[2010/09/23 12:09:05.342117, 6, effective(0, 0), real(0, 0)] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Sep 23 11:56:38 2010 [2010/09/23 12:09:05.342206, 5, effective(0, 0), real(0, 0)] auth/auth_util.c:211(make_user_info_map) Mapping user []\[] from workstation [NLOVASZ-HTM] [2010/09/23 12:09:05.342242, 5, effective(0, 0), real(0, 0)] auth/auth_util.c:232(make_user_info_map) Mapped domain from [] to [HTM] for user [] from workstation [NLOVASZ-HTM] [2010/09/23 12:09:05.342273, 5, effective(0, 0), real(0, 0)] auth/auth_util.c:122(make_user_info) attempting to make a user_info for () [2010/09/23 12:09:05.342303, 5, effective(0, 0), real(0, 0)] auth/auth_util.c:132(make_user_info) making strings for 's user_info struct [2010/09/23 12:09:05.342341, 5, effective(0, 0), real(0, 0)] auth/auth_util.c:164(make_user_info) making blobs for 's user_info struct [2010/09/23 12:09:05.342373, 10, effective(0, 0), real(0, 0)] auth/auth_util.c:182(make_user_info) made an encrypted user_info for () [2010/09/23 12:09:05.342403, 3, effective(0, 0), real(0, 0)] auth/auth.c:216(check_ntlm_password) check_ntlm_password: Checking password for unmapped user []\[]@[NLOVASZ-HTM] with the new password interface [2010/09/23 12:09:05.342436, 3, effective(0, 0), real(0, 0)] auth/auth.c:219(check_ntlm_password) check_ntlm_password: mapped user is: [HTM]\[]@[NLOVASZ-HTM] [2010/09/23 12:09:05.342465, 10, effective(0, 0), real(0, 0)] auth/auth.c:228(check_ntlm_password) check_ntlm_password: auth_context challenge created by random [2010/09/23 12:09:05.342495, 10, effective(0, 0), real(0, 0)] auth/auth.c:230(check_ntlm_password) challenge is: [2010/09/23 12:09:05.342524, 5, effective(0, 0), real(0, 0)] ../lib/util/util.c:278(_dump_data) [0000] B8 5C D1 4F 87 1D 19 8C .\.O.... [2010/09/23 12:09:05.342624, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=99))], scope => [2] [2010/09/23 12:09:05.342681, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1262(smbldap_close) The connection to the LDAP server was closed [2010/09/23 12:09:05.342713, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:751(smb_ldap_setup_conn) smb_ldap_setup_connection: ldap://localhost [2010/09/23 12:09:05.349425, 3, effective(0, 0), real(0, 0)] lib/smbldap.c:735(smb_ldap_start_tls) StartTLS issued: using a TLS connection [2010/09/23 12:09:05.349540, 2, effective(0, 0), real(0, 0)] lib/smbldap.c:950(smbldap_open_connection) smbldap_open_connection: connection opened [2010/09/23 12:09:05.349573, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:1120(smbldap_connect_system) ldap_connect_system: Binding to ldap server ldap://localhost as "cn=manager,dc=intra,dc=htm-hungary,dc=hu" [2010/09/23 12:09:05.350815, 3, effective(0, 0), real(0, 0)] lib/smbldap.c:1166(smbldap_connect_system) ldap_connect_system: successful connection to the LDAP server ldap_connect_system: LDAP server does support paged results [2010/09/23 12:09:05.350907, 4, effective(0, 0), real(0, 0)] lib/smbldap.c:1242(smbldap_open) The LDAP server is successfully connected [2010/09/23 12:09:05.351683, 4, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2562(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(gidNumber=99)) [2010/09/23 12:09:05.351774, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.351806, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.351837, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.351868, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.351899, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.352029, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning expired cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:08:42 2010 [2010/09/23 12:09:05.352134, 10, effective(0, 0), real(0, 0)] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = ACCT_POL/password history and timeout = Thu Jan 1 01:00:00 1970 (-1285236545 seconds in the past) [2010/09/23 12:09:05.352227, 10, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:3983(ldapsam_get_account_policy_from_ldap) ldapsam_get_account_policy_from_ldap [2010/09/23 12:09:05.352261, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [sambaDomainName=HTM,dc=intra,dc=htm-hungary,dc=hu], filter => [(objectClass=sambaDomain)], scope => [0] [2010/09/23 12:09:05.353005, 10, effective(0, 0), real(0, 0)] lib/account_pol.c:396(cache_account_policy_set) cache_account_policy_set: updating account pol cache [2010/09/23 12:09:05.353102, 10, effective(0, 0), real(0, 0)] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = ACCT_POL/password history and timeout = Thu Sep 23 12:10:05 2010 (60 seconds ahead) [2010/09/23 12:09:05.353203, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.353258, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nobody, was [2010/09/23 12:09:05.353291, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain HTM, was [2010/09/23 12:09:05.353323, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/09/23 12:09:05.353361, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name Nobody, was [2010/09/23 12:09:05.353395, 4, effective(0, 0), real(0, 0)] lib/substitute.c:504(automount_server) Home server: backup [2010/09/23 12:09:05.353435, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\backup\nobody, was [2010/09/23 12:09:05.353465, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/09/23 12:09:05.353497, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script login.bat, was [2010/09/23 12:09:05.353527, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path , was [2010/09/23 12:09:05.353557, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/09/23 12:09:05.353589, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.353618, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.353646, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.353674, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.353702, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.353756, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.353818, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.353871, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2077591095-4229175143-852743160-501 [2010/09/23 12:09:05.353908, 10, effective(0, 0), real(0, 0)] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2077591095-4229175143-852743160-501 from rid 501 [2010/09/23 12:09:05.353972, 10, effective(0, 0), real(0, 0)] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/SID2GID/S-1-5-21-2077591095-4229175143-852743160-513 couldn't be found [2010/09/23 12:09:05.354092, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1511(sid_to_gid) winbind failed to find a gid for sid S-1-5-21-2077591095-4229175143-852743160-513 [2010/09/23 12:09:05.354127, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.354157, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.354185, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.354212, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.354241, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.354292, 5, effective(0, 0), real(0, 0)] passdb/pdb_interface.c:1473(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 513. [2010/09/23 12:09:05.354329, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.354362, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.354389, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.354417, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.354446, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.354531, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(sambaSID=S-1-5-21-2077591095-4229175143-852743160-513)(objectclass=sambaSamAccount))], scope => [2] [2010/09/23 12:09:05.355467, 4, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:1695(ldapsam_getsampwsid) ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-2077591095-4229175143-852743160-513] count=0 [2010/09/23 12:09:05.355567, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-2077591095-4229175143-852743160-513))], scope => [2] [2010/09/23 12:09:05.356451, 2, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2446(init_group_from_ldap) init_group_from_ldap: Entry found for group: 10000 [2010/09/23 12:09:05.356558, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.356598, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.356627, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1288(legacy_sid_to_gid) LEGACY: sid S-1-5-21-2077591095-4229175143-852743160-513 -> gid 10000 [2010/09/23 12:09:05.356697, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-2077591095-4229175143-852743160-513 [2010/09/23 12:09:05.356750, 3, effective(0, 0), real(0, 0)] auth/auth.c:265(check_ntlm_password) check_ntlm_password: guest authentication for user [] succeeded [2010/09/23 12:09:05.356780, 5, effective(0, 0), real(0, 0)] auth/auth.c:304(check_ntlm_password) check_ntlm_password: guest authentication for user [] -> [] -> [nobody] succeeded [2010/09/23 12:09:05.356809, 5, effective(0, 0), real(0, 0)] auth/auth_util.c:2119(free_user_info) attempting to free (and zero) a user_info structure [2010/09/23 12:09:05.356837, 10, effective(0, 0), real(0, 0)] auth/auth_util.c:2123(free_user_info) structure was created for [2010/09/23 12:09:05.356874, 10, effective(0, 0), real(0, 0)] auth/token_util.c:356(create_local_nt_token) Create local NT token for S-1-5-21-2077591095-4229175143-852743160-501 [2010/09/23 12:09:05.356938, 10, effective(0, 0), real(0, 0)] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/SID2GID/S-1-5-32-544 couldn't be found [2010/09/23 12:09:05.356993, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1511(sid_to_gid) winbind failed to find a gid for sid S-1-5-32-544 [2010/09/23 12:09:05.357025, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.357055, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.357104, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.357132, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.357161, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.357221, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2] [2010/09/23 12:09:05.357933, 4, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2562(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544)) [2010/09/23 12:09:05.358018, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.358049, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1256(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-544 [2010/09/23 12:09:05.358109, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.358138, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.358167, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.358195, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.358224, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.358326, 10, effective(0, 0), real(0, 0)] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/SID2GID/S-1-5-32-544 couldn't be found [2010/09/23 12:09:05.358387, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1511(sid_to_gid) winbind failed to find a gid for sid S-1-5-32-544 [2010/09/23 12:09:05.358419, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.358448, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.358476, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.358526, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.358555, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.358615, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2] [2010/09/23 12:09:05.359268, 4, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2562(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544)) [2010/09/23 12:09:05.359359, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.359392, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1256(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-544 [2010/09/23 12:09:05.359444, 5, effective(0, 0), real(0, 0)] auth/token_util.c:306(create_builtin_administrators) create_builtin_administrators: Failed to create Administrators [2010/09/23 12:09:05.359481, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.359539, 10, effective(0, 0), real(0, 0)] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/SID2GID/S-1-5-32-545 couldn't be found [2010/09/23 12:09:05.359585, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1511(sid_to_gid) winbind failed to find a gid for sid S-1-5-32-545 [2010/09/23 12:09:05.359617, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.359646, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.359675, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.359702, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.359731, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.359790, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2] [2010/09/23 12:09:05.360455, 4, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2562(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545)) [2010/09/23 12:09:05.360539, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.360570, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1256(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-545 [2010/09/23 12:09:05.360603, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.360633, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.360661, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.360689, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.360717, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.360804, 10, effective(0, 0), real(0, 0)] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/SID2GID/S-1-5-32-545 couldn't be found [2010/09/23 12:09:05.360883, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1511(sid_to_gid) winbind failed to find a gid for sid S-1-5-32-545 [2010/09/23 12:09:05.360915, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.360944, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.360973, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.361000, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.361028, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.361102, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2] [2010/09/23 12:09:05.361758, 4, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2562(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545)) [2010/09/23 12:09:05.361843, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.361873, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1256(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-545 [2010/09/23 12:09:05.361924, 5, effective(0, 0), real(0, 0)] auth/token_util.c:277(create_builtin_users) create_builtin_users: Failed to create Users [2010/09/23 12:09:05.361959, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.361989, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.362018, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.362046, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.362100, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.362129, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.362243, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(objectclass=sambaGroupMapping)(sambaGroupType=4)(|(sambaSIDList=S-1-5-21-2077591095-4229175143-852743160-501)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-32-546)))], scope => [2] [2010/09/23 12:09:05.363034, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.363153, 3, effective(0, 0), real(0, 0)] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-2077591095-4229175143-852743160-501] [2010/09/23 12:09:05.363196, 5, effective(0, 0), real(0, 0)] lib/privileges.c:128(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2010/09/23 12:09:05.363253, 3, effective(0, 0), real(0, 0)] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2010/09/23 12:09:05.363289, 3, effective(0, 0), real(0, 0)] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2010/09/23 12:09:05.363342, 10, effective(0, 0), real(0, 0)] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/SID2GID/S-1-1-0 couldn't be found [2010/09/23 12:09:05.363398, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1511(sid_to_gid) winbind failed to find a gid for sid S-1-1-0 [2010/09/23 12:09:05.363453, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.363483, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.363512, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.363539, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.363568, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.363631, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0))], scope => [2] [2010/09/23 12:09:05.364333, 4, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2562(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-1-0)) [2010/09/23 12:09:05.364425, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.364457, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1256(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-1-0 [2010/09/23 12:09:05.364490, 10, effective(0, 0), real(0, 0)] auth/auth_util.c:753(create_local_token) Could not convert SID S-1-1-0 to gid, ignoring it [2010/09/23 12:09:05.364547, 10, effective(0, 0), real(0, 0)] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/SID2GID/S-1-5-2 couldn't be found [2010/09/23 12:09:05.364599, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1511(sid_to_gid) winbind failed to find a gid for sid S-1-5-2 [2010/09/23 12:09:05.364632, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.364662, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.364691, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.364718, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.364747, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.364805, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2))], scope => [2] [2010/09/23 12:09:05.365483, 4, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2562(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-2)) [2010/09/23 12:09:05.365568, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.365599, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1256(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-2 [2010/09/23 12:09:05.365632, 10, effective(0, 0), real(0, 0)] auth/auth_util.c:753(create_local_token) Could not convert SID S-1-5-2 to gid, ignoring it [2010/09/23 12:09:05.365689, 10, effective(0, 0), real(0, 0)] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/SID2GID/S-1-5-32-546 couldn't be found [2010/09/23 12:09:05.365742, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1511(sid_to_gid) winbind failed to find a gid for sid S-1-5-32-546 [2010/09/23 12:09:05.365774, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.365827, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.365856, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.365884, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.365912, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.365972, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-546))], scope => [2] [2010/09/23 12:09:05.366797, 4, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2562(ldapsam_getgroup) ldapsam_getgroup: Did not find group, filter was (&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-546)) [2010/09/23 12:09:05.366918, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.366950, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1256(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-546 [2010/09/23 12:09:05.366983, 10, effective(0, 0), real(0, 0)] auth/auth_util.c:753(create_local_token) Could not convert SID S-1-5-32-546 to gid, ignoring it [2010/09/23 12:09:05.367019, 10, effective(0, 0), real(0, 0)] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-2077591095-4229175143-852743160-501 contains 5 SIDs SID[ 0]: S-1-5-21-2077591095-4229175143-852743160-501 SID[ 1]: S-1-1-0 SID[ 2]: S-1-5-2 SID[ 3]: S-1-5-32-546 SID[ 4]: S-1-22-1-99 SE_PRIV 0x0 0x0 0x0 0x0 [2010/09/23 12:09:05.367140, 10, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 99 Primary group is 99 and contains 0 supplementary groups [2010/09/23 12:09:05.367184, 10, effective(0, 0), real(0, 0)] auth/auth_ntlmssp.c:139(auth_ntlmssp_check_password) Got NT session key of length 16 [2010/09/23 12:09:05.367215, 10, effective(0, 0), real(0, 0)] auth/auth_ntlmssp.c:146(auth_ntlmssp_check_password) Got LM session key of length 16 [2010/09/23 12:09:05.367246, 10, effective(0, 0), real(0, 0)] libsmb/ntlmssp.c:853(ntlmssp_server_auth) ntlmssp_server_auth: Using unmodified nt session key. [2010/09/23 12:09:05.367299, 3, effective(0, 0), real(0, 0)] libsmb/ntlmssp_sign.c:343(ntlmssp_sign_init) NTLMSSP Sign/Seal - Initialising with flags: [2010/09/23 12:09:05.367333, 3, effective(0, 0), real(0, 0)] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0xe2088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_VERSION NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP_NEGOTIATE_56 [2010/09/23 12:09:05.367493, 10, effective(0, 0), real(0, 0)] smbd/password.c:278(register_existing_vuid) register_existing_vuid: (99,99) nobody HTM guest=1 [2010/09/23 12:09:05.367525, 3, effective(0, 0), real(0, 0)] smbd/password.c:282(register_existing_vuid) register_existing_vuid: User name: nobody Real name: Nobody [2010/09/23 12:09:05.367554, 3, effective(0, 0), real(0, 0)] smbd/password.c:292(register_existing_vuid) register_existing_vuid: UNIX uid 99 is UNIX user nobody, and will be vuid 100 [2010/09/23 12:09:05.367625, 6, effective(0, 0), real(0, 0)] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Sep 23 11:56:38 2010 [2010/09/23 12:09:05.367712, 5, effective(0, 0), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.367732, 5, effective(0, 0), real(0, 0)] lib/util.c:627(show_msg) size=110 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=65535 smb_pid=65279 smb_uid=100 smb_mid=128 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 9 (0x9) smb_bcc=67 [2010/09/23 12:09:05.367902, 10, effective(0, 0), real(0, 0)] ../lib/util/util.c:278(_dump_data) [0000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [0010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [0020] 00 2E 00 35 00 2E 00 35 00 2D 00 36 00 38 00 2E ...5...5 .-.6.8.. [0030] 00 66 00 63 00 31 00 33 00 00 00 48 00 54 00 4D .f.c.1.3 ...H.T.M [0040] 00 00 00 ... [2010/09/23 12:09:05.368649, 10, effective(0, 0), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 78 [2010/09/23 12:09:05.368698, 6, effective(0, 0), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x4e [2010/09/23 12:09:05.368727, 3, effective(0, 0), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 3 of length 82 (0 toread) [2010/09/23 12:09:05.368755, 5, effective(0, 0), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.368773, 5, effective(0, 0), real(0, 0)] lib/util.c:627(show_msg) size=78 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=100 smb_mid=192 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 78 (0x4E) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=35 [2010/09/23 12:09:05.368918, 10, effective(0, 0), real(0, 0)] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 5C 00 42 00 41 00 43 00 4B 00 55 00 50 .\.\.B.A .C.K.U.P [0010] 00 5C 00 49 00 50 00 43 00 24 00 00 00 3F 3F 3F .\.I.P.C .$...??? [0020] 3F 3F 00 ??. [2010/09/23 12:09:05.368994, 3, effective(0, 0), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBtconX (pid 11141) conn 0x0 [2010/09/23 12:09:05.369023, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.369051, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.369093, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.369142, 5, effective(0, 0), real(0, 0)] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/09/23 12:09:05.369193, 4, effective(0, 0), real(0, 0)] smbd/reply.c:767(reply_tcon_and_X) Client requested device type [?????] for share [IPC$] [2010/09/23 12:09:05.369242, 5, effective(0, 0), real(0, 0)] smbd/service.c:1227(make_connection) making a connection to 'normal' service ipc$ [2010/09/23 12:09:05.369295, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.369329, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.369362, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.369389, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.369418, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.369488, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.369548, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.369589, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nobody, was [2010/09/23 12:09:05.369634, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain HTM, was [2010/09/23 12:09:05.369664, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/09/23 12:09:05.369694, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name Nobody, was [2010/09/23 12:09:05.369727, 4, effective(0, 0), real(0, 0)] lib/substitute.c:504(automount_server) Home server: backup [2010/09/23 12:09:05.369763, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\backup\nobody, was [2010/09/23 12:09:05.369793, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/09/23 12:09:05.369824, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script login.bat, was [2010/09/23 12:09:05.369854, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path , was [2010/09/23 12:09:05.369884, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/09/23 12:09:05.369915, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.369944, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.369972, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.369999, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.370027, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.370098, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.370153, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.370184, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2077591095-4229175143-852743160-501 [2010/09/23 12:09:05.370218, 10, effective(0, 0), real(0, 0)] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2077591095-4229175143-852743160-501 from rid 501 [2010/09/23 12:09:05.370264, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-2077591095-4229175143-852743160-513 [2010/09/23 12:09:05.370299, 5, effective(0, 0), real(0, 0)] lib/username.c:133(Get_Pwnam_alloc) Finding user nobody [2010/09/23 12:09:05.370330, 5, effective(0, 0), real(0, 0)] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2010/09/23 12:09:05.370365, 5, effective(0, 0), real(0, 0)] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2010/09/23 12:09:05.370419, 10, effective(0, 0), real(0, 0)] smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2010/09/23 12:09:05.370451, 3, effective(0, 0), real(0, 0)] smbd/service.c:807(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2010/09/23 12:09:05.370504, 10, effective(0, 0), real(0, 0)] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2010/09/23 12:09:05.370543, 3, effective(0, 0), real(0, 0)] smbd/vfs.c:97(vfs_init_default) Initialising default vfs hooks [2010/09/23 12:09:05.370599, 10, effective(0, 0), real(0, 0)] smbd/vfs.c:48(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ [2010/09/23 12:09:05.370627, 5, effective(0, 0), real(0, 0)] smbd/vfs.c:87(smb_register_vfs) Successfully added vfs backend '/[Default VFS]/' [2010/09/23 12:09:05.370661, 10, effective(0, 0), real(0, 0)] smbd/vfs.c:48(vfs_find_backend_entry) vfs_find_backend_entry called for posixacl [2010/09/23 12:09:05.370689, 5, effective(0, 0), real(0, 0)] smbd/vfs.c:87(smb_register_vfs) Successfully added vfs backend 'posixacl' [2010/09/23 12:09:05.370717, 3, effective(0, 0), real(0, 0)] smbd/vfs.c:122(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2010/09/23 12:09:05.370746, 10, effective(0, 0), real(0, 0)] smbd/vfs.c:48(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2010/09/23 12:09:05.370785, 5, effective(0, 0), real(0, 0)] smbd/connection.c:142(claim_connection) claiming [IPC$] [2010/09/23 12:09:05.370876, 10, effective(0, 0), real(0, 0)] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 852B0000FFFFFFFF0100 [2010/09/23 12:09:05.370914, 10, effective(0, 0), real(0, 0)] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f1713732110 [2010/09/23 12:09:05.370965, 10, effective(0, 0), real(0, 0)] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 852B0000FFFFFFFF0100 [2010/09/23 12:09:05.371122, 10, effective(0, 0), real(0, 0)] smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2010/09/23 12:09:05.371161, 10, effective(0, 0), real(0, 0)] smbd/share_access.c:238(user_ok_token) user_ok_token: share IPC$ is ok for unix user nobody [2010/09/23 12:09:05.371195, 10, effective(0, 0), real(0, 0)] smbd/share_access.c:283(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2010/09/23 12:09:05.371234, 10, effective(0, 0), real(0, 0)] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2010/09/23 12:09:05.371272, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.371301, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.371334, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.371365, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.371394, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.371450, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.371506, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.371543, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nobody, was [2010/09/23 12:09:05.371573, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain HTM, was [2010/09/23 12:09:05.371602, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/09/23 12:09:05.371632, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name Nobody, was [2010/09/23 12:09:05.371663, 4, effective(0, 0), real(0, 0)] lib/substitute.c:504(automount_server) Home server: backup [2010/09/23 12:09:05.371712, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\backup\nobody, was [2010/09/23 12:09:05.371742, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/09/23 12:09:05.371773, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script login.bat, was [2010/09/23 12:09:05.371803, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path , was [2010/09/23 12:09:05.371832, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/09/23 12:09:05.371863, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.371892, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.371920, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.371948, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.371976, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.372026, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.372096, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.372128, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2077591095-4229175143-852743160-501 [2010/09/23 12:09:05.372161, 10, effective(0, 0), real(0, 0)] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2077591095-4229175143-852743160-501 from rid 501 [2010/09/23 12:09:05.372204, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-2077591095-4229175143-852743160-513 [2010/09/23 12:09:05.372243, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.372272, 5, effective(0, 0), real(0, 0)] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-2077591095-4229175143-852743160-501 contains 5 SIDs SID[ 0]: S-1-5-21-2077591095-4229175143-852743160-501 SID[ 1]: S-1-1-0 SID[ 2]: S-1-5-2 SID[ 3]: S-1-5-32-546 SID[ 4]: S-1-22-1-99 SE_PRIV 0x0 0x0 0x0 0x0 [2010/09/23 12:09:05.372376, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 99 Primary group is 99 and contains 0 supplementary groups [2010/09/23 12:09:05.372423, 5, effective(99, 99), real(0, 0)] smbd/uid.c:354(change_to_user) change_to_user uid=(0,99) gid=(0,99) [2010/09/23 12:09:05.372465, 10, effective(99, 99), real(0, 0)] smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2010/09/23 12:09:05.372512, 3, effective(99, 99), real(0, 0)] smbd/service.c:1070(make_connection_snum) nlovasz-htm (::ffff:192.168.1.62) connect to service IPC$ initially as user nobody (uid=99, gid=99) (pid 11141) [2010/09/23 12:09:05.372548, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.372576, 5, effective(99, 99), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.372604, 5, effective(99, 99), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.372664, 5, effective(0, 0), real(0, 0)] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/09/23 12:09:05.372700, 3, effective(0, 0), real(0, 0)] smbd/reply.c:846(reply_tcon_and_X) tconX service=IPC$ [2010/09/23 12:09:05.373237, 10, effective(0, 0), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 104 [2010/09/23 12:09:05.373287, 6, effective(0, 0), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x68 [2010/09/23 12:09:05.373317, 3, effective(0, 0), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 4 of length 108 (0 toread) [2010/09/23 12:09:05.373352, 5, effective(0, 0), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.373371, 5, effective(0, 0), real(0, 0)] lib/util.c:627(show_msg) size=104 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=612 smb_uid=100 smb_mid=256 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 4608 (0x1200) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 4609 (0x1201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 1792 (0x700) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]=16384 (0x4000) smb_vwv[20]=16896 (0x4200) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 256 (0x100) smb_bcc=21 [2010/09/23 12:09:05.373680, 10, effective(0, 0), real(0, 0)] ../lib/util/util.c:278(_dump_data) [0000] C0 5C 00 4E 00 45 00 54 00 4C 00 4F 00 47 00 4F .\.N.E.T .L.O.G.O [0010] 00 4E 00 00 00 .N... [2010/09/23 12:09:05.373739, 3, effective(0, 0), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBntcreateX (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:05.373771, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.373798, 5, effective(0, 0), real(0, 0)] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-2077591095-4229175143-852743160-501 contains 5 SIDs SID[ 0]: S-1-5-21-2077591095-4229175143-852743160-501 SID[ 1]: S-1-1-0 SID[ 2]: S-1-5-2 SID[ 3]: S-1-5-32-546 SID[ 4]: S-1-22-1-99 SE_PRIV 0x0 0x0 0x0 0x0 [2010/09/23 12:09:05.373897, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 99 Primary group is 99 and contains 0 supplementary groups [2010/09/23 12:09:05.373947, 5, effective(99, 99), real(0, 0)] smbd/uid.c:354(change_to_user) change_to_user uid=(0,99) gid=(0,99) [2010/09/23 12:09:05.373985, 4, effective(99, 99), real(0, 0)] smbd/vfs.c:721(vfs_ChDir) vfs_ChDir to /tmp [2010/09/23 12:09:05.374048, 10, effective(99, 99), real(0, 0)] smbd/nttrans.c:498(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x10, access_mask = 0x12019f file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x420040 root_dir_fid = 0x0, fname = NETLOGON [2010/09/23 12:09:05.374112, 4, effective(99, 99), real(0, 0)] smbd/nttrans.c:283(nt_open_pipe) nt_open_pipe: Opening pipe \NETLOGON. [2010/09/23 12:09:05.374152, 5, effective(99, 99), real(0, 0)] smbd/files.c:119(file_new) allocated file structure 3268, fnum = 7364 (1 used) [2010/09/23 12:09:05.374198, 4, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p) Create pipe requested \netlogon [2010/09/23 12:09:05.374283, 10, effective(99, 99), real(0, 0)] rpc_server/srv_lsa_hnd.c:114(init_pipe_handle_list) init_pipe_handles: created handle list for pipe \netlogon [2010/09/23 12:09:05.374314, 10, effective(99, 99), real(0, 0)] rpc_server/srv_lsa_hnd.c:131(init_pipe_handle_list) init_pipe_handles: pipe_handles ref count = 1 for pipe \netlogon [2010/09/23 12:09:05.374387, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.374418, 3, effective(99, 99), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.374447, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.374475, 5, effective(99, 99), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.374503, 5, effective(99, 99), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.374574, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.374633, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.374672, 10, effective(99, 99), real(0, 0)] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nobody, was [2010/09/23 12:09:05.374703, 10, effective(99, 99), real(0, 0)] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain HTM, was [2010/09/23 12:09:05.374733, 10, effective(99, 99), real(0, 0)] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/09/23 12:09:05.374762, 10, effective(99, 99), real(0, 0)] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name Nobody, was [2010/09/23 12:09:05.374794, 4, effective(99, 99), real(0, 0)] lib/substitute.c:504(automount_server) Home server: backup [2010/09/23 12:09:05.374830, 10, effective(99, 99), real(0, 0)] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\backup\nobody, was [2010/09/23 12:09:05.374859, 10, effective(99, 99), real(0, 0)] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/09/23 12:09:05.374891, 10, effective(99, 99), real(0, 0)] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script login.bat, was [2010/09/23 12:09:05.374921, 10, effective(99, 99), real(0, 0)] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path , was [2010/09/23 12:09:05.374950, 10, effective(99, 99), real(0, 0)] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/09/23 12:09:05.374981, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.375011, 3, effective(99, 99), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.375040, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.375080, 5, effective(99, 99), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.375109, 5, effective(99, 99), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.375166, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.375222, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.375252, 10, effective(99, 99), real(0, 0)] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2077591095-4229175143-852743160-501 [2010/09/23 12:09:05.375297, 10, effective(99, 99), real(0, 0)] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2077591095-4229175143-852743160-501 from rid 501 [2010/09/23 12:09:05.375352, 10, effective(99, 99), real(0, 0)] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-2077591095-4229175143-852743160-513 [2010/09/23 12:09:05.375389, 4, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p) Created internal pipe \netlogon (pipes_open=0) [2010/09/23 12:09:05.375426, 5, effective(99, 99), real(0, 0)] smbd/nttrans.c:372(do_ntcreate_pipe_open) do_ntcreate_pipe_open: open pipe = \NETLOGON [2010/09/23 12:09:05.375974, 10, effective(99, 99), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 72 [2010/09/23 12:09:05.376022, 6, effective(99, 99), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x48 [2010/09/23 12:09:05.376051, 3, effective(99, 99), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 5 of length 76 (0 toread) [2010/09/23 12:09:05.376108, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.376127, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=72 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=612 smb_uid=100 smb_mid=320 smt_wct=15 smb_vwv[ 0]= 4 (0x4) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 24 (0x18) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 4 (0x4) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 7 (0x7) smb_bcc=7 [2010/09/23 12:09:05.376368, 10, effective(99, 99), real(0, 0)] ../lib/util/util.c:278(_dump_data) [0000] 00 00 00 C4 1C ED 03 ....... [2010/09/23 12:09:05.376409, 3, effective(99, 99), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBtrans2 (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:05.376439, 4, effective(99, 99), real(0, 0)] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/09/23 12:09:05.376492, 9, effective(99, 99), real(0, 0)] smbd/trans2.c:927(send_trans2_replies) t2_rep: params_sent_thistime = 2, data_sent_thistime = 24, useable_space = 131010 [2010/09/23 12:09:05.376527, 9, effective(99, 99), real(0, 0)] smbd/trans2.c:929(send_trans2_replies) t2_rep: params_to_send = 2, data_to_send = 24, paramsize = 2, datasize = 24 [2010/09/23 12:09:05.376556, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.376575, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=84 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=612 smb_uid=100 smb_mid=320 smt_wct=10 smb_vwv[ 0]= 2 (0x2) smb_vwv[ 1]= 24 (0x18) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 24 (0x18) smb_vwv[ 7]= 60 (0x3C) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=29 [2010/09/23 12:09:05.376769, 10, effective(99, 99), real(0, 0)] ../lib/util/util.c:278(_dump_data) [0000] 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 ........ ........ [0010] 00 00 00 00 00 01 00 00 00 01 00 00 00 ........ ..... [2010/09/23 12:09:05.377513, 10, effective(99, 99), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 180 [2010/09/23 12:09:05.377556, 6, effective(99, 99), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xb4 [2010/09/23 12:09:05.377585, 3, effective(99, 99), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 6 of length 184 (0 toread) [2010/09/23 12:09:05.377613, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.377648, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=180 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=384 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7364 (0x1CC4) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 116 (0x74) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 116 (0x74) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=117 [2010/09/23 12:09:05.377876, 10, effective(99, 99), real(0, 0)] ../lib/util/util.c:278(_dump_data) [0000] EE 05 00 0B 03 10 00 00 00 74 00 00 00 02 00 00 ........ .t...... [0010] 00 B8 10 B8 10 00 00 00 00 02 00 00 00 00 00 01 ........ ........ [0020] 00 78 56 34 12 34 12 CD AB EF 00 01 23 45 67 CF .xV4.4.. ....#Eg. [0030] FB 01 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 ......]. ........ [0040] 00 2B 10 48 60 02 00 00 00 01 00 01 00 78 56 34 .+.H`... .....xV4 [0050] 12 34 12 CD AB EF 00 01 23 45 67 CF FB 01 00 00 .4...... #Eg..... [0060] 00 2C 1C B7 6C 12 98 40 45 03 00 00 00 00 00 00 .,..l..@ E....... [0070] 00 01 00 00 00 ..... [2010/09/23 12:09:05.378045, 3, effective(99, 99), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBwriteX (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:05.378097, 4, effective(99, 99), real(0, 0)] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/09/23 12:09:05.378135, 6, effective(99, 99), real(0, 0)] smbd/pipes.c:291(reply_pipe_write_and_X) reply_pipe_write_and_X: 1cc4 name: NETLOGON len: 116 [2010/09/23 12:09:05.378169, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 116 [2010/09/23 12:09:05.378202, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 116 [2010/09/23 12:09:05.378231, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 116 [2010/09/23 12:09:05.378260, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 116, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/09/23 12:09:05.378290, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/09/23 12:09:05.378320, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2010/09/23 12:09:05.378376, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 100 [2010/09/23 12:09:05.378410, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0b 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0074 000a auth_len : 0000 000c call_id : 00000002 [2010/09/23 12:09:05.378538, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/09/23 12:09:05.378566, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 11, flags = 3 [2010/09/23 12:09:05.378597, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/09/23 12:09:05.378625, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 100 [2010/09/23 12:09:05.378664, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 100, incoming data = 100 [2010/09/23 12:09:05.378693, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 11 [2010/09/23 12:09:05.378731, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:1641(api_pipe_bind_req) api_pipe_bind_req: decode request. 1641 [2010/09/23 12:09:05.378766, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_rb [2010/09/23 12:09:05.378796, 6, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 00000000 0008 num_contexts: 02 000c context_id : 0000 000e num_transfer_syntaxes: 01 [2010/09/23 12:09:05.378880, 6, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 00000f smb_io_rpc_iface [2010/09/23 12:09:05.378909, 7, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_uuid uuid 0010 data : 12345678 0014 data : 1234 0016 data : abcd 0018 data : ef 00 001a data : 01 23 45 67 cf fb 0020 version: 00000001 [2010/09/23 12:09:05.378995, 6, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000024 smb_io_rpc_iface [2010/09/23 12:09:05.379023, 7, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000024 smb_io_uuid uuid 0024 data : 8a885d04 0028 data : 1ceb 002a data : 11c9 002c data : 9f e8 002e data : 08 00 2b 10 48 60 0034 version: 00000002 0038 context_id : 0001 003a num_transfer_syntaxes: 01 [2010/09/23 12:09:05.379138, 6, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 00003b smb_io_rpc_iface [2010/09/23 12:09:05.379177, 7, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 00003c smb_io_uuid uuid 003c data : 12345678 0040 data : 1234 0042 data : abcd 0044 data : ef 00 0046 data : 01 23 45 67 cf fb 004c version: 00000001 [2010/09/23 12:09:05.379267, 6, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000050 smb_io_rpc_iface [2010/09/23 12:09:05.379296, 7, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000050 smb_io_uuid uuid 0050 data : 6cb71c2c 0054 data : 9812 0056 data : 4540 0058 data : 03 00 005a data : 00 00 00 00 00 00 0060 version: 00000001 [2010/09/23 12:09:05.379388, 3, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:1667(api_pipe_bind_req) api_pipe_bind_req: \PIPE\netlogon -> \PIPE\netlogon [2010/09/23 12:09:05.379418, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:1717(api_pipe_bind_req) api_pipe_bind_req: make response. 1717 [2010/09/23 12:09:05.379450, 3, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:998(check_bind_req) check_bind_req for \netlogon checking lsarpc checking winreg checking initshutdown checking dssetup checking wkssvc checking svcctl checking ntsvcs checking netlogon [2010/09/23 12:09:05.379544, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_ba [2010/09/23 12:09:05.379572, 6, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 000053f0 [2010/09/23 12:09:05.379627, 6, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000008 smb_io_rpc_addr_str 0008 len: 000f 000a str: \PIPE\netlogon. [2010/09/23 12:09:05.379691, 6, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000019 smb_io_rpc_results 001c num_results: 01 0020 result : 0000 0022 reason : 0000 [2010/09/23 12:09:05.379746, 6, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000024 smb_io_rpc_iface [2010/09/23 12:09:05.379775, 7, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000024 smb_io_uuid uuid 0024 data : 8a885d04 0028 data : 1ceb 002a data : 11c9 002c data : 9f e8 002e data : 08 00 2b 10 48 60 0034 version: 00000002 [2010/09/23 12:09:05.379860, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0c 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0048 000a auth_len : 0000 000c call_id : 00000002 [2010/09/23 12:09:05.379987, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 100 [2010/09/23 12:09:05.380031, 3, effective(99, 99), real(0, 0)] smbd/pipes.c:352(pipe_write_andx_done) writeX-IPC nwritten=116 [2010/09/23 12:09:05.380564, 10, effective(99, 99), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 59 [2010/09/23 12:09:05.380609, 6, effective(99, 99), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x3b [2010/09/23 12:09:05.380638, 3, effective(99, 99), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 7 of length 63 (0 toread) [2010/09/23 12:09:05.380665, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.380685, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=448 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7364 (0x1CC4) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2010/09/23 12:09:05.380896, 3, effective(99, 99), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBreadX (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:05.380925, 4, effective(99, 99), real(0, 0)] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/09/23 12:09:05.380961, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \netlogon len: 1024 [2010/09/23 12:09:05.380992, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \netlogon: current_pdu_len = 72, current_pdu_sent = 0 returning 72 bytes. [2010/09/23 12:09:05.381034, 3, effective(99, 99), real(0, 0)] smbd/pipes.c:462(pipe_read_andx_done) readX-IPC min=1024 max=1024 nread=72 [2010/09/23 12:09:05.381557, 10, effective(99, 99), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/09/23 12:09:05.381600, 6, effective(99, 99), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/09/23 12:09:05.381628, 3, effective(99, 99), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 8 of length 172 (0 toread) [2010/09/23 12:09:05.381656, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.381675, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=168 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=512 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7364 (0x1CC4) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 104 (0x68) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 104 (0x68) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=105 [2010/09/23 12:09:05.381918, 10, effective(99, 99), real(0, 0)] ../lib/util/util.c:278(_dump_data) [0000] EE 05 00 00 03 10 00 00 00 68 00 00 00 02 00 00 ........ .h...... [0010] 00 50 00 00 00 00 00 04 00 00 00 02 00 09 00 00 .P...... ........ [0020] 00 00 00 00 00 09 00 00 00 5C 00 5C 00 42 00 41 ........ .\.\.B.A [0030] 00 43 00 4B 00 55 00 50 00 00 00 00 00 0C 00 00 .C.K.U.P ........ [0040] 00 00 00 00 00 0C 00 00 00 4E 00 4C 00 4F 00 56 ........ .N.L.O.V [0050] 00 41 00 53 00 5A 00 2D 00 48 00 54 00 4D 00 00 .A.S.Z.- .H.T.M.. [0060] 00 94 5D 32 0F 06 5A FC 8D ..]2..Z. . [2010/09/23 12:09:05.382084, 3, effective(99, 99), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBwriteX (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:05.382113, 4, effective(99, 99), real(0, 0)] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/09/23 12:09:05.382142, 6, effective(99, 99), real(0, 0)] smbd/pipes.c:291(reply_pipe_write_and_X) reply_pipe_write_and_X: 1cc4 name: NETLOGON len: 104 [2010/09/23 12:09:05.382173, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 104 [2010/09/23 12:09:05.382203, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 104 [2010/09/23 12:09:05.382232, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 104 [2010/09/23 12:09:05.382261, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 104, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/09/23 12:09:05.382291, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/09/23 12:09:05.382322, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 88 [2010/09/23 12:09:05.382356, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 88 [2010/09/23 12:09:05.382385, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0068 000a auth_len : 0000 000c call_id : 00000002 [2010/09/23 12:09:05.382517, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/09/23 12:09:05.382545, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/09/23 12:09:05.382575, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/09/23 12:09:05.382603, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 88 [2010/09/23 12:09:05.382631, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 88, incoming data = 88 [2010/09/23 12:09:05.382660, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/09/23 12:09:05.382701, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000050 0004 context_id: 0000 0006 opnum : 0004 [2010/09/23 12:09:05.382766, 3, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 134 [2010/09/23 12:09:05.382817, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2366(api_pipe_request) Requested \PIPE\\netlogon [2010/09/23 12:09:05.382848, 4, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2403(api_rpcTNP) api_rpcTNP: \netlogon op 0x4 - api_rpcTNP: rpc command: NETR_SERVERREQCHALLENGE [2010/09/23 12:09:05.382883, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2433(api_rpcTNP) api_rpc_cmds[4].fn == 0x7f1712bf22f0 [2010/09/23 12:09:05.382932, 1, effective(99, 99), real(0, 0)] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) netr_ServerReqChallenge: struct netr_ServerReqChallenge in: struct netr_ServerReqChallenge server_name : * server_name : '\\BACKUP' computer_name : * computer_name : 'NLOVASZ-HTM' credentials : * credentials: struct netr_Credential data : 945d320f065afc8d [2010/09/23 12:09:05.383078, 1, effective(99, 99), real(0, 0)] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) netr_ServerReqChallenge: struct netr_ServerReqChallenge out: struct netr_ServerReqChallenge return_credentials : * return_credentials: struct netr_Credential data : e5eb1a3a1c8785a0 result : NT_STATUS_OK [2010/09/23 12:09:05.383168, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2468(api_rpcTNP) api_rpcTNP: called \netlogon successfully [2010/09/23 12:09:05.383199, 3, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/09/23 12:09:05.383228, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 88 [2010/09/23 12:09:05.383275, 3, effective(99, 99), real(0, 0)] smbd/pipes.c:352(pipe_write_andx_done) writeX-IPC nwritten=104 [2010/09/23 12:09:05.383809, 10, effective(99, 99), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 59 [2010/09/23 12:09:05.383855, 6, effective(99, 99), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x3b [2010/09/23 12:09:05.383884, 3, effective(99, 99), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 9 of length 63 (0 toread) [2010/09/23 12:09:05.383912, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.383931, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=576 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7364 (0x1CC4) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2010/09/23 12:09:05.384156, 3, effective(99, 99), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBreadX (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:05.384185, 4, effective(99, 99), real(0, 0)] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/09/23 12:09:05.384215, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \netlogon len: 1024 [2010/09/23 12:09:05.384246, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \netlogon: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 12. [2010/09/23 12:09:05.384300, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0024 000a auth_len : 0000 000c call_id : 00000002 [2010/09/23 12:09:05.384435, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 0000000c 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/09/23 12:09:05.384511, 3, effective(99, 99), real(0, 0)] smbd/pipes.c:462(pipe_read_andx_done) readX-IPC min=1024 max=1024 nread=36 [2010/09/23 12:09:05.385114, 10, effective(99, 99), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 212 [2010/09/23 12:09:05.385160, 6, effective(99, 99), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xd4 [2010/09/23 12:09:05.385188, 3, effective(99, 99), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 10 of length 216 (0 toread) [2010/09/23 12:09:05.385216, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.385235, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=212 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=640 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7364 (0x1CC4) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 148 (0x94) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 148 (0x94) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=149 [2010/09/23 12:09:05.385468, 10, effective(99, 99), real(0, 0)] ../lib/util/util.c:278(_dump_data) [0000] EE 05 00 00 03 10 00 00 00 94 00 00 00 03 00 00 ........ ........ [0010] 00 7C 00 00 00 00 00 1A 00 00 00 02 00 09 00 00 .|...... ........ [0020] 00 00 00 00 00 09 00 00 00 5C 00 5C 00 42 00 41 ........ .\.\.B.A [0030] 00 43 00 4B 00 55 00 50 00 00 00 00 00 0D 00 00 .C.K.U.P ........ [0040] 00 00 00 00 00 0D 00 00 00 4E 00 4C 00 4F 00 56 ........ .N.L.O.V [0050] 00 41 00 53 00 5A 00 2D 00 48 00 54 00 4D 00 24 .A.S.Z.- .H.T.M.$ [0060] 00 00 00 02 00 0C 00 00 00 00 00 00 00 0C 00 00 ........ ........ [0070] 00 4E 00 4C 00 4F 00 56 00 41 00 53 00 5A 00 2D .N.L.O.V .A.S.Z.- [0080] 00 48 00 54 00 4D 00 00 00 13 79 0F 06 01 B8 02 .H.T.M.. ..y..... [0090] C9 FF FF 2F 61 .../a [2010/09/23 12:09:05.385676, 3, effective(99, 99), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBwriteX (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:05.385705, 4, effective(99, 99), real(0, 0)] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/09/23 12:09:05.385735, 6, effective(99, 99), real(0, 0)] smbd/pipes.c:291(reply_pipe_write_and_X) reply_pipe_write_and_X: 1cc4 name: NETLOGON len: 148 [2010/09/23 12:09:05.385766, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 148 [2010/09/23 12:09:05.385796, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 148 [2010/09/23 12:09:05.385825, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 148 [2010/09/23 12:09:05.385854, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 148, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/09/23 12:09:05.385901, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/09/23 12:09:05.385929, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 132 [2010/09/23 12:09:05.385957, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 132 [2010/09/23 12:09:05.385985, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0094 000a auth_len : 0000 000c call_id : 00000003 [2010/09/23 12:09:05.386125, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/09/23 12:09:05.386154, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/09/23 12:09:05.386183, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/09/23 12:09:05.386211, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 132 [2010/09/23 12:09:05.386239, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 132, incoming data = 132 [2010/09/23 12:09:05.386268, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/09/23 12:09:05.386297, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 0000007c 0004 context_id: 0000 0006 opnum : 001a [2010/09/23 12:09:05.386362, 3, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/09/23 12:09:05.386393, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2366(api_pipe_request) Requested \PIPE\\netlogon [2010/09/23 12:09:05.386423, 4, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2403(api_rpcTNP) api_rpcTNP: \netlogon op 0x1a - api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE3 [2010/09/23 12:09:05.386456, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2433(api_rpcTNP) api_rpc_cmds[26].fn == 0x7f1712bee260 [2010/09/23 12:09:05.386505, 1, effective(99, 99), real(0, 0)] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) netr_ServerAuthenticate3: struct netr_ServerAuthenticate3 in: struct netr_ServerAuthenticate3 server_name : * server_name : '\\BACKUP' account_name : * account_name : 'NLOVASZ-HTM$' secure_channel_type : SEC_CHAN_WKSTA (2) computer_name : * computer_name : 'NLOVASZ-HTM' credentials : * credentials: struct netr_Credential data : 13790f0601b802c9 negotiate_flags : * negotiate_flags : 0x612fffff (1630535679) 1: NETLOGON_NEG_ACCOUNT_LOCKOUT 1: NETLOGON_NEG_PERSISTENT_SAMREPL 1: NETLOGON_NEG_ARCFOUR 1: NETLOGON_NEG_PROMOTION_COUNT 1: NETLOGON_NEG_CHANGELOG_BDC 1: NETLOGON_NEG_FULL_SYNC_REPL 1: NETLOGON_NEG_MULTIPLE_SIDS 1: NETLOGON_NEG_REDO 1: NETLOGON_NEG_PASSWORD_CHANGE_REFUSAL 1: NETLOGON_NEG_SEND_PASSWORD_INFO_PDC 1: NETLOGON_NEG_GENERIC_PASSTHROUGH 1: NETLOGON_NEG_CONCURRENT_RPC 1: NETLOGON_NEG_AVOID_ACCOUNT_DB_REPL 1: NETLOGON_NEG_AVOID_SECURITYAUTH_DB_REPL 1: NETLOGON_NEG_STRONG_KEYS 1: NETLOGON_NEG_TRANSITIVE_TRUSTS 1: NETLOGON_NEG_DNS_DOMAIN_TRUSTS 1: NETLOGON_NEG_PASSWORD_SET2 1: NETLOGON_NEG_GETDOMAININFO 1: NETLOGON_NEG_CROSS_FOREST_TRUSTS 0: NETLOGON_NEG_NEUTRALIZE_NT4_EMULATION 1: NETLOGON_NEG_RODC_PASSTHROUGH 0: NETLOGON_NEG_SUPPORTS_AES_SHA2 1: NETLOGON_NEG_SUPPORTS_AES 1: NETLOGON_NEG_AUTHENTICATED_RPC_LSASS 1: NETLOGON_NEG_AUTHENTICATED_RPC [2010/09/23 12:09:05.386975, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.387007, 3, effective(99, 99), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.387035, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.387063, 5, effective(99, 99), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.387104, 5, effective(99, 99), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.387191, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(uid=NLOVASZ-HTM$)(objectclass=sambaSamAccount))], scope => [2] [2010/09/23 12:09:05.388378, 2, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:572(init_sam_from_ldap) init_sam_from_ldap: Entry found for user: nlovasz-htm$ [2010/09/23 12:09:05.388458, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nlovasz-htm$, was [2010/09/23 12:09:05.388492, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain HTM, was [2010/09/23 12:09:05.388522, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username nlovasz-htm$, was [2010/09/23 12:09:05.388558, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:550(pdb_set_user_sid_from_string) pdb_set_user_sid_from_string: setting user sid S-1-5-21-2077591095-4229175143-852743160-41041 [2010/09/23 12:09:05.388590, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2077591095-4229175143-852743160-41041 [2010/09/23 12:09:05.388633, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaLogonTime does not exist [2010/09/23 12:09:05.388667, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaLogoffTime does not exist [2010/09/23 12:09:05.388700, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaKickoffTime does not exist [2010/09/23 12:09:05.388732, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaPwdCanChange does not exist [2010/09/23 12:09:05.388766, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaPwdMustChange does not exist [2010/09/23 12:09:05.388799, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name nlovasz-htm$, was [2010/09/23 12:09:05.388856, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaHomeDrive does not exist [2010/09/23 12:09:05.388885, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/09/23 12:09:05.388918, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaHomePath does not exist [2010/09/23 12:09:05.388952, 4, effective(0, 0), real(0, 0)] lib/substitute.c:504(automount_server) Home server: backup [2010/09/23 12:09:05.388989, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\backup\nlovasz-htm_, was [2010/09/23 12:09:05.389022, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaLogonScript does not exist [2010/09/23 12:09:05.389052, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script login.bat, was [2010/09/23 12:09:05.389105, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaProfilePath does not exist [2010/09/23 12:09:05.389135, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path , was [2010/09/23 12:09:05.389168, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute description does not exist [2010/09/23 12:09:05.389202, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaUserWorkstations does not exist [2010/09/23 12:09:05.389234, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaMungedDial does not exist [2010/09/23 12:09:05.389267, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaLMPassword does not exist [2010/09/23 12:09:05.389307, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.389345, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.389375, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.389403, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.389432, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.389505, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.389566, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.389605, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaBadPasswordCount does not exist [2010/09/23 12:09:05.389639, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaBadPasswordTime does not exist [2010/09/23 12:09:05.389672, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaLogonHours does not exist [2010/09/23 12:09:05.389780, 5, effective(0, 0), real(0, 0)] passdb/login_cache.c:44(login_cache_init) Opening cache file at /var/lib/samba/login_cache.tdb [2010/09/23 12:09:05.389858, 7, effective(0, 0), real(0, 0)] passdb/login_cache.c:88(login_cache_read) Looking up login cache for user nlovasz-htm$ [2010/09/23 12:09:05.389894, 7, effective(0, 0), real(0, 0)] passdb/login_cache.c:104(login_cache_read) No cache entry found [2010/09/23 12:09:05.389936, 9, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:1126(init_sam_from_ldap) No cache entry, bad count = 0, bad time = 0 [2010/09/23 12:09:05.389973, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.390001, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.390030, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.390057, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.390098, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.390161, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning expired cache entry: key = ACCT_POL/maximum password age, value = 4294967295 , timeout = Thu Sep 23 12:08:42 2010 [2010/09/23 12:09:05.390215, 10, effective(0, 0), real(0, 0)] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = ACCT_POL/maximum password age and timeout = Thu Jan 1 01:00:00 1970 (-1285236545 seconds in the past) [2010/09/23 12:09:05.390285, 10, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:3983(ldapsam_get_account_policy_from_ldap) ldapsam_get_account_policy_from_ldap [2010/09/23 12:09:05.390319, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [sambaDomainName=HTM,dc=intra,dc=htm-hungary,dc=hu], filter => [(objectClass=sambaDomain)], scope => [0] [2010/09/23 12:09:05.391034, 10, effective(0, 0), real(0, 0)] lib/account_pol.c:396(cache_account_policy_set) cache_account_policy_set: updating account pol cache [2010/09/23 12:09:05.391134, 10, effective(0, 0), real(0, 0)] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = ACCT_POL/maximum password age and timeout = Thu Sep 23 12:10:05 2010 (60 seconds ahead) [2010/09/23 12:09:05.391226, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.391263, 5, effective(0, 0), real(0, 0)] lib/username.c:133(Get_Pwnam_alloc) Finding user nlovasz-htm$ [2010/09/23 12:09:05.391292, 5, effective(0, 0), real(0, 0)] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nlovasz-htm$ [2010/09/23 12:09:05.392296, 5, effective(0, 0), real(0, 0)] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [nlovasz-htm$]! [2010/09/23 12:09:05.392406, 10, effective(0, 0), real(0, 0)] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/GID2SID/10003 couldn't be found [2010/09/23 12:09:05.392460, 5, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1387(gid_to_sid) gid_to_sid: winbind failed to find a sid for gid 10003 [2010/09/23 12:09:05.392491, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.392521, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.392550, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.392578, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.392607, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.392674, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=10003))], scope => [2] [2010/09/23 12:09:05.393634, 2, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2446(init_group_from_ldap) init_group_from_ldap: Entry found for group: 10003 [2010/09/23 12:09:05.393769, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.393800, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1182(legacy_gid_to_sid) LEGACY: gid 10003 -> sid S-1-5-21-2077591095-4229175143-852743160-515 [2010/09/23 12:09:05.393843, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:257(pdb_get_group_sid) do lookup_sid(S-1-5-21-2077591095-4229175143-852743160-515) for group of user S-1-5-21-2077591095-4229175143-852743160-41041 [2010/09/23 12:09:05.393890, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:965(lookup_sid) lookup_sid called for SID 'S-1-5-21-2077591095-4229175143-852743160-515' [2010/09/23 12:09:05.393935, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:720(check_dom_sid_to_level) Accepting SID S-1-5-21-2077591095-4229175143-852743160 in level 1 [2010/09/23 12:09:05.393968, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:480(lookup_rids) lookup_rids called for domain sid 'S-1-5-21-2077591095-4229175143-852743160' [2010/09/23 12:09:05.394002, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.394032, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.394060, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.394110, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.394138, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.394184, 5, effective(0, 0), real(0, 0)] passdb/pdb_interface.c:1473(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 515. [2010/09/23 12:09:05.394215, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 [2010/09/23 12:09:05.394244, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 2 [2010/09/23 12:09:05.394272, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 [2010/09/23 12:09:05.394300, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.394334, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.394413, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(sambaSID=S-1-5-21-2077591095-4229175143-852743160-515)(objectclass=sambaSamAccount))], scope => [2] [2010/09/23 12:09:05.395207, 4, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:1695(ldapsam_getsampwsid) ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-2077591095-4229175143-852743160-515] count=0 [2010/09/23 12:09:05.395347, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-2077591095-4229175143-852743160-515))], scope => [2] [2010/09/23 12:09:05.396256, 2, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2446(init_group_from_ldap) init_group_from_ldap: Entry found for group: 10003 [2010/09/23 12:09:05.396375, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.396408, 5, effective(0, 0), real(0, 0)] passdb/pdb_interface.c:1595(pdb_default_lookup_rids) lookup_rids: ntcomputers:2 [2010/09/23 12:09:05.396444, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.396501, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1000(lookup_sid) Sid S-1-5-21-2077591095-4229175143-852743160-515 -> HTM\ntcomputers(2) [2010/09/23 12:09:05.396542, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.396571, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.396600, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.396628, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.396657, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.396723, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.396785, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.396828, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nlovasz-htm$, was [2010/09/23 12:09:05.396859, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain HTM, was [2010/09/23 12:09:05.396889, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username nlovasz-htm$, was [2010/09/23 12:09:05.396919, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name nlovasz-htm$, was [2010/09/23 12:09:05.396952, 4, effective(0, 0), real(0, 0)] lib/substitute.c:504(automount_server) Home server: backup [2010/09/23 12:09:05.396989, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\backup\nlovasz-htm_, was [2010/09/23 12:09:05.397019, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/09/23 12:09:05.397052, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script login.bat, was [2010/09/23 12:09:05.397102, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path , was [2010/09/23 12:09:05.397132, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/09/23 12:09:05.397163, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.397193, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.397221, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.397249, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.397277, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.397334, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.397392, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.397422, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2077591095-4229175143-852743160-41041 [2010/09/23 12:09:05.397468, 10, effective(0, 0), real(0, 0)] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2077591095-4229175143-852743160-41041 from rid 41041 [2010/09/23 12:09:05.397513, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-2077591095-4229175143-852743160-515 [2010/09/23 12:09:05.397556, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.397587, 5, effective(99, 99), real(0, 0)] ../lib/util/util.c:278(_dump_data) [0000] 00 11 0A 7E 49 90 CA 84 8D 25 CC 0F 8A AD 0E 6D ...~I... .%.....m [2010/09/23 12:09:05.397722, 2, effective(99, 99), real(0, 0)] ../libcli/auth/credentials.c:307(netlogon_creds_server_check_internal) credentials check failed [2010/09/23 12:09:05.397757, 0, effective(99, 99), real(0, 0)] rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3) _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client NLOVASZ-HTM machine account NLOVASZ-HTM$ [2010/09/23 12:09:05.397790, 1, effective(99, 99), real(0, 0)] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) netr_ServerAuthenticate3: struct netr_ServerAuthenticate3 out: struct netr_ServerAuthenticate3 return_credentials : * return_credentials: struct netr_Credential data : 0000000000000000 negotiate_flags : * negotiate_flags : 0x400241ff (1073889791) 1: NETLOGON_NEG_ACCOUNT_LOCKOUT 1: NETLOGON_NEG_PERSISTENT_SAMREPL 1: NETLOGON_NEG_ARCFOUR 1: NETLOGON_NEG_PROMOTION_COUNT 1: NETLOGON_NEG_CHANGELOG_BDC 1: NETLOGON_NEG_FULL_SYNC_REPL 1: NETLOGON_NEG_MULTIPLE_SIDS 1: NETLOGON_NEG_REDO 1: NETLOGON_NEG_PASSWORD_CHANGE_REFUSAL 0: NETLOGON_NEG_SEND_PASSWORD_INFO_PDC 0: NETLOGON_NEG_GENERIC_PASSTHROUGH 0: NETLOGON_NEG_CONCURRENT_RPC 0: NETLOGON_NEG_AVOID_ACCOUNT_DB_REPL 0: NETLOGON_NEG_AVOID_SECURITYAUTH_DB_REPL 1: NETLOGON_NEG_STRONG_KEYS 0: NETLOGON_NEG_TRANSITIVE_TRUSTS 0: NETLOGON_NEG_DNS_DOMAIN_TRUSTS 1: NETLOGON_NEG_PASSWORD_SET2 0: NETLOGON_NEG_GETDOMAININFO 0: NETLOGON_NEG_CROSS_FOREST_TRUSTS 0: NETLOGON_NEG_NEUTRALIZE_NT4_EMULATION 0: NETLOGON_NEG_RODC_PASSTHROUGH 0: NETLOGON_NEG_SUPPORTS_AES_SHA2 0: NETLOGON_NEG_SUPPORTS_AES 0: NETLOGON_NEG_AUTHENTICATED_RPC_LSASS 1: NETLOGON_NEG_AUTHENTICATED_RPC rid : * rid : 0x00000000 (0) result : NT_STATUS_ACCESS_DENIED [2010/09/23 12:09:05.398222, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2468(api_rpcTNP) api_rpcTNP: called \netlogon successfully [2010/09/23 12:09:05.398277, 3, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/09/23 12:09:05.398308, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 132 [2010/09/23 12:09:05.398373, 3, effective(99, 99), real(0, 0)] smbd/pipes.c:352(pipe_write_andx_done) writeX-IPC nwritten=148 [2010/09/23 12:09:05.398942, 10, effective(99, 99), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 59 [2010/09/23 12:09:05.399013, 6, effective(99, 99), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x3b [2010/09/23 12:09:05.399042, 3, effective(99, 99), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 11 of length 63 (0 toread) [2010/09/23 12:09:05.399093, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.399113, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=704 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7364 (0x1CC4) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2010/09/23 12:09:05.399329, 3, effective(99, 99), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBreadX (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:05.399363, 4, effective(99, 99), real(0, 0)] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/09/23 12:09:05.399398, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \netlogon len: 1024 [2010/09/23 12:09:05.399429, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \netlogon: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 20. [2010/09/23 12:09:05.399462, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000003 [2010/09/23 12:09:05.399591, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000014 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/09/23 12:09:05.399668, 3, effective(99, 99), real(0, 0)] smbd/pipes.c:462(pipe_read_andx_done) readX-IPC min=1024 max=1024 nread=44 [2010/09/23 12:09:05.400225, 10, effective(99, 99), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2010/09/23 12:09:05.400270, 6, effective(99, 99), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2010/09/23 12:09:05.400299, 3, effective(99, 99), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 12 of length 172 (0 toread) [2010/09/23 12:09:05.400331, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.400351, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=168 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=768 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7364 (0x1CC4) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 104 (0x68) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 104 (0x68) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=105 [2010/09/23 12:09:05.400579, 10, effective(99, 99), real(0, 0)] ../lib/util/util.c:278(_dump_data) [0000] EE 05 00 00 03 10 00 00 00 68 00 00 00 04 00 00 ........ .h...... [0010] 00 50 00 00 00 00 00 04 00 00 00 02 00 09 00 00 .P...... ........ [0020] 00 00 00 00 00 09 00 00 00 5C 00 5C 00 42 00 41 ........ .\.\.B.A [0030] 00 43 00 4B 00 55 00 50 00 00 00 00 00 0C 00 00 .C.K.U.P ........ [0040] 00 00 00 00 00 0C 00 00 00 4E 00 4C 00 4F 00 56 ........ .N.L.O.V [0050] 00 41 00 53 00 5A 00 2D 00 48 00 54 00 4D 00 00 .A.S.Z.- .H.T.M.. [0060] 00 94 5D 32 0F 06 5A FC 8D ..]2..Z. . [2010/09/23 12:09:05.400751, 3, effective(99, 99), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBwriteX (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:05.400781, 4, effective(99, 99), real(0, 0)] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/09/23 12:09:05.400810, 6, effective(99, 99), real(0, 0)] smbd/pipes.c:291(reply_pipe_write_and_X) reply_pipe_write_and_X: 1cc4 name: NETLOGON len: 104 [2010/09/23 12:09:05.400842, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 104 [2010/09/23 12:09:05.400873, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 104 [2010/09/23 12:09:05.400903, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 104 [2010/09/23 12:09:05.400932, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 104, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/09/23 12:09:05.400963, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/09/23 12:09:05.400992, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 88 [2010/09/23 12:09:05.401020, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 88 [2010/09/23 12:09:05.401049, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0068 000a auth_len : 0000 000c call_id : 00000004 [2010/09/23 12:09:05.401204, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/09/23 12:09:05.401233, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/09/23 12:09:05.401264, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/09/23 12:09:05.401292, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 88 [2010/09/23 12:09:05.401322, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 88, incoming data = 88 [2010/09/23 12:09:05.401357, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/09/23 12:09:05.401386, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000050 0004 context_id: 0000 0006 opnum : 0004 [2010/09/23 12:09:05.401446, 3, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/09/23 12:09:05.401476, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2366(api_pipe_request) Requested \PIPE\\netlogon [2010/09/23 12:09:05.401507, 4, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2403(api_rpcTNP) api_rpcTNP: \netlogon op 0x4 - api_rpcTNP: rpc command: NETR_SERVERREQCHALLENGE [2010/09/23 12:09:05.401538, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2433(api_rpcTNP) api_rpc_cmds[4].fn == 0x7f1712bf22f0 [2010/09/23 12:09:05.401589, 1, effective(99, 99), real(0, 0)] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) netr_ServerReqChallenge: struct netr_ServerReqChallenge in: struct netr_ServerReqChallenge server_name : * server_name : '\\BACKUP' computer_name : * computer_name : 'NLOVASZ-HTM' credentials : * credentials: struct netr_Credential data : 945d320f065afc8d [2010/09/23 12:09:05.401704, 10, effective(99, 99), real(0, 0)] rpc_server/srv_netlog_nt.c:554(_netr_ServerReqChallenge) _netr_ServerReqChallenge: new challenge requested. Clearing old state. [2010/09/23 12:09:05.401743, 1, effective(99, 99), real(0, 0)] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) netr_ServerReqChallenge: struct netr_ServerReqChallenge out: struct netr_ServerReqChallenge return_credentials : * return_credentials: struct netr_Credential data : 097babedc5683bc0 result : NT_STATUS_OK [2010/09/23 12:09:05.401832, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2468(api_rpcTNP) api_rpcTNP: called \netlogon successfully [2010/09/23 12:09:05.401863, 3, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/09/23 12:09:05.401892, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 88 [2010/09/23 12:09:05.401939, 3, effective(99, 99), real(0, 0)] smbd/pipes.c:352(pipe_write_andx_done) writeX-IPC nwritten=104 [2010/09/23 12:09:05.402426, 10, effective(99, 99), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 59 [2010/09/23 12:09:05.402472, 6, effective(99, 99), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x3b [2010/09/23 12:09:05.402501, 3, effective(99, 99), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 13 of length 63 (0 toread) [2010/09/23 12:09:05.402529, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.402548, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=832 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7364 (0x1CC4) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2010/09/23 12:09:05.402762, 3, effective(99, 99), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBreadX (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:05.402791, 4, effective(99, 99), real(0, 0)] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/09/23 12:09:05.402823, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \netlogon len: 1024 [2010/09/23 12:09:05.402854, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \netlogon: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 12. [2010/09/23 12:09:05.402886, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0024 000a auth_len : 0000 000c call_id : 00000004 [2010/09/23 12:09:05.403031, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 0000000c 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/09/23 12:09:05.403120, 3, effective(99, 99), real(0, 0)] smbd/pipes.c:462(pipe_read_andx_done) readX-IPC min=1024 max=1024 nread=36 [2010/09/23 12:09:05.403672, 10, effective(99, 99), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 212 [2010/09/23 12:09:05.403717, 6, effective(99, 99), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xd4 [2010/09/23 12:09:05.403745, 3, effective(99, 99), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 14 of length 216 (0 toread) [2010/09/23 12:09:05.403773, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.403792, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=212 smb_com=0x2f smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=896 smt_wct=14 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7364 (0x1CC4) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]=65535 (0xFFFF) smb_vwv[ 6]=65535 (0xFFFF) smb_vwv[ 7]= 8 (0x8) smb_vwv[ 8]= 148 (0x94) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 148 (0x94) smb_vwv[11]= 64 (0x40) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_bcc=149 [2010/09/23 12:09:05.404019, 10, effective(99, 99), real(0, 0)] ../lib/util/util.c:278(_dump_data) [0000] EE 05 00 00 03 10 00 00 00 94 00 00 00 05 00 00 ........ ........ [0010] 00 7C 00 00 00 00 00 1A 00 00 00 02 00 09 00 00 .|...... ........ [0020] 00 00 00 00 00 09 00 00 00 5C 00 5C 00 42 00 41 ........ .\.\.B.A [0030] 00 43 00 4B 00 55 00 50 00 00 00 00 00 0D 00 00 .C.K.U.P ........ [0040] 00 00 00 00 00 0D 00 00 00 4E 00 4C 00 4F 00 56 ........ .N.L.O.V [0050] 00 41 00 53 00 5A 00 2D 00 48 00 54 00 4D 00 24 .A.S.Z.- .H.T.M.$ [0060] 00 00 00 02 00 0C 00 00 00 00 00 00 00 0C 00 00 ........ ........ [0070] 00 4E 00 4C 00 4F 00 56 00 41 00 53 00 5A 00 2D .N.L.O.V .A.S.Z.- [0080] 00 48 00 54 00 4D 00 00 00 99 E7 4C 68 F6 F3 6B .H.T.M.. ...Lh..k [0090] 49 FF FF 2F 61 I../a [2010/09/23 12:09:05.404241, 3, effective(99, 99), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBwriteX (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:05.404269, 4, effective(99, 99), real(0, 0)] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/09/23 12:09:05.404300, 6, effective(99, 99), real(0, 0)] smbd/pipes.c:291(reply_pipe_write_and_X) reply_pipe_write_and_X: 1cc4 name: NETLOGON len: 148 [2010/09/23 12:09:05.404337, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 148 [2010/09/23 12:09:05.404368, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 148 [2010/09/23 12:09:05.404397, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 148 [2010/09/23 12:09:05.404427, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 148, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/09/23 12:09:05.404457, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/09/23 12:09:05.404486, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 132 [2010/09/23 12:09:05.404514, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 132 [2010/09/23 12:09:05.404559, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0094 000a auth_len : 0000 000c call_id : 00000005 [2010/09/23 12:09:05.404689, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/09/23 12:09:05.404717, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/09/23 12:09:05.404748, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/09/23 12:09:05.404777, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 132 [2010/09/23 12:09:05.404805, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 132, incoming data = 132 [2010/09/23 12:09:05.404835, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/09/23 12:09:05.404864, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 0000007c 0004 context_id: 0000 0006 opnum : 001a [2010/09/23 12:09:05.404924, 3, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/09/23 12:09:05.404954, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2366(api_pipe_request) Requested \PIPE\\netlogon [2010/09/23 12:09:05.404985, 4, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2403(api_rpcTNP) api_rpcTNP: \netlogon op 0x1a - api_rpcTNP: rpc command: NETR_SERVERAUTHENTICATE3 [2010/09/23 12:09:05.405016, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2433(api_rpcTNP) api_rpc_cmds[26].fn == 0x7f1712bee260 [2010/09/23 12:09:05.405054, 1, effective(99, 99), real(0, 0)] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) netr_ServerAuthenticate3: struct netr_ServerAuthenticate3 in: struct netr_ServerAuthenticate3 server_name : * server_name : '\\BACKUP' account_name : * account_name : 'NLOVASZ-HTM$' secure_channel_type : SEC_CHAN_WKSTA (2) computer_name : * computer_name : 'NLOVASZ-HTM' credentials : * credentials: struct netr_Credential data : 99e74c68f6f36b49 negotiate_flags : * negotiate_flags : 0x612fffff (1630535679) 1: NETLOGON_NEG_ACCOUNT_LOCKOUT 1: NETLOGON_NEG_PERSISTENT_SAMREPL 1: NETLOGON_NEG_ARCFOUR 1: NETLOGON_NEG_PROMOTION_COUNT 1: NETLOGON_NEG_CHANGELOG_BDC 1: NETLOGON_NEG_FULL_SYNC_REPL 1: NETLOGON_NEG_MULTIPLE_SIDS 1: NETLOGON_NEG_REDO 1: NETLOGON_NEG_PASSWORD_CHANGE_REFUSAL 1: NETLOGON_NEG_SEND_PASSWORD_INFO_PDC 1: NETLOGON_NEG_GENERIC_PASSTHROUGH 1: NETLOGON_NEG_CONCURRENT_RPC 1: NETLOGON_NEG_AVOID_ACCOUNT_DB_REPL 1: NETLOGON_NEG_AVOID_SECURITYAUTH_DB_REPL 1: NETLOGON_NEG_STRONG_KEYS 1: NETLOGON_NEG_TRANSITIVE_TRUSTS 1: NETLOGON_NEG_DNS_DOMAIN_TRUSTS 1: NETLOGON_NEG_PASSWORD_SET2 1: NETLOGON_NEG_GETDOMAININFO 1: NETLOGON_NEG_CROSS_FOREST_TRUSTS 0: NETLOGON_NEG_NEUTRALIZE_NT4_EMULATION 1: NETLOGON_NEG_RODC_PASSTHROUGH 0: NETLOGON_NEG_SUPPORTS_AES_SHA2 1: NETLOGON_NEG_SUPPORTS_AES 1: NETLOGON_NEG_AUTHENTICATED_RPC_LSASS 1: NETLOGON_NEG_AUTHENTICATED_RPC [2010/09/23 12:09:05.405518, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.405552, 3, effective(99, 99), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/09/23 12:09:05.405580, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.405608, 5, effective(99, 99), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.405637, 5, effective(99, 99), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.405721, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(uid=NLOVASZ-HTM$)(objectclass=sambaSamAccount))], scope => [2] [2010/09/23 12:09:05.406754, 2, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:572(init_sam_from_ldap) init_sam_from_ldap: Entry found for user: nlovasz-htm$ [2010/09/23 12:09:05.406832, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nlovasz-htm$, was [2010/09/23 12:09:05.406867, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain HTM, was [2010/09/23 12:09:05.406897, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username nlovasz-htm$, was [2010/09/23 12:09:05.406933, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:550(pdb_set_user_sid_from_string) pdb_set_user_sid_from_string: setting user sid S-1-5-21-2077591095-4229175143-852743160-41041 [2010/09/23 12:09:05.406965, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2077591095-4229175143-852743160-41041 [2010/09/23 12:09:05.407009, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaLogonTime does not exist [2010/09/23 12:09:05.407043, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaLogoffTime does not exist [2010/09/23 12:09:05.407093, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaKickoffTime does not exist [2010/09/23 12:09:05.407126, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaPwdCanChange does not exist [2010/09/23 12:09:05.407159, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaPwdMustChange does not exist [2010/09/23 12:09:05.407193, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name nlovasz-htm$, was [2010/09/23 12:09:05.407227, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaHomeDrive does not exist [2010/09/23 12:09:05.407256, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/09/23 12:09:05.407290, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaHomePath does not exist [2010/09/23 12:09:05.407324, 4, effective(0, 0), real(0, 0)] lib/substitute.c:504(automount_server) Home server: backup [2010/09/23 12:09:05.407391, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\backup\nlovasz-htm_, was [2010/09/23 12:09:05.407425, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaLogonScript does not exist [2010/09/23 12:09:05.407455, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script login.bat, was [2010/09/23 12:09:05.407488, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaProfilePath does not exist [2010/09/23 12:09:05.407517, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path , was [2010/09/23 12:09:05.407550, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute description does not exist [2010/09/23 12:09:05.407583, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaUserWorkstations does not exist [2010/09/23 12:09:05.407616, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaMungedDial does not exist [2010/09/23 12:09:05.407649, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaLMPassword does not exist [2010/09/23 12:09:05.407689, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.407719, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.407747, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.407775, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.407804, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.407879, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.407941, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.407979, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaBadPasswordCount does not exist [2010/09/23 12:09:05.408012, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaBadPasswordTime does not exist [2010/09/23 12:09:05.408046, 10, effective(0, 0), real(0, 0)] lib/smbldap.c:310(smbldap_talloc_single_attribute) attribute sambaLogonHours does not exist [2010/09/23 12:09:05.408107, 7, effective(0, 0), real(0, 0)] passdb/login_cache.c:88(login_cache_read) Looking up login cache for user nlovasz-htm$ [2010/09/23 12:09:05.408142, 7, effective(0, 0), real(0, 0)] passdb/login_cache.c:104(login_cache_read) No cache entry found [2010/09/23 12:09:05.408170, 9, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:1126(init_sam_from_ldap) No cache entry, bad count = 0, bad time = 0 [2010/09/23 12:09:05.408207, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.408235, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.408263, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.408292, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.408321, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.408393, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/maximum password age, value = 4294967295 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.408449, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.408483, 5, effective(0, 0), real(0, 0)] lib/username.c:133(Get_Pwnam_alloc) Finding user nlovasz-htm$ [2010/09/23 12:09:05.408511, 5, effective(0, 0), real(0, 0)] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nlovasz-htm$ [2010/09/23 12:09:05.408544, 5, effective(0, 0), real(0, 0)] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [nlovasz-htm$]! [2010/09/23 12:09:05.408577, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:257(pdb_get_group_sid) do lookup_sid(S-1-5-21-2077591095-4229175143-852743160-515) for group of user S-1-5-21-2077591095-4229175143-852743160-41041 [2010/09/23 12:09:05.408616, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:965(lookup_sid) lookup_sid called for SID 'S-1-5-21-2077591095-4229175143-852743160-515' [2010/09/23 12:09:05.408657, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:720(check_dom_sid_to_level) Accepting SID S-1-5-21-2077591095-4229175143-852743160 in level 1 [2010/09/23 12:09:05.408690, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:480(lookup_rids) lookup_rids called for domain sid 'S-1-5-21-2077591095-4229175143-852743160' [2010/09/23 12:09:05.408724, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.408754, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.408783, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.408810, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.408839, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.408884, 5, effective(0, 0), real(0, 0)] passdb/pdb_interface.c:1473(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 515. [2010/09/23 12:09:05.408914, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 [2010/09/23 12:09:05.408943, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 2 [2010/09/23 12:09:05.408971, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 [2010/09/23 12:09:05.408998, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.409027, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.409108, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(sambaSID=S-1-5-21-2077591095-4229175143-852743160-515)(objectclass=sambaSamAccount))], scope => [2] [2010/09/23 12:09:05.409878, 4, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:1695(ldapsam_getsampwsid) ldapsam_getsampwsid: Unable to locate SID [S-1-5-21-2077591095-4229175143-852743160-515] count=0 [2010/09/23 12:09:05.409969, 5, effective(0, 0), real(0, 0)] lib/smbldap.c:1360(smbldap_search_ext) smbldap_search_ext: base => [dc=intra,dc=htm-hungary,dc=hu], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21-2077591095-4229175143-852743160-515))], scope => [2] [2010/09/23 12:09:05.410945, 2, effective(0, 0), real(0, 0)] passdb/pdb_ldap.c:2446(init_group_from_ldap) init_group_from_ldap: Entry found for group: 10003 [2010/09/23 12:09:05.411058, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.411110, 5, effective(0, 0), real(0, 0)] passdb/pdb_interface.c:1595(pdb_default_lookup_rids) lookup_rids: ntcomputers:2 [2010/09/23 12:09:05.411147, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.411179, 10, effective(0, 0), real(0, 0)] passdb/lookup_sid.c:1000(lookup_sid) Sid S-1-5-21-2077591095-4229175143-852743160-515 -> HTM\ntcomputers(2) [2010/09/23 12:09:05.411221, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.411249, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.411279, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.411308, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.411345, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.411412, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.411473, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.411517, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nlovasz-htm$, was [2010/09/23 12:09:05.411547, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain HTM, was [2010/09/23 12:09:05.411577, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username nlovasz-htm$, was [2010/09/23 12:09:05.411607, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name nlovasz-htm$, was [2010/09/23 12:09:05.411641, 4, effective(0, 0), real(0, 0)] lib/substitute.c:504(automount_server) Home server: backup [2010/09/23 12:09:05.411678, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\backup\nlovasz-htm_, was [2010/09/23 12:09:05.411708, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/09/23 12:09:05.411741, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script login.bat, was [2010/09/23 12:09:05.411771, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path , was [2010/09/23 12:09:05.411801, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/09/23 12:09:05.411833, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.411862, 3, effective(0, 0), real(0, 0)] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2010/09/23 12:09:05.411891, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/09/23 12:09:05.411918, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:05.411946, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:05.412024, 10, effective(0, 0), real(0, 0)] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = ACCT_POL/password history, value = 0 , timeout = Thu Sep 23 12:10:05 2010 [2010/09/23 12:09:05.412103, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/09/23 12:09:05.412134, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-2077591095-4229175143-852743160-41041 [2010/09/23 12:09:05.412167, 10, effective(0, 0), real(0, 0)] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-2077591095-4229175143-852743160-41041 from rid 41041 [2010/09/23 12:09:05.412212, 10, effective(0, 0), real(0, 0)] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-2077591095-4229175143-852743160-515 [2010/09/23 12:09:05.412257, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:05.412288, 5, effective(99, 99), real(0, 0)] ../lib/util/util.c:278(_dump_data) [0000] 00 11 0A 7E 49 90 CA 84 8D 25 CC 0F 8A AD 0E 6D ...~I... .%.....m [2010/09/23 12:09:05.412416, 2, effective(99, 99), real(0, 0)] ../libcli/auth/credentials.c:307(netlogon_creds_server_check_internal) credentials check failed [2010/09/23 12:09:05.412447, 0, effective(99, 99), real(0, 0)] rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3) _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client NLOVASZ-HTM machine account NLOVASZ-HTM$ [2010/09/23 12:09:05.412481, 1, effective(99, 99), real(0, 0)] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) netr_ServerAuthenticate3: struct netr_ServerAuthenticate3 out: struct netr_ServerAuthenticate3 return_credentials : * return_credentials: struct netr_Credential data : 0000000000000000 negotiate_flags : * negotiate_flags : 0x400241ff (1073889791) 1: NETLOGON_NEG_ACCOUNT_LOCKOUT 1: NETLOGON_NEG_PERSISTENT_SAMREPL 1: NETLOGON_NEG_ARCFOUR 1: NETLOGON_NEG_PROMOTION_COUNT 1: NETLOGON_NEG_CHANGELOG_BDC 1: NETLOGON_NEG_FULL_SYNC_REPL 1: NETLOGON_NEG_MULTIPLE_SIDS 1: NETLOGON_NEG_REDO 1: NETLOGON_NEG_PASSWORD_CHANGE_REFUSAL 0: NETLOGON_NEG_SEND_PASSWORD_INFO_PDC 0: NETLOGON_NEG_GENERIC_PASSTHROUGH 0: NETLOGON_NEG_CONCURRENT_RPC 0: NETLOGON_NEG_AVOID_ACCOUNT_DB_REPL 0: NETLOGON_NEG_AVOID_SECURITYAUTH_DB_REPL 1: NETLOGON_NEG_STRONG_KEYS 0: NETLOGON_NEG_TRANSITIVE_TRUSTS 0: NETLOGON_NEG_DNS_DOMAIN_TRUSTS 1: NETLOGON_NEG_PASSWORD_SET2 0: NETLOGON_NEG_GETDOMAININFO 0: NETLOGON_NEG_CROSS_FOREST_TRUSTS 0: NETLOGON_NEG_NEUTRALIZE_NT4_EMULATION 0: NETLOGON_NEG_RODC_PASSTHROUGH 0: NETLOGON_NEG_SUPPORTS_AES_SHA2 0: NETLOGON_NEG_SUPPORTS_AES 0: NETLOGON_NEG_AUTHENTICATED_RPC_LSASS 1: NETLOGON_NEG_AUTHENTICATED_RPC rid : * rid : 0x00000000 (0) result : NT_STATUS_ACCESS_DENIED [2010/09/23 12:09:05.412888, 5, effective(99, 99), real(0, 0)] rpc_server/srv_pipe.c:2468(api_rpcTNP) api_rpcTNP: called \netlogon successfully [2010/09/23 12:09:05.412960, 3, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 0 [2010/09/23 12:09:05.412993, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 132 [2010/09/23 12:09:05.413050, 3, effective(99, 99), real(0, 0)] smbd/pipes.c:352(pipe_write_andx_done) writeX-IPC nwritten=148 [2010/09/23 12:09:05.413625, 10, effective(99, 99), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 59 [2010/09/23 12:09:05.413675, 6, effective(99, 99), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x3b [2010/09/23 12:09:05.413704, 3, effective(99, 99), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 15 of length 63 (0 toread) [2010/09/23 12:09:05.413732, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.413752, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=59 smb_com=0x2e smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=960 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]=57054 (0xDEDE) smb_vwv[ 2]= 7364 (0x1CC4) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 1024 (0x400) smb_vwv[ 6]= 1024 (0x400) smb_vwv[ 7]=65535 (0xFFFF) smb_vwv[ 8]=65535 (0xFFFF) smb_vwv[ 9]= 1024 (0x400) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_bcc=0 [2010/09/23 12:09:05.413965, 3, effective(99, 99), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBreadX (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:05.413995, 4, effective(99, 99), real(0, 0)] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/09/23 12:09:05.414031, 6, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \netlogon len: 1024 [2010/09/23 12:09:05.414062, 10, effective(99, 99), real(0, 0)] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \netlogon: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 20. [2010/09/23 12:09:05.414116, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 002c 000a auth_len : 0000 000c call_id : 00000005 [2010/09/23 12:09:05.414245, 5, effective(99, 99), real(0, 0)] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 00000014 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/09/23 12:09:05.414325, 3, effective(99, 99), real(0, 0)] smbd/pipes.c:462(pipe_read_andx_done) readX-IPC min=1024 max=1024 nread=44 [2010/09/23 12:09:05.414851, 10, effective(99, 99), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 41 [2010/09/23 12:09:05.414896, 6, effective(99, 99), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x29 [2010/09/23 12:09:05.414925, 3, effective(99, 99), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 16 of length 45 (0 toread) [2010/09/23 12:09:05.414953, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.414972, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=1024 smt_wct=3 smb_vwv[ 0]= 7364 (0x1CC4) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2010/09/23 12:09:05.415122, 3, effective(99, 99), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBclose (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:05.415177, 4, effective(99, 99), real(0, 0)] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/09/23 12:09:05.415216, 3, effective(99, 99), real(0, 0)] smbd/reply.c:4634(reply_close) close fd=-1 fnum=7364 (numopen=1) [2010/09/23 12:09:05.415252, 6, effective(99, 99), real(0, 0)] smbd/close.c:501(set_close_write_time) close_write_time: Sun Feb 7 07:28:15 2106 [2010/09/23 12:09:05.415370, 10, effective(99, 99), real(0, 0)] rpc_server/srv_lsa_hnd.c:290(close_policy_by_pipe) close_policy_by_pipe: deleted handle list for pipe \netlogon [2010/09/23 12:09:05.415411, 5, effective(99, 99), real(0, 0)] smbd/files.c:497(file_free) freed files structure 7364 (0 used) [2010/09/23 12:09:05.415444, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:05.415463, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=1024 smt_wct=0 smb_bcc=0 [2010/09/23 12:09:19.611135, 10, effective(99, 99), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 35 [2010/09/23 12:09:19.611231, 6, effective(99, 99), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x23 [2010/09/23 12:09:19.611262, 3, effective(99, 99), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 17 of length 39 (0 toread) [2010/09/23 12:09:19.611290, 5, effective(99, 99), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:19.611309, 5, effective(99, 99), real(0, 0)] lib/util.c:627(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=1088 smt_wct=0 smb_bcc=0 [2010/09/23 12:09:19.611424, 3, effective(99, 99), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBtdis (pid 11141) conn 0x7f17137a69a0 [2010/09/23 12:09:19.611454, 3, effective(99, 99), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:19.611482, 5, effective(99, 99), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:19.611512, 5, effective(99, 99), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:19.611572, 5, effective(0, 0), real(0, 0)] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/09/23 12:09:19.611606, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:19.611635, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:19.611662, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:19.611706, 5, effective(0, 0), real(0, 0)] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/09/23 12:09:19.611737, 3, effective(0, 0), real(0, 0)] smbd/service.c:1251(close_cnum) nlovasz-htm (::ffff:192.168.1.62) closed connection to service IPC$ [2010/09/23 12:09:19.611773, 3, effective(0, 0), real(0, 0)] smbd/connection.c:31(yield_connection) Yielding connection to IPC$ [2010/09/23 12:09:19.611865, 10, effective(0, 0), real(0, 0)] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 852B0000FFFFFFFF0100 [2010/09/23 12:09:19.611914, 10, effective(0, 0), real(0, 0)] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f1713812ed0 [2010/09/23 12:09:19.611969, 10, effective(0, 0), real(0, 0)] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 852B0000FFFFFFFF0100 [2010/09/23 12:09:19.612089, 4, effective(0, 0), real(0, 0)] smbd/vfs.c:721(vfs_ChDir) vfs_ChDir to / [2010/09/23 12:09:19.612145, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:19.612225, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:19.612257, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:19.612302, 5, effective(0, 0), real(0, 0)] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/09/23 12:09:19.612352, 5, effective(0, 0), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:19.612371, 5, effective(0, 0), real(0, 0)] lib/util.c:627(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=1088 smt_wct=0 smb_bcc=0 [2010/09/23 12:09:19.612938, 10, effective(0, 0), real(0, 0)] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 39 [2010/09/23 12:09:19.612981, 6, effective(0, 0), real(0, 0)] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x27 [2010/09/23 12:09:19.613009, 3, effective(0, 0), real(0, 0)] smbd/process.c:1485(process_smb) Transaction 18 of length 43 (0 toread) [2010/09/23 12:09:19.613037, 5, effective(0, 0), real(0, 0)] lib/util.c:617(show_msg) [2010/09/23 12:09:19.613056, 5, effective(0, 0), real(0, 0)] lib/util.c:627(show_msg) size=39 smb_com=0x74 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=65279 smb_uid=100 smb_mid=1152 smt_wct=2 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_bcc=0 [2010/09/23 12:09:19.613201, 3, effective(0, 0), real(0, 0)] smbd/process.c:1294(switch_message) switch message SMBulogoffX (pid 11141) conn 0x0 [2010/09/23 12:09:19.613230, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:19.613257, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:19.613285, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:19.613336, 5, effective(0, 0), real(0, 0)] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/09/23 12:09:19.613379, 3, effective(0, 0), real(0, 0)] smbd/reply.c:2055(reply_ulogoffX) ulogoffX vuid=100 [2010/09/23 12:09:19.613928, 0, effective(0, 0), real(0, 0)] lib/util_sock.c:474(read_fd_with_timeout) [2010/09/23 12:09:19.613991, 0, effective(0, 0), real(0, 0)] lib/util_sock.c:1432(get_peer_addr_internal) getpeername failed. Error was Transport endpoint is not connected read_fd_with_timeout: client 0.0.0.0 read error = Connection reset by peer. [2010/09/23 12:09:19.614038, 10, effective(0, 0), real(0, 0)] smbd/process.c:286(receive_smb_raw_talloc) receive_smb_raw: NT_STATUS_CONNECTION_RESET [2010/09/23 12:09:19.614093, 3, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/09/23 12:09:19.614121, 5, effective(0, 0), real(0, 0)] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/09/23 12:09:19.614148, 5, effective(0, 0), real(0, 0)] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/09/23 12:09:19.614194, 5, effective(0, 0), real(0, 0)] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/09/23 12:09:19.614228, 3, effective(0, 0), real(0, 0)] smbd/connection.c:31(yield_connection) Yielding connection to [2010/09/23 12:09:19.614317, 10, effective(0, 0), real(0, 0)] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 852B0000FFFFFFFFFFFF [2010/09/23 12:09:19.614370, 10, effective(0, 0), real(0, 0)] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f1713812ed0 [2010/09/23 12:09:19.614430, 10, effective(0, 0), real(0, 0)] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 852B0000FFFFFFFFFFFF [2010/09/23 12:09:19.614630, 3, effective(0, 0), real(0, 0)] smbd/server.c:902(exit_server_common) Server exit (failed to receive smb request)