[2010/08/27 12:13:56.680171, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:56.680335, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2010/08/27 12:13:56.680373, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2010/08/27 12:13:56.681105, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2010/08/27 12:13:56.681307, 3] smbd/oplock.c:894(init_oplocks) init_oplocks: initializing messages. [2010/08/27 12:13:56.681608, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/08/27 12:13:56.681651, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/08/27 12:13:56.681705, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb77edeb8 [2010/08/27 12:13:56.681758, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb77cb7e8 [2010/08/27 12:13:56.681818, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb77821c0 [2010/08/27 12:13:56.681977, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/08/27 12:13:56.682050, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/08/27 12:13:56.682089, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/08/27 12:13:56.682126, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.682147, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7353 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/08/27 12:13:56.682397, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/08/27 12:13:56.682783, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 7354) conn 0x0 [2010/08/27 12:13:56.682825, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:56.682866, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:56.682903, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:56.682990, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:56.683089, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/08/27 12:13:56.683134, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/08/27 12:13:56.683171, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/08/27 12:13:56.683207, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/08/27 12:13:56.683243, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/08/27 12:13:56.683279, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/08/27 12:13:56.683315, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/08/27 12:13:56.683351, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/08/27 12:13:56.683464, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/08/27 12:13:56.683509, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/08/27 12:13:56.683554, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/08/27 12:13:56.683621, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:56.683701, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/08/27 12:13:56.683833, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key BA1C0000FFFFFFFF0000 [2010/08/27 12:13:56.683916, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb7801dd8 [2010/08/27 12:13:56.684004, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key BA1C0000FFFFFFFF0000 [2010/08/27 12:13:56.684144, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:56.684285, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/08/27 12:13:56.684321, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/08/27 12:13:56.684356, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/08/27 12:13:56.684391, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.684411, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7353 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=47616 (0xBA00) smb_vwv[ 8]= 28 (0x1C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=46602 (0xB60A) smb_vwv[13]=53390 (0xD08E) smb_vwv[14]=52037 (0xCB45) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/08/27 12:13:56.684883, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/08/27 12:13:56.685450, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/08/27 12:13:56.685547, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/08/27 12:13:56.685592, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2010/08/27 12:13:56.685638, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.685665, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7353 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2010/08/27 12:13:56.686071, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2010/08/27 12:13:56.686348, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7354) conn 0x0 [2010/08/27 12:13:56.686384, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:56.686419, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:56.686454, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:56.686510, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:56.686553, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:56.686593, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:56.686635, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:56.686701, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/08/27 12:13:56.686748, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2010/08/27 12:13:56.686835, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/08/27 12:13:56.686879, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2010/08/27 12:13:56.686934, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/08/27 12:13:56.686978, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/08/27 12:13:56.687025, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/08/27 12:13:56.687060, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/08/27 12:13:56.687098, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/08/27 12:13:56.687154, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/08/27 12:13:56.687211, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/08/27 12:13:56.687264, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/08/27 12:13:56.687301, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/08/27 12:13:56.687340, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/08/27 12:13:56.687393, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/08/27 12:13:56.687450, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/08/27 12:13:56.687486, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/08/27 12:13:56.687539, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/08/27 12:13:56.687581, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/08/27 12:13:56.687616, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/08/27 12:13:56.687651, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/08/27 12:13:56.687689, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/08/27 12:13:56.687735, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/08/27 12:13:56.687776, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/08/27 12:13:56.687817, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/08/27 12:13:56.687852, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/08/27 12:13:56.687891, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/08/27 12:13:56.687951, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/08/27 12:13:56.687987, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/08/27 12:13:56.688039, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/08/27 12:13:56.688298, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2010/08/27 12:13:56.688987, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/08/27 12:13:56.689024, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/08/27 12:13:56.689078, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/08/27 12:13:56.689113, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/08/27 12:13:56.689156, 5] ../lib/util/util.c:278(_dump_data) [0000] DB EB 55 63 38 94 E6 9C ..Uc8... [2010/08/27 12:13:56.689533, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : dbeb55633894e69c Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/08/27 12:13:56.690966, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.690990, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=7353 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2010/08/27 12:13:56.691257, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 DB EB 55 63 38 94 E6 9C 00 ......`. .Uc8.... [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 34 .b.a. .3 ...5...4 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2010/08/27 12:13:56.692228, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2010/08/27 12:13:56.692277, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2010/08/27 12:13:56.692349, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2010/08/27 12:13:56.692412, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.692450, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7353 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2010/08/27 12:13:56.692813, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 25 0A 51 BE ........ ...`%.Q. [0050] ED F4 58 59 00 00 00 00 00 00 00 00 00 00 00 00 ..XY.... ........ [0060] 00 00 00 00 3E FA F2 86 E4 94 E1 47 DC D6 62 8E ....>... ...G..b. [0070] 84 DB DF F2 5C 42 F3 8E 29 74 88 49 4D 00 53 00 ....\B.. )t.IM.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 70 B8 U.B.A.R. ..S.I.p. [00B0] F5 FA 90 7E 3E 01 60 9D 54 77 EA 97 9E 31 00 55 ...~>.`. Tw...1.U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2010/08/27 12:13:56.693302, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7354) conn 0x0 [2010/08/27 12:13:56.693339, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:56.693397, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:56.693451, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:56.693508, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:56.693546, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:56.693581, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:56.693618, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:56.693655, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2010/08/27 12:13:56.693725, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 250a51beedf4585900000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 3efaf286e494e147dcd6628e84dbdff25c42f38e29748849 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/08/27 12:13:56.694452, 10] ../lib/util/util.c:278(_dump_data) [0000] 70 B8 F5 FA 90 7E 3E 01 60 9D 54 77 EA 97 9E 31 p....~>. `.Tw...1 NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/08/27 12:13:56.695089, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2010/08/27 12:13:56.695137, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/08/27 12:13:56.695198, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/08/27 12:13:56.695256, 5] ../lib/util/util.c:278(_dump_data) [0000] A7 19 97 BE 66 23 3C E8 ....f#<. [2010/08/27 12:13:56.859388, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:56.859521, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2010/08/27 12:13:56.859558, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2010/08/27 12:13:56.860156, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2010/08/27 12:13:56.860319, 3] smbd/oplock.c:894(init_oplocks) init_oplocks: initializing messages. [2010/08/27 12:13:56.860630, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/08/27 12:13:56.860703, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/08/27 12:13:56.860754, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb77edeb8 [2010/08/27 12:13:56.860796, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb77cb7e8 [2010/08/27 12:13:56.860837, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb77821c0 [2010/08/27 12:13:56.860920, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/08/27 12:13:56.860964, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/08/27 12:13:56.861000, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/08/27 12:13:56.861035, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.861055, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7357 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/08/27 12:13:56.861241, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/08/27 12:13:56.861592, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 7358) conn 0x0 [2010/08/27 12:13:56.861632, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:56.861672, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:56.861708, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:56.861787, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:56.861881, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/08/27 12:13:56.861933, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/08/27 12:13:56.861970, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/08/27 12:13:56.862006, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/08/27 12:13:56.862042, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/08/27 12:13:56.862078, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/08/27 12:13:56.862114, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/08/27 12:13:56.862150, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/08/27 12:13:56.862186, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/08/27 12:13:56.862222, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/08/27 12:13:56.862266, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/08/27 12:13:56.862339, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:56.862415, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/08/27 12:13:56.862542, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key BE1C0000FFFFFFFF0000 [2010/08/27 12:13:56.862624, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb7801dd8 [2010/08/27 12:13:56.862695, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key BE1C0000FFFFFFFF0000 [2010/08/27 12:13:56.862843, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:56.862963, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/08/27 12:13:56.862998, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/08/27 12:13:56.863033, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/08/27 12:13:56.863069, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.863089, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7357 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=48640 (0xBE00) smb_vwv[ 8]= 28 (0x1C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=46602 (0xB60A) smb_vwv[13]=53390 (0xD08E) smb_vwv[14]=52037 (0xCB45) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/08/27 12:13:56.863515, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/08/27 12:13:56.864024, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/08/27 12:13:56.864071, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/08/27 12:13:56.864107, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2010/08/27 12:13:56.864145, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.864166, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7357 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2010/08/27 12:13:56.864518, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2010/08/27 12:13:56.864763, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7358) conn 0x0 [2010/08/27 12:13:56.864799, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:56.864834, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:56.864869, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:56.864926, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:56.864968, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:56.865009, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:56.865079, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:56.865126, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/08/27 12:13:56.865171, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2010/08/27 12:13:56.865234, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/08/27 12:13:56.865279, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2010/08/27 12:13:56.865336, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/08/27 12:13:56.865379, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/08/27 12:13:56.865427, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/08/27 12:13:56.865461, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/08/27 12:13:56.865497, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/08/27 12:13:56.865534, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/08/27 12:13:56.865569, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/08/27 12:13:56.865604, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/08/27 12:13:56.865640, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/08/27 12:13:56.865677, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/08/27 12:13:56.865712, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/08/27 12:13:56.865748, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/08/27 12:13:56.865783, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/08/27 12:13:56.865820, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/08/27 12:13:56.865856, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/08/27 12:13:56.865900, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/08/27 12:13:56.865936, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/08/27 12:13:56.865973, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/08/27 12:13:56.866008, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/08/27 12:13:56.866043, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/08/27 12:13:56.866080, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/08/27 12:13:56.866115, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/08/27 12:13:56.866153, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/08/27 12:13:56.866189, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/08/27 12:13:56.866225, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/08/27 12:13:56.866276, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/08/27 12:13:56.866461, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2010/08/27 12:13:56.867163, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/08/27 12:13:56.867199, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/08/27 12:13:56.867244, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/08/27 12:13:56.867279, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/08/27 12:13:56.867313, 5] ../lib/util/util.c:278(_dump_data) [0000] 61 A3 14 E9 88 07 06 4D a......M [2010/08/27 12:13:56.867610, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : 61a314e98807064d Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/08/27 12:13:56.868869, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.868892, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=7357 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2010/08/27 12:13:56.869135, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 61 A3 14 E9 88 07 06 4D 00 ......`a ......M. [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 34 .b.a. .3 ...5...4 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2010/08/27 12:13:56.869939, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2010/08/27 12:13:56.869986, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2010/08/27 12:13:56.870021, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2010/08/27 12:13:56.870082, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.870102, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7357 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2010/08/27 12:13:56.870471, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 43 65 1C F9 ........ ...`Ce.. [0050] F5 6D 05 50 00 00 00 00 00 00 00 00 00 00 00 00 .m.P.... ........ [0060] 00 00 00 00 72 83 44 6F 8D CC FC 9E 8B 0D 04 BC ....r.Do ........ [0070] AA D3 9F 13 20 B4 18 92 15 89 23 98 4D 00 53 00 .... ... ..#.M.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 8E 2B U.B.A.R. ..S.I..+ [00B0] 87 2F 84 2A 43 D3 8E 60 47 C5 33 D8 71 AE 00 55 ./.*C..` G.3.q..U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2010/08/27 12:13:56.870930, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7358) conn 0x0 [2010/08/27 12:13:56.870967, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:56.871002, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:56.871037, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:56.871093, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:56.871130, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:56.871166, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:56.871202, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:56.871240, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2010/08/27 12:13:56.871309, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 43651cf9f56d055000000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 7283446f8dccfc9e8b0d04bcaad39f1320b4189215892398 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/08/27 12:13:56.871888, 10] ../lib/util/util.c:278(_dump_data) [0000] 8E 2B 87 2F 84 2A 43 D3 8E 60 47 C5 33 D8 71 AE .+./.*C. .`G.3.q. NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/08/27 12:13:56.872409, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2010/08/27 12:13:56.872456, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/08/27 12:13:56.872492, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/08/27 12:13:56.872526, 5] ../lib/util/util.c:278(_dump_data) [0000] 6F 89 3A 09 F4 83 C6 2E o.:..... [2010/08/27 12:13:56.975360, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:56.975490, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2010/08/27 12:13:56.975527, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2010/08/27 12:13:56.976086, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2010/08/27 12:13:56.976263, 3] smbd/oplock.c:894(init_oplocks) init_oplocks: initializing messages. [2010/08/27 12:13:56.976536, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/08/27 12:13:56.976576, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/08/27 12:13:56.976628, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb77edeb8 [2010/08/27 12:13:56.976672, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb77cb7e8 [2010/08/27 12:13:56.976712, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb77821c0 [2010/08/27 12:13:56.976801, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/08/27 12:13:56.976846, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/08/27 12:13:56.976882, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/08/27 12:13:56.976957, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.976978, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7359 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/08/27 12:13:56.977242, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/08/27 12:13:56.977600, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 7360) conn 0x0 [2010/08/27 12:13:56.977641, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:56.977681, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:56.977718, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:56.977800, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:56.977899, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/08/27 12:13:56.977945, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/08/27 12:13:56.977981, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/08/27 12:13:56.978017, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/08/27 12:13:56.978053, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/08/27 12:13:56.978089, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/08/27 12:13:56.978125, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/08/27 12:13:56.978161, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/08/27 12:13:56.978197, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/08/27 12:13:56.978233, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/08/27 12:13:56.978276, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/08/27 12:13:56.978354, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:56.978431, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/08/27 12:13:56.978555, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key C01C0000FFFFFFFF0000 [2010/08/27 12:13:56.978611, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb7801dd8 [2010/08/27 12:13:56.978686, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key C01C0000FFFFFFFF0000 [2010/08/27 12:13:56.978813, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:56.978934, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/08/27 12:13:56.978970, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/08/27 12:13:56.979005, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/08/27 12:13:56.979040, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.979089, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7359 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=49152 (0xC000) smb_vwv[ 8]= 28 (0x1C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=46602 (0xB60A) smb_vwv[13]=53390 (0xD08E) smb_vwv[14]=52037 (0xCB45) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/08/27 12:13:56.979517, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/08/27 12:13:56.980715, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/08/27 12:13:56.980769, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/08/27 12:13:56.980805, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2010/08/27 12:13:56.980841, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.980861, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7359 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2010/08/27 12:13:56.981215, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2010/08/27 12:13:56.981461, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7360) conn 0x0 [2010/08/27 12:13:56.981497, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:56.981533, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:56.981568, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:56.981625, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:56.981667, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:56.981707, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:56.981748, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:56.981794, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/08/27 12:13:56.981838, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2010/08/27 12:13:56.981910, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/08/27 12:13:56.981948, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2010/08/27 12:13:56.982031, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/08/27 12:13:56.982075, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/08/27 12:13:56.982119, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/08/27 12:13:56.982154, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/08/27 12:13:56.982217, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/08/27 12:13:56.982255, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/08/27 12:13:56.982290, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/08/27 12:13:56.982325, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/08/27 12:13:56.982361, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/08/27 12:13:56.982398, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/08/27 12:13:56.982434, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/08/27 12:13:56.982469, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/08/27 12:13:56.982505, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/08/27 12:13:56.982542, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/08/27 12:13:56.982578, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/08/27 12:13:56.982613, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/08/27 12:13:56.982648, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/08/27 12:13:56.982685, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/08/27 12:13:56.982721, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/08/27 12:13:56.982756, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/08/27 12:13:56.982793, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/08/27 12:13:56.982849, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/08/27 12:13:56.982907, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/08/27 12:13:56.982954, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/08/27 12:13:56.982996, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/08/27 12:13:56.983049, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/08/27 12:13:56.983233, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2010/08/27 12:13:56.983941, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/08/27 12:13:56.983976, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/08/27 12:13:56.984018, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/08/27 12:13:56.984052, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/08/27 12:13:56.984085, 5] ../lib/util/util.c:278(_dump_data) [0000] 27 36 EB 72 D5 09 AD D8 '6.r.... [2010/08/27 12:13:56.984390, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : 2736eb72d509add8 Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/08/27 12:13:56.985597, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.985619, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=7359 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2010/08/27 12:13:56.985851, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 27 36 EB 72 D5 09 AD D8 00 ......`' 6.r..... [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 34 .b.a. .3 ...5...4 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2010/08/27 12:13:56.990865, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2010/08/27 12:13:56.990917, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2010/08/27 12:13:56.990952, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2010/08/27 12:13:56.990985, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:56.991005, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7359 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2010/08/27 12:13:56.991342, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 B0 18 78 BA ........ ...`..x. [0050] CD E0 7A D5 00 00 00 00 00 00 00 00 00 00 00 00 ..z..... ........ [0060] 00 00 00 00 01 65 A0 C2 47 8C BC EB 8E 19 95 92 .....e.. G....... [0070] 6A 1A 83 1D 05 E2 1C 12 44 4B 69 D2 4D 00 53 00 j....... DKi.M.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 AF D1 U.B.A.R. ..S.I... [00B0] D6 B4 66 D5 D0 6D 51 73 0A 85 91 5C CD 5F 00 55 ..f..mQs ...\._.U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2010/08/27 12:13:56.991818, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7360) conn 0x0 [2010/08/27 12:13:56.991853, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:56.991888, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:56.991921, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:56.991976, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:56.992012, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:56.992046, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:56.992081, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:56.992117, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2010/08/27 12:13:56.992189, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : b01878bacde07ad500000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 0165a0c2478cbceb8e1995926a1a831d05e21c12444b69d2 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/08/27 12:13:56.992753, 10] ../lib/util/util.c:278(_dump_data) [0000] AF D1 D6 B4 66 D5 D0 6D 51 73 0A 85 91 5C CD 5F ....f..m Qs...\._ NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/08/27 12:13:56.993272, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2010/08/27 12:13:56.993317, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/08/27 12:13:56.993351, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/08/27 12:13:56.993384, 5] ../lib/util/util.c:278(_dump_data) [0000] A5 9B 45 C6 0B 47 51 D6 ..E..GQ. [2010/08/27 12:13:57.141894, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.142029, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2010/08/27 12:13:57.142064, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2010/08/27 12:13:57.142643, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2010/08/27 12:13:57.142791, 3] smbd/oplock.c:894(init_oplocks) init_oplocks: initializing messages. [2010/08/27 12:13:57.143038, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/08/27 12:13:57.143077, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/08/27 12:13:57.143125, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb77edeb8 [2010/08/27 12:13:57.143166, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb77cb7e8 [2010/08/27 12:13:57.143205, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb77821c0 [2010/08/27 12:13:57.143286, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/08/27 12:13:57.143330, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/08/27 12:13:57.143364, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/08/27 12:13:57.143399, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.143419, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7361 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/08/27 12:13:57.143600, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/08/27 12:13:57.143984, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 7362) conn 0x0 [2010/08/27 12:13:57.144024, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.144062, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.144098, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.144180, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.144272, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/08/27 12:13:57.144316, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/08/27 12:13:57.144352, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/08/27 12:13:57.144387, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/08/27 12:13:57.144422, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/08/27 12:13:57.144457, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/08/27 12:13:57.144492, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/08/27 12:13:57.144527, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/08/27 12:13:57.144562, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/08/27 12:13:57.144597, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/08/27 12:13:57.144640, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/08/27 12:13:57.144712, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.144787, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/08/27 12:13:57.144938, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key C21C0000FFFFFFFF0000 [2010/08/27 12:13:57.144991, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb7801dd8 [2010/08/27 12:13:57.145066, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key C21C0000FFFFFFFF0000 [2010/08/27 12:13:57.145194, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.145311, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/08/27 12:13:57.145346, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/08/27 12:13:57.145380, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/08/27 12:13:57.145415, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.145435, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7361 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=49664 (0xC200) smb_vwv[ 8]= 28 (0x1C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=20128 (0x4EA0) smb_vwv[13]=53391 (0xD08F) smb_vwv[14]=52037 (0xCB45) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/08/27 12:13:57.145849, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/08/27 12:13:57.146394, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/08/27 12:13:57.146442, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/08/27 12:13:57.146476, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2010/08/27 12:13:57.146511, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.146530, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7361 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2010/08/27 12:13:57.146873, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2010/08/27 12:13:57.147116, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7362) conn 0x0 [2010/08/27 12:13:57.147151, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.147186, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.147219, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.147274, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.147315, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:57.147354, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:57.147394, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:57.147441, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/08/27 12:13:57.147484, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2010/08/27 12:13:57.147547, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/08/27 12:13:57.147583, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2010/08/27 12:13:57.147635, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/08/27 12:13:57.147677, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/08/27 12:13:57.147721, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/08/27 12:13:57.147754, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/08/27 12:13:57.147788, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/08/27 12:13:57.147824, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/08/27 12:13:57.147884, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/08/27 12:13:57.147919, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/08/27 12:13:57.147953, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/08/27 12:13:57.147989, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/08/27 12:13:57.148024, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/08/27 12:13:57.148058, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/08/27 12:13:57.148092, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/08/27 12:13:57.148128, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/08/27 12:13:57.148167, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/08/27 12:13:57.148201, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/08/27 12:13:57.148235, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/08/27 12:13:57.148271, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/08/27 12:13:57.148306, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/08/27 12:13:57.148340, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/08/27 12:13:57.148376, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/08/27 12:13:57.148411, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/08/27 12:13:57.148448, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/08/27 12:13:57.148482, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/08/27 12:13:57.148517, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/08/27 12:13:57.148567, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/08/27 12:13:57.148744, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2010/08/27 12:13:57.149435, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/08/27 12:13:57.149469, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/08/27 12:13:57.149513, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/08/27 12:13:57.149547, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/08/27 12:13:57.149580, 5] ../lib/util/util.c:278(_dump_data) [0000] BD BB AB DD EB A3 80 CF ........ [2010/08/27 12:13:57.149874, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : bdbbabddeba380cf Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/08/27 12:13:57.151133, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.151156, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=7361 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2010/08/27 12:13:57.151391, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 BD BB AB DD EB A3 80 CF 00 ......`. ........ [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 34 .b.a. .3 ...5...4 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2010/08/27 12:13:57.152198, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2010/08/27 12:13:57.152244, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2010/08/27 12:13:57.152279, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2010/08/27 12:13:57.152313, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.152332, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7361 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2010/08/27 12:13:57.152675, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 56 F1 95 66 ........ ...`V..f [0050] 14 A4 81 3E 00 00 00 00 00 00 00 00 00 00 00 00 ...>.... ........ [0060] 00 00 00 00 E5 BF 21 D3 4D CB B7 8B 51 81 FB B2 ......!. M...Q... [0070] B1 8D E8 A9 84 5E 36 2D 0A 6A E9 36 4D 00 53 00 .....^6- .j.6M.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 81 DC U.B.A.R. ..S.I... [00B0] CB 69 F4 A6 EC 54 A3 03 7C 22 13 5A CD 11 00 55 .i...T.. |".Z...U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2010/08/27 12:13:57.153152, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7362) conn 0x0 [2010/08/27 12:13:57.153188, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.153222, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.153256, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.153312, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.153348, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:57.153382, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:57.153418, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:57.153454, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2010/08/27 12:13:57.153522, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 56f1956614a4813e00000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : e5bf21d34dcbb78b5181fbb2b18de8a9845e362d0a6ae936 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/08/27 12:13:57.154077, 10] ../lib/util/util.c:278(_dump_data) [0000] 81 DC CB 69 F4 A6 EC 54 A3 03 7C 22 13 5A CD 11 ...i...T ..|".Z.. NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/08/27 12:13:57.154601, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2010/08/27 12:13:57.154645, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/08/27 12:13:57.154680, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/08/27 12:13:57.154713, 5] ../lib/util/util.c:278(_dump_data) [0000] 4B 21 41 7C 7E 84 15 4E K!A|~..N [2010/08/27 12:13:57.341861, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.342005, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2010/08/27 12:13:57.342041, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2010/08/27 12:13:57.342614, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2010/08/27 12:13:57.342764, 3] smbd/oplock.c:894(init_oplocks) init_oplocks: initializing messages. [2010/08/27 12:13:57.343070, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/08/27 12:13:57.343109, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/08/27 12:13:57.343159, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb77edeb8 [2010/08/27 12:13:57.343202, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb77cb7e8 [2010/08/27 12:13:57.343241, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb77821c0 [2010/08/27 12:13:57.343324, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/08/27 12:13:57.343368, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/08/27 12:13:57.343403, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/08/27 12:13:57.343438, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.343457, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7363 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/08/27 12:13:57.343637, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/08/27 12:13:57.343987, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 7364) conn 0x0 [2010/08/27 12:13:57.344027, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.344065, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.344132, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.344216, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.344314, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/08/27 12:13:57.344358, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/08/27 12:13:57.344394, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/08/27 12:13:57.344429, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/08/27 12:13:57.344464, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/08/27 12:13:57.344499, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/08/27 12:13:57.344533, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/08/27 12:13:57.344568, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/08/27 12:13:57.344603, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/08/27 12:13:57.344638, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/08/27 12:13:57.344682, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/08/27 12:13:57.344746, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.344820, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/08/27 12:13:57.344947, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key C41C0000FFFFFFFF0000 [2010/08/27 12:13:57.344999, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb7801dd8 [2010/08/27 12:13:57.345068, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key C41C0000FFFFFFFF0000 [2010/08/27 12:13:57.345193, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.345312, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/08/27 12:13:57.345347, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/08/27 12:13:57.345381, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/08/27 12:13:57.345416, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.345435, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7363 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=50176 (0xC400) smb_vwv[ 8]= 28 (0x1C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=20128 (0x4EA0) smb_vwv[13]=53391 (0xD08F) smb_vwv[14]=52037 (0xCB45) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/08/27 12:13:57.345850, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/08/27 12:13:57.347173, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/08/27 12:13:57.347227, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/08/27 12:13:57.347263, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2010/08/27 12:13:57.347297, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.347317, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7363 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2010/08/27 12:13:57.347689, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2010/08/27 12:13:57.347934, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7364) conn 0x0 [2010/08/27 12:13:57.347969, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.348003, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.348037, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.348092, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.348167, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:57.348207, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:57.348247, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:57.348296, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/08/27 12:13:57.348339, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2010/08/27 12:13:57.348403, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/08/27 12:13:57.348439, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2010/08/27 12:13:57.348492, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/08/27 12:13:57.348534, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/08/27 12:13:57.348579, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/08/27 12:13:57.348613, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/08/27 12:13:57.348648, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/08/27 12:13:57.348684, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/08/27 12:13:57.348719, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/08/27 12:13:57.348753, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/08/27 12:13:57.348787, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/08/27 12:13:57.348823, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/08/27 12:13:57.348858, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/08/27 12:13:57.348892, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/08/27 12:13:57.348927, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/08/27 12:13:57.348987, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/08/27 12:13:57.349021, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/08/27 12:13:57.349055, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/08/27 12:13:57.349089, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/08/27 12:13:57.349125, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/08/27 12:13:57.349159, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/08/27 12:13:57.349193, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/08/27 12:13:57.349229, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/08/27 12:13:57.349262, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/08/27 12:13:57.349300, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/08/27 12:13:57.349333, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/08/27 12:13:57.349368, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/08/27 12:13:57.349419, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/08/27 12:13:57.349599, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2010/08/27 12:13:57.350272, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/08/27 12:13:57.350308, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/08/27 12:13:57.350353, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/08/27 12:13:57.350410, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/08/27 12:13:57.350444, 5] ../lib/util/util.c:278(_dump_data) [0000] 82 43 D5 FD 6E 4D 1C F7 .C..nM.. [2010/08/27 12:13:57.350746, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : 8243d5fd6e4d1cf7 Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/08/27 12:13:57.351944, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.351965, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=7363 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2010/08/27 12:13:57.352225, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 82 43 D5 FD 6E 4D 1C F7 00 ......`. C..nM... [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 34 .b.a. .3 ...5...4 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2010/08/27 12:13:57.357229, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2010/08/27 12:13:57.357281, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2010/08/27 12:13:57.357316, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2010/08/27 12:13:57.357350, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.357369, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7363 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2010/08/27 12:13:57.357712, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 78 5F B3 AB ........ ...`x_.. [0050] 17 F4 25 E2 00 00 00 00 00 00 00 00 00 00 00 00 ..%..... ........ [0060] 00 00 00 00 3B F9 20 39 71 46 EF D5 BC 26 59 C6 ....;. 9 qF...&Y. [0070] 71 D7 AF 4C 2C 67 75 B8 8E 8A CE 6B 4D 00 53 00 q..L,gu. ...kM.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 8D 85 U.B.A.R. ..S.I... [00B0] BA 96 32 55 4F 2E 3C AC A2 23 56 E5 62 7C 00 55 ..2UO.<. .#V.b|.U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2010/08/27 12:13:57.358171, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7364) conn 0x0 [2010/08/27 12:13:57.358206, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.358241, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.358313, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.358394, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.358432, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:57.358466, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:57.358502, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:57.358539, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2010/08/27 12:13:57.358608, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 785fb3ab17f425e200000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 3bf920397146efd5bc2659c671d7af4c2c6775b88e8ace6b DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/08/27 12:13:57.359144, 10] ../lib/util/util.c:278(_dump_data) [0000] 8D 85 BA 96 32 55 4F 2E 3C AC A2 23 56 E5 62 7C ....2UO. <..#V.b| NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/08/27 12:13:57.359635, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2010/08/27 12:13:57.359679, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/08/27 12:13:57.359736, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/08/27 12:13:57.359770, 5] ../lib/util/util.c:278(_dump_data) [0000] FC 7B BA 12 CD DF 9B 42 .{.....B [2010/08/27 12:13:57.439811, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.439932, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2010/08/27 12:13:57.439967, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2010/08/27 12:13:57.440512, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2010/08/27 12:13:57.440649, 3] smbd/oplock.c:894(init_oplocks) init_oplocks: initializing messages. [2010/08/27 12:13:57.440858, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/08/27 12:13:57.440896, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/08/27 12:13:57.440944, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb77edeb8 [2010/08/27 12:13:57.440986, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb77cb7e8 [2010/08/27 12:13:57.441025, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb77821c0 [2010/08/27 12:13:57.441106, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/08/27 12:13:57.441150, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/08/27 12:13:57.441184, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/08/27 12:13:57.441219, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.441238, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7365 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/08/27 12:13:57.441419, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/08/27 12:13:57.441766, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 7366) conn 0x0 [2010/08/27 12:13:57.441807, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.441844, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.441879, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.441978, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.442063, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/08/27 12:13:57.442106, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/08/27 12:13:57.442141, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/08/27 12:13:57.442176, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/08/27 12:13:57.442211, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/08/27 12:13:57.442275, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/08/27 12:13:57.442310, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/08/27 12:13:57.442345, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/08/27 12:13:57.442380, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/08/27 12:13:57.442415, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/08/27 12:13:57.442457, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/08/27 12:13:57.442514, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.442588, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/08/27 12:13:57.442715, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key C61C0000FFFFFFFF0000 [2010/08/27 12:13:57.442766, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb7801dd8 [2010/08/27 12:13:57.442834, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key C61C0000FFFFFFFF0000 [2010/08/27 12:13:57.442960, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.443074, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/08/27 12:13:57.443109, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/08/27 12:13:57.443143, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/08/27 12:13:57.443178, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.443197, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7365 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=50688 (0xC600) smb_vwv[ 8]= 28 (0x1C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=20128 (0x4EA0) smb_vwv[13]=53391 (0xD08F) smb_vwv[14]=52037 (0xCB45) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/08/27 12:13:57.443614, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/08/27 12:13:57.444120, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/08/27 12:13:57.444170, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/08/27 12:13:57.444205, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2010/08/27 12:13:57.444239, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.444258, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7365 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2010/08/27 12:13:57.444603, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2010/08/27 12:13:57.444906, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7366) conn 0x0 [2010/08/27 12:13:57.444942, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.444977, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.445010, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.445066, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.445107, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:57.445146, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:57.445184, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:57.445228, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/08/27 12:13:57.445269, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2010/08/27 12:13:57.445331, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/08/27 12:13:57.445366, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2010/08/27 12:13:57.445418, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/08/27 12:13:57.445460, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/08/27 12:13:57.445502, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/08/27 12:13:57.445536, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/08/27 12:13:57.445570, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/08/27 12:13:57.445606, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/08/27 12:13:57.445641, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/08/27 12:13:57.445674, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/08/27 12:13:57.445709, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/08/27 12:13:57.445745, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/08/27 12:13:57.445779, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/08/27 12:13:57.445813, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/08/27 12:13:57.445848, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/08/27 12:13:57.445884, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/08/27 12:13:57.445926, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/08/27 12:13:57.445960, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/08/27 12:13:57.445994, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/08/27 12:13:57.446030, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/08/27 12:13:57.446065, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/08/27 12:13:57.446099, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/08/27 12:13:57.446161, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/08/27 12:13:57.446196, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/08/27 12:13:57.446233, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/08/27 12:13:57.446267, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/08/27 12:13:57.446302, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/08/27 12:13:57.446352, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/08/27 12:13:57.446527, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2010/08/27 12:13:57.447186, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/08/27 12:13:57.447221, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/08/27 12:13:57.447263, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/08/27 12:13:57.447297, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/08/27 12:13:57.447331, 5] ../lib/util/util.c:278(_dump_data) [0000] 7B 4E 03 8B 7B 8D F1 F0 {N..{... [2010/08/27 12:13:57.447621, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : 7b4e038b7b8df1f0 Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/08/27 12:13:57.448845, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.448868, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=7365 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2010/08/27 12:13:57.449108, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 7B 4E 03 8B 7B 8D F1 F0 00 ......`{ N..{.... [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 34 .b.a. .3 ...5...4 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2010/08/27 12:13:57.449940, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2010/08/27 12:13:57.449987, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2010/08/27 12:13:57.450022, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2010/08/27 12:13:57.450056, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.450076, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7365 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2010/08/27 12:13:57.450493, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 9F 7E 94 D5 ........ ...`.~.. [0050] A4 4F E5 8E 00 00 00 00 00 00 00 00 00 00 00 00 .O...... ........ [0060] 00 00 00 00 02 B7 AD 05 FB 8F A5 21 E4 DD CA E3 ........ ...!.... [0070] 00 4C 3A DD E3 EF B4 F5 9E 15 55 3C 4D 00 53 00 .L:..... ..Ulength = 190 [2010/08/27 12:13:57.451336, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 9f7e94d5a44fe58e00000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 02b7ad05fb8fa521e4ddcae3004c3adde3efb4f59e15553c DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/08/27 12:13:57.451904, 10] ../lib/util/util.c:278(_dump_data) [0000] 54 26 39 2B F6 ED 8D 09 E0 79 AD 68 78 C7 33 2E T&9+.... .y.hx.3. NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/08/27 12:13:57.452412, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2010/08/27 12:13:57.452455, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/08/27 12:13:57.452491, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/08/27 12:13:57.452524, 5] ../lib/util/util.c:278(_dump_data) [0000] 44 81 B3 DC 63 13 C8 CF D...c... [2010/08/27 12:13:57.606566, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.606693, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2010/08/27 12:13:57.606729, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2010/08/27 12:13:57.607382, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2010/08/27 12:13:57.607528, 3] smbd/oplock.c:894(init_oplocks) init_oplocks: initializing messages. [2010/08/27 12:13:57.607769, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/08/27 12:13:57.607807, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/08/27 12:13:57.607855, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb77edeb8 [2010/08/27 12:13:57.607896, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb77cb7e8 [2010/08/27 12:13:57.607935, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb77821c0 [2010/08/27 12:13:57.608016, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/08/27 12:13:57.608059, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/08/27 12:13:57.608094, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/08/27 12:13:57.608128, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.608153, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7367 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/08/27 12:13:57.608333, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/08/27 12:13:57.608679, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 7368) conn 0x0 [2010/08/27 12:13:57.608718, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.608756, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.608792, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.608869, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.608963, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/08/27 12:13:57.609006, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/08/27 12:13:57.609042, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/08/27 12:13:57.609077, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/08/27 12:13:57.609111, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/08/27 12:13:57.609146, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/08/27 12:13:57.609181, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/08/27 12:13:57.609216, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/08/27 12:13:57.609251, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/08/27 12:13:57.609286, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/08/27 12:13:57.609328, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/08/27 12:13:57.609391, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.609493, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/08/27 12:13:57.609620, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key C81C0000FFFFFFFF0000 [2010/08/27 12:13:57.609671, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb7801dd8 [2010/08/27 12:13:57.609742, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key C81C0000FFFFFFFF0000 [2010/08/27 12:13:57.609879, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.610005, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/08/27 12:13:57.610040, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/08/27 12:13:57.610074, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/08/27 12:13:57.610108, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.610128, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7367 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=51200 (0xC800) smb_vwv[ 8]= 28 (0x1C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=20128 (0x4EA0) smb_vwv[13]=53391 (0xD08F) smb_vwv[14]=52037 (0xCB45) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/08/27 12:13:57.610542, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/08/27 12:13:57.611051, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/08/27 12:13:57.611098, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/08/27 12:13:57.611132, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2010/08/27 12:13:57.611166, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.611186, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7367 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2010/08/27 12:13:57.611528, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2010/08/27 12:13:57.611770, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7368) conn 0x0 [2010/08/27 12:13:57.611805, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.611839, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.611873, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.611956, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.611997, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:57.612036, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:57.612075, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:57.612121, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/08/27 12:13:57.612167, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2010/08/27 12:13:57.612231, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/08/27 12:13:57.612266, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2010/08/27 12:13:57.612349, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/08/27 12:13:57.612393, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/08/27 12:13:57.612437, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/08/27 12:13:57.612471, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/08/27 12:13:57.612505, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/08/27 12:13:57.612540, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/08/27 12:13:57.612575, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/08/27 12:13:57.612609, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/08/27 12:13:57.612643, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/08/27 12:13:57.612679, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/08/27 12:13:57.612713, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/08/27 12:13:57.612747, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/08/27 12:13:57.612781, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/08/27 12:13:57.612817, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/08/27 12:13:57.612851, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/08/27 12:13:57.612884, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/08/27 12:13:57.612919, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/08/27 12:13:57.612954, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/08/27 12:13:57.612989, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/08/27 12:13:57.613022, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/08/27 12:13:57.613058, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/08/27 12:13:57.613092, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/08/27 12:13:57.613129, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/08/27 12:13:57.613164, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/08/27 12:13:57.613199, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/08/27 12:13:57.613249, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/08/27 12:13:57.613451, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2010/08/27 12:13:57.614125, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/08/27 12:13:57.614160, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/08/27 12:13:57.614204, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/08/27 12:13:57.614238, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/08/27 12:13:57.614271, 5] ../lib/util/util.c:278(_dump_data) [0000] E9 06 9E EF D0 9A DA 34 .......4 [2010/08/27 12:13:57.614567, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : e9069eefd09ada34 Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/08/27 12:13:57.615783, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.615804, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=7367 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2010/08/27 12:13:57.616040, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 E9 06 9E EF D0 9A DA 34 00 ......`. ......4. [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 34 .b.a. .3 ...5...4 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2010/08/27 12:13:57.616865, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2010/08/27 12:13:57.616910, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2010/08/27 12:13:57.616945, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2010/08/27 12:13:57.616978, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.616998, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7367 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2010/08/27 12:13:57.617340, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 86 F5 9C 70 ........ ...`...p [0050] 0F 16 A2 4A 00 00 00 00 00 00 00 00 00 00 00 00 ...J.... ........ [0060] 00 00 00 00 6B 00 01 8B 33 D2 45 B0 35 4C E2 B8 ....k... 3.E.5L.. [0070] F8 4D 90 55 FF 9F 18 0D 07 D9 83 FB 4D 00 53 00 .M.U.... ....M.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 99 44 U.B.A.R. ..S.I..D [00B0] 6F 7B 7B 47 3B 9B C6 37 15 2E 0F E0 08 5F 00 55 o{{G;..7 ....._.U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2010/08/27 12:13:57.617841, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7368) conn 0x0 [2010/08/27 12:13:57.617877, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.617919, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.617953, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.618007, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.618044, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:57.618078, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:57.618113, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:57.618150, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2010/08/27 12:13:57.618219, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 86f59c700f16a24a00000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 6b00018b33d245b0354ce2b8f84d9055ff9f180d07d983fb DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/08/27 12:13:57.618785, 10] ../lib/util/util.c:278(_dump_data) [0000] 99 44 6F 7B 7B 47 3B 9B C6 37 15 2E 0F E0 08 5F .Do{{G;. .7....._ NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/08/27 12:13:57.619287, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2010/08/27 12:13:57.619332, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/08/27 12:13:57.619367, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/08/27 12:13:57.619401, 5] ../lib/util/util.c:278(_dump_data) [0000] 98 11 79 99 CB D6 69 A3 ..y...i. [2010/08/27 12:13:57.719801, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.719923, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2010/08/27 12:13:57.719959, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2010/08/27 12:13:57.720486, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2010/08/27 12:13:57.720621, 3] smbd/oplock.c:894(init_oplocks) init_oplocks: initializing messages. [2010/08/27 12:13:57.720841, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/08/27 12:13:57.720878, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/08/27 12:13:57.720926, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb77edeb8 [2010/08/27 12:13:57.720967, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb77cb7e8 [2010/08/27 12:13:57.721007, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb77821c0 [2010/08/27 12:13:57.721117, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/08/27 12:13:57.721160, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/08/27 12:13:57.721195, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/08/27 12:13:57.721230, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.721249, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7369 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/08/27 12:13:57.721429, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/08/27 12:13:57.721774, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 7370) conn 0x0 [2010/08/27 12:13:57.721814, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.721852, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.721899, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.721975, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.722064, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/08/27 12:13:57.722107, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/08/27 12:13:57.722142, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/08/27 12:13:57.722177, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/08/27 12:13:57.722212, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/08/27 12:13:57.722247, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/08/27 12:13:57.722282, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/08/27 12:13:57.722317, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/08/27 12:13:57.722352, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/08/27 12:13:57.722386, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/08/27 12:13:57.722429, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/08/27 12:13:57.722480, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.722554, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/08/27 12:13:57.722678, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key CA1C0000FFFFFFFF0000 [2010/08/27 12:13:57.722729, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb7801dd8 [2010/08/27 12:13:57.722798, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key CA1C0000FFFFFFFF0000 [2010/08/27 12:13:57.722924, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.723039, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/08/27 12:13:57.723094, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/08/27 12:13:57.723128, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/08/27 12:13:57.723163, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.723183, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7369 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=51712 (0xCA00) smb_vwv[ 8]= 28 (0x1C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=20128 (0x4EA0) smb_vwv[13]=53391 (0xD08F) smb_vwv[14]=52037 (0xCB45) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/08/27 12:13:57.723596, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/08/27 12:13:57.724874, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/08/27 12:13:57.724926, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/08/27 12:13:57.724961, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2010/08/27 12:13:57.724996, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.725015, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7369 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2010/08/27 12:13:57.725358, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2010/08/27 12:13:57.725599, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7370) conn 0x0 [2010/08/27 12:13:57.725634, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.725669, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.725703, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.725758, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.725799, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:57.725838, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:57.725876, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:57.725931, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/08/27 12:13:57.725974, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2010/08/27 12:13:57.726061, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/08/27 12:13:57.726097, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2010/08/27 12:13:57.726148, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/08/27 12:13:57.726190, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/08/27 12:13:57.726235, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/08/27 12:13:57.726269, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/08/27 12:13:57.726302, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/08/27 12:13:57.726338, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/08/27 12:13:57.726373, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/08/27 12:13:57.726407, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/08/27 12:13:57.726441, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/08/27 12:13:57.726478, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/08/27 12:13:57.726512, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/08/27 12:13:57.726546, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/08/27 12:13:57.726581, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/08/27 12:13:57.726617, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/08/27 12:13:57.726651, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/08/27 12:13:57.726685, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/08/27 12:13:57.726719, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/08/27 12:13:57.726755, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/08/27 12:13:57.726789, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/08/27 12:13:57.726823, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/08/27 12:13:57.726860, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/08/27 12:13:57.726894, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/08/27 12:13:57.726931, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/08/27 12:13:57.726965, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/08/27 12:13:57.727000, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/08/27 12:13:57.727050, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/08/27 12:13:57.727227, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2010/08/27 12:13:57.727916, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/08/27 12:13:57.727952, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/08/27 12:13:57.727995, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/08/27 12:13:57.728029, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/08/27 12:13:57.728062, 5] ../lib/util/util.c:278(_dump_data) [0000] A0 67 B3 BB 56 A5 6C 8B .g..V.l. [2010/08/27 12:13:57.728362, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : a067b3bb56a56c8b Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/08/27 12:13:57.729614, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.729636, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=7369 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2010/08/27 12:13:57.729874, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 A0 67 B3 BB 56 A5 6C 8B 00 ......`. g..V.l.. [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 34 .b.a. .3 ...5...4 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2010/08/27 12:13:57.734843, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2010/08/27 12:13:57.734895, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2010/08/27 12:13:57.734930, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2010/08/27 12:13:57.734964, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.734983, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7369 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2010/08/27 12:13:57.735354, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 E3 33 9A 33 ........ ...`.3.3 [0050] C7 C0 8B C3 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 AC 5D 04 9C 04 89 4E 0F 9B BA A4 04 .....].. ..N..... [0070] D3 8B 12 F8 3C 80 C1 78 E9 59 81 66 4D 00 53 00 ....<..x .Y.fM.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 30 70 U.B.A.R. ..S.I.0p [00B0] 5C 8D 72 CE D0 88 CD 19 C3 0E 99 4F 7B 3B 00 55 \.r..... ...O{;.U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2010/08/27 12:13:57.735807, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7370) conn 0x0 [2010/08/27 12:13:57.735843, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.735877, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.735911, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.735966, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.736002, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:57.736036, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:57.736072, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:57.736109, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2010/08/27 12:13:57.736180, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : e3339a33c7c08bc300000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : ac5d049c04894e0f9bbaa404d38b12f83c80c178e9598166 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/08/27 12:13:57.736745, 10] ../lib/util/util.c:278(_dump_data) [0000] 30 70 5C 8D 72 CE D0 88 CD 19 C3 0E 99 4F 7B 3B 0p\.r... .....O{; NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/08/27 12:13:57.737250, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2010/08/27 12:13:57.737294, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/08/27 12:13:57.737329, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/08/27 12:13:57.737363, 5] ../lib/util/util.c:278(_dump_data) [0000] 84 59 0D 60 81 52 5F AA .Y.`.R_. [2010/08/27 12:13:57.883308, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.883431, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2010/08/27 12:13:57.883467, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2010/08/27 12:13:57.884039, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2010/08/27 12:13:57.884184, 3] smbd/oplock.c:894(init_oplocks) init_oplocks: initializing messages. [2010/08/27 12:13:57.884413, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/08/27 12:13:57.884451, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/08/27 12:13:57.884499, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb77edeb8 [2010/08/27 12:13:57.884541, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb77cb7e8 [2010/08/27 12:13:57.884580, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb77821c0 [2010/08/27 12:13:57.884661, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/08/27 12:13:57.884704, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/08/27 12:13:57.884739, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/08/27 12:13:57.884773, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.884792, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7371 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/08/27 12:13:57.884973, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/08/27 12:13:57.885351, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 7372) conn 0x0 [2010/08/27 12:13:57.885391, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.885430, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.885466, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.885544, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.885640, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/08/27 12:13:57.885683, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/08/27 12:13:57.885719, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/08/27 12:13:57.885754, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/08/27 12:13:57.885789, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/08/27 12:13:57.885824, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/08/27 12:13:57.885859, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/08/27 12:13:57.885902, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/08/27 12:13:57.885938, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/08/27 12:13:57.885973, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/08/27 12:13:57.886016, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/08/27 12:13:57.886068, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.886142, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/08/27 12:13:57.886268, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key CC1C0000FFFFFFFF0000 [2010/08/27 12:13:57.886319, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb7801dd8 [2010/08/27 12:13:57.886388, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key CC1C0000FFFFFFFF0000 [2010/08/27 12:13:57.886515, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:57.886664, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/08/27 12:13:57.886700, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/08/27 12:13:57.886734, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/08/27 12:13:57.886769, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.886788, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7371 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=52224 (0xCC00) smb_vwv[ 8]= 28 (0x1C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=20128 (0x4EA0) smb_vwv[13]=53391 (0xD08F) smb_vwv[14]=52037 (0xCB45) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/08/27 12:13:57.887235, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/08/27 12:13:57.887760, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/08/27 12:13:57.887806, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/08/27 12:13:57.887840, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2010/08/27 12:13:57.887875, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.887894, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7371 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2010/08/27 12:13:57.888244, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2010/08/27 12:13:57.888487, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7372) conn 0x0 [2010/08/27 12:13:57.888522, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.888557, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.888591, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.888646, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.888688, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:57.888726, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:57.888766, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:57.888811, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/08/27 12:13:57.888855, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2010/08/27 12:13:57.888919, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/08/27 12:13:57.888955, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2010/08/27 12:13:57.889007, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/08/27 12:13:57.889050, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/08/27 12:13:57.889093, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/08/27 12:13:57.889126, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/08/27 12:13:57.889185, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/08/27 12:13:57.889222, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/08/27 12:13:57.889256, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/08/27 12:13:57.889291, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/08/27 12:13:57.889325, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/08/27 12:13:57.889361, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/08/27 12:13:57.889396, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/08/27 12:13:57.889430, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/08/27 12:13:57.889464, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/08/27 12:13:57.889500, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/08/27 12:13:57.889535, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/08/27 12:13:57.889569, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/08/27 12:13:57.889603, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/08/27 12:13:57.889639, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/08/27 12:13:57.889674, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/08/27 12:13:57.889708, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/08/27 12:13:57.889744, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/08/27 12:13:57.889778, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/08/27 12:13:57.889815, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/08/27 12:13:57.889851, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/08/27 12:13:57.889892, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/08/27 12:13:57.889942, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/08/27 12:13:57.890123, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2010/08/27 12:13:57.890812, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/08/27 12:13:57.890847, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/08/27 12:13:57.890894, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/08/27 12:13:57.890928, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/08/27 12:13:57.890962, 5] ../lib/util/util.c:278(_dump_data) [0000] 6C 47 33 92 34 80 0E 63 lG3.4..c [2010/08/27 12:13:57.891259, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : 6c47339234800e63 Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/08/27 12:13:57.892520, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.892543, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=7371 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2010/08/27 12:13:57.892782, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 6C 47 33 92 34 80 0E 63 00 ......`l G3.4..c. [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 34 .b.a. .3 ...5...4 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2010/08/27 12:13:57.893629, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2010/08/27 12:13:57.893675, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2010/08/27 12:13:57.893710, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2010/08/27 12:13:57.893744, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:57.893764, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7371 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2010/08/27 12:13:57.894115, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 A4 B9 B2 DA ........ ...`.... [0050] 68 84 C3 4D 00 00 00 00 00 00 00 00 00 00 00 00 h..M.... ........ [0060] 00 00 00 00 55 14 E8 28 7F E8 6D 63 D9 11 F0 60 ....U..( ..mc...` [0070] CC 1C 7C 33 C9 32 DD 4E 56 94 7D 51 4D 00 53 00 ..|3.2.N V.}QM.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 03 AC U.B.A.R. ..S.I... [00B0] ED 00 31 52 AE D1 89 92 69 CD 1D 19 CC 88 00 55 ..1R.... i......U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2010/08/27 12:13:57.894593, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7372) conn 0x0 [2010/08/27 12:13:57.894629, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:57.894663, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:57.894696, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:57.894752, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:57.894788, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:57.894823, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:57.894858, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:57.894895, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2010/08/27 12:13:57.894963, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : a4b9b2da6884c34d00000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 5514e8287fe86d63d911f060cc1c7c33c932dd4e56947d51 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/08/27 12:13:57.895508, 10] ../lib/util/util.c:278(_dump_data) [0000] 03 AC ED 00 31 52 AE D1 89 92 69 CD 1D 19 CC 88 ....1R.. ..i..... NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/08/27 12:13:57.896027, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2010/08/27 12:13:57.896072, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/08/27 12:13:57.896107, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/08/27 12:13:57.896144, 5] ../lib/util/util.c:278(_dump_data) [0000] 1D 71 31 F1 0B 98 42 4D .q1...BM [2010/08/27 12:13:58.090337, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:58.090469, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2010/08/27 12:13:58.090505, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2010/08/27 12:13:58.091119, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2010/08/27 12:13:58.091262, 3] smbd/oplock.c:894(init_oplocks) init_oplocks: initializing messages. [2010/08/27 12:13:58.091505, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/08/27 12:13:58.091543, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/08/27 12:13:58.091591, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb77edeb8 [2010/08/27 12:13:58.091633, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb77cb7e8 [2010/08/27 12:13:58.091673, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb77821c0 [2010/08/27 12:13:58.091753, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/08/27 12:13:58.091798, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/08/27 12:13:58.091833, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/08/27 12:13:58.091867, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.091887, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7374 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/08/27 12:13:58.092084, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/08/27 12:13:58.092490, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 7375) conn 0x0 [2010/08/27 12:13:58.092532, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:58.092571, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:58.092606, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:58.092682, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:58.092776, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/08/27 12:13:58.092819, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/08/27 12:13:58.092855, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/08/27 12:13:58.092890, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/08/27 12:13:58.092925, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/08/27 12:13:58.092960, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/08/27 12:13:58.092995, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/08/27 12:13:58.093030, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/08/27 12:13:58.093066, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/08/27 12:13:58.093100, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/08/27 12:13:58.093144, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/08/27 12:13:58.093202, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:58.093277, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/08/27 12:13:58.093396, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key CF1C0000FFFFFFFF0000 [2010/08/27 12:13:58.093448, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb7801dd8 [2010/08/27 12:13:58.093524, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key CF1C0000FFFFFFFF0000 [2010/08/27 12:13:58.093653, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:58.093771, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/08/27 12:13:58.093806, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/08/27 12:13:58.093840, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/08/27 12:13:58.093875, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.093904, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7374 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=52992 (0xCF00) smb_vwv[ 8]= 28 (0x1C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=59191 (0xE737) smb_vwv[13]=53391 (0xD08F) smb_vwv[14]=52037 (0xCB45) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/08/27 12:13:58.094318, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/08/27 12:13:58.095592, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/08/27 12:13:58.095674, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/08/27 12:13:58.095710, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2010/08/27 12:13:58.095744, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.095764, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7374 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2010/08/27 12:13:58.096108, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2010/08/27 12:13:58.096358, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7375) conn 0x0 [2010/08/27 12:13:58.096393, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:58.096428, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:58.096462, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:58.096516, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:58.096558, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:58.096596, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:58.096635, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:58.096690, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/08/27 12:13:58.096734, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2010/08/27 12:13:58.096797, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/08/27 12:13:58.096832, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2010/08/27 12:13:58.096885, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/08/27 12:13:58.096928, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/08/27 12:13:58.096972, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/08/27 12:13:58.097005, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/08/27 12:13:58.097039, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/08/27 12:13:58.097075, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/08/27 12:13:58.097110, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/08/27 12:13:58.097144, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/08/27 12:13:58.097179, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/08/27 12:13:58.097231, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/08/27 12:13:58.097295, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/08/27 12:13:58.097330, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/08/27 12:13:58.097365, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/08/27 12:13:58.097401, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/08/27 12:13:58.097435, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/08/27 12:13:58.097469, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/08/27 12:13:58.097503, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/08/27 12:13:58.097539, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/08/27 12:13:58.097574, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/08/27 12:13:58.097607, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/08/27 12:13:58.097644, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/08/27 12:13:58.097678, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/08/27 12:13:58.097715, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/08/27 12:13:58.097750, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/08/27 12:13:58.097785, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/08/27 12:13:58.097836, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/08/27 12:13:58.098022, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2010/08/27 12:13:58.098691, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/08/27 12:13:58.098753, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/08/27 12:13:58.098797, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/08/27 12:13:58.098831, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/08/27 12:13:58.098865, 5] ../lib/util/util.c:278(_dump_data) [0000] 4E E2 E9 8F 02 02 2D 64 N.....-d [2010/08/27 12:13:58.099167, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : 4ee2e98f02022d64 Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/08/27 12:13:58.100398, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.100420, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=7374 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2010/08/27 12:13:58.100657, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 4E E2 E9 8F 02 02 2D 64 00 ......`N .....-d. [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 34 .b.a. .3 ...5...4 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2010/08/27 12:13:58.105751, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2010/08/27 12:13:58.105805, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2010/08/27 12:13:58.105840, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2010/08/27 12:13:58.105874, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.105903, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7374 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2010/08/27 12:13:58.106249, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 E5 A3 82 75 ........ ...`...u [0050] 9F 8F C3 74 00 00 00 00 00 00 00 00 00 00 00 00 ...t.... ........ [0060] 00 00 00 00 B3 AD C9 B6 6F 55 AD F6 05 33 7E BB ........ oU...3~. [0070] ED E5 0A EE CB FC ED A3 06 37 74 A4 4D 00 53 00 ........ .7t.M.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 3E A4 U.B.A.R. ..S.I.>. [00B0] F7 F8 3D 8B 5E FF EB B1 A8 44 10 D3 38 D0 00 55 ..=.^... .D..8..U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2010/08/27 12:13:58.106704, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7375) conn 0x0 [2010/08/27 12:13:58.106768, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:58.106803, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:58.106837, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:58.106936, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:58.106973, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:58.107011, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:58.107047, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:58.107084, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2010/08/27 12:13:58.107152, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : e5a382759f8fc37400000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : b3adc9b66f55adf605337ebbede50aeecbfceda3063774a4 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/08/27 12:13:58.107708, 10] ../lib/util/util.c:278(_dump_data) [0000] 3E A4 F7 F8 3D 8B 5E FF EB B1 A8 44 10 D3 38 D0 >...=.^. ...D..8. NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/08/27 12:13:58.108239, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2010/08/27 12:13:58.108284, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/08/27 12:13:58.108319, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/08/27 12:13:58.108352, 5] ../lib/util/util.c:278(_dump_data) [0000] 5B A0 44 81 1C B8 89 42 [.D....B [2010/08/27 12:13:58.188983, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:58.189104, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2010/08/27 12:13:58.189139, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2010/08/27 12:13:58.189691, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2010/08/27 12:13:58.189859, 3] smbd/oplock.c:894(init_oplocks) init_oplocks: initializing messages. [2010/08/27 12:13:58.190130, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/08/27 12:13:58.190169, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/08/27 12:13:58.190219, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb77edeb8 [2010/08/27 12:13:58.190261, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb77cb7e8 [2010/08/27 12:13:58.190300, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb77821c0 [2010/08/27 12:13:58.190388, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/08/27 12:13:58.190431, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/08/27 12:13:58.190466, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/08/27 12:13:58.190500, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.190519, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7376 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/08/27 12:13:58.190701, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/08/27 12:13:58.191049, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 7377) conn 0x0 [2010/08/27 12:13:58.191089, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:58.191128, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:58.191163, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:58.191241, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:58.191333, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/08/27 12:13:58.191376, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/08/27 12:13:58.191465, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/08/27 12:13:58.191501, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/08/27 12:13:58.191536, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/08/27 12:13:58.191571, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/08/27 12:13:58.191606, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/08/27 12:13:58.191640, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/08/27 12:13:58.191675, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/08/27 12:13:58.191710, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/08/27 12:13:58.191752, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/08/27 12:13:58.191817, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:58.191893, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/08/27 12:13:58.192020, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key D11C0000FFFFFFFF0000 [2010/08/27 12:13:58.192073, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb7801dd8 [2010/08/27 12:13:58.192144, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key D11C0000FFFFFFFF0000 [2010/08/27 12:13:58.192271, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:58.192397, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/08/27 12:13:58.192432, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/08/27 12:13:58.192466, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/08/27 12:13:58.192501, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.192521, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7376 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=53504 (0xD100) smb_vwv[ 8]= 28 (0x1C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=59191 (0xE737) smb_vwv[13]=53391 (0xD08F) smb_vwv[14]=52037 (0xCB45) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/08/27 12:13:58.192940, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/08/27 12:13:58.193455, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/08/27 12:13:58.193502, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/08/27 12:13:58.193536, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2010/08/27 12:13:58.193570, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.193590, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7376 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2010/08/27 12:13:58.193967, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2010/08/27 12:13:58.194210, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7377) conn 0x0 [2010/08/27 12:13:58.194246, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:58.194281, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:58.194314, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:58.194369, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:58.194410, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:58.194448, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:58.194487, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:58.194534, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/08/27 12:13:58.194577, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2010/08/27 12:13:58.194640, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/08/27 12:13:58.194675, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2010/08/27 12:13:58.194727, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/08/27 12:13:58.194770, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/08/27 12:13:58.194813, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/08/27 12:13:58.194846, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/08/27 12:13:58.194880, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/08/27 12:13:58.194916, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/08/27 12:13:58.194951, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/08/27 12:13:58.194984, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/08/27 12:13:58.195019, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/08/27 12:13:58.195055, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/08/27 12:13:58.195089, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/08/27 12:13:58.195123, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/08/27 12:13:58.195158, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/08/27 12:13:58.195193, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/08/27 12:13:58.195228, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/08/27 12:13:58.195262, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/08/27 12:13:58.195296, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/08/27 12:13:58.195355, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/08/27 12:13:58.195390, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/08/27 12:13:58.195423, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/08/27 12:13:58.195460, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/08/27 12:13:58.195494, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/08/27 12:13:58.195530, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/08/27 12:13:58.195565, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/08/27 12:13:58.195600, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/08/27 12:13:58.195649, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/08/27 12:13:58.195828, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2010/08/27 12:13:58.196494, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/08/27 12:13:58.196530, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/08/27 12:13:58.196574, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/08/27 12:13:58.196608, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/08/27 12:13:58.196641, 5] ../lib/util/util.c:278(_dump_data) [0000] 01 6A A3 8D 82 26 B4 3D .j...&.= [2010/08/27 12:13:58.196987, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : 016aa38d8226b43d Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/08/27 12:13:58.198235, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.198261, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=7376 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2010/08/27 12:13:58.198515, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 01 6A A3 8D 82 26 B4 3D 00 ......`. j...&.=. [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 34 .b.a. .3 ...5...4 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2010/08/27 12:13:58.199401, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2010/08/27 12:13:58.199448, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2010/08/27 12:13:58.199485, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2010/08/27 12:13:58.199519, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.199538, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7376 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2010/08/27 12:13:58.199882, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 40 9D 0C 5C ........ ...`@..\ [0050] 50 13 E3 99 00 00 00 00 00 00 00 00 00 00 00 00 P....... ........ [0060] 00 00 00 00 AD 14 A2 94 1E 2D 7C 42 7D 22 F4 28 ........ .-|B}".( [0070] 85 B8 83 4E 15 DA EB B8 F2 65 89 66 4D 00 53 00 ...N.... .e.fM.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 E4 86 U.B.A.R. ..S.I... [00B0] 62 F8 17 52 63 4F DB 2C 17 7F E1 1D 04 20 00 55 b..RcO., ..... .U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2010/08/27 12:13:58.200343, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7377) conn 0x0 [2010/08/27 12:13:58.200379, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:58.200414, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:58.200448, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:58.200504, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:58.200541, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:58.200575, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:58.200612, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:58.200674, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2010/08/27 12:13:58.200745, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 409d0c5c5013e39900000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : ad14a2941e2d7c427d22f42885b8834e15daebb8f2658966 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/08/27 12:13:58.201293, 10] ../lib/util/util.c:278(_dump_data) [0000] E4 86 62 F8 17 52 63 4F DB 2C 17 7F E1 1D 04 20 ..b..RcO .,..... NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/08/27 12:13:58.201797, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2010/08/27 12:13:58.201840, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/08/27 12:13:58.201875, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/08/27 12:13:58.201916, 5] ../lib/util/util.c:278(_dump_data) [0000] C0 48 D8 B2 90 CE 5B C8 .H....[. [2010/08/27 12:13:58.362649, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:58.362829, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2010/08/27 12:13:58.362865, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2010/08/27 12:13:58.363516, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2010/08/27 12:13:58.363706, 3] smbd/oplock.c:894(init_oplocks) init_oplocks: initializing messages. [2010/08/27 12:13:58.364011, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/08/27 12:13:58.364050, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/08/27 12:13:58.364102, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb77edeb8 [2010/08/27 12:13:58.364148, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb77cb7e8 [2010/08/27 12:13:58.364188, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb77821c0 [2010/08/27 12:13:58.364281, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/08/27 12:13:58.364326, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/08/27 12:13:58.364361, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/08/27 12:13:58.364395, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.364415, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7378 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/08/27 12:13:58.364597, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/08/27 12:13:58.364947, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 7379) conn 0x0 [2010/08/27 12:13:58.364988, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:58.365027, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:58.365063, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:58.365148, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:58.365247, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/08/27 12:13:58.365292, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/08/27 12:13:58.365328, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/08/27 12:13:58.365363, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/08/27 12:13:58.365398, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/08/27 12:13:58.365434, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/08/27 12:13:58.365469, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/08/27 12:13:58.365504, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/08/27 12:13:58.365539, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/08/27 12:13:58.365606, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/08/27 12:13:58.365650, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/08/27 12:13:58.365731, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:58.365808, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/08/27 12:13:58.365941, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key D31C0000FFFFFFFF0000 [2010/08/27 12:13:58.365996, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb7801dd8 [2010/08/27 12:13:58.366081, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key D31C0000FFFFFFFF0000 [2010/08/27 12:13:58.366212, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Fri Aug 27 12:10:46 2010 [2010/08/27 12:13:58.366332, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/08/27 12:13:58.366367, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/08/27 12:13:58.366401, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/08/27 12:13:58.366436, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.366456, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=7378 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=54016 (0xD300) smb_vwv[ 8]= 28 (0x1C) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=59191 (0xE737) smb_vwv[13]=53391 (0xD08F) smb_vwv[14]=52037 (0xCB45) smb_vwv[15]=34817 (0x8801) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/08/27 12:13:58.366870, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/08/27 12:13:58.367366, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/08/27 12:13:58.367412, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/08/27 12:13:58.367446, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2010/08/27 12:13:58.367480, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.367500, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7378 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2010/08/27 12:13:58.367845, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2010/08/27 12:13:58.368089, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7379) conn 0x0 [2010/08/27 12:13:58.368163, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:58.368199, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:58.368232, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:58.368287, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:58.368329, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:58.368367, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:58.368407, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:58.368455, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/08/27 12:13:58.368498, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2010/08/27 12:13:58.368560, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/08/27 12:13:58.368596, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2010/08/27 12:13:58.368653, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/08/27 12:13:58.368696, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/08/27 12:13:58.368743, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/08/27 12:13:58.368777, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/08/27 12:13:58.368811, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/08/27 12:13:58.368847, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/08/27 12:13:58.368882, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/08/27 12:13:58.368917, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/08/27 12:13:58.368951, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/08/27 12:13:58.368987, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/08/27 12:13:58.369022, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/08/27 12:13:58.369056, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/08/27 12:13:58.369091, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/08/27 12:13:58.369127, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/08/27 12:13:58.369162, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/08/27 12:13:58.369196, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/08/27 12:13:58.369230, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/08/27 12:13:58.369266, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/08/27 12:13:58.369301, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/08/27 12:13:58.369335, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/08/27 12:13:58.369372, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/08/27 12:13:58.369406, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/08/27 12:13:58.369443, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/08/27 12:13:58.369478, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/08/27 12:13:58.369536, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/08/27 12:13:58.369587, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/08/27 12:13:58.369768, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2010/08/27 12:13:58.370439, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/08/27 12:13:58.370475, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/08/27 12:13:58.370519, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/08/27 12:13:58.370553, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/08/27 12:13:58.370587, 5] ../lib/util/util.c:278(_dump_data) [0000] B2 10 F1 0B 3B AC DF E8 ....;... [2010/08/27 12:13:58.370886, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : b210f10b3bacdfe8 Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/08/27 12:13:58.372125, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.372151, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=7378 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2010/08/27 12:13:58.372390, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 B2 10 F1 0B 3B AC DF E8 00 ......`. ...;.... [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 34 .b.a. .3 ...5...4 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2010/08/27 12:13:58.373210, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2010/08/27 12:13:58.373257, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2010/08/27 12:13:58.373291, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2010/08/27 12:13:58.373325, 5] lib/util.c:617(show_msg) [2010/08/27 12:13:58.373344, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=7378 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2010/08/27 12:13:58.373690, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 E3 E3 11 C9 ........ ...`.... [0050] 86 14 D5 B2 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 F4 FE 13 FD 4B AE DF 7A A9 CC C1 38 ........ K..z...8 [0070] 42 2A 72 31 D3 3C 34 F9 76 C4 15 56 4D 00 53 00 B*r1.<4. v..VM.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 D0 08 U.B.A.R. ..S.I... [00B0] BE 5D 04 2C C2 09 ED BB C1 E8 A0 22 76 57 00 55 .].,.... ..."vW.U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2010/08/27 12:13:58.374152, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 7379) conn 0x0 [2010/08/27 12:13:58.374188, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/08/27 12:13:58.374222, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/08/27 12:13:58.374257, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/08/27 12:13:58.374312, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/08/27 12:13:58.374348, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/08/27 12:13:58.374383, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/08/27 12:13:58.374419, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/08/27 12:13:58.374456, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2010/08/27 12:13:58.374524, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : e3e311c98614d5b200000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : f4fe13fd4baedf7aa9ccc138422a7231d33c34f976c41556 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/08/27 12:13:58.375094, 10] ../lib/util/util.c:278(_dump_data) [0000] D0 08 BE 5D 04 2C C2 09 ED BB C1 E8 A0 22 76 57 ...].,.. ....."vW NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/08/27 12:13:58.375600, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2010/08/27 12:13:58.375645, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/08/27 12:13:58.375680, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/08/27 12:13:58.375714, 5] ../lib/util/util.c:278(_dump_data) [0000] 72 9D 51 01 6B B6 1B A1 r.Q.k...