[2010/10/01 09:45:57.414546, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 328 [2010/10/01 09:45:57.414653, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x148 [2010/10/01 09:45:57.414682, 3] smbd/process.c:1485(process_smb) Transaction 290 of length 332 (0 toread) [2010/10/01 09:45:57.414706, 5] lib/util.c:617(show_msg) [2010/10/01 09:45:57.414721, 5] lib/util.c:627(show_msg) size=328 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=55303 smb_tid=3 smb_pid=708 smb_uid=103 smb_mid=18369 smt_wct=15 smb_vwv[ 0]= 260 (0x104) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 2 (0x2) smb_vwv[ 3]= 40 (0x28) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 260 (0x104) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 5 (0x5) smb_bcc=263 [2010/10/01 09:45:57.414984, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 00 00 EC 03 00 00 00 00 5C 00 62 00 72 00 69 ........ .\.b.r.i [0010] 00 67 00 68 00 74 00 6F 00 6E 00 2E 00 77 00 75 .g.h.t.o .n...w.u [0020] 00 6D 00 69 00 2E 00 6F 00 72 00 67 00 2E 00 61 .m.i...o .r.g...a [0030] 00 75 00 5C 00 73 00 68 00 61 00 72 00 65 00 64 .u.\.s.h .a.r.e.d [0040] 00 5C 00 46 00 61 00 6D 00 69 00 6C 00 79 00 20 .\.F.a.m .i.l.y. [0050] 00 61 00 6E 00 64 00 20 00 43 00 6F 00 6D 00 6D .a.n.d. .C.o.m.m [0060] 00 75 00 6E 00 69 00 74 00 79 00 20 00 44 00 65 .u.n.i.t .y. .D.e [0070] 00 76 00 65 00 6C 00 6F 00 70 00 6D 00 65 00 6E .v.e.l.o .p.m.e.n [0080] 00 74 00 20 00 53 00 65 00 72 00 76 00 69 00 63 .t. .S.e .r.v.i.c [0090] 00 65 00 73 00 5C 00 53 00 6F 00 75 00 74 00 68 .e.s.\.S .o.u.t.h [00A0] 00 65 00 72 00 6E 00 20 00 48 00 6F 00 6D 00 65 .e.r.n. .H.o.m.e [00B0] 00 6C 00 65 00 73 00 73 00 6E 00 65 00 73 00 73 .l.e.s.s .n.e.s.s [00C0] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [00D0] 00 73 00 5C 00 44 00 61 00 74 00 61 00 62 00 61 .s.\.D.a .t.a.b.a [00E0] 00 73 00 65 00 5C 00 53 00 4D 00 41 00 52 00 54 .s.e.\.S .M.A.R.T [00F0] 00 5C 00 53 00 6D 00 61 00 72 00 74 00 2E 00 69 .\.S.m.a .r.t...i [0100] 00 63 00 6F 00 00 00 .c.o... [2010/10/01 09:45:57.415986, 3] smbd/process.c:1294(switch_message) switch message SMBtrans2 (pid 1931) conn 0xb89d8298 [2010/10/01 09:45:57.416025, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (10680, 10000) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.416052, 5] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-1202660629-583907252-725345543-2255 contains 20 SIDs SID[ 0]: S-1-5-21-1202660629-583907252-725345543-2255 SID[ 1]: S-1-5-21-1202660629-583907252-725345543-513 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-5-21-1202660629-583907252-725345543-1842 SID[ 6]: S-1-5-21-1202660629-583907252-725345543-1863 SID[ 7]: S-1-5-21-1202660629-583907252-725345543-1166 SID[ 8]: S-1-5-21-1202660629-583907252-725345543-2646 SID[ 9]: S-1-5-32-545 SID[ 10]: S-1-22-1-10680 SID[ 11]: S-1-22-2-10000 SID[ 12]: S-1-22-2-10347 SID[ 13]: S-1-22-2-10348 SID[ 14]: S-1-22-2-10363 SID[ 15]: S-1-22-2-10197 SID[ 16]: S-1-22-2-10225 SID[ 17]: S-1-22-2-10011 SID[ 18]: S-1-22-2-10362 SID[ 19]: S-1-22-2-10346 SE_PRIV 0x0 0x0 0x0 0x0 [2010/10/01 09:45:57.416642, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 10680 Primary group is 10000 and contains 9 supplementary groups Group[ 0]: 10000 Group[ 1]: 10347 Group[ 2]: 10348 Group[ 3]: 10363 Group[ 4]: 10197 Group[ 5]: 10225 Group[ 6]: 10011 Group[ 7]: 10362 Group[ 8]: 10346 [2010/10/01 09:45:57.416812, 5] smbd/uid.c:354(change_to_user) change_to_user uid=(0,10680) gid=(0,10000) [2010/10/01 09:45:57.416844, 4] smbd/vfs.c:721(vfs_ChDir) vfs_ChDir to /srv/samba/local/shared [2010/10/01 09:45:57.416888, 3] smbd/trans2.c:5099(call_trans2qfilepathinfo) call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004 [2010/10/01 09:45:57.416925, 10] smbd/msdfs.c:107(parse_dfs_path) parse_dfs_path: temp = |brighton.wumi.org.au\shared\Family and Community Development Services\Southern Homelessness Services\Database\SMART\Smart.ico| after trimming \'s [2010/10/01 09:45:57.416956, 10] smbd/msdfs.c:132(parse_dfs_path) parse_dfs_path: hostname: brighton.wumi.org.au [2010/10/01 09:45:57.417015, 10] smbd/msdfs.c:174(parse_dfs_path) parse_dfs_path: servicename: shared [2010/10/01 09:45:57.417042, 10] smbd/msdfs.c:208(parse_dfs_path) parse_dfs_path: rest of the path: Family and Community Development Services/Southern Homelessness Services/Database/SMART/Smart.ico [2010/10/01 09:45:57.417072, 10] smbd/msdfs.c:525(dfs_path_lookup) dfs_path_lookup: Conn path = /srv/samba/local/shared reqpath = Family and Community Development Services/Southern Homelessness Services/Database/SMART/Smart.ico [2010/10/01 09:45:57.417100, 5] smbd/filename.c:169(unix_convert) unix_convert called on file "Family and Community Development Services/Southern Homelessness Services/Database/SMART/Smart.ico" [2010/10/01 09:45:57.417134, 10] smbd/statcache.c:236(stat_cache_lookup) stat_cache_lookup: lookup failed for name [FAMILY AND COMMUNITY DEVELOPMENT SERVICES/SOUTHERN HOMELESSNESS SERVICES/DATABASE/SMART/SMART.ICO] [2010/10/01 09:45:57.417182, 10] smbd/statcache.c:236(stat_cache_lookup) stat_cache_lookup: lookup failed for name [FAMILY AND COMMUNITY DEVELOPMENT SERVICES/SOUTHERN HOMELESSNESS SERVICES/DATABASE/SMART] [2010/10/01 09:45:57.417211, 10] smbd/statcache.c:236(stat_cache_lookup) stat_cache_lookup: lookup failed for name [FAMILY AND COMMUNITY DEVELOPMENT SERVICES/SOUTHERN HOMELESSNESS SERVICES/DATABASE] [2010/10/01 09:45:57.417238, 10] smbd/statcache.c:236(stat_cache_lookup) stat_cache_lookup: lookup failed for name [FAMILY AND COMMUNITY DEVELOPMENT SERVICES/SOUTHERN HOMELESSNESS SERVICES] [2010/10/01 09:45:57.417264, 10] smbd/statcache.c:236(stat_cache_lookup) stat_cache_lookup: lookup failed for name [FAMILY AND COMMUNITY DEVELOPMENT SERVICES] [2010/10/01 09:45:57.417433, 5] smbd/filename.c:328(unix_convert) unix_convert begin: name = Family and Community Development Services/Southern Homelessness Services/Database/SMART/Smart.ico, dirpath = , start = Family and Community Development Services/Southern Homelessness Services/Database/SMART/Smart.ico [2010/10/01 09:45:57.417482, 10] smbd/mangle_hash2.c:239(is_mangled) is_mangled Family and Community Development Services/Southern Homelessness Services/Database/SMART/Smart.ico ? [2010/10/01 09:45:57.417511, 10] smbd/mangle_hash2.c:178(is_mangled_component) is_mangled_component Family and Community Development Services/Southern Homelessness Services/Database/SMART/Smart.ico (len 41) ? [2010/10/01 09:45:57.417540, 10] smbd/mangle_hash2.c:178(is_mangled_component) is_mangled_component Southern Homelessness Services/Database/SMART/Smart.ico (len 30) ? [2010/10/01 09:45:57.417563, 10] smbd/mangle_hash2.c:178(is_mangled_component) is_mangled_component Database/SMART/Smart.ico (len 8) ? [2010/10/01 09:45:57.417585, 10] smbd/mangle_hash2.c:178(is_mangled_component) is_mangled_component SMART/Smart.ico (len 5) ? [2010/10/01 09:45:57.417607, 10] smbd/mangle_hash2.c:178(is_mangled_component) is_mangled_component Smart.ico (len 9) ? [2010/10/01 09:45:57.417640, 5] smbd/statcache.c:138(stat_cache_add) stat_cache_add: Added entry (b8a00300:size 29) FAMILY AND COMMUNITY DEVELOPMENT SERVICES -> Family and Community Development Services [2010/10/01 09:45:57.417678, 10] smbd/mangle_hash2.c:239(is_mangled) is_mangled Southern Homelessness Services ? [2010/10/01 09:45:57.417701, 10] smbd/mangle_hash2.c:178(is_mangled_component) is_mangled_component Southern Homelessness Services (len 30) ? [2010/10/01 09:45:57.417813, 5] smbd/statcache.c:138(stat_cache_add) stat_cache_add: Added entry (b89fbd90:size 48) FAMILY AND COMMUNITY DEVELOPMENT SERVICES/SOUTHERN HOMELESSNESS SERVICES -> Family and Community Development Services/Southern Homelessness Services [2010/10/01 09:45:57.417854, 10] smbd/mangle_hash2.c:239(is_mangled) is_mangled Database ? [2010/10/01 09:45:57.417877, 10] smbd/mangle_hash2.c:178(is_mangled_component) is_mangled_component Database (len 8) ? [2010/10/01 09:45:57.417909, 5] smbd/dir.c:1331(OpenDir) OpenDir: Can't open Family and Community Development Services/Southern Homelessness Services. No such file or directory [2010/10/01 09:45:57.417978, 3] smbd/filename.c:942(get_real_filename_full_scan) scan dir didn't open dir [Family and Community Development Services/Southern Homelessness Services] [2010/10/01 09:45:57.418005, 5] smbd/filename.c:544(unix_convert) Intermediate not found Database [2010/10/01 09:45:57.418027, 10] smbd/filename.c:817(unix_convert) dirpath = [Family and Community Development Services/Southern Homelessness Services] start = [Database/SMART/Smart.ico] [2010/10/01 09:45:57.418073, 5] smbd/msdfs.c:441(is_msdfs_link_internal) is_msdfs_link_read_target: Family and Community Development Services/Southern Homelessness Services/Database/SMART/Smart.ico does not exist. [2010/10/01 09:45:57.418113, 5] smbd/msdfs.c:441(is_msdfs_link_internal) is_msdfs_link_read_target: Family and Community Development Services/Southern Homelessness Services/Database/SMART does not exist. [2010/10/01 09:45:57.418146, 5] smbd/msdfs.c:441(is_msdfs_link_internal) is_msdfs_link_read_target: Family and Community Development Services/Southern Homelessness Services/Database does not exist. [2010/10/01 09:45:57.418227, 5] smbd/msdfs.c:463(is_msdfs_link_internal) is_msdfs_link_internal: Family and Community Development Services/Southern Homelessness Services -> msdfs: [2010/10/01 09:45:57.418258, 4] smbd/msdfs.c:623(dfs_path_lookup) dfs_path_lookup: Redirecting \brighton.wumi.org.au\shared\Family and Community Development Services\Southern Homelessness Services\Database\SMART\Smart.ico because parent Family and Community Development Services/Southern Homelessness Services is dfs link [2010/10/01 09:45:57.418432, 3] smbd/msdfs.c:737(dfs_redirect) dfs_redirect: Redirecting \brighton.wumi.org.au\shared\Family and Community Development Services\Southern Homelessness Services\Database\SMART\Smart.ico [2010/10/01 09:45:57.418463, 10] smbd/filename.c:1143(filename_convert) filename_convert: resolve_dfspath failed for name \brighton.wumi.org.au\shared\Family and Community Development Services\Southern Homelessness Services\Database\SMART\Smart.ico with NT_STATUS_PATH_NOT_COVERED [2010/10/01 09:45:57.418506, 3] smbd/error.c:80(error_packet_set) error packet at smbd/trans2.c(5125) cmd=50 (SMBtrans2) NT_STATUS_PATH_NOT_COVERED [2010/10/01 09:45:57.418537, 5] lib/util.c:617(show_msg) [2010/10/01 09:45:57.418552, 5] lib/util.c:627(show_msg) size=35 smb_com=0x32 smb_rcls=87 smb_reh=2 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=3 smb_pid=708 smb_uid=103 smb_mid=18369 smt_wct=0 smb_bcc=0 [2010/10/01 09:45:57.420561, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 1404 [2010/10/01 09:45:57.420668, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x57c [2010/10/01 09:45:57.420697, 3] smbd/process.c:1485(process_smb) Transaction 291 of length 1408 (0 toread) [2010/10/01 09:45:57.420722, 5] lib/util.c:617(show_msg) [2010/10/01 09:45:57.420736, 5] lib/util.c:627(show_msg) size=1404 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=0 smb_mid=18433 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 1404 (0x57C) smb_vwv[ 2]=16644 (0x4104) smb_vwv[ 3]= 50 (0x32) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 1242 (0x4DA) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 212 (0xD4) smb_vwv[11]=40960 (0xA000) smb_bcc=1345 [2010/10/01 09:45:57.420926, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 82 04 D6 06 06 2B 06 01 05 05 02 A0 82 04 CA `.....+. ........ [0010] 30 82 04 C6 A0 24 30 22 06 09 2A 86 48 82 F7 12 0....$0" ..*.H... [0020] 01 02 02 06 09 2A 86 48 86 F7 12 01 02 02 06 0A .....*.H ........ [0030] 2B 06 01 04 01 82 37 02 02 0A A2 82 04 9C 04 82 +.....7. ........ [0040] 04 98 60 82 04 94 06 09 2A 86 48 86 F7 12 01 02 ..`..... *.H..... [0050] 02 01 00 6E 82 04 83 30 82 04 7F A0 03 02 01 05 ...n...0 ........ [0060] A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 ........ .. ..... [0070] 03 A8 61 82 03 A4 30 82 03 A0 A0 03 02 01 05 A1 ..a...0. ........ [0080] 0D 1B 0B 57 55 4D 49 2E 4F 52 47 2E 41 55 A2 27 ...WUMI. ORG.AU.' [0090] 30 25 A0 03 02 01 02 A1 1E 30 1C 1B 04 63 69 66 0%...... .0...cif [00A0] 73 1B 14 62 72 69 67 68 74 6F 6E 2E 77 75 6D 69 s..brigh ton.wumi [00B0] 2E 6F 72 67 2E 61 75 A3 82 03 5F 30 82 03 5B A0 .org.au. .._0..[. [00C0] 03 02 01 17 A2 82 03 52 04 82 03 4E D8 5E 14 6D .......R ...N.^.m [00D0] A4 81 C5 EF DA C9 7A CC 86 B0 19 20 7F E3 69 9D ......z. ... ..i. [00E0] 13 91 D2 8C 56 62 6C 7A BE 24 4D 43 BF EB 43 D8 ....Vblz .$MC..C. [00F0] A3 0B 3B 69 23 DE 6A 31 A2 40 74 A0 A5 D2 90 15 ..;i#.j1 .@t..... [0100] 1D C3 AD 00 E5 A0 CA 9E FB F8 04 E2 BC 3B 1A 22 ........ .....;." [0110] DD EC A0 65 5C 3E B5 FD 26 17 F0 E1 D3 E5 C8 BD ...e\>.. &....... [0120] 68 4B 63 9E 4F 27 B6 AD 51 FE 61 BA F9 30 EF 0A hKc.O'.. Q.a..0.. [0130] AB F7 2C 68 80 15 21 56 58 FE 20 86 44 F7 E1 E4 ..,h..!V X. .D... [0140] 1C 27 F6 42 67 EA 2A 07 99 48 70 5B 9F 91 2B 58 .'.Bg.*. .Hp[..+X [0150] 3E BF C0 2F D5 75 FE 8A 75 C1 99 D9 F2 E2 66 53 >../.u.. u.....fS [0160] ED 3E E7 BC 14 B6 75 29 6C 56 3F C8 9D E7 40 AC .>....u) lV?...@. [0170] 6E 75 6E B5 A3 7E 30 C5 80 BD EA 96 76 62 A5 1E nun..~0. ....vb.. [0180] AD CD C4 DC 56 2B 08 65 2E 50 CA A5 C4 9D A7 ED ....V+.e .P...... [0190] D6 F7 66 AD A4 06 D4 9B C8 6D 5E 0B E5 32 D9 CD ..f..... .m^..2.. [01A0] 46 E9 8C 1E 5E 49 08 3F C8 C0 3B 66 EA A2 AA 25 F...^I.? ..;f...% [01B0] 44 7F C5 05 2F 79 1B 37 A3 9C ED 3F 2B FC 8A 96 D.../y.7 ...?+... [01C0] 3F 52 DD 68 17 5F 05 12 34 AE 12 3B 98 DA 8A 27 ?R.h._.. 4..;...' [01D0] 5D 9E 32 7A 83 74 8E 64 0E 3F 21 B7 4A A0 0E C7 ].2z.t.d .?!.J... [01E0] 31 32 EB 9F 96 42 AC 72 0B A9 42 92 78 11 F2 DB 12...B.r ..B.x... [01F0] 4E 54 1D D7 8E 6D D0 42 A9 4A 4E 3F 2B 20 9D 65 NT...m.B .JN?+ .e [2010/10/01 09:45:57.422872, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 1931) conn 0x0 [2010/10/01 09:45:57.422903, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.422928, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.422950, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.423008, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/10/01 09:45:57.423041, 3] smbd/sesssetup.c:1435(reply_sesssetup_and_X) wct=12 flg2=0xc807 [2010/10/01 09:45:57.423064, 3] smbd/sesssetup.c:1189(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/10/01 09:45:57.423110, 3] smbd/sesssetup.c:1231(reply_sesssetup_and_X_spnego) NativeOS=[Windows 2002 Service Pack 3 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2010/10/01 09:45:57.423139, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 106 [2010/10/01 09:45:57.423171, 10] smbd/sesssetup.c:1134(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 1242, pblob->length = 1242 [2010/10/01 09:45:57.423397, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.2.840.48018.1.2.2 [2010/10/01 09:45:57.423427, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.2.840.113554.1.2.2 [2010/10/01 09:45:57.423448, 5] smbd/sesssetup.c:753(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/10/01 09:45:57.423469, 3] smbd/sesssetup.c:805(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 1176 [2010/10/01 09:45:57.427694, 10] libads/kerberos_verify.c:349(ads_secrets_verify_ticket) ads_secrets_verify_ticket: found previous password [2010/10/01 09:45:57.483642, 10] libads/kerberos_verify.c:381(ads_secrets_verify_ticket) ads_secrets_verify_ticket: enc type [23] decrypted message ! [2010/10/01 09:45:57.483918, 10] libsmb/clikrb5.c:915(get_krb5_smb_session_key) Got KRB5 session key of length 16 [2010/10/01 09:45:57.484179, 3] libads/authdata.c:304(decode_pac_data) Found account name from PAC: UCWB-0150$ [UCWB-0150$] [2010/10/01 09:45:57.484214, 10] libads/authdata.c:306(decode_pac_data) Successfully validated Kerberos PAC [2010/10/01 09:45:57.487631, 10] ../lib/util/util.c:278(_dump_data) [0000] F5 31 4C 6A CF 06 E6 B1 3F 64 11 1E 32 A4 45 DC .1Lj.... ?d..2.E. [2010/10/01 09:45:57.487837, 10] ../lib/util/util.c:278(_dump_data) [0000] BC D5 EE F6 F5 EE 7A D4 A1 A6 8A A7 A9 90 A4 D5 ......z. ........ pac_data: struct PAC_DATA num_buffers : 0x00000004 (4) version : 0x00000000 (0) buffers: ARRAY(4) buffers: struct PAC_BUFFER type : PAC_TYPE_LOGON_INFO (1) _ndr_size : 0x000001c0 (448) info : * info : union PAC_INFO(case 1) logon_info: struct PAC_LOGON_INFO_CTR info : * info: struct PAC_LOGON_INFO info3: struct netr_SamInfo3 base: struct netr_SamBaseInfo last_logon : Fri 01 Oct 2010 09:36:05 CST CST last_logoff : Tue 19 Jan 2038 13:44:07 CST CST acct_expiry : Tue 19 Jan 2038 13:44:07 CST CST last_password_change : Mon 27 Sep 2010 08:48:35 CST CST allow_password_change : Mon 27 Sep 2010 08:48:35 CST CST force_password_change : Tue 19 Jan 2038 13:44:07 CST CST account_name: struct lsa_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'UCWB-0150$' full_name: struct lsa_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'UCWB-0150$' logon_script: struct lsa_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct lsa_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_directory: struct lsa_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct lsa_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_count : 0x0016 (22) bad_password_count : 0x0000 (0) rid : 0x000008ba (2234) primary_gid : 0x00000203 (515) groups: struct samr_RidWithAttributeArray count : 0x00000001 (1) rids : * rids: ARRAY(1) rids: struct samr_RidWithAttribute rid : 0x00000203 (515) attributes : 0x00000007 (7) 1: SE_GROUP_MANDATORY 1: SE_GROUP_ENABLED_BY_DEFAULT 1: SE_GROUP_ENABLED 0: SE_GROUP_OWNER 0: SE_GROUP_USE_FOR_DENY_ONLY 0: SE_GROUP_RESOURCE 0x00: SE_GROUP_LOGON_ID (0) user_flags : 0x00000020 (32) 0: NETLOGON_GUEST 0: NETLOGON_NOENCRYPTION 0: NETLOGON_CACHED_ACCOUNT 0: NETLOGON_USED_LM_PASSWORD 1: NETLOGON_EXTRA_SIDS 0: NETLOGON_SUBAUTH_SESSION_KEY 0: NETLOGON_SERVER_TRUST_ACCOUNT 0: NETLOGON_NTLMV2_ENABLED 0: NETLOGON_RESOURCE_GROUPS 0: NETLOGON_PROFILE_PATH_RETURNED 0: NETLOGON_GRACE_LOGON key: struct netr_UserSessionKey key : 00000000000000000000000000000000 logon_server: struct lsa_StringLarge length : 0x0016 (22) size : 0x0018 (24) string : * string : 'UCWB-KVM-18' domain: struct lsa_StringLarge length : 0x0008 (8) size : 0x000a (10) string : * string : 'WUM3' domain_sid : * domain_sid : S-1-5-21-1202660629-583907252-725345543 LMSessKey: struct netr_LMSessionKey key : 0000000000000000 acct_flags : 0x00000080 (128) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_NO_AUTH_DATA_REQD unknown: ARRAY(7) unknown : 0x00000000 (0) unknown : 0x00000000 (0) unknown : 0x00000000 (0) unknown : 0x00000000 (0) unknown : 0x00000000 (0) unknown : 0x00000000 (0) unknown : 0x00000000 (0) sidcount : 0x00000000 (0) sids : NULL res_group_dom_sid : NULL res_groups: struct samr_RidWithAttributeArray count : 0x00000000 (0) rids : NULL _pad : 0x00000000 (0) buffers: struct PAC_BUFFER type : PAC_TYPE_LOGON_NAME (10) _ndr_size : 0x0000001e (30) info : * info : union PAC_INFO(case 10) logon_name: struct PAC_LOGON_NAME logon_time : Fri 01 Oct 2010 09:43:49 CST CST size : 0x0014 (20) account_name : 'UCWB-0150$' _pad : 0x00000000 (0) buffers: struct PAC_BUFFER type : PAC_TYPE_SRV_CHECKSUM (6) _ndr_size : 0x00000014 (20) info : * info : union PAC_INFO(case 6) srv_cksum: struct PAC_SIGNATURE_DATA type : 0xffffff76 (4294967158) signature : DATA_BLOB length=16 _pad : 0x00000000 (0) buffers: struct PAC_BUFFER type : PAC_TYPE_KDC_CHECKSUM (7) _ndr_size : 0x00000014 (20) info : * info : union PAC_INFO(case 7) kdc_cksum: struct PAC_SIGNATURE_DATA type : 0xffffff76 (4294967158) signature : DATA_BLOB length=16 _pad : 0x00000000 (0) [2010/10/01 09:45:57.489697, 3] smbd/sesssetup.c:338(reply_spnego_kerberos) Ticket name is [UCWB-0150$@WUMI.ORG.AU] [2010/10/01 09:45:57.489768, 10] libsmb/samlogon_cache.c:160(netsamlogon_cache_store) netsamlogon_cache_store: SID [S-1-5-21-1202660629-583907252-725345543-2234] [2010/10/01 09:45:57.489795, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &r: struct netsamlogoncache_entry timestamp : Fri 01 Oct 2010 09:45:57 CST CST info3: struct netr_SamInfo3 base: struct netr_SamBaseInfo last_logon : Fri 01 Oct 2010 09:36:05 CST CST last_logoff : Tue 19 Jan 2038 13:44:07 CST CST acct_expiry : Tue 19 Jan 2038 13:44:07 CST CST last_password_change : Mon 27 Sep 2010 08:48:35 CST CST allow_password_change : Mon 27 Sep 2010 08:48:35 CST CST force_password_change : Tue 19 Jan 2038 13:44:07 CST CST account_name: struct lsa_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'UCWB-0150$' full_name: struct lsa_String length : 0x0014 (20) size : 0x0014 (20) string : * string : 'UCWB-0150$' logon_script: struct lsa_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' profile_path: struct lsa_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_directory: struct lsa_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' home_drive: struct lsa_String length : 0x0000 (0) size : 0x0000 (0) string : * string : '' logon_count : 0x0016 (22) bad_password_count : 0x0000 (0) rid : 0x000008ba (2234) primary_gid : 0x00000203 (515) groups: struct samr_RidWithAttributeArray count : 0x00000001 (1) rids : * rids: ARRAY(1) rids: struct samr_RidWithAttribute rid : 0x00000203 (515) attributes : 0x00000007 (7) 1: SE_GROUP_MANDATORY 1: SE_GROUP_ENABLED_BY_DEFAULT 1: SE_GROUP_ENABLED 0: SE_GROUP_OWNER 0: SE_GROUP_USE_FOR_DENY_ONLY 0: SE_GROUP_RESOURCE 0x00: SE_GROUP_LOGON_ID (0) user_flags : 0x00000020 (32) 0: NETLOGON_GUEST 0: NETLOGON_NOENCRYPTION 0: NETLOGON_CACHED_ACCOUNT 0: NETLOGON_USED_LM_PASSWORD 1: NETLOGON_EXTRA_SIDS 0: NETLOGON_SUBAUTH_SESSION_KEY 0: NETLOGON_SERVER_TRUST_ACCOUNT 0: NETLOGON_NTLMV2_ENABLED 0: NETLOGON_RESOURCE_GROUPS 0: NETLOGON_PROFILE_PATH_RETURNED 0: NETLOGON_GRACE_LOGON key: struct netr_UserSessionKey key : 00000000000000000000000000000000 logon_server: struct lsa_StringLarge length : 0x0016 (22) size : 0x0018 (24) string : * string : 'UCWB-KVM-18' domain: struct lsa_StringLarge length : 0x0008 (8) size : 0x000a (10) string : * string : 'WUM3' domain_sid : * domain_sid : S-1-5-21-1202660629-583907252-725345543 LMSessKey: struct netr_LMSessionKey key : 0000000000000000 acct_flags : 0x00000080 (128) 0: ACB_DISABLED 0: ACB_HOMDIRREQ 0: ACB_PWNOTREQ 0: ACB_TEMPDUP 0: ACB_NORMAL 0: ACB_MNS 0: ACB_DOMTRUST 1: ACB_WSTRUST 0: ACB_SVRTRUST 0: ACB_PWNOEXP 0: ACB_AUTOLOCK 0: ACB_ENC_TXT_PWD_ALLOWED 0: ACB_SMARTCARD_REQUIRED 0: ACB_TRUSTED_FOR_DELEGATION 0: ACB_NOT_DELEGATED 0: ACB_USE_DES_KEY_ONLY 0: ACB_DONT_REQUIRE_PREAUTH 0: ACB_PW_EXPIRED 0: ACB_NO_AUTH_DATA_REQD unknown: ARRAY(7) unknown : 0x00000000 (0) unknown : 0x00000000 (0) unknown : 0x00000000 (0) unknown : 0x00000000 (0) unknown : 0x00000000 (0) unknown : 0x00000000 (0) unknown : 0x00000000 (0) sidcount : 0x00000000 (0) sids : NULL [2010/10/01 09:45:57.492235, 10] smbd/sesssetup.c:382(reply_spnego_kerberos) Mapped to [WUM3] (using PAC) [2010/10/01 09:45:57.492422, 5] lib/username.c:133(Get_Pwnam_alloc) Finding user WUM3\UCWB-0150$ [2010/10/01 09:45:57.492451, 5] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is wum3\ucwb-0150$ [2010/10/01 09:45:57.492481, 5] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [WUM3\UCWB-0150$]! [2010/10/01 09:45:57.492579, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Sep 23 18:06:57 2010 [2010/10/01 09:45:57.492658, 5] lib/username.c:133(Get_Pwnam_alloc) Finding user WUM3\ucwb-0150$ [2010/10/01 09:45:57.492683, 5] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is wum3\ucwb-0150$ [2010/10/01 09:45:57.492709, 5] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [WUM3\ucwb-0150$]! [2010/10/01 09:45:57.492733, 5] auth/auth_util.c:1522(fill_sam_account) fill_sam_account: located username was [WUM3\ucwb-0150$] [2010/10/01 09:45:57.492757, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username WUM3\ucwb-0150$, was [2010/10/01 09:45:57.492784, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name , was [2010/10/01 09:45:57.492809, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain BRIGHTON, was [2010/10/01 09:45:57.492839, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1410203337-155486731-3094506392-22334 [2010/10/01 09:45:57.492870, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1410203337-155486731-3094506392-22334 from rid 22334 [2010/10/01 09:45:57.492910, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username UCWB-0150$, was [2010/10/01 09:45:57.492934, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username UCWB-0150$, was WUM3\ucwb-0150$ [2010/10/01 09:45:57.492958, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain WUM3, was BRIGHTON [2010/10/01 09:45:57.492981, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1202660629-583907252-725345543-2234 [2010/10/01 09:45:57.493014, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1202660629-583907252-725345543-515 [2010/10/01 09:45:57.493044, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name UCWB-0150$, was [2010/10/01 09:45:57.493067, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/10/01 09:45:57.493091, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path , was [2010/10/01 09:45:57.493113, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir , was [2010/10/01 09:45:57.493137, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/10/01 09:45:57.493757, 10] auth/token_util.c:356(create_local_nt_token) Create local NT token for S-1-5-21-1202660629-583907252-725345543-2234 [2010/10/01 09:45:57.493850, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.493883, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/10/01 09:45:57.493907, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.493931, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.493952, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.494652, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.494720, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1202660629-583907252-725345543-2234] [2010/10/01 09:45:57.494764, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-1202660629-583907252-725345543-515] [2010/10/01 09:45:57.494805, 5] lib/privileges.c:128(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2010/10/01 09:45:57.494895, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2010/10/01 09:45:57.494930, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-11] [2010/10/01 09:45:57.495015, 10] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-1202660629-583907252-725345543-2234 contains 10 SIDs SID[ 0]: S-1-5-21-1202660629-583907252-725345543-2234 SID[ 1]: S-1-5-21-1202660629-583907252-725345543-515 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-1-10667 SID[ 6]: S-1-22-2-10001 SID[ 7]: S-1-22-2-10347 SID[ 8]: S-1-22-2-10348 SID[ 9]: S-1-22-2-10363 SE_PRIV 0x0 0x0 0x0 0x0 [2010/10/01 09:45:57.495173, 10] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 10667 Primary group is 10001 and contains 4 supplementary groups Group[ 0]: 10001 Group[ 1]: 10347 Group[ 2]: 10348 Group[ 3]: 10363 [2010/10/01 09:45:57.495247, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 107 [2010/10/01 09:45:57.495415, 10] smbd/password.c:278(register_existing_vuid) register_existing_vuid: (10667,10001) WUM3\ucwb-0150$ UCWB-0150$ WUM3 guest=0 [2010/10/01 09:45:57.495444, 3] smbd/password.c:282(register_existing_vuid) register_existing_vuid: User name: WUM3\ucwb-0150$ Real name: UCWB-0150$ [2010/10/01 09:45:57.495468, 3] smbd/password.c:292(register_existing_vuid) register_existing_vuid: UNIX uid 10667 is UNIX user WUM3\ucwb-0150$, and will be vuid 107 [2010/10/01 09:45:57.495512, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 49442F313933312F3130 [2010/10/01 09:45:57.495552, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb89fa240 [2010/10/01 09:45:57.495653, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 49442F313933312F3130 [2010/10/01 09:45:57.495731, 7] param/loadparm.c:9399(lp_servicenumber) lp_servicenumber: couldn't find WUM3\ucwb-0150$ [2010/10/01 09:45:57.495761, 3] smbd/password.c:223(register_homes_share) Adding homes service for user 'WUM3\ucwb-0150$' using home directory: '/home/WUM3/ucwb-0150_' [2010/10/01 09:45:57.495809, 3] param/loadparm.c:6265(lp_add_home) adding home's share [ucwb-0150$] for user 'WUM3\ucwb-0150$' at '/home/WUM3/ucwb-0150_' [2010/10/01 09:45:57.495890, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu Sep 23 18:06:57 2010 [2010/10/01 09:45:57.496036, 5] lib/util.c:617(show_msg) [2010/10/01 09:45:57.496054, 5] lib/util.c:627(show_msg) size=238 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=65279 smb_uid=107 smb_mid=18433 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 151 (0x97) smb_bcc=195 [2010/10/01 09:45:57.496185, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 94 30 81 91 A0 03 0A 01 00 A1 0B 06 09 2A ...0.... .......* [0010] 86 48 82 F7 12 01 02 02 A2 7D 04 7B 60 79 06 09 .H...... .}.{`y.. [0020] 2A 86 48 86 F7 12 01 02 02 02 00 6F 6A 30 68 A0 *.H..... ...oj0h. [0030] 03 02 01 05 A1 03 02 01 0F A2 5C 30 5A A0 03 02 ........ ..\0Z... [0040] 01 17 A2 53 04 51 1E E6 B2 7B 9A 11 82 80 B2 D5 ...S.Q.. .{...... [0050] EC 8D 6E 83 BD F8 BF C8 FE 3C C9 AA 44 CE 0E BC ..n..... .<..D... [0060] 10 27 F3 C0 76 08 F9 8B A3 C3 BE BB 1B 26 48 A7 .'..v... .....&H. [0070] 47 F4 24 B0 9B B9 A2 AC C3 DB 1B 72 FB AC 06 81 G.$..... ...r.... [0080] 44 00 00 BB DE D8 4C F9 4E 40 D7 96 77 06 F6 0A D.....L. N@..w... [0090] 39 0E B3 D6 4A 8B EC 55 00 6E 00 69 00 78 00 00 9...J..U .n.i.x.. [00A0] 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 00 2E .S.a.m.b .a. .3.. [00B0] 00 35 00 2E 00 35 00 00 00 57 00 55 00 4D 00 33 .5...5.. .W.U.M.3 [00C0] 00 00 00 ... [2010/10/01 09:45:57.497910, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 106 [2010/10/01 09:45:57.497992, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x6a [2010/10/01 09:45:57.498021, 3] smbd/process.c:1485(process_smb) Transaction 292 of length 110 (0 toread) [2010/10/01 09:45:57.498044, 5] lib/util.c:617(show_msg) [2010/10/01 09:45:57.498059, 5] lib/util.c:627(show_msg) size=106 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=0 smb_pid=65279 smb_uid=107 smb_mid=18497 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 106 (0x6A) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=63 [2010/10/01 09:45:57.498185, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 5C 00 42 00 52 00 49 00 47 00 48 00 54 .\.\.B.R .I.G.H.T [0010] 00 4F 00 4E 00 2E 00 57 00 55 00 4D 00 49 00 2E .O.N...W .U.M.I.. [0020] 00 4F 00 52 00 47 00 2E 00 41 00 55 00 5C 00 49 .O.R.G.. .A.U.\.I [0030] 00 50 00 43 00 24 00 00 00 3F 3F 3F 3F 3F 00 .P.C.$.. .?????. [2010/10/01 09:45:57.498545, 3] smbd/process.c:1294(switch_message) switch message SMBtconX (pid 1931) conn 0x0 [2010/10/01 09:45:57.498587, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.498612, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.498633, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.498684, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/10/01 09:45:57.498729, 4] smbd/reply.c:767(reply_tcon_and_X) Client requested device type [?????] for share [IPC$] [2010/10/01 09:45:57.498795, 5] smbd/service.c:1227(make_connection) making a connection to 'normal' service ipc$ [2010/10/01 09:45:57.498838, 3] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2010/10/01 09:45:57.498873, 10] passdb/lookup_sid.c:69(lookup_name) lookup_name: BRIGHTON\root => BRIGHTON (domain), root (name) [2010/10/01 09:45:57.498897, 10] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2010/10/01 09:45:57.498923, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.498949, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/10/01 09:45:57.498970, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.498993, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.499013, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.499088, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2010/10/01 09:45:57.499120, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain BRIGHTON, was [2010/10/01 09:45:57.499144, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/10/01 09:45:57.499167, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2010/10/01 09:45:57.499193, 4] lib/substitute.c:504(automount_server) Home server: brighton [2010/10/01 09:45:57.499228, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\brighton\root, was [2010/10/01 09:45:57.499254, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/10/01 09:45:57.499420, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/10/01 09:45:57.499447, 4] lib/substitute.c:504(automount_server) Home server: brighton [2010/10/01 09:45:57.499478, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\brighton\root\profile, was [2010/10/01 09:45:57.499537, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/10/01 09:45:57.499564, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.499589, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/10/01 09:45:57.499612, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.499634, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.499655, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.499713, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/10/01 09:45:57.499747, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.499775, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1410203337-155486731-3094506392-1000 [2010/10/01 09:45:57.499806, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1410203337-155486731-3094506392-1000 from rid 1000 [2010/10/01 09:45:57.499856, 5] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2010/10/01 09:45:57.499880, 5] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2010/10/01 09:45:57.499908, 5] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2010/10/01 09:45:57.500011, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.500043, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/10/01 09:45:57.500066, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.500088, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.500108, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.500154, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/10/01 09:45:57.500187, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.500227, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2010/10/01 09:45:57.500252, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain BRIGHTON, was [2010/10/01 09:45:57.500412, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/10/01 09:45:57.500437, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2010/10/01 09:45:57.500463, 4] lib/substitute.c:504(automount_server) Home server: brighton [2010/10/01 09:45:57.500562, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\brighton\root, was [2010/10/01 09:45:57.500594, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/10/01 09:45:57.500620, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/10/01 09:45:57.500645, 4] lib/substitute.c:504(automount_server) Home server: brighton [2010/10/01 09:45:57.500674, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\brighton\root\profile, was [2010/10/01 09:45:57.500701, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/10/01 09:45:57.500726, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.500751, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/10/01 09:45:57.500804, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.500828, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.500850, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.500907, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/10/01 09:45:57.500940, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.500968, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1410203337-155486731-3094506392-1000 [2010/10/01 09:45:57.501003, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1410203337-155486731-3094506392-1000 from rid 1000 [2010/10/01 09:45:57.501078, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-1410203337-155486731-3094506392-513, value = -1, timeout = Fri Oct 1 09:46:01 2010 [2010/10/01 09:45:57.501131, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.501156, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/10/01 09:45:57.501178, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.501201, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.501221, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.501261, 5] passdb/pdb_interface.c:1473(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 513. [2010/10/01 09:45:57.501432, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 [2010/10/01 09:45:57.501458, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 2 [2010/10/01 09:45:57.501481, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 [2010/10/01 09:45:57.501504, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.501525, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.501581, 5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. [2010/10/01 09:45:57.501730, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.501763, 5] passdb/pdb_interface.c:1536(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2010/10/01 09:45:57.501794, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.501819, 10] passdb/lookup_sid.c:1283(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-21-1410203337-155486731-3094506392-513 [2010/10/01 09:45:57.501850, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1410203337-155486731-3094506392-513 [2010/10/01 09:45:57.501901, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.501947, 10] smbd/share_access.c:238(user_ok_token) user_ok_token: share IPC$ is ok for unix user WUM3\ucwb-0150$ [2010/10/01 09:45:57.502051, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.502077, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/10/01 09:45:57.502099, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.502122, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.502142, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.502224, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2010/10/01 09:45:57.502258, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.502437, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.502464, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/10/01 09:45:57.502487, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.502510, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.502531, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.502584, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/10/01 09:45:57.502617, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.502662, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username UCWB-0150$, was [2010/10/01 09:45:57.502687, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain WUM3, was [2010/10/01 09:45:57.502711, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username UCWB-0150$, was [2010/10/01 09:45:57.502734, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name UCWB-0150$, was [2010/10/01 09:45:57.502758, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir , was [2010/10/01 09:45:57.502781, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/10/01 09:45:57.502804, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/10/01 09:45:57.502827, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path , was [2010/10/01 09:45:57.502851, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/10/01 09:45:57.502875, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.502899, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/10/01 09:45:57.502921, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.502944, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.502968, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.503013, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/10/01 09:45:57.503047, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.503074, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1410203337-155486731-3094506392-0 [2010/10/01 09:45:57.503104, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1410203337-155486731-3094506392-0 from rid 0 [2010/10/01 09:45:57.503151, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1202660629-583907252-725345543-515 [2010/10/01 09:45:57.503186, 5] lib/username.c:133(Get_Pwnam_alloc) Finding user WUM3\ucwb-0150$ [2010/10/01 09:45:57.503211, 5] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is wum3\ucwb-0150$ [2010/10/01 09:45:57.503239, 5] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [WUM3\ucwb-0150$]! [2010/10/01 09:45:57.503429, 10] smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2010/10/01 09:45:57.503490, 3] smbd/service.c:807(make_connection_snum) Connect path is '/tmp' for service [IPC$] [2010/10/01 09:45:57.503537, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2010/10/01 09:45:57.503573, 3] smbd/vfs.c:97(vfs_init_default) Initialising default vfs hooks [2010/10/01 09:45:57.503597, 3] smbd/vfs.c:122(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2010/10/01 09:45:57.503621, 10] smbd/vfs.c:48(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2010/10/01 09:45:57.503659, 5] smbd/connection.c:142(claim_connection) claiming [IPC$] [2010/10/01 09:45:57.503964, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 8B070000FFFFFFFF0100 [2010/10/01 09:45:57.504020, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb89f7088 [2010/10/01 09:45:57.504105, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 8B070000FFFFFFFF0100 [2010/10/01 09:45:57.504494, 10] smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmp [2010/10/01 09:45:57.504537, 3] lib/util_sid.c:228(string_to_sid) string_to_sid: Sid root does not start with 'S-'. [2010/10/01 09:45:57.504571, 10] passdb/lookup_sid.c:69(lookup_name) lookup_name: BRIGHTON\root => BRIGHTON (domain), root (name) [2010/10/01 09:45:57.504594, 10] passdb/lookup_sid.c:70(lookup_name) lookup_name: flags = 0x073 [2010/10/01 09:45:57.504621, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.504647, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/10/01 09:45:57.504670, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.504692, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.504713, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.504789, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2010/10/01 09:45:57.504819, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain BRIGHTON, was [2010/10/01 09:45:57.504843, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/10/01 09:45:57.504865, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2010/10/01 09:45:57.504891, 4] lib/substitute.c:504(automount_server) Home server: brighton [2010/10/01 09:45:57.504929, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\brighton\root, was [2010/10/01 09:45:57.504954, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/10/01 09:45:57.504979, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/10/01 09:45:57.505005, 4] lib/substitute.c:504(automount_server) Home server: brighton [2010/10/01 09:45:57.505033, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\brighton\root\profile, was [2010/10/01 09:45:57.505059, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/10/01 09:45:57.505083, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.505107, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/10/01 09:45:57.505130, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.505153, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.505174, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.505255, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/10/01 09:45:57.505433, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.505465, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1410203337-155486731-3094506392-1000 [2010/10/01 09:45:57.505504, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1410203337-155486731-3094506392-1000 from rid 1000 [2010/10/01 09:45:57.505554, 5] lib/username.c:133(Get_Pwnam_alloc) Finding user root [2010/10/01 09:45:57.505577, 5] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is root [2010/10/01 09:45:57.505604, 5] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [root]! [2010/10/01 09:45:57.505711, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.505743, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/10/01 09:45:57.505766, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.505789, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.505810, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.505859, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/10/01 09:45:57.505891, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.505931, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username root, was [2010/10/01 09:45:57.505955, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain BRIGHTON, was [2010/10/01 09:45:57.505979, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/10/01 09:45:57.506002, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name root, was [2010/10/01 09:45:57.506028, 4] lib/substitute.c:504(automount_server) Home server: brighton [2010/10/01 09:45:57.506064, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\brighton\root, was [2010/10/01 09:45:57.506089, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/10/01 09:45:57.506113, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/10/01 09:45:57.506138, 4] lib/substitute.c:504(automount_server) Home server: brighton [2010/10/01 09:45:57.506167, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\brighton\root\profile, was [2010/10/01 09:45:57.506193, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/10/01 09:45:57.506217, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.506241, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/10/01 09:45:57.506263, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.506455, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.506478, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.506530, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/10/01 09:45:57.506563, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.506591, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1410203337-155486731-3094506392-1000 [2010/10/01 09:45:57.506651, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1410203337-155486731-3094506392-1000 from rid 1000 [2010/10/01 09:45:57.506729, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-1410203337-155486731-3094506392-513, value = -1, timeout = Fri Oct 1 09:46:01 2010 [2010/10/01 09:45:57.506784, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.506809, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/10/01 09:45:57.506832, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.506855, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.506876, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.506916, 5] passdb/pdb_interface.c:1473(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 513. [2010/10/01 09:45:57.506944, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 3 [2010/10/01 09:45:57.506967, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 2 [2010/10/01 09:45:57.506990, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 3 [2010/10/01 09:45:57.507013, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.507035, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.507086, 5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. [2010/10/01 09:45:57.507409, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/10/01 09:45:57.507456, 5] passdb/pdb_interface.c:1536(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2010/10/01 09:45:57.507489, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.507517, 10] passdb/lookup_sid.c:1283(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-21-1410203337-155486731-3094506392-513 [2010/10/01 09:45:57.507549, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1410203337-155486731-3094506392-513 [2010/10/01 09:45:57.507600, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.507647, 10] smbd/share_access.c:238(user_ok_token) user_ok_token: share IPC$ is ok for unix user WUM3\ucwb-0150$ [2010/10/01 09:45:57.507681, 10] smbd/share_access.c:283(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user WUM3\ucwb-0150$ [2010/10/01 09:45:57.507725, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2010/10/01 09:45:57.507826, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.507853, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/10/01 09:45:57.507877, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.507900, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.507920, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.507969, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: maximum password age, val: -1 [2010/10/01 09:45:57.508002, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.508033, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.508092, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/10/01 09:45:57.508116, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.508138, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.508158, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.508203, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/10/01 09:45:57.508234, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.508419, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username UCWB-0150$, was [2010/10/01 09:45:57.508451, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain WUM3, was [2010/10/01 09:45:57.508474, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username UCWB-0150$, was [2010/10/01 09:45:57.508498, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name UCWB-0150$, was [2010/10/01 09:45:57.508523, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir , was [2010/10/01 09:45:57.508547, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive , was NULL [2010/10/01 09:45:57.508570, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/10/01 09:45:57.508594, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path , was [2010/10/01 09:45:57.508618, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/10/01 09:45:57.508643, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.508668, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/10/01 09:45:57.508690, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/10/01 09:45:57.508713, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.508734, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.508783, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/10/01 09:45:57.508815, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.508842, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-1410203337-155486731-3094506392-0 [2010/10/01 09:45:57.508872, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-1410203337-155486731-3094506392-0 from rid 0 [2010/10/01 09:45:57.508919, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-1202660629-583907252-725345543-515 [2010/10/01 09:45:57.508970, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (10667, 10001) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.508996, 5] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-1202660629-583907252-725345543-2234 contains 10 SIDs SID[ 0]: S-1-5-21-1202660629-583907252-725345543-2234 SID[ 1]: S-1-5-21-1202660629-583907252-725345543-515 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-1-10667 SID[ 6]: S-1-22-2-10001 SID[ 7]: S-1-22-2-10347 SID[ 8]: S-1-22-2-10348 SID[ 9]: S-1-22-2-10363 SE_PRIV 0x0 0x0 0x0 0x0 [2010/10/01 09:45:57.509451, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 10667 Primary group is 10001 and contains 4 supplementary groups Group[ 0]: 10001 Group[ 1]: 10347 Group[ 2]: 10348 Group[ 3]: 10363 [2010/10/01 09:45:57.509622, 5] smbd/uid.c:354(change_to_user) change_to_user uid=(0,10667) gid=(0,10001) [2010/10/01 09:45:57.509674, 3] smbd/service.c:1070(make_connection_snum) 10.193.46.35 (10.193.46.35) connect to service IPC$ initially as user WUM3\ucwb-0150$ (uid=10667, gid=10001) (pid 1931) [2010/10/01 09:45:57.509718, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.509742, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/10/01 09:45:57.509763, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/10/01 09:45:57.509805, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/10/01 09:45:57.509845, 2] smbd/reply.c:838(reply_tcon_and_X) Serving IPC$ as a Dfs root [2010/10/01 09:45:57.509871, 3] smbd/reply.c:846(reply_tcon_and_X) tconX service=IPC$ [2010/10/01 09:45:57.510480, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 324 [2010/10/01 09:45:57.510597, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x144 [2010/10/01 09:45:57.510624, 3] smbd/process.c:1485(process_smb) Transaction 293 of length 328 (0 toread) [2010/10/01 09:45:57.510647, 5] lib/util.c:617(show_msg) [2010/10/01 09:45:57.510661, 5] lib/util.c:627(show_msg) size=324 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=708 smb_uid=107 smb_mid=18561 smt_wct=15 smb_vwv[ 0]= 256 (0x100) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4096 (0x1000) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 256 (0x100) smb_vwv[10]= 68 (0x44) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 1 (0x1) smb_vwv[14]= 16 (0x10) smb_bcc=259 [2010/10/01 09:45:57.510871, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 00 00 04 00 5C 00 62 00 72 00 69 00 67 00 68 .....\.b .r.i.g.h [0010] 00 74 00 6F 00 6E 00 2E 00 77 00 75 00 6D 00 69 .t.o.n.. .w.u.m.i [0020] 00 2E 00 6F 00 72 00 67 00 2E 00 61 00 75 00 5C ...o.r.g ...a.u.\ [0030] 00 73 00 68 00 61 00 72 00 65 00 64 00 5C 00 46 .s.h.a.r .e.d.\.F [0040] 00 61 00 6D 00 69 00 6C 00 79 00 20 00 61 00 6E .a.m.i.l .y. .a.n [0050] 00 64 00 20 00 43 00 6F 00 6D 00 6D 00 75 00 6E .d. .C.o .m.m.u.n [0060] 00 69 00 74 00 79 00 20 00 44 00 65 00 76 00 65 .i.t.y. .D.e.v.e [0070] 00 6C 00 6F 00 70 00 6D 00 65 00 6E 00 74 00 20 .l.o.p.m .e.n.t. [0080] 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 73 .S.e.r.v .i.c.e.s [0090] 00 5C 00 53 00 6F 00 75 00 74 00 68 00 65 00 72 .\.S.o.u .t.h.e.r [00A0] 00 6E 00 20 00 48 00 6F 00 6D 00 65 00 6C 00 65 .n. .H.o .m.e.l.e [00B0] 00 73 00 73 00 6E 00 65 00 73 00 73 00 20 00 53 .s.s.n.e .s.s. .S [00C0] 00 65 00 72 00 76 00 69 00 63 00 65 00 73 00 5C .e.r.v.i .c.e.s.\ [00D0] 00 44 00 61 00 74 00 61 00 62 00 61 00 73 00 65 .D.a.t.a .b.a.s.e [00E0] 00 5C 00 53 00 4D 00 41 00 52 00 54 00 5C 00 53 .\.S.M.A .R.T.\.S [00F0] 00 6D 00 61 00 72 00 74 00 2E 00 69 00 63 00 6F .m.a.r.t ...i.c.o [0100] 00 00 00 ... [2010/10/01 09:45:57.511865, 3] smbd/process.c:1294(switch_message) switch message SMBtrans2 (pid 1931) conn 0xb89f8070 [2010/10/01 09:45:57.511904, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (10667, 10001) - sec_ctx_stack_ndx = 0 [2010/10/01 09:45:57.511929, 5] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-1202660629-583907252-725345543-2234 contains 10 SIDs SID[ 0]: S-1-5-21-1202660629-583907252-725345543-2234 SID[ 1]: S-1-5-21-1202660629-583907252-725345543-515 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-11 SID[ 5]: S-1-22-1-10667 SID[ 6]: S-1-22-2-10001 SID[ 7]: S-1-22-2-10347 SID[ 8]: S-1-22-2-10348 SID[ 9]: S-1-22-2-10363 SE_PRIV 0x0 0x0 0x0 0x0 [2010/10/01 09:45:57.512121, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 10667 Primary group is 10001 and contains 4 supplementary groups Group[ 0]: 10001 Group[ 1]: 10347 Group[ 2]: 10348 Group[ 3]: 10363 [2010/10/01 09:45:57.512222, 5] smbd/uid.c:354(change_to_user) change_to_user uid=(0,10667) gid=(0,10001) [2010/10/01 09:45:57.512253, 4] smbd/vfs.c:721(vfs_ChDir) vfs_ChDir to /tmp [2010/10/01 09:45:57.512404, 10] smbd/trans2.c:7996(call_trans2getdfsreferral) call_trans2getdfsreferral [2010/10/01 09:45:57.512447, 10] smbd/msdfs.c:107(parse_dfs_path) parse_dfs_path: temp = |brighton.wumi.org.au\shared\Family and Community Development Services\Southern Homelessness Services\Database\SMART\Smart.ico| after trimming \'s [2010/10/01 09:45:57.512479, 10] smbd/msdfs.c:132(parse_dfs_path) parse_dfs_path: hostname: brighton.wumi.org.au [2010/10/01 09:45:57.512501, 10] smbd/msdfs.c:174(parse_dfs_path) parse_dfs_path: servicename: shared [2010/10/01 09:45:57.512526, 10] smbd/msdfs.c:208(parse_dfs_path) parse_dfs_path: rest of the path: Family and Community Development Services/Southern Homelessness Services/Database/SMART/Smart.ico [2010/10/01 09:45:57.512596, 10] smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service shared, connectpath = /srv/samba/local/shared [2010/10/01 09:45:57.512624, 3] smbd/vfs.c:97(vfs_init_default) Initialising default vfs hooks [2010/10/01 09:45:57.512647, 3] smbd/vfs.c:122(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2010/10/01 09:45:57.512670, 10] smbd/vfs.c:48(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2010/10/01 09:45:57.512770, 4] smbd/vfs.c:721(vfs_ChDir) vfs_ChDir to /srv/samba/local/shared [2010/10/01 09:45:57.512803, 3] smbd/msdfs.c:295(create_conn_struct) create_conn_struct: Can't ChDir to new conn path /srv/samba/local/shared. Error was Permission denied [2010/10/01 09:45:57.512856, 3] smbd/error.c:80(error_packet_set) error packet at smbd/trans2.c(8018) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED [2010/10/01 09:45:57.512887, 5] lib/util.c:617(show_msg) [2010/10/01 09:45:57.512902, 5] lib/util.c:627(show_msg) size=35 smb_com=0x32 smb_rcls=34 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=708 smb_uid=107 smb_mid=18561 smt_wct=0 smb_bcc=0 [2010/10/01 09:45:57.513469, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 328