8]= 49 (0x31) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=23761 (0x5CD1) smb_vwv[13]=59319 (0xE7B7) smb_vwv[14]=51941 (0xCAE5) smb_vwv[15]= 8193 (0x2001) smb_vwv[16]= 254 (0xFE) smb_bcc=58 [2010/04/27 16:57:51, 10, pid=12782] ../lib/util/util.c:304(_dump_data) [0000] 6D 79 6C 61 68 00 00 00 00 00 00 00 00 00 00 00 mylah... ........ [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/04/27 16:57:51, 10, pid=12782] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 138 [2010/04/27 16:57:51, 6, pid=12782] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x8a [2010/04/27 16:57:51, 3, pid=12782] smbd/process.c:1459(process_smb) Transaction 1 of length 142 (0 toread) [2010/04/27 16:57:51, 5, pid=12782] lib/util.c:632(show_msg) [2010/04/27 16:57:51, 5, pid=12782] lib/util.c:642(show_msg) size=138 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=65535 smb_pid=65279 smb_uid=0 smb_mid=64 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 74 (0x4A) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=79 [2010/04/27 16:57:51, 10, pid=12782] ../lib/util/util.c:304(_dump_data) [0000] 60 48 06 06 2B 06 01 05 05 02 A0 3E 30 3C A0 0E `H..+... ...>0<.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 2A 0...+... ..7....* [0020] 04 28 4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 .(NTLMSS P....... [0030] 08 E2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0040] 00 00 06 01 B0 1D 00 00 00 0F 00 00 00 00 00 ........ ....... [2010/04/27 16:57:51, 3, pid=12782] smbd/process.c:1273(switch_message) switch message SMBsesssetupX (pid 12782) conn 0x0 [2010/04/27 16:57:51, 3, pid=12782] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/04/27 16:57:51, 5, pid=12782] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/04/27 16:57:51, 5, pid=12782] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/04/27 16:57:51, 5, pid=12782] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/04/27 16:57:51, 3, pid=12782] smbd/sesssetup.c:1404(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2010/04/27 16:57:51, 2, pid=12782] smbd/sesssetup.c:1360(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2010/04/27 16:57:51, 3, pid=12782] smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/04/27 16:57:51, 3, pid=12782] smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego) NativeOS=[] NativeLanMan=[] PrimaryDomain=[] [2010/04/27 16:57:51, 10, pid=12782] lib/util.c:1979(set_remote_arch) set_remote_arch: Client arch is 'Vista' [2010/04/27 16:57:51, 10, pid=12782] smbd/password.c:172(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/04/27 16:57:51, 10, pid=12782] smbd/sesssetup.c:1106(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 74, pblob->length = 74 [2010/04/27 16:57:51, 5, pid=12782] smbd/sesssetup.c:735(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/04/27 16:57:51, 3, pid=12782] smbd/sesssetup.c:786(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 40 [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for DC, security=user, encrypt passwords = yes [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:414(load_auth_module) load_auth_module: auth method guest has a valid init [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:414(load_auth_module) load_auth_module: auth method sam has a valid init [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match winbind:trustdomain [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:389(load_auth_module) load_auth_module: Attempting to find an auth method to match trustdomain [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:414(load_auth_module) load_auth_module: auth method trustdomain has a valid init [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:414(load_auth_module) load_auth_module: auth method winbind has a valid init [2010/04/27 16:57:51, 3, pid=12782] libsmb/ntlmssp.c:62(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xe2088297 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_NEGOTIATE_OEM NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_LM_KEY NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:98(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:98(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:98(get_ntlm_challenge) auth_get_challenge: module winbind did not want to specify a challenge [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:138(get_ntlm_challenge) auth_context challenge created by random [2010/04/27 16:57:51, 5, pid=12782] auth/auth.c:139(get_ntlm_challenge) challenge is: [2010/04/27 16:57:51, 5, pid=12782] ../lib/util/util.c:304(_dump_data) [0000] 4B AE 83 7D 08 F4 65 5C K..}..e\ [2010/04/27 16:57:51, 5, pid=12782] lib/util.c:632(show_msg) [2010/04/27 16:57:51, 5, pid=12782] lib/util.c:642(show_msg) size=322 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51201 smb_tid=65535 smb_pid=65279 smb_uid=100 smb_mid=64 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 225 (0xE1) smb_bcc=279 [2010/04/27 16:57:51, 10, pid=12782] ../lib/util/util.c:304(_dump_data) [0000] A1 81 DE 30 81 DB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 C5 04 81 C2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 12 00 12 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 89 E2 4B AE 83 7D 08 F4 65 5C 00 .......K ..}..e\. [0040] 00 00 00 00 00 00 00 80 00 80 00 42 00 00 00 55 ........ ...B...U [0050] 00 43 00 43 00 44 00 4F 00 4D 00 41 00 49 00 4E .C.C.D.O .M.A.I.N [0060] 00 02 00 12 00 55 00 43 00 43 00 44 00 4F 00 4D .....U.C .C.D.O.M [0070] 00 41 00 49 00 4E 00 01 00 0A 00 4D 00 59 00 4C .A.I.N.. ...M.Y.L [0080] 00 41 00 48 00 04 00 22 00 75 00 63 00 63 00 2E .A.H..." .u.c.c.. [0090] 00 67 00 75 00 2E 00 75 00 77 00 61 00 2E 00 65 .g.u...u .w.a...e [00A0] 00 64 00 75 00 2E 00 61 00 75 00 03 00 2E 00 6D .d.u...a .u.....m [00B0] 00 79 00 6C 00 61 00 68 00 2E 00 75 00 63 00 63 .y.l.a.h ...u.c.c [00C0] 00 2E 00 67 00 75 00 2E 00 75 00 77 00 61 00 2E ...g.u.. .u.w.a.. [00D0] 00 65 00 64 00 75 00 2E 00 61 00 75 00 00 00 00 .e.d.u.. .a.u.... [00E0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00F0] 00 62 00 61 00 20 00 33 00 2E 00 34 00 2E 00 37 .b.a. .3 ...4...7 [0100] 00 00 00 55 00 43 00 43 00 44 00 4F 00 4D 00 41 ...U.C.C .D.O.M.A [0110] 00 49 00 4E 00 00 00 .I.N... [2010/04/27 16:57:51, 10, pid=12782] lib/util_sock.c:789(read_smb_length_return_keepalive) got smb length of 524 [2010/04/27 16:57:51, 6, pid=12782] smbd/process.c:1456(process_smb) got message type 0x0 of len 0x20c [2010/04/27 16:57:51, 3, pid=12782] smbd/process.c:1459(process_smb) Transaction 2 of length 528 (0 toread) [2010/04/27 16:57:51, 5, pid=12782] lib/util.c:632(show_msg) [2010/04/27 16:57:51, 5, pid=12782] lib/util.c:642(show_msg) size=524 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=65535 smb_pid=65279 smb_uid=100 smb_mid=128 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 460 (0x1CC) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=465 [2010/04/27 16:57:51, 10, pid=12782] ../lib/util/util.c:304(_dump_data) [0000] A1 82 01 C8 30 82 01 C4 A2 82 01 C0 04 82 01 BC ....0... ........ [0010] 4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP. ........ [0020] 84 00 00 00 10 01 10 01 9C 00 00 00 12 00 12 00 ........ ........ [0030] 58 00 00 00 0E 00 0E 00 6A 00 00 00 0C 00 0C 00 X....... j....... [0040] 78 00 00 00 10 00 10 00 AC 01 00 00 15 82 88 E2 x....... ........ [0050] 06 01 B0 1D 00 00 00 0F E9 84 C4 46 ED E9 FA 4B ........ ...F...K [0060] B8 61 95 82 F3 24 0B EB 55 00 43 00 43 00 44 00 .a...$.. U.C.C.D. [0070] 4F 00 4D 00 41 00 49 00 4E 00 7A 00 61 00 6E 00 O.M.A.I. N.z.a.n. [0080] 63 00 68 00 65 00 79 00 4D 00 41 00 41 00 58 00 c.h.e.y. M.A.A.X. [0090] 45 00 4E 00 00 00 00 00 00 00 00 00 00 00 00 00 E.N..... ........ [00A0] 00 00 00 00 00 00 00 00 00 00 00 00 7F E8 4A 98 ........ ......J. [00B0] 17 FF E0 6B E7 DC AB 34 FA E8 90 C0 01 01 00 00 ...k...4 ........ [00C0] 00 00 00 00 61 0C 9A B6 E7 E5 CA 01 26 A5 83 61 ....a... ....&..a [00D0] 6F 94 53 AA 00 00 00 00 02 00 12 00 55 00 43 00 o.S..... ....U.C. [00E0] 43 00 44 00 4F 00 4D 00 41 00 49 00 4E 00 01 00 C.D.O.M. A.I.N... [00F0] 0A 00 4D 00 59 00 4C 00 41 00 48 00 04 00 22 00 ..M.Y.L. A.H...". [0100] 75 00 63 00 63 00 2E 00 67 00 75 00 2E 00 75 00 u.c.c... g.u...u. [0110] 77 00 61 00 2E 00 65 00 64 00 75 00 2E 00 61 00 w.a...e. d.u...a. [0120] 75 00 03 00 2E 00 6D 00 79 00 6C 00 61 00 68 00 u.....m. y.l.a.h. [0130] 2E 00 75 00 63 00 63 00 2E 00 67 00 75 00 2E 00 ..u.c.c. ..g.u... [0140] 75 00 77 00 61 00 2E 00 65 00 64 00 75 00 2E 00 u.w.a... e.d.u... [0150] 61 00 75 00 08 00 30 00 30 00 00 00 00 00 00 00 a.u...0. 0....... [0160] 00 00 00 00 00 30 00 00 E0 11 4D 1D 5A 52 6B 6D .....0.. ..M.ZRkm [0170] FF 77 57 3A BA D5 F9 27 B0 42 E3 45 6F ED 84 48 .wW:...' .B.Eo..H [0180] 2E E2 62 6D 9D 51 35 6E 0A 00 10 00 00 00 00 00 ..bm.Q5n ........ [0190] 00 00 00 00 00 00 00 00 00 00 00 00 09 00 14 00 ........ ........ [01A0] 63 00 69 00 66 00 73 00 2F 00 4D 00 59 00 4C 00 c.i.f.s. /.M.Y.L. [01B0] 41 00 48 00 00 00 00 00 00 00 00 00 36 12 57 D0 A.H..... ....6.W. [01C0] 3D 3D 79 E7 07 6E F6 2F 0C C4 67 1D 00 00 00 00 ==y..n./ ..g..... [01D0] 00 . [2010/04/27 16:57:51, 3, pid=12782] smbd/process.c:1273(switch_message) switch message SMBsesssetupX (pid 12782) conn 0x0 [2010/04/27 16:57:51, 3, pid=12782] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/04/27 16:57:51, 5, pid=12782] auth/token_util.c:522(debug_nt_user_token) NT user token: (NULL) [2010/04/27 16:57:51, 5, pid=12782] auth/token_util.c:548(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/04/27 16:57:51, 5, pid=12782] smbd/uid.c:368(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/04/27 16:57:51, 3, pid=12782] smbd/sesssetup.c:1404(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2010/04/27 16:57:51, 2, pid=12782] smbd/sesssetup.c:1360(setup_new_vc_session) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2010/04/27 16:57:51, 3, pid=12782] smbd/sesssetup.c:1160(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/04/27 16:57:51, 3, pid=12782] smbd/sesssetup.c:1202(reply_sesssetup_and_X_spnego) NativeOS=[] NativeLanMan=[] PrimaryDomain=[] [2010/04/27 16:57:51, 10, pid=12782] smbd/sesssetup.c:1106(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 460, pblob->length = 460 [2010/04/27 16:57:51, 3, pid=12782] libsmb/ntlmssp.c:745(ntlmssp_server_auth) Got user=[zanchey] domain=[UCCDOMAIN] workstation=[MAAXEN] len1=24 len2=272