[2010/12/05 19:58:00.909540, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:00.909670, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:00.909708, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:00.909781, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:00.909831, 3] smbd/connection.c:31(yield_connection) Yielding connection to [2010/12/05 19:58:00.910015, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 0C2E0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:00.910119, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f31de2e0c30 [2010/12/05 19:58:00.910197, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 0C2E0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:00.910606, 3] smbd/server.c:902(exit_server_common) Server exit (termination signal) [2010/12/05 19:58:00.911085, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:00.911195, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:00.911227, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:00.911290, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:00.911341, 3] smbd/connection.c:31(yield_connection) Yielding connection to [2010/12/05 19:58:00.911512, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 322E0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:00.911593, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7f31de2e68d0 [2010/12/05 19:58:00.911633, 3] smbd/connection.c:42(yield_connection) deleting connection record returned NT_STATUS_NOT_FOUND [2010/12/05 19:58:00.911682, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 322E0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:00.911993, 3] smbd/server.c:902(exit_server_common) Server exit (termination signal) [2010/12/05 19:58:01, 0] smbd/server.c:1119(main) smbd version 3.5.6-12.1-2470-SUSE-SL11.3-x86_64 started. Copyright Andrew Tridgell and the Samba Team 1992-2010 [2010/12/05 19:58:01.016008, 5] lib/debug.c:405(debug_dump_status) INFO: Current debug levels: all: True/99 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 registry: False/0 doing parameter include = registry [2010/12/05 19:58:01.016316, 4] param/loadparm.c:9193(lp_load_ex) pm_process() returned Yes [2010/12/05 19:58:01.016355, 7] param/loadparm.c:9399(lp_servicenumber) lp_servicenumber: couldn't find homes [2010/12/05 19:58:01.016396, 10] param/loadparm.c:8403(set_server_role) set_server_role: role = ROLE_STANDALONE [2010/12/05 19:58:01.016442, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UCS-2LE [2010/12/05 19:58:01.016479, 5] lib/iconv.c:112(smb_register_charset) Registered charset UCS-2LE [2010/12/05 19:58:01.016510, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF-16LE [2010/12/05 19:58:01.016601, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF-16LE [2010/12/05 19:58:01.016634, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UCS-2BE [2010/12/05 19:58:01.016665, 5] lib/iconv.c:112(smb_register_charset) Registered charset UCS-2BE [2010/12/05 19:58:01.016695, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF-16BE [2010/12/05 19:58:01.016725, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF-16BE [2010/12/05 19:58:01.016756, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF8 [2010/12/05 19:58:01.016786, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF8 [2010/12/05 19:58:01.016816, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UTF-8 [2010/12/05 19:58:01.016847, 5] lib/iconv.c:112(smb_register_charset) Registered charset UTF-8 [2010/12/05 19:58:01.016877, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset ASCII [2010/12/05 19:58:01.016913, 5] lib/iconv.c:112(smb_register_charset) Registered charset ASCII [2010/12/05 19:58:01.016944, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset 646 [2010/12/05 19:58:01.016978, 5] lib/iconv.c:112(smb_register_charset) Registered charset 646 [2010/12/05 19:58:01.017009, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset ISO-8859-1 [2010/12/05 19:58:01.017040, 5] lib/iconv.c:112(smb_register_charset) Registered charset ISO-8859-1 [2010/12/05 19:58:01.017070, 5] lib/iconv.c:104(smb_register_charset) Attempting to register new charset UCS2-HEX [2010/12/05 19:58:01.017101, 5] lib/iconv.c:112(smb_register_charset) Registered charset UCS2-HEX [2010/12/05 19:58:01.017941, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.018425, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.018542, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.018628, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.018712, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.018793, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.018875, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.019013, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.019100, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.019184, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.019299, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.019453, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.019563, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.019685, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.019934, 2] lib/tallocmsg.c:106(register_msg_pool_usage) Registered MSG_REQ_POOL_USAGE [2010/12/05 19:58:01.019979, 2] lib/dmallocmsg.c:77(register_dmalloc_msgs) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2010/12/05 19:58:01.020040, 3] param/loadparm.c:9158(lp_load_ex) lp_load_ex: refreshing parameters Initialising global parameters rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) [2010/12/05 19:58:01.020171, 3] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2010/12/05 19:58:01.020214, 3] param/loadparm.c:7842(do_section) Processing section "[global]" doing parameter workgroup = WORKGROUP doing parameter passdb backend = tdbsam doing parameter printing = cups doing parameter printcap name = cups doing parameter printcap cache time = 750 doing parameter cups options = raw doing parameter map to guest = Bad User doing parameter include = /etc/samba/dhcp.conf [2010/12/05 19:58:01.020504, 3] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/etc/samba/dhcp.conf" doing parameter logon path = \\%L\profiles\.msprofile doing parameter logon home = \\%L\%U\.9xprofile doing parameter logon drive = P: doing parameter usershare allow guests = Yes doing parameter log level = 99 [2010/12/05 19:58:01.020693, 5] lib/debug.c:405(debug_dump_status) INFO: Current debug levels: all: True/99 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 registry: False/0 doing parameter include = registry doing parameter registry shares = yes [2010/12/05 19:58:01.021044, 10] registry/reg_init_smbconf.c:74(registry_init_smbconf) registry_init_smbconf called [2010/12/05 19:58:01.021168, 10] registry/reg_cachehook.c:73(reghook_cache_init) reghook_cache_init: new tree with default ops 0x7fc9820913a0 for key [] [2010/12/05 19:58:01.021242, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.021314, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:58:01.021367, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 53) -> 4 [2010/12/05 19:58:01.021420, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 15) -> 4 [2010/12/05 19:58:01.021479, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.021529, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:58:01.021579, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:58:01.021634, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 12) -> 4 [2010/12/05 19:58:01.021686, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:58:01.021735, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:58:01.021783, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/05 19:58:01.021835, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.021900, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 31) -> 4 [2010/12/05 19:58:01.021952, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.022007, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:58:01.022059, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.022110, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 53) -> 4 [2010/12/05 19:58:01.022162, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:58:01.022214, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 19) -> 4 [2010/12/05 19:58:01.022265, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/05 19:58:01.022342, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2010/12/05 19:58:01.022401, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:58:01.022462, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:58:01.022498, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 29) -> 29 [2010/12/05 19:58:01.022542, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [Samba Printer Port], len: 2 [2010/12/05 19:58:01.022588, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2010/12/05 19:58:01.022667, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.022722, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 104) -> 4 [2010/12/05 19:58:01.022756, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 100) -> 100 [2010/12/05 19:58:01.022789, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [DefaultSpoolDirectory], len: 70 [2010/12/05 19:58:01.022827, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2010/12/05 19:58:01.022872, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.022924, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.022958, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 65) -> 40 [2010/12/05 19:58:01.023042, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [DisplayName], len: 20 [2010/12/05 19:58:01.023077, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 25) -> 25 [2010/12/05 19:58:01.023111, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [ErrorControl], len: 4 [2010/12/05 19:58:01.023150, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2010/12/05 19:58:01.023197, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.023247, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.023281, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 65) -> 40 [2010/12/05 19:58:01.023313, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [DisplayName], len: 20 [2010/12/05 19:58:01.023345, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 25) -> 25 [2010/12/05 19:58:01.023378, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [ErrorControl], len: 4 [2010/12/05 19:58:01.023429, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:58:01.023471, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7fc9820914a0 for key [/HKLM/SOFTWARE/Samba/smbconf] [2010/12/05 19:58:01.023506, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:58:01.023542, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [HKLM] [2010/12/05 19:58:01.023576, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [NULL]! [HKLM] [2010/12/05 19:58:01.023608, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [SOFTWARE] [2010/12/05 19:58:01.023642, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [HKLM]! [SOFTWARE] [2010/12/05 19:58:01.023674, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Samba] [2010/12/05 19:58:01.023708, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [SOFTWARE]! [Samba] [2010/12/05 19:58:01.023740, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [smbconf] [2010/12/05 19:58:01.024053, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Samba]! [smbconf] [2010/12/05 19:58:01.024095, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Samba/smbconf] to tree [2010/12/05 19:58:01.024129, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:58:01.024161, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (0) [2010/12/05 19:58:01.024235, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.024276, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.024314, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.024352, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.024419, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.024553, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.024591, 10] registry/reg_backend_db.c:469(regdb_open) regdb_open: refcount reset (1) [2010/12/05 19:58:01.024631, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:58:01.024669, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (1) [2010/12/05 19:58:01.024710, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:58:01.024750, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:58:01.024782, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:58:01.024814, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.024845, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.025065, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.025107, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.025137, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM] [2010/12/05 19:58:01.025174, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:58:01.025229, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:58:01.025265, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:58:01.025304, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:58:01.025349, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.025387, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:58:01.025473, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SOFTWARE] [2010/12/05 19:58:01.025512, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (2) [2010/12/05 19:58:01.025550, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE] [2010/12/05 19:58:01.025581, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SOFTWARE] [2010/12/05 19:58:01.025613, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE] [2010/12/05 19:58:01.025645, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.025676, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.025706, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SOFTWARE], new_path => [] [2010/12/05 19:58:01.025738, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.025769, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:58:01.025800, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.025830, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.025861, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SOFTWARE] [2010/12/05 19:58:01.025895, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SOFTWARE] [2010/12/05 19:58:01.025942, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.025993, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.026027, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 25) -> 10 [2010/12/05 19:58:01.026094, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 15) -> 6 [2010/12/05 19:58:01.026131, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.026169, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [3] items [2010/12/05 19:58:01.026207, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SOFTWARE] [2010/12/05 19:58:01.026250, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.026306, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Samba] [2010/12/05 19:58:01.026342, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (3) [2010/12/05 19:58:01.026380, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba] [2010/12/05 19:58:01.026411, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SOFTWARE/Samba] [2010/12/05 19:58:01.026443, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba] [2010/12/05 19:58:01.026476, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.026507, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.026538, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba] [2010/12/05 19:58:01.026570, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.026601, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:58:01.026632, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Samba], new_path => [] [2010/12/05 19:58:01.026664, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:58:01.026695, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Samba] [2010/12/05 19:58:01.026726, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.026756, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.026786, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SOFTWARE/Samba] [2010/12/05 19:58:01.026820, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba] [2010/12/05 19:58:01.026868, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/05 19:58:01.026922, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 25) -> 4 [2010/12/05 19:58:01.026957, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 21) -> 13 [2010/12/05 19:58:01.027024, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 8) -> 8 [2010/12/05 19:58:01.027061, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.027098, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SOFTWARE\Samba] [2010/12/05 19:58:01.027141, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/05 19:58:01.027197, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (3) [2010/12/05 19:58:01.027233, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [smbconf] [2010/12/05 19:58:01.027266, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (3) [2010/12/05 19:58:01.027304, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba/smbconf] [2010/12/05 19:58:01.027336, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SOFTWARE/Samba/smbconf] [2010/12/05 19:58:01.027368, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba/smbconf] [2010/12/05 19:58:01.027428, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.027461, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.027492, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba/smbconf] [2010/12/05 19:58:01.027524, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.027555, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:58:01.027586, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Samba], new_path => [smbconf] [2010/12/05 19:58:01.027618, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:58:01.027649, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Samba] [2010/12/05 19:58:01.027681, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [smbconf], new_path => [] [2010/12/05 19:58:01.027713, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [smbconf] [2010/12/05 19:58:01.027744, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [smbconf] [2010/12/05 19:58:01.027775, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.027806, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.027836, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820914a0 for key [/HKLM/SOFTWARE/Samba/smbconf] [2010/12/05 19:58:01.027871, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba\smbconf] [2010/12/05 19:58:01.027915, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:58:01.027962, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal) regdb_fetch_keys: no subkeys found for key [HKLM\SOFTWARE\Samba\smbconf] [2010/12/05 19:58:01.027998, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (3) [2010/12/05 19:58:01.028031, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (2) [2010/12/05 19:58:01.028073, 5] param/loadparm.c:6954(process_registry_service) process_registry_service: service name global [2010/12/05 19:58:01.028113, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [global] [2010/12/05 19:58:01.028146, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (2) [2010/12/05 19:58:01.028184, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:58:01.028216, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:58:01.028248, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba/smbconf/global] [2010/12/05 19:58:01.028280, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.028311, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.028341, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba/smbconf/global] [2010/12/05 19:58:01.028373, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.028404, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:58:01.028434, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Samba], new_path => [smbconf/global] [2010/12/05 19:58:01.028466, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:58:01.028497, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Samba] [2010/12/05 19:58:01.028556, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [smbconf], new_path => [global] [2010/12/05 19:58:01.028588, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [smbconf] [2010/12/05 19:58:01.028619, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [smbconf] [2010/12/05 19:58:01.028649, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [global], new_path => [] [2010/12/05 19:58:01.028681, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [global] [2010/12/05 19:58:01.028712, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.028742, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.028773, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820914a0 for key [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:58:01.028807, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba\smbconf\global] [2010/12/05 19:58:01.028854, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 4) -> 4 [2010/12/05 19:58:01.028891, 10] registry/reg_backend_db.c:1471(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Samba\smbconf\global] not found [2010/12/05 19:58:01.028924, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (2) [2010/12/05 19:58:01.028963, 2] param/loadparm.c:7859(do_section) Processing section "[homes]" [2010/12/05 19:58:01.029048, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 0 for homes [2010/12/05 19:58:01.029083, 10] param/loadparm.c:6201(hash_a_service) hash_a_service: creating servicehash [2010/12/05 19:58:01.029116, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 0 for service name homes doing parameter comment = Home Directories doing parameter valid users = %S, %D%w%S doing parameter browseable = No doing parameter read only = No doing parameter inherit acls = Yes [2010/12/05 19:58:01.029277, 2] param/loadparm.c:7859(do_section) Processing section "[profiles]" [2010/12/05 19:58:01.029342, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 1 for profiles [2010/12/05 19:58:01.029375, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 1 for service name profiles doing parameter comment = Network Profiles Service doing parameter path = %H doing parameter read only = No doing parameter store dos attributes = Yes doing parameter create mask = 0600 doing parameter directory mask = 0700 [2010/12/05 19:58:01.029569, 2] param/loadparm.c:7859(do_section) Processing section "[users]" [2010/12/05 19:58:01.029634, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 2 for users [2010/12/05 19:58:01.029667, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 2 for service name users doing parameter comment = All users doing parameter path = /home doing parameter read only = No doing parameter inherit acls = Yes doing parameter veto files = /aquota.user/groups/shares/ [2010/12/05 19:58:01.029802, 2] param/loadparm.c:7859(do_section) Processing section "[groups]" [2010/12/05 19:58:01.029874, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 3 for groups [2010/12/05 19:58:01.029908, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 3 for service name groups doing parameter comment = All groups doing parameter path = /home/groups doing parameter read only = No doing parameter inherit acls = Yes [2010/12/05 19:58:01.030013, 2] param/loadparm.c:7859(do_section) Processing section "[printers]" [2010/12/05 19:58:01.030077, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 4 for printers [2010/12/05 19:58:01.030110, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 4 for service name printers doing parameter comment = All Printers doing parameter path = /var/tmp doing parameter printable = Yes doing parameter create mask = 0600 doing parameter browseable = No [2010/12/05 19:58:01.030283, 2] param/loadparm.c:7859(do_section) Processing section "[print$]" [2010/12/05 19:58:01.030350, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 5 for print$ [2010/12/05 19:58:01.030383, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 5 for service name print$ doing parameter comment = Printer Drivers doing parameter path = /var/lib/samba/drivers doing parameter write list = @ntadmin root doing parameter force group = ntadmin doing parameter create mask = 0664 doing parameter directory mask = 0775 [2010/12/05 19:58:01.030538, 2] param/loadparm.c:7859(do_section) Processing section "[srvnfs]" [2010/12/05 19:58:01.030605, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 6 for srvnfs [2010/12/05 19:58:01.030638, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 6 for service name srvnfs doing parameter comment = nfs reexport doing parameter path = /srv/samba/nfs doing parameter writeable = Yes doing parameter create mask = 0777 doing parameter directory mask = 0777 [2010/12/05 19:58:01.030765, 4] param/loadparm.c:9193(lp_load_ex) pm_process() returned Yes [2010/12/05 19:58:01.030856, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 7 for IPC$ [2010/12/05 19:58:01.030891, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 7 for service name IPC$ [2010/12/05 19:58:01.030944, 3] param/loadparm.c:6313(lp_add_ipc) adding IPC service [2010/12/05 19:58:01.030993, 10] param/loadparm.c:8403(set_server_role) set_server_role: role = ROLE_STANDALONE [2010/12/05 19:58:01.031100, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.031191, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.031284, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.031366, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.031451, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.031533, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.031616, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.031699, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.031782, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.031864, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.031953, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.032044, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.032147, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.032233, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.032284, 3] printing/pcap.c:136(pcap_cache_reload) reloading printcap cache [2010/12/05 19:58:01.032325, 5] printing/print_cups.c:408(cups_pcap_load_async) cups_pcap_load_async: asynchronously loading cups printers [2010/12/05 19:58:01.033075, 10] printing/print_cups.c:425(cups_pcap_load_async) cups_pcap_load_async: child pid = 12222 [2010/12/05 19:58:01.033197, 10] printing/print_cups.c:576(cups_cache_reload) cups_cache_reload: sync read on fd 9 [2010/12/05 19:58:01.033236, 5] printing/print_cups.c:458(cups_async_callback) cups_async_callback: callback received for printer data. fd = 9 [2010/12/05 19:58:01.033601, 5] printing/print_cups.c:169(cups_cache_reload_async) reloading cups printcap cache [2010/12/05 19:58:01.036521, 10] printing/print_cups.c:87(cups_connect) connecting to cups server /var/run/cups/cups.sock:631 [2010/12/05 19:58:01.054641, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.054787, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.054879, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.054963, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.055055, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.055137, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.055219, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.055303, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.055384, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.055467, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.055583, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.055681, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.055776, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.055863, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.055922, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name dummy0 info dummy0 [2010/12/05 19:58:01.055968, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:58:01.056037, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended) [2010/12/05 19:58:01.057057, 11] printing/print_cups.c:120(send_pcap_info) send_pcap_info: writing namelen 14 [2010/12/05 19:58:01.057124, 11] printing/print_cups.c:126(send_pcap_info) send_pcap_info: writing infolen 51 [2010/12/05 19:58:01.057160, 11] printing/print_cups.c:133(send_pcap_info) send_pcap_info: writing name samsung_color [2010/12/05 19:58:01.057198, 11] printing/print_cups.c:141(send_pcap_info) [2010/12/05 19:58:01.057150, 11] printing/print_cups.c:477(cups_async_callback) send_pcap_info: writing info Samsung CLP-550N Foomatic/Postscript (recommended) cups_async_callback: read namelen 14 [2010/12/05 19:58:01.057270, 11] printing/print_cups.c:120(send_pcap_info) [2010/12/05 19:58:01.057280, 11] printing/print_cups.c:491(cups_async_callback) send_pcap_info: writing namelen 11 cups_async_callback: read infolen 51 [2010/12/05 19:58:01.057318, 11] printing/print_cups.c:126(send_pcap_info) [2010/12/05 19:58:01.057328, 11] printing/print_cups.c:509(cups_async_callback) send_pcap_info: writing infolen 50 cups_async_callback: read name samsung_color [2010/12/05 19:58:01.057364, 11] printing/print_cups.c:133(send_pcap_info) send_pcap_info: writing name samsung_bw [2010/12/05 19:58:01.057373, 11] printing/print_cups.c:529(cups_async_callback) cups_async_callback: read info Samsung CLP-550N Foomatic/Postscript (recommended) [2010/12/05 19:58:01.057401, 11] printing/print_cups.c:141(send_pcap_info) send_pcap_info: writing info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:58:01.057431, 11] printing/pcap.c:86(pcap_cache_add_specific) [2010/12/05 19:58:01.057444, 11] printing/print_cups.c:120(send_pcap_info) pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended) send_pcap_info: writing namelen 7 [2010/12/05 19:58:01.057482, 11] printing/print_cups.c:477(cups_async_callback) [2010/12/05 19:58:01.057489, 11] printing/print_cups.c:126(send_pcap_info) cups_async_callback: read namelen 11 send_pcap_info: writing infolen 7 [2010/12/05 19:58:01.057575, 11] printing/print_cups.c:491(cups_async_callback) [2010/12/05 19:58:01.057585, 11] printing/print_cups.c:133(send_pcap_info) cups_async_callback: read infolen 50 send_pcap_info: writing name dummy0 [2010/12/05 19:58:01.057621, 11] printing/print_cups.c:509(cups_async_callback) [2010/12/05 19:58:01.057630, 11] printing/print_cups.c:141(send_pcap_info) cups_async_callback: read name samsung_bw send_pcap_info: writing info dummy0 [2010/12/05 19:58:01.057667, 11] printing/print_cups.c:529(cups_async_callback) cups_async_callback: read info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:58:01.057704, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:58:01.057740, 11] printing/print_cups.c:477(cups_async_callback) cups_async_callback: read namelen 7 [2010/12/05 19:58:01.057776, 11] printing/print_cups.c:491(cups_async_callback) cups_async_callback: read infolen 7 [2010/12/05 19:58:01.057809, 11] printing/print_cups.c:509(cups_async_callback) cups_async_callback: read name dummy0 [2010/12/05 19:58:01.057842, 11] printing/print_cups.c:529(cups_async_callback) cups_async_callback: read info dummy0 [2010/12/05 19:58:01.057878, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name dummy0 info dummy0 [2010/12/05 19:58:01.057915, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name dummy0 info dummy0 [2010/12/05 19:58:01.057948, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:58:01.057987, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended) [2010/12/05 19:58:01.058042, 3] printing/pcap.c:243(pcap_cache_reload) reload status: ok [2010/12/05 19:58:01.058132, 7] param/loadparm.c:9399(lp_servicenumber) lp_servicenumber: couldn't find samsung_color [2010/12/05 19:58:01.058232, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 8 for samsung_color [2010/12/05 19:58:01.058266, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 8 for service name samsung_color [2010/12/05 19:58:01.058305, 3] param/loadparm.c:6352(lp_add_printer) adding printer service samsung_color [2010/12/05 19:58:01.058366, 7] param/loadparm.c:9399(lp_servicenumber) lp_servicenumber: couldn't find samsung_bw [2010/12/05 19:58:01.058449, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 9 for samsung_bw [2010/12/05 19:58:01.058484, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 9 for service name samsung_bw [2010/12/05 19:58:01.058520, 3] param/loadparm.c:6352(lp_add_printer) adding printer service samsung_bw [2010/12/05 19:58:01.058665, 7] param/loadparm.c:9399(lp_servicenumber) lp_servicenumber: couldn't find dummy0 [2010/12/05 19:58:01.058743, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 10 for dummy0 [2010/12/05 19:58:01.058778, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 10 for service name dummy0 [2010/12/05 19:58:01.058814, 3] param/loadparm.c:6352(lp_add_printer) adding printer service dummy0 [2010/12/05 19:58:01.058890, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() registry config changed [2010/12/05 19:58:01.058954, 5] param/loadparm.c:6055(free_service) free_service: Freeing service homes [2010/12/05 19:58:01.059021, 5] param/loadparm.c:6055(free_service) free_service: Freeing service profiles [2010/12/05 19:58:01.059066, 5] param/loadparm.c:6055(free_service) free_service: Freeing service users [2010/12/05 19:58:01.059109, 5] param/loadparm.c:6055(free_service) free_service: Freeing service groups [2010/12/05 19:58:01.059202, 5] param/loadparm.c:6055(free_service) free_service: Freeing service printers [2010/12/05 19:58:01.059245, 5] param/loadparm.c:6055(free_service) free_service: Freeing service print$ [2010/12/05 19:58:01.059288, 5] param/loadparm.c:6055(free_service) free_service: Freeing service srvnfs [2010/12/05 19:58:01.059330, 5] param/loadparm.c:6055(free_service) free_service: Freeing service IPC$ [2010/12/05 19:58:01.059374, 3] param/loadparm.c:9158(lp_load_ex) lp_load_ex: refreshing parameters Initialising global parameters rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) [2010/12/05 19:58:01.059540, 3] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2010/12/05 19:58:01.059582, 3] param/loadparm.c:7842(do_section) Processing section "[global]" doing parameter workgroup = WORKGROUP doing parameter passdb backend = tdbsam doing parameter printing = cups doing parameter printcap name = cups doing parameter printcap cache time = 750 doing parameter cups options = raw doing parameter map to guest = Bad User doing parameter include = /etc/samba/dhcp.conf [2010/12/05 19:58:01.059823, 3] ../lib/util/params.c:550(pm_process) params.c:pm_process() - Processing configuration file "/etc/samba/dhcp.conf" doing parameter logon path = \\%L\profiles\.msprofile doing parameter logon home = \\%L\%U\.9xprofile doing parameter logon drive = P: doing parameter usershare allow guests = Yes doing parameter log level = 99 [2010/12/05 19:58:01.060015, 5] lib/debug.c:405(debug_dump_status) INFO: Current debug levels: all: True/99 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 registry: False/0 doing parameter include = registry doing parameter registry shares = yes [2010/12/05 19:58:01.060331, 5] param/loadparm.c:6954(process_registry_service) process_registry_service: service name global [2010/12/05 19:58:01.060365, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [global] [2010/12/05 19:58:01.060401, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (2) [2010/12/05 19:58:01.060446, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:58:01.060479, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:58:01.060512, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba/smbconf/global] [2010/12/05 19:58:01.060544, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.060576, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.060607, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba/smbconf/global] [2010/12/05 19:58:01.060638, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.060669, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:58:01.060700, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Samba], new_path => [smbconf/global] [2010/12/05 19:58:01.060731, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:58:01.060762, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Samba] [2010/12/05 19:58:01.060792, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [smbconf], new_path => [global] [2010/12/05 19:58:01.060823, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [smbconf] [2010/12/05 19:58:01.060885, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [smbconf] [2010/12/05 19:58:01.060916, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [global], new_path => [] [2010/12/05 19:58:01.060950, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [global] [2010/12/05 19:58:01.060981, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.061012, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.061042, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820914a0 for key [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:58:01.061079, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba\smbconf\global] [2010/12/05 19:58:01.061139, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 4) -> 4 [2010/12/05 19:58:01.061186, 10] registry/reg_backend_db.c:1471(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Samba\smbconf\global] not found [2010/12/05 19:58:01.061221, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (2) [2010/12/05 19:58:01.061258, 2] param/loadparm.c:7859(do_section) Processing section "[homes]" [2010/12/05 19:58:01.061323, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 7 for homes [2010/12/05 19:58:01.061356, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 7 for service name homes doing parameter comment = Home Directories doing parameter valid users = %S, %D%w%S doing parameter browseable = No doing parameter read only = No doing parameter inherit acls = Yes [2010/12/05 19:58:01.061500, 2] param/loadparm.c:7859(do_section) Processing section "[profiles]" [2010/12/05 19:58:01.061565, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 6 for profiles [2010/12/05 19:58:01.061597, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 6 for service name profiles doing parameter comment = Network Profiles Service doing parameter path = %H doing parameter read only = No doing parameter store dos attributes = Yes doing parameter create mask = 0600 doing parameter directory mask = 0700 [2010/12/05 19:58:01.061822, 2] param/loadparm.c:7859(do_section) Processing section "[users]" [2010/12/05 19:58:01.061889, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 5 for users [2010/12/05 19:58:01.061922, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 5 for service name users doing parameter comment = All users doing parameter path = /home doing parameter read only = No doing parameter inherit acls = Yes doing parameter veto files = /aquota.user/groups/shares/ [2010/12/05 19:58:01.062056, 2] param/loadparm.c:7859(do_section) Processing section "[groups]" [2010/12/05 19:58:01.062119, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 4 for groups [2010/12/05 19:58:01.062152, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 4 for service name groups doing parameter comment = All groups doing parameter path = /home/groups doing parameter read only = No doing parameter inherit acls = Yes [2010/12/05 19:58:01.062256, 2] param/loadparm.c:7859(do_section) Processing section "[printers]" [2010/12/05 19:58:01.062319, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 3 for printers [2010/12/05 19:58:01.062352, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 3 for service name printers doing parameter comment = All Printers doing parameter path = /var/tmp doing parameter printable = Yes doing parameter create mask = 0600 doing parameter browseable = No [2010/12/05 19:58:01.062493, 2] param/loadparm.c:7859(do_section) Processing section "[print$]" [2010/12/05 19:58:01.062558, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 2 for print$ [2010/12/05 19:58:01.062621, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 2 for service name print$ doing parameter comment = Printer Drivers doing parameter path = /var/lib/samba/drivers doing parameter write list = @ntadmin root doing parameter force group = ntadmin doing parameter create mask = 0664 doing parameter directory mask = 0775 [2010/12/05 19:58:01.062770, 2] param/loadparm.c:7859(do_section) Processing section "[srvnfs]" [2010/12/05 19:58:01.062835, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 1 for srvnfs [2010/12/05 19:58:01.062868, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 1 for service name srvnfs doing parameter comment = nfs reexport doing parameter path = /srv/samba/nfs doing parameter writeable = Yes doing parameter create mask = 0777 doing parameter directory mask = 0777 [2010/12/05 19:58:01.063011, 4] param/loadparm.c:9193(lp_load_ex) pm_process() returned Yes [2010/12/05 19:58:01.063090, 8] param/loadparm.c:6163(add_a_service) add_a_service: Creating snum = 0 for IPC$ [2010/12/05 19:58:01.063124, 10] param/loadparm.c:6210(hash_a_service) hash_a_service: hashing index 0 for service name IPC$ [2010/12/05 19:58:01.063165, 3] param/loadparm.c:6313(lp_add_ipc) adding IPC service [2010/12/05 19:58:01.063198, 10] param/loadparm.c:8403(set_server_role) set_server_role: role = ROLE_STANDALONE [2010/12/05 19:58:01.063339, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.063439, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.063530, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.063612, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.063695, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.063778, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.063860, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.063944, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.064027, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.064110, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.064198, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.064291, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.064378, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.064474, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.064529, 3] printing/pcap.c:136(pcap_cache_reload) reloading printcap cache [2010/12/05 19:58:01.064562, 5] printing/print_cups.c:408(cups_pcap_load_async) cups_pcap_load_async: asynchronously loading cups printers [2010/12/05 19:58:01.065290, 10] printing/print_cups.c:425(cups_pcap_load_async) cups_pcap_load_async: child pid = 12223 [2010/12/05 19:58:01.065416, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name dummy0 info dummy0 [2010/12/05 19:58:01.065451, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:58:01.065495, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended) [2010/12/05 19:58:01.065531, 10] printing/print_cups.c:591(cups_cache_reload) cups_cache_reload: async read on fd 8 [2010/12/05 19:58:01.065590, 3] printing/pcap.c:243(pcap_cache_reload) reload status: ok [2010/12/05 19:58:01.065888, 5] printing/print_cups.c:169(cups_cache_reload_async) reloading cups printcap cache [2010/12/05 19:58:01.066186, 2] lib/interface.c:340(add_interface) added interface br0 ip=fe80::216:17ff:feba:a4a9%br0 bcast=fe80::ffff:ffff:ffff:ffff%br0 netmask=ffff:ffff:ffff:ffff:: [2010/12/05 19:58:01.066392, 2] lib/interface.c:340(add_interface) added interface br0 ip=192.168.0.22 bcast=192.168.0.255 netmask=255.255.255.0 [2010/12/05 19:58:01.066656, 2] lib/interface.c:340(add_interface) added interface br0 ip=fe80::216:17ff:feba:a4a9%br0 bcast=fe80::ffff:ffff:ffff:ffff%br0 netmask=ffff:ffff:ffff:ffff:: [2010/12/05 19:58:01.066737, 2] lib/interface.c:340(add_interface) added interface br0 ip=192.168.0.22 bcast=192.168.0.255 netmask=255.255.255.0 [2010/12/05 19:58:01.066791, 5] lib/util.c:276(init_names) Netbios name list:- my_netbios_names[0]="GILES" [2010/12/05 19:58:01.066941, 3] smbd/server.c:1161(main) loaded services [2010/12/05 19:58:01.067002, 3] smbd/server.c:1176(main) Becoming a daemon. [2010/12/05 19:58:01.068770, 10] printing/print_cups.c:87(cups_connect) connecting to cups server /var/run/cups/cups.sock:631 [2010/12/05 19:58:01.069014, 8] ../lib/util/util.c:217(fcntl_lock) fcntl_lock 11 6 0 1 1 [2010/12/05 19:58:01.069174, 8] ../lib/util/util.c:252(fcntl_lock) fcntl_lock: Lock call successful [2010/12/05 19:58:01.069570, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend ldapsam [2010/12/05 19:58:01.069632, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'ldapsam' [2010/12/05 19:58:01.069665, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend ldapsam_compat [2010/12/05 19:58:01.069697, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'ldapsam_compat' [2010/12/05 19:58:01.069733, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend NDS_ldapsam [2010/12/05 19:58:01.069766, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'NDS_ldapsam' [2010/12/05 19:58:01.069797, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend NDS_ldapsam_compat [2010/12/05 19:58:01.069830, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'NDS_ldapsam_compat' [2010/12/05 19:58:01.069872, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend smbpasswd [2010/12/05 19:58:01.069905, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'smbpasswd' [2010/12/05 19:58:01.069940, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend tdbsam [2010/12/05 19:58:01.069973, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'tdbsam' [2010/12/05 19:58:01.070007, 5] passdb/pdb_interface.c:63(smb_register_passdb) Attempting to register passdb backend wbc_sam [2010/12/05 19:58:01.070044, 5] passdb/pdb_interface.c:76(smb_register_passdb) Successfully added passdb backend 'wbc_sam' [2010/12/05 19:58:01.070076, 5] passdb/pdb_interface.c:133(make_pdb_method_name) Attempting to find a passdb backend to match tdbsam (tdbsam) [2010/12/05 19:58:01.070108, 5] passdb/pdb_interface.c:154(make_pdb_method_name) Found pdb backend tdbsam [2010/12/05 19:58:01.070149, 5] passdb/pdb_interface.c:165(make_pdb_method_name) pdb backend tdbsam has a valid init [2010/12/05 19:58:01.071508, 5] libsmb/namecache.c:51(namecache_enable) namecache_enable: enabling netbios namecache, timeout 660 seconds [2010/12/05 19:58:01.071562, 10] registry/reg_backend_db.c:399(regdb_init) regdb_init: incrementing refcount (2) [2010/12/05 19:58:01.071646, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.071709, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:58:01.071760, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 53) -> 4 [2010/12/05 19:58:01.071846, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 15) -> 4 [2010/12/05 19:58:01.071904, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.071953, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:58:01.072006, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:58:01.072059, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 12) -> 4 [2010/12/05 19:58:01.072109, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:58:01.072156, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:58:01.072203, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 41) -> 4 [2010/12/05 19:58:01.072253, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.072316, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 31) -> 4 [2010/12/05 19:58:01.072366, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.072418, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:58:01.072468, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.072518, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 53) -> 4 [2010/12/05 19:58:01.072568, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:58:01.072619, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 19) -> 4 [2010/12/05 19:58:01.072669, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/05 19:58:01.072744, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] [2010/12/05 19:58:01.072799, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 66) -> 4 [2010/12/05 19:58:01.072858, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:58:01.072896, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 29) -> 29 [2010/12/05 19:58:01.072935, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [Samba Printer Port], len: 2 [2010/12/05 19:58:01.072978, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] [2010/12/05 19:58:01.073026, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.073078, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 104) -> 4 [2010/12/05 19:58:01.073111, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 100) -> 100 [2010/12/05 19:58:01.073143, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [DefaultSpoolDirectory], len: 70 [2010/12/05 19:58:01.073179, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2010/12/05 19:58:01.073225, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.073276, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.073308, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 65) -> 40 [2010/12/05 19:58:01.073341, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [DisplayName], len: 20 [2010/12/05 19:58:01.073373, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 25) -> 25 [2010/12/05 19:58:01.073410, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [ErrorControl], len: 4 [2010/12/05 19:58:01.073448, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] [2010/12/05 19:58:01.073493, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.073543, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.073575, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 65) -> 40 [2010/12/05 19:58:01.073608, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [DisplayName], len: 20 [2010/12/05 19:58:01.073666, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(fdB, 25) -> 25 [2010/12/05 19:58:01.073700, 8] registry/reg_backend_db.c:1567(regdb_unpack_values) specific: [ErrorControl], len: 4 [2010/12/05 19:58:01.073744, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7fc982091640 for key [/HKLM/SYSTEM/CurrentControlSet/Control/Print] [2010/12/05 19:58:01.073784, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:58:01.073819, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.073859, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.073890, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.073920, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [SYSTEM] [2010/12/05 19:58:01.073953, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [SYSTEM], child -> [SOFTWARE] [2010/12/05 19:58:01.073984, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/05 19:58:01.074016, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/05 19:58:01.074047, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [CurrentControlSet] [2010/12/05 19:58:01.074080, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [SYSTEM]! [CurrentControlSet] [2010/12/05 19:58:01.074111, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Control] [2010/12/05 19:58:01.074144, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [CurrentControlSet]! [Control] [2010/12/05 19:58:01.074175, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Print] [2010/12/05 19:58:01.074206, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Control]! [Print] [2010/12/05 19:58:01.074237, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree [2010/12/05 19:58:01.074268, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:58:01.074304, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7fc982091640 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] [2010/12/05 19:58:01.074341, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:58:01.074372, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.074403, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.074434, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.074465, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.074495, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:58:01.074526, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:58:01.074557, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Microsoft] [2010/12/05 19:58:01.074589, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Microsoft], child -> [Samba] [2010/12/05 19:58:01.074620, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [0]) [2010/12/05 19:58:01.074650, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Windows NT] [2010/12/05 19:58:01.074683, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Microsoft]! [Windows NT] [2010/12/05 19:58:01.074715, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [CurrentVersion] [2010/12/05 19:58:01.074775, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Windows NT]! [CurrentVersion] [2010/12/05 19:58:01.074808, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Print] [2010/12/05 19:58:01.074840, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [CurrentVersion]! [Print] [2010/12/05 19:58:01.074872, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Printers] [2010/12/05 19:58:01.074903, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Print]! [Printers] [2010/12/05 19:58:01.074935, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] to tree [2010/12/05 19:58:01.074968, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:58:01.075019, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7fc982091640 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] [2010/12/05 19:58:01.075054, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:58:01.075085, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.075115, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.075146, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.075177, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.075207, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:58:01.075238, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2010/12/05 19:58:01.075268, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:58:01.075299, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Microsoft] [2010/12/05 19:58:01.075330, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Windows NT] [2010/12/05 19:58:01.075360, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Windows NT] [2010/12/05 19:58:01.075391, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentVersion] [2010/12/05 19:58:01.075422, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentVersion] [2010/12/05 19:58:01.075453, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Print] [2010/12/05 19:58:01.075483, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Ports] [2010/12/05 19:58:01.075516, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Ports], child -> [Print] [2010/12/05 19:58:01.075548, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [0]) [2010/12/05 19:58:01.075578, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] to tree [2010/12/05 19:58:01.075611, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:58:01.075647, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7fc9820916a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] [2010/12/05 19:58:01.075680, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:58:01.075711, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.075742, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.075773, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.075835, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.075869, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.075901, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.075932, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.075964, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.075995, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Services] [2010/12/05 19:58:01.076027, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Services], child -> [Control] [2010/12/05 19:58:01.076059, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/05 19:58:01.076090, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/05 19:58:01.076121, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [LanmanServer] [2010/12/05 19:58:01.076154, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Services]! [LanmanServer] [2010/12/05 19:58:01.076185, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Shares] [2010/12/05 19:58:01.076216, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [LanmanServer]! [Shares] [2010/12/05 19:58:01.076247, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] to tree [2010/12/05 19:58:01.076281, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:58:01.076315, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7fc9820914a0 for key [/HKLM/SOFTWARE/Samba/smbconf] [2010/12/05 19:58:01.076348, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:58:01.076380, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.076410, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.076441, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.076471, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.076501, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:58:01.076532, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2010/12/05 19:58:01.076563, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:58:01.076594, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Samba] [2010/12/05 19:58:01.076624, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [smbconf] [2010/12/05 19:58:01.076655, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [smbconf] [2010/12/05 19:58:01.076687, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Samba/smbconf] to tree [2010/12/05 19:58:01.076718, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:58:01.076753, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7fc982091700 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/Parameters] [2010/12/05 19:58:01.076787, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:58:01.076818, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.076848, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.076905, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.076938, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.076969, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.077000, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.077032, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.077063, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.077094, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.077124, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.077155, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.077186, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Netlogon] [2010/12/05 19:58:01.077218, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Netlogon], child -> [LanmanServer] [2010/12/05 19:58:01.077250, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/05 19:58:01.077280, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/05 19:58:01.077312, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Parameters] [2010/12/05 19:58:01.077345, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Netlogon]! [Parameters] [2010/12/05 19:58:01.077376, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/Parameters] to tree [2010/12/05 19:58:01.077410, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:58:01.077446, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7fc982091760 for key [/HKLM/SYSTEM/CurrentControlSet/Control/ProductOptions] [2010/12/05 19:58:01.077480, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:58:01.077511, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.077542, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.077573, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.077604, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.077635, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.077666, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.077698, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.077729, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.077760, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.077792, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Control] [2010/12/05 19:58:01.077823, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Print] [2010/12/05 19:58:01.077854, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [ProductOptions] [2010/12/05 19:58:01.077887, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [ProductOptions], child -> [Print] [2010/12/05 19:58:01.077919, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/05 19:58:01.077976, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/05 19:58:01.078011, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/ProductOptions] to tree [2010/12/05 19:58:01.078051, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:58:01.078088, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7fc9820917c0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/Parameters] [2010/12/05 19:58:01.078123, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:58:01.078154, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.078185, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.078216, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.078247, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.078278, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.078309, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.078341, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.078373, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.078404, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.078435, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.078466, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.078498, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:58:01.078529, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Tcpip] [2010/12/05 19:58:01.078562, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Tcpip], child -> [Netlogon] [2010/12/05 19:58:01.078593, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [2] [2010/12/05 19:58:01.078624, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [2]) [2010/12/05 19:58:01.078655, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Parameters] [2010/12/05 19:58:01.078686, 11] lib/adt_tree.c:101(pathtree_birth_child) pathtree_birth_child: First child of node [Tcpip]! [Parameters] [2010/12/05 19:58:01.078718, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/Parameters] to tree [2010/12/05 19:58:01.078751, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:58:01.078783, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7fc982091820 for key [/HKPT] [2010/12/05 19:58:01.078814, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:58:01.078845, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.078876, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [HKPT] [2010/12/05 19:58:01.078908, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [HKPT], child -> [HKLM] [2010/12/05 19:58:01.078940, 11] lib/adt_tree.c:125(pathtree_birth_child) pathtree_birth_child: storing infant in i == [1] [2010/12/05 19:58:01.078971, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [1]) [2010/12/05 19:58:01.079028, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKPT] to tree [2010/12/05 19:58:01.079086, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:58:01.079129, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7fc982091880 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion] [2010/12/05 19:58:01.079163, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:58:01.079194, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.079226, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.079257, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.079288, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.079320, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.079351, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:58:01.079383, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2010/12/05 19:58:01.079414, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:58:01.079446, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Microsoft] [2010/12/05 19:58:01.079477, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Windows NT] [2010/12/05 19:58:01.079509, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Windows NT] [2010/12/05 19:58:01.079541, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentVersion] [2010/12/05 19:58:01.079572, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentVersion] [2010/12/05 19:58:01.079604, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion] to tree [2010/12/05 19:58:01.079637, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:58:01.079675, 10] registry/reg_cachehook.c:97(reghook_cache_add) reghook_cache_add: Adding ops 0x7fc9820918e0 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Perflib] [2010/12/05 19:58:01.079709, 8] lib/adt_tree.c:200(pathtree_add) pathtree_add: Enter [2010/12/05 19:58:01.079741, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.079772, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.079803, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.079834, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.079866, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.079897, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:58:01.079929, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2010/12/05 19:58:01.079960, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:58:01.079992, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Microsoft] [2010/12/05 19:58:01.080024, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Windows NT] [2010/12/05 19:58:01.080055, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Windows NT] [2010/12/05 19:58:01.080087, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentVersion] [2010/12/05 19:58:01.080119, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentVersion] [2010/12/05 19:58:01.080150, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Ports] [2010/12/05 19:58:01.080208, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Perflib] [2010/12/05 19:58:01.080242, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Perflib], child -> [Print] [2010/12/05 19:58:01.080274, 11] lib/adt_tree.c:118(pathtree_birth_child) pathtree_birth_child: Looking for crib; infant -> [Perflib], child -> [Ports] [2010/12/05 19:58:01.080305, 11] lib/adt_tree.c:135(pathtree_birth_child) pathtree_birth_child: Exiting loop (i == [0]) [2010/12/05 19:58:01.080336, 10] lib/adt_tree.c:267(pathtree_add) pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Perflib] to tree [2010/12/05 19:58:01.080369, 8] lib/adt_tree.c:269(pathtree_add) pathtree_add: Exit [2010/12/05 19:58:01.080401, 20] registry/reg_cachehook.c:144(reghook_dump_cache) reghook_dump_cache: Starting cache dump now... [2010/12/05 19:58:01.080433, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/: [HKLM] (NULL) [2010/12/05 19:58:01.080471, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/: [SOFTWARE] (NULL) [2010/12/05 19:58:01.080505, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/: [Microsoft] (NULL) [2010/12/05 19:58:01.080540, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/: [Windows NT] (NULL) [2010/12/05 19:58:01.080574, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/: [CurrentVersion] (data) [2010/12/05 19:58:01.080621, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Perflib] (data) [2010/12/05 19:58:01.080657, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Ports] (data) [2010/12/05 19:58:01.080693, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Print] (NULL) [2010/12/05 19:58:01.080727, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/: [Printers] (data) [2010/12/05 19:58:01.080763, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/: [Samba] (NULL) [2010/12/05 19:58:01.080796, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SOFTWARE/Samba/: [smbconf] (data) [2010/12/05 19:58:01.080830, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/: [SYSTEM] (NULL) [2010/12/05 19:58:01.080863, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/: [CurrentControlSet] (NULL) [2010/12/05 19:58:01.080896, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/: [Control] (NULL) [2010/12/05 19:58:01.080937, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Control/: [Print] (data) [2010/12/05 19:58:01.080973, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Control/: [ProductOptions] (data) [2010/12/05 19:58:01.081009, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/: [Services] (NULL) [2010/12/05 19:58:01.081043, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [LanmanServer] (NULL) [2010/12/05 19:58:01.081078, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/: [Shares] (data) [2010/12/05 19:58:01.081113, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [Netlogon] (NULL) [2010/12/05 19:58:01.081148, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/: [Parameters] (data) [2010/12/05 19:58:01.081189, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [Tcpip] (NULL) [2010/12/05 19:58:01.081224, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/: [Parameters] (data) [2010/12/05 19:58:01.081272, 20] lib/adt_tree.c:295(pathtree_print_children) ROOT/: [HKPT] (data) [2010/12/05 19:58:01.081687, 5] lib/gencache.c:65(gencache_init) Opening cache file at /var/lib/samba/gencache.tdb [2010/12/05 19:58:01.081838, 5] lib/gencache.c:108(gencache_init) Opening cache file at /var/lib/samba/gencache_notrans.tdb [2010/12/05 19:58:01.085761, 10] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/UID2SID/0 couldn't be found [2010/12/05 19:58:01.091808, 5] passdb/lookup_sid.c:1342(uid_to_sid) uid_to_sid: winbind failed to find a sid for uid 0 [2010/12/05 19:58:01.091869, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.091910, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.091948, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.091982, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.092017, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.092220, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/12/05 19:58:01.092260, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/12/05 19:58:01.092292, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/12/05 19:58:01.092324, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.092355, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.092534, 4] passdb/pdb_tdb.c:518(tdbsam_open) tdbsam_open: successfully opened /etc/samba/passdb.tdb [2010/12/05 19:58:01.092582, 5] passdb/pdb_tdb.c:557(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_root [2010/12/05 19:58:01.092633, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.092666, 5] passdb/pdb_interface.c:1214(pdb_default_uid_to_sid) pdb_default_uid_to_sid: Did not find user root (0) [2010/12/05 19:58:01.092711, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.092749, 10] passdb/lookup_sid.c:1159(legacy_uid_to_sid) LEGACY: uid 0 -> sid S-1-22-1-0 [2010/12/05 19:58:01.092819, 10] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/GID2SID/0 couldn't be found [2010/12/05 19:58:01.095199, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.095362, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.095457, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.095540, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.095626, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.095710, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.095795, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.095880, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.097044, 5] passdb/lookup_sid.c:1395(gid_to_sid) gid_to_sid: winbind failed to find a sid for gid 0 [2010/12/05 19:58:01.097092, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.097127, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.097159, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.097191, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.097221, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.095964, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.105955, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.106056, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.106151, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.106239, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.106266, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.106308, 10] passdb/lookup_sid.c:1190(legacy_gid_to_sid) LEGACY: gid 0 -> sid S-1-22-2-0 [2010/12/05 19:58:01.106326, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.106353, 10] auth/token_util.c:356(create_local_nt_token) Create local NT token for S-1-22-1-0 [2010/12/05 19:58:01.106392, 11] printing/pcap.c:86(pcap_cache_add_specific) pcap_cache_add_specific: Adding name dummy0 info dummy0 [2010/12/05 19:58:01.106422, 10] lib/gencache.c:345(gencache_get_data_blob) [2010/12/05 19:58:01.106441, 11] printing/pcap.c:86(pcap_cache_add_specific) Returning expired cache entry: key = IDMAP/SID2GID/S-1-5-32-544, value = -1, timeout = Sun Dec 5 19:55:47 2010 pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:58:01.106513, 10] lib/gencache.c:180(gencache_set_data_blob) [2010/12/05 19:58:01.106535, 11] printing/pcap.c:86(pcap_cache_add_specific) Adding cache entry with key = IDMAP/SID2GID/S-1-5-32-544 and timeout = Thu Jan 1 01:00:00 1970 pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended) (-1291575481 seconds in the past) [2010/12/05 19:58:01.107679, 11] printing/print_cups.c:120(send_pcap_info) send_pcap_info: writing namelen 14 [2010/12/05 19:58:01.107737, 11] printing/print_cups.c:126(send_pcap_info) send_pcap_info: writing infolen 51 [2010/12/05 19:58:01.107773, 11] printing/print_cups.c:133(send_pcap_info) send_pcap_info: writing name samsung_color [2010/12/05 19:58:01.107810, 11] printing/print_cups.c:141(send_pcap_info) send_pcap_info: writing info Samsung CLP-550N Foomatic/Postscript (recommended) [2010/12/05 19:58:01.107845, 11] printing/print_cups.c:120(send_pcap_info) send_pcap_info: writing namelen 11 [2010/12/05 19:58:01.107877, 11] printing/print_cups.c:126(send_pcap_info) send_pcap_info: writing infolen 50 [2010/12/05 19:58:01.107910, 11] printing/print_cups.c:133(send_pcap_info) send_pcap_info: writing name samsung_bw [2010/12/05 19:58:01.107942, 11] printing/print_cups.c:141(send_pcap_info) send_pcap_info: writing info Samsung CLP-550N via Generic PCL 6/PCL XL Printer [2010/12/05 19:58:01.107993, 11] printing/print_cups.c:120(send_pcap_info) send_pcap_info: writing namelen 7 [2010/12/05 19:58:01.108029, 11] printing/print_cups.c:126(send_pcap_info) send_pcap_info: writing infolen 7 [2010/12/05 19:58:01.108061, 11] printing/print_cups.c:133(send_pcap_info) send_pcap_info: writing name dummy0 [2010/12/05 19:58:01.108094, 11] printing/print_cups.c:141(send_pcap_info) send_pcap_info: writing info dummy0 [2010/12/05 19:58:01.113227, 10] passdb/lookup_sid.c:1519(sid_to_gid) winbind failed to find a gid for sid S-1-5-32-544 [2010/12/05 19:58:01.113300, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.113340, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.113375, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.113410, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.113443, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.113705, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.113744, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-544 [2010/12/05 19:58:01.113780, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.113813, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.113844, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.113877, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.113907, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.113973, 3] auth/token_util.c:436(create_local_nt_token) Failed to fetch domain sid for WORKGROUP [2010/12/05 19:58:01.114015, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.114080, 10] lib/gencache.c:345(gencache_get_data_blob) Returning expired cache entry: key = IDMAP/SID2GID/S-1-5-32-545, value = -1, timeout = Sun Dec 5 19:55:47 2010 [2010/12/05 19:58:01.114151, 10] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = IDMAP/SID2GID/S-1-5-32-545 and timeout = Thu Jan 1 01:00:00 1970 (-1291575481 seconds in the past) [2010/12/05 19:58:01.118746, 10] passdb/lookup_sid.c:1519(sid_to_gid) winbind failed to find a gid for sid S-1-5-32-545 [2010/12/05 19:58:01.118795, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.118831, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.118864, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.118897, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.118927, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.119060, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.119097, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-545 [2010/12/05 19:58:01.119133, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.119165, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.119196, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.119228, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.119258, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.119319, 3] auth/token_util.c:467(create_local_nt_token) Failed to fetch domain sid for WORKGROUP [2010/12/05 19:58:01.119360, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.119394, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.119427, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.119458, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.119490, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.119520, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.119884, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.120066, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-1-0] [2010/12/05 19:58:01.120123, 5] lib/privileges.c:128(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-5-32-544 Privilege set: SE_PRIV 0xff0 0x0 0x0 0x0 [2010/12/05 19:58:01.120239, 5] lib/privileges.c:128(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/05 19:58:01.120321, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2010/12/05 19:58:01.120367, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-11] [2010/12/05 19:58:01.120420, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:58:01.120461, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (3) [2010/12/05 19:58:01.120508, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:58:01.120542, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:58:01.120575, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:58:01.120608, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.120642, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.120674, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.120706, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.120737, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.120768, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM] [2010/12/05 19:58:01.120805, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:58:01.120862, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:58:01.120900, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:58:01.120953, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:58:01.120992, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.121030, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:58:01.121106, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:58:01.121141, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:58:01.121178, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:58:01.121211, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:58:01.121246, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:58:01.121279, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.121311, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.121342, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.121374, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:58:01.121406, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.121438, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.121470, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.121501, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.121540, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.121600, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM] [2010/12/05 19:58:01.121636, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:58:01.121681, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.121728, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:58:01.121763, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:58:01.121798, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.121833, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:58:01.121875, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.121928, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:58:01.121964, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:58:01.122002, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.122043, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.122075, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.122108, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.122139, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.122170, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.122201, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:58:01.122234, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.122266, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.122297, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.122328, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:58:01.122360, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.122393, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.122425, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.122455, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.122486, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.122520, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.122572, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.122621, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:58:01.122656, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:58:01.122691, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.122728, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.122762, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.122805, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.122859, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:58:01.122923, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:58:01.122957, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:58:01.122995, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.123028, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.123060, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.123095, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.123126, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.123157, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.123188, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:58:01.123220, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.123251, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.123282, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.123312, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:58:01.123344, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.123376, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.123407, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:58:01.123446, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.123479, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.123511, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.123542, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.123572, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.123603, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.123637, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.123683, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.123732, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.123767, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.123802, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.123839, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.123882, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.123920, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.123958, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.124011, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.124049, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.124085, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.124158, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.124214, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:58:01.124248, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:58:01.124283, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.124327, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.124374, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.124408, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.124443, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.124481, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.124517, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.124554, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.124592, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.124629, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.124665, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.124725, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.124765, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.124813, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.124860, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.124894, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.124937, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.124975, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.125013, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.125050, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.125086, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.125123, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.125160, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.125207, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:58:01.125241, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:58:01.125277, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:58:01.125309, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:58:01.125339, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:58:01.125371, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.125403, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.125433, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.125464, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.125495, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.125525, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM] [2010/12/05 19:58:01.125559, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:58:01.125609, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:58:01.125644, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:58:01.125709, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:58:01.125746, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.125781, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:58:01.125845, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:58:01.125881, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:58:01.125918, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:58:01.125950, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:58:01.125982, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:58:01.126014, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.126046, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.126076, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.126108, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:58:01.126139, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.126170, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.126201, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.126232, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.126262, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.126293, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM] [2010/12/05 19:58:01.126327, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:58:01.126377, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.126423, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:58:01.126458, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:58:01.126492, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.126527, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:58:01.126567, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.126619, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:58:01.126654, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.126692, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.126724, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.126756, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.126788, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.126821, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.126852, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.126883, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:58:01.126951, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.126984, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.127015, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.127045, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:58:01.127077, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.127109, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.127140, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.127170, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.127200, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.127234, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.127278, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.127326, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:58:01.127360, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:58:01.127395, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.127438, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.127474, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.127516, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.127569, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.127603, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:58:01.127636, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.127673, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.127705, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.127737, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.127769, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.127800, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.127831, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.127861, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:58:01.127893, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.127924, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.127954, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.128031, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:58:01.128065, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.128096, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.128127, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:58:01.128181, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.128214, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.128245, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.128276, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.128306, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.128343, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.128379, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.128426, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.128474, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.128509, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.128544, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.128580, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.128616, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.128654, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.128690, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.128738, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.128776, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.128812, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.128856, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.128910, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.128944, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2010/12/05 19:58:01.128977, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.129015, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:58:01.129047, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:58:01.129079, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:58:01.129111, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.129142, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.129172, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.129203, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/Spooler] [2010/12/05 19:58:01.129235, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.129265, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.129296, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.129327, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/Spooler] [2010/12/05 19:58:01.129359, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.129390, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.129450, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [Spooler] [2010/12/05 19:58:01.129483, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.129514, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.129544, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.129575, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Spooler], new_path => [] [2010/12/05 19:58:01.129606, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.129638, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:58:01.129669, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:58:01.129700, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Spooler] [2010/12/05 19:58:01.129730, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.129761, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.129799, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:58:01.129836, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:58:01.129883, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.129932, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:58:01.129967, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.130001, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.130036, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:58:01.130080, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.130134, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.130168, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:58:01.130202, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:58:01.130248, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.130295, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:58:01.130330, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.130364, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.130420, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.130459, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:58:01.130507, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.130553, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:58:01.130589, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.130623, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.130916, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.131015, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.131104, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.131217, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.131301, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.131383, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.131465, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.131548, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.131630, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.131713, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.131801, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.131894, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.131997, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.132086, 5] lib/charcnv.c:98(charset_name) Substituting charset 'UTF-8' for LOCALE [2010/12/05 19:58:01.132170, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:58:01.132219, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.132260, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:58:01.132341, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 18 [2010/12/05 19:58:01.132378, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -22) -> 17 [2010/12/05 19:58:01.132411, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -39) -> 25 [2010/12/05 19:58:01.132443, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -64) -> 43 [2010/12/05 19:58:01.132474, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -107) -> 48 [2010/12/05 19:58:01.132506, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -155) -> 76 [2010/12/05 19:58:01.132538, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -231) -> 126 [2010/12/05 19:58:01.132570, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 357) -> 4 [2010/12/05 19:58:01.132602, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 353) -> 18 [2010/12/05 19:58:01.132634, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 335) -> 17 [2010/12/05 19:58:01.132666, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 318) -> 25 [2010/12/05 19:58:01.132697, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 293) -> 43 [2010/12/05 19:58:01.132729, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 250) -> 48 [2010/12/05 19:58:01.132761, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 202) -> 76 [2010/12/05 19:58:01.132793, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 126) -> 126 [2010/12/05 19:58:01.132845, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:58:01.132891, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:58:01.132925, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:58:01.132961, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:58:01.132992, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:58:01.133023, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:58:01.133054, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.133085, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.133116, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.133146, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.133204, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.133235, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM] [2010/12/05 19:58:01.133269, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:58:01.133319, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:58:01.133357, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:58:01.133391, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:58:01.133428, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.133463, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:58:01.133519, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:58:01.133554, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:58:01.133591, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:58:01.133623, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:58:01.133654, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:58:01.133686, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.133717, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.133748, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.133778, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:58:01.133810, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.133841, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.133872, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.133903, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.133933, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.133963, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM] [2010/12/05 19:58:01.133997, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:58:01.134039, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.134085, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:58:01.134120, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:58:01.134159, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.134194, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:58:01.134235, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.134286, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:58:01.134322, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.134360, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.134392, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.134424, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.134484, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.134517, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.134548, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.134578, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:58:01.134610, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.134641, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.134672, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.134703, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:58:01.134734, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.134766, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.134797, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.134828, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.134858, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.134892, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.134936, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.134983, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:58:01.135018, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:58:01.135052, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.135089, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.135126, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.135168, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.135221, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.135255, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:58:01.135288, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.135326, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.135358, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.135390, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.135423, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.135453, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.135484, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.135515, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:58:01.135547, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.135578, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.135609, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.135667, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:58:01.135701, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.135732, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.135764, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:58:01.135796, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.135827, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.135858, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.135890, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.135921, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.135951, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.136013, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.136062, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.136110, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.136145, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.136180, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.136217, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.136252, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.136289, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.136325, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.136371, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.136409, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.136446, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.136489, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.136543, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.136579, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Spooler] [2010/12/05 19:58:01.136612, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.136651, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:58:01.136683, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:58:01.136715, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:58:01.136747, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.136779, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.136810, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.136841, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/Spooler] [2010/12/05 19:58:01.136873, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.136932, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.136967, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.136998, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/Spooler] [2010/12/05 19:58:01.137029, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.137060, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.137092, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [Spooler] [2010/12/05 19:58:01.137123, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.137154, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.137185, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.137242, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Spooler], new_path => [] [2010/12/05 19:58:01.137257, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.137272, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:58:01.137286, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:58:01.137300, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Spooler] [2010/12/05 19:58:01.137315, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.137329, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.137343, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler] [2010/12/05 19:58:01.137361, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:58:01.137382, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.137404, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:58:01.137421, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.137437, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.137453, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] [2010/12/05 19:58:01.137473, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.137500, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.137517, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2010/12/05 19:58:01.137532, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.137551, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2010/12/05 19:58:01.137567, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2010/12/05 19:58:01.137582, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/Spooler/Security] [2010/12/05 19:58:01.137598, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.137613, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.137627, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.137657, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/Spooler/Security] [2010/12/05 19:58:01.137673, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.137688, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.137703, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.137718, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/Spooler/Security] [2010/12/05 19:58:01.137733, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.137756, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.137772, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [Spooler/Security] [2010/12/05 19:58:01.137787, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.137802, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.137817, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.137831, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Spooler], new_path => [Security] [2010/12/05 19:58:01.137846, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.137861, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:58:01.137876, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:58:01.137890, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Spooler] [2010/12/05 19:58:01.137905, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.137920, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.137935, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security] [2010/12/05 19:58:01.137952, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2010/12/05 19:58:01.137974, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.137997, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal) regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2010/12/05 19:58:01.138015, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2010/12/05 19:58:01.138038, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.138063, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.138080, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:58:01.138114, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] [2010/12/05 19:58:01.138137, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.138155, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:58:01.138170, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 137 [2010/12/05 19:58:01.138185, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 141) -> 4 [2010/12/05 19:58:01.138200, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 137) -> 137 [2010/12/05 19:58:01.138236, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:58:01.138262, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.138280, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.138301, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.138323, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.138339, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.138355, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.138371, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.138388, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.138405, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.138422, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.138439, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.138455, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.138474, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:58:01.138490, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:58:01.138508, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:58:01.138522, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:58:01.138537, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:58:01.138552, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.138566, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.138581, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.138595, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.138610, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.138624, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM] [2010/12/05 19:58:01.138640, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:58:01.138663, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:58:01.138680, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:58:01.138696, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:58:01.138713, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.138731, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:58:01.138758, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:58:01.138775, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:58:01.138793, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:58:01.138808, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:58:01.138822, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:58:01.138837, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.138853, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.138868, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.138896, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:58:01.138911, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.138926, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.138940, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.138955, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.138969, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.138983, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM] [2010/12/05 19:58:01.138999, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:58:01.139019, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.139041, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:58:01.139057, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:58:01.139073, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.139090, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:58:01.139110, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.139135, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:58:01.139151, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.139169, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.139184, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.139199, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.139214, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.139233, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.139247, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.139262, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:58:01.139277, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.139292, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.139306, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.139321, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:58:01.139336, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.139351, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.139365, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.139380, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.139394, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.139410, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.139431, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.139466, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:58:01.139482, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:58:01.139499, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.139516, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.139533, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.139553, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.139577, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.139594, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:58:01.139610, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.139628, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.139643, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.139657, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.139673, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.139687, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.139703, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.139717, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:58:01.139732, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.139747, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.139761, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.139780, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:58:01.139795, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.139809, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.139824, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:58:01.139839, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.139854, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.139868, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.139883, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.139897, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.139911, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.139927, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.139948, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.139970, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.139997, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.140013, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.140030, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.140060, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.140078, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.140095, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.140115, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.140133, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.140151, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.140173, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.140198, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.140215, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2010/12/05 19:58:01.140231, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.140249, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:58:01.140264, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:58:01.140279, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:58:01.140294, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.140309, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.140324, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.140338, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/NETLOGON] [2010/12/05 19:58:01.140353, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.140368, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.140382, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.140397, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/NETLOGON] [2010/12/05 19:58:01.140412, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.140426, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.140441, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [NETLOGON] [2010/12/05 19:58:01.140456, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.140470, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.140485, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.140499, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [NETLOGON], new_path => [] [2010/12/05 19:58:01.140514, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.140530, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:58:01.140544, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:58:01.140558, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [NETLOGON] [2010/12/05 19:58:01.140573, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.140587, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.140614, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:58:01.140632, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:58:01.140653, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.140676, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 24) -> 4 [2010/12/05 19:58:01.140692, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 11 [2010/12/05 19:58:01.140709, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.140727, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.140744, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:58:01.140765, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.140791, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.140807, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:58:01.140823, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:58:01.140844, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.140866, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 24) -> 4 [2010/12/05 19:58:01.140882, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 11 [2010/12/05 19:58:01.140899, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.140916, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.140939, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.140957, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:58:01.140979, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.141000, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 24) -> 4 [2010/12/05 19:58:01.141017, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 11 [2010/12/05 19:58:01.141033, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.141050, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.141087, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:58:01.141109, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.141127, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:58:01.141142, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 18 [2010/12/05 19:58:01.141156, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -22) -> 17 [2010/12/05 19:58:01.141171, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -39) -> 25 [2010/12/05 19:58:01.141186, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -64) -> 43 [2010/12/05 19:58:01.141201, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -107) -> 40 [2010/12/05 19:58:01.141216, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -147) -> 76 [2010/12/05 19:58:01.141231, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -223) -> 186 [2010/12/05 19:58:01.141246, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 409) -> 4 [2010/12/05 19:58:01.141261, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 405) -> 18 [2010/12/05 19:58:01.141276, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 387) -> 17 [2010/12/05 19:58:01.141304, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 370) -> 25 [2010/12/05 19:58:01.141319, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 345) -> 43 [2010/12/05 19:58:01.141334, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 302) -> 40 [2010/12/05 19:58:01.141349, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 262) -> 76 [2010/12/05 19:58:01.141364, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 186) -> 186 [2010/12/05 19:58:01.141389, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:58:01.141409, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:58:01.141424, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:58:01.141442, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:58:01.141457, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:58:01.141471, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:58:01.141486, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.141500, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.141515, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.141529, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.141543, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.141557, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM] [2010/12/05 19:58:01.141573, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:58:01.141595, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:58:01.141612, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:58:01.141628, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:58:01.141645, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.141661, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:58:01.141687, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:58:01.141704, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:58:01.141721, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:58:01.141736, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:58:01.141750, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:58:01.141765, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.141780, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.141794, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.141809, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:58:01.141824, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.141838, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.141853, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.141867, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.141881, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.141908, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM] [2010/12/05 19:58:01.141925, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:58:01.141944, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.141966, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:58:01.141982, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:58:01.141998, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.142015, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:58:01.142034, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.142058, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:58:01.142075, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.142092, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.142107, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.142122, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.142137, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.142151, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.142166, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.142180, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:58:01.142195, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.142210, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.142224, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.142239, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:58:01.142254, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.142269, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.142284, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.142298, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.142312, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.142328, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.142349, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.142371, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:58:01.142387, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:58:01.142403, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.142424, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.142443, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.142465, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.142503, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.142520, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:58:01.142536, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.142554, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.142569, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.142584, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.142599, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.142614, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.142628, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.142642, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:58:01.142657, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.142672, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.142686, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.142701, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:58:01.142715, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.142730, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.142745, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:58:01.142760, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.142774, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.142789, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.142803, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.142817, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.142831, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.142847, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.142869, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.142891, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.142907, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.142923, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.142940, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.142957, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.142974, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.142995, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.143013, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.143030, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.143048, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.143083, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.143109, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.143126, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [NETLOGON] [2010/12/05 19:58:01.143142, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.143160, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:58:01.143175, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:58:01.143190, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:58:01.143205, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.143220, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.143235, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.143249, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/NETLOGON] [2010/12/05 19:58:01.143264, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.143279, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.143293, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.143308, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/NETLOGON] [2010/12/05 19:58:01.143323, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.143337, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.143352, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [NETLOGON] [2010/12/05 19:58:01.143367, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.143381, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.143396, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.143410, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [NETLOGON], new_path => [] [2010/12/05 19:58:01.143425, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.143440, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:58:01.143454, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:58:01.143469, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [NETLOGON] [2010/12/05 19:58:01.143483, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.143497, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.143512, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON] [2010/12/05 19:58:01.143529, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:58:01.143550, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.143572, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 24) -> 4 [2010/12/05 19:58:01.143589, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 11 [2010/12/05 19:58:01.143619, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.143637, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.143654, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] [2010/12/05 19:58:01.143675, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.143701, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.143717, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2010/12/05 19:58:01.143733, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.143752, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2010/12/05 19:58:01.143768, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2010/12/05 19:58:01.143783, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2010/12/05 19:58:01.143804, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.143819, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.143833, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.143848, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/NETLOGON/Security] [2010/12/05 19:58:01.143864, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.143879, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.143893, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.143907, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/NETLOGON/Security] [2010/12/05 19:58:01.143922, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.143938, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.143953, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [NETLOGON/Security] [2010/12/05 19:58:01.143968, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.143992, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.144007, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.144022, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [NETLOGON], new_path => [Security] [2010/12/05 19:58:01.144037, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.144052, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:58:01.144066, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:58:01.144081, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [NETLOGON] [2010/12/05 19:58:01.144096, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Security], new_path => [] [2010/12/05 19:58:01.144110, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Parameters] [2010/12/05 19:58:01.144126, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [Security] [2010/12/05 19:58:01.144153, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.144168, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.144182, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security] [2010/12/05 19:58:01.144199, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2010/12/05 19:58:01.144222, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/05 19:58:01.144244, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal) regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2010/12/05 19:58:01.144261, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2010/12/05 19:58:01.144283, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/05 19:58:01.144315, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.144332, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:58:01.144354, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] [2010/12/05 19:58:01.144377, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 32) -> 4 [2010/12/05 19:58:01.144394, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:58:01.144409, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 137 [2010/12/05 19:58:01.144424, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 141) -> 4 [2010/12/05 19:58:01.144440, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 137) -> 137 [2010/12/05 19:58:01.144463, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:58:01.144487, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.144506, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.144527, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.144549, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.144565, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.144581, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.144598, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.144615, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.144632, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.144649, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.144667, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.144684, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.144703, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:58:01.144719, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:58:01.144736, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:58:01.144751, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:58:01.144765, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:58:01.144780, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.144795, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.144823, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.144838, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.144853, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.144867, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM] [2010/12/05 19:58:01.144883, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:58:01.144907, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:58:01.144923, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:58:01.144940, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:58:01.144957, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.144974, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:58:01.145002, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:58:01.145019, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:58:01.145036, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:58:01.145051, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:58:01.145066, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:58:01.145081, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.145096, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.145110, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.145125, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:58:01.145140, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.145154, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.145169, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.145183, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.145198, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.145212, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM] [2010/12/05 19:58:01.145228, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:58:01.145248, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.145269, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:58:01.145285, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:58:01.145302, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.145318, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:58:01.145338, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.145367, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:58:01.145384, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.145401, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.145429, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.145445, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.145460, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.145475, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.145489, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.145504, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:58:01.145518, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.145533, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.145547, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.145562, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:58:01.145577, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.145591, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.145606, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.145620, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.145634, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.145650, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.145671, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.145693, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:58:01.145709, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:58:01.145725, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.145742, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.145759, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.145779, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.145807, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.145823, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:58:01.145839, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.145857, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.145872, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.145887, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.145902, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.145917, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.145931, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.145946, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:58:01.145961, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.145991, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.146006, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.146020, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:58:01.146035, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.146050, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.146065, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:58:01.146080, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.146094, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.146109, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.146123, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.146137, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.146151, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.146168, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.146190, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.146212, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.146229, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.146245, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.146262, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.146282, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.146300, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.146317, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.146334, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.146351, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.146370, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.146391, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.146416, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.146433, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2010/12/05 19:58:01.146449, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.146468, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:58:01.146484, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:58:01.146499, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:58:01.146515, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.146531, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.146545, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.146560, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:58:01.146589, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.146604, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.146619, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.146634, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/RemoteRegistry] [2010/12/05 19:58:01.146649, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.146664, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.146679, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry] [2010/12/05 19:58:01.146694, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.146709, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.146724, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.146739, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [RemoteRegistry], new_path => [] [2010/12/05 19:58:01.146754, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.146769, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:58:01.146783, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:58:01.146798, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [RemoteRegistry] [2010/12/05 19:58:01.146813, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.146828, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.146842, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:58:01.146859, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:58:01.146881, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.146904, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:58:01.146920, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.146941, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.146958, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:58:01.146979, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.147005, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.147021, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:58:01.147038, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:58:01.147060, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.147082, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:58:01.147098, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.147114, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.147138, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.147170, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:58:01.147193, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.147215, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:58:01.147231, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.147248, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.147281, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:58:01.147304, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.147322, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:58:01.147337, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 18 [2010/12/05 19:58:01.147352, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -22) -> 17 [2010/12/05 19:58:01.147367, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -39) -> 25 [2010/12/05 19:58:01.147382, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -64) -> 43 [2010/12/05 19:58:01.147397, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -107) -> 68 [2010/12/05 19:58:01.147411, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -175) -> 76 [2010/12/05 19:58:01.147427, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -251) -> 146 [2010/12/05 19:58:01.147442, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 397) -> 4 [2010/12/05 19:58:01.147457, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 393) -> 18 [2010/12/05 19:58:01.147471, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 375) -> 17 [2010/12/05 19:58:01.147486, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 358) -> 25 [2010/12/05 19:58:01.147501, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 333) -> 43 [2010/12/05 19:58:01.147520, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 290) -> 68 [2010/12/05 19:58:01.147535, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 222) -> 76 [2010/12/05 19:58:01.147549, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 146) -> 146 [2010/12/05 19:58:01.147576, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:58:01.147595, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:58:01.147611, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:58:01.147628, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:58:01.147643, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:58:01.147658, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:58:01.147672, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.147687, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.147701, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.147716, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.147730, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.147744, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM] [2010/12/05 19:58:01.147760, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:58:01.147784, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:58:01.147800, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:58:01.147829, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:58:01.147847, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.147863, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:58:01.147889, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:58:01.147906, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:58:01.147923, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:58:01.147938, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:58:01.147952, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:58:01.147967, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.147992, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.148007, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.148021, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:58:01.148036, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.148051, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.148065, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.148080, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.148094, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.148108, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM] [2010/12/05 19:58:01.148124, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:58:01.148143, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.148165, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:58:01.148181, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:58:01.148197, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.148213, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:58:01.148232, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.148257, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:58:01.148274, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.148291, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.148306, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.148321, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.148336, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.148350, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.148365, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.148379, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:58:01.148394, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.148422, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.148437, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.148451, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:58:01.148467, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.148482, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.148497, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.148511, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.148526, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.148542, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.148563, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.148584, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:58:01.148600, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:58:01.148617, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.148634, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.148653, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.148674, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.148699, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.148715, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:58:01.148731, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.148750, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.148765, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.148780, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.148795, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.148810, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.148824, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.148839, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:58:01.148854, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.148869, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.148883, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.148898, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:58:01.148913, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.148928, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.148942, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:58:01.148957, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.148986, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.149001, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.149019, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.149034, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.149048, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.149064, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.149086, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.149109, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.149125, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.149141, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.149158, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.149175, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.149193, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.149210, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.149227, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.149244, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.149261, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.149281, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.149306, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.149322, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [RemoteRegistry] [2010/12/05 19:58:01.149338, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.149356, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:58:01.149372, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:58:01.149387, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:58:01.149402, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.149417, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.149431, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.149446, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:58:01.149461, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.149475, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.149490, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.149505, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/RemoteRegistry] [2010/12/05 19:58:01.149520, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.149535, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.149563, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry] [2010/12/05 19:58:01.149578, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.149593, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.149608, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.149626, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [RemoteRegistry], new_path => [] [2010/12/05 19:58:01.149641, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.149656, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:58:01.149671, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:58:01.149685, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [RemoteRegistry] [2010/12/05 19:58:01.149700, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.149715, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.149729, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry] [2010/12/05 19:58:01.149746, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:58:01.149769, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.149791, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:58:01.149807, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.149823, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.149840, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] [2010/12/05 19:58:01.149861, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.149886, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.149902, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2010/12/05 19:58:01.149917, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.149936, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/05 19:58:01.149953, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/05 19:58:01.149968, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/05 19:58:01.149988, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.150003, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.150017, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.150032, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/05 19:58:01.150048, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.150063, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.150077, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.150105, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/RemoteRegistry/Security] [2010/12/05 19:58:01.150121, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.150136, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.150151, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry/Security] [2010/12/05 19:58:01.150166, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.150180, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.150195, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.150209, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [RemoteRegistry], new_path => [Security] [2010/12/05 19:58:01.150224, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.150239, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:58:01.150253, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:58:01.150268, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [RemoteRegistry] [2010/12/05 19:58:01.150283, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.150297, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.150315, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security] [2010/12/05 19:58:01.150332, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2010/12/05 19:58:01.150355, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.150377, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal) regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2010/12/05 19:58:01.150394, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2010/12/05 19:58:01.150416, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.150441, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.150457, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:58:01.150486, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] [2010/12/05 19:58:01.150509, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.150527, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:58:01.150542, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 137 [2010/12/05 19:58:01.150557, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 141) -> 4 [2010/12/05 19:58:01.150572, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 137) -> 137 [2010/12/05 19:58:01.150594, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:58:01.150620, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.150639, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.150660, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.150695, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.150711, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.150727, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.150744, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.150761, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.150778, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.150794, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.150811, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.150828, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.150847, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:58:01.150863, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:58:01.150880, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:58:01.150894, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:58:01.150909, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:58:01.150923, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.150938, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.150952, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.150966, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.150981, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.150995, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM] [2010/12/05 19:58:01.151010, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:58:01.151033, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:58:01.151050, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:58:01.151066, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:58:01.151083, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.151099, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:58:01.151125, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:58:01.151141, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:58:01.151159, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:58:01.151174, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:58:01.151188, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:58:01.151203, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.151218, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.151232, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.151247, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:58:01.151262, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.151276, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.151291, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.151319, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.151333, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.151348, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM] [2010/12/05 19:58:01.151364, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:58:01.151383, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.151405, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:58:01.151421, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:58:01.151437, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.151453, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:58:01.151472, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.151496, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:58:01.151513, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.151531, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.151546, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.151561, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.151576, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.151590, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.151605, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.151620, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:58:01.151635, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.151649, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.151665, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.151679, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:58:01.151694, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.151714, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.151729, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.151744, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.151758, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.151774, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.151794, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.151816, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:58:01.151832, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:58:01.151848, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.151866, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.151882, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.151915, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.151943, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.151960, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:58:01.151984, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.152003, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.152018, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.152033, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.152049, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.152063, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.152078, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.152093, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:58:01.152108, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.152123, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.152137, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.152152, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:58:01.152167, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.152182, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.152197, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:58:01.152212, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.152227, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.152241, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.152256, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.152270, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.152285, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.152301, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.152328, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.152350, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.152367, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.152383, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.152400, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.152417, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.152434, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.152451, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.152468, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.152489, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.152520, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.152542, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.152567, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.152583, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2010/12/05 19:58:01.152598, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.152616, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:58:01.152631, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:58:01.152646, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:58:01.152661, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.152676, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.152690, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.152704, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/WINS] [2010/12/05 19:58:01.152719, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.152734, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.152748, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.152763, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/WINS] [2010/12/05 19:58:01.152778, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.152792, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.152807, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [WINS] [2010/12/05 19:58:01.152822, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.152837, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.152851, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.152866, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [WINS], new_path => [] [2010/12/05 19:58:01.152881, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.152895, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:58:01.152910, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:58:01.152924, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [WINS] [2010/12/05 19:58:01.152939, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.152953, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.152967, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:58:01.152988, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:58:01.153009, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.153045, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:58:01.153062, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.153079, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.153095, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:58:01.153116, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.153141, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.153157, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:58:01.153173, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:58:01.153194, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.153216, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:58:01.153232, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.153249, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.153272, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.153290, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:58:01.153312, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.153334, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:58:01.153350, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.153367, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.153407, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:58:01.153430, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.153447, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:58:01.153462, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 18 [2010/12/05 19:58:01.153477, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -22) -> 17 [2010/12/05 19:58:01.153492, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -39) -> 25 [2010/12/05 19:58:01.153507, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -64) -> 43 [2010/12/05 19:58:01.153521, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -107) -> 94 [2010/12/05 19:58:01.153536, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -201) -> 76 [2010/12/05 19:58:01.153551, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -277) -> 200 [2010/12/05 19:58:01.153569, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 477) -> 4 [2010/12/05 19:58:01.153585, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 473) -> 18 [2010/12/05 19:58:01.153600, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 455) -> 17 [2010/12/05 19:58:01.153615, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 438) -> 25 [2010/12/05 19:58:01.153630, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 413) -> 43 [2010/12/05 19:58:01.153645, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 370) -> 94 [2010/12/05 19:58:01.153659, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 276) -> 76 [2010/12/05 19:58:01.153674, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 200) -> 200 [2010/12/05 19:58:01.153698, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:58:01.153716, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [HKLM] [2010/12/05 19:58:01.153732, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (4) [2010/12/05 19:58:01.153763, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM] [2010/12/05 19:58:01.153778, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM] [2010/12/05 19:58:01.153792, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [] [2010/12/05 19:58:01.153807, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.153822, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.153836, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.153851, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.153865, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.153879, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM] [2010/12/05 19:58:01.153895, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM] [2010/12/05 19:58:01.153918, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 20) -> 4 [2010/12/05 19:58:01.153935, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 16) -> 9 [2010/12/05 19:58:01.153952, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 7) -> 7 [2010/12/05 19:58:01.153969, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.153985, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM] [2010/12/05 19:58:01.154011, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [SYSTEM] [2010/12/05 19:58:01.154028, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (5) [2010/12/05 19:58:01.154046, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM] [2010/12/05 19:58:01.154061, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM] [2010/12/05 19:58:01.154076, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM] [2010/12/05 19:58:01.154091, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.154106, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.154121, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.154136, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [] [2010/12/05 19:58:01.154151, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.154166, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.154181, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.154196, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.154210, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.154225, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM] [2010/12/05 19:58:01.154242, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM] [2010/12/05 19:58:01.154261, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.154283, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 22) -> 4 [2010/12/05 19:58:01.154299, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 18) -> 18 [2010/12/05 19:58:01.154316, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.154333, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM] [2010/12/05 19:58:01.154367, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 28) -> 4 [2010/12/05 19:58:01.154392, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [CurrentControlSet] [2010/12/05 19:58:01.154408, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.154427, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.154442, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.154457, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.154472, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.154487, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.154501, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.154516, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet] [2010/12/05 19:58:01.154531, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.154546, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.154561, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.154575, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [] [2010/12/05 19:58:01.154590, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.154605, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.154620, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.154635, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.154649, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet] [2010/12/05 19:58:01.154665, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.154686, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.154708, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 21) -> 4 [2010/12/05 19:58:01.154724, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 17) -> 8 [2010/12/05 19:58:01.154740, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.154757, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [2] items [2010/12/05 19:58:01.154774, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet] [2010/12/05 19:58:01.154793, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 26) -> 4 [2010/12/05 19:58:01.154817, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.154834, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Services] [2010/12/05 19:58:01.154850, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.154868, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.154883, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.154898, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.154926, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.154942, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.154956, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.154971, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services] [2010/12/05 19:58:01.154986, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.155000, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.155015, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.155029, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services] [2010/12/05 19:58:01.155044, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.155059, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.155074, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [] [2010/12/05 19:58:01.155090, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.155105, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.155119, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.155134, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.155148, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.155162, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services] [2010/12/05 19:58:01.155178, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.155200, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.155222, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 69) -> 4 [2010/12/05 19:58:01.155238, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 65) -> 13 [2010/12/05 19:58:01.155255, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 52) -> 9 [2010/12/05 19:58:01.155276, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 43) -> 6 [2010/12/05 19:58:01.155293, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 37) -> 9 [2010/12/05 19:58:01.155310, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 28) -> 8 [2010/12/05 19:58:01.155328, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 20) -> 15 [2010/12/05 19:58:01.155345, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 5) -> 5 [2010/12/05 19:58:01.155362, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [7] items [2010/12/05 19:58:01.155379, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services] [2010/12/05 19:58:01.155399, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 29) -> 4 [2010/12/05 19:58:01.155424, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.155440, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [WINS] [2010/12/05 19:58:01.155456, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.155474, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:58:01.155489, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:58:01.155517, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:58:01.155533, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.155547, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.155562, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.155576, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/WINS] [2010/12/05 19:58:01.155591, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.155606, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.155620, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.155635, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/WINS] [2010/12/05 19:58:01.155650, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.155665, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.155679, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [WINS] [2010/12/05 19:58:01.155695, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.155709, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.155728, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.155742, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [WINS], new_path => [] [2010/12/05 19:58:01.155757, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.155772, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:58:01.155787, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:58:01.155801, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [WINS] [2010/12/05 19:58:01.155816, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.155830, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.155845, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS] [2010/12/05 19:58:01.155862, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:58:01.155883, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.155905, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 13) -> 4 [2010/12/05 19:58:01.155922, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(f, 9) -> 9 [2010/12/05 19:58:01.155938, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal) regdb_fetch_keys: Exit [1] items [2010/12/05 19:58:01.155955, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] [2010/12/05 19:58:01.155984, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 97) -> 4 [2010/12/05 19:58:01.156014, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.156031, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [Security] [2010/12/05 19:58:01.156046, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (6) [2010/12/05 19:58:01.156064, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2010/12/05 19:58:01.156093, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2010/12/05 19:58:01.156108, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/WINS/Security] [2010/12/05 19:58:01.156124, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:01.156138, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:01.156153, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:01.156167, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/WINS/Security] [2010/12/05 19:58:01.156182, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:01.156197, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:01.156211, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SYSTEM] [2010/12/05 19:58:01.156226, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/WINS/Security] [2010/12/05 19:58:01.156241, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [CurrentControlSet] [2010/12/05 19:58:01.156256, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [CurrentControlSet] [2010/12/05 19:58:01.156270, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Services], new_path => [WINS/Security] [2010/12/05 19:58:01.156285, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Control] [2010/12/05 19:58:01.156300, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Services] [2010/12/05 19:58:01.156314, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Services] [2010/12/05 19:58:01.156329, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [WINS], new_path => [Security] [2010/12/05 19:58:01.156343, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [LanmanServer] [2010/12/05 19:58:01.156358, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Netlogon] [2010/12/05 19:58:01.156373, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Tcpip] [2010/12/05 19:58:01.156387, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [WINS] [2010/12/05 19:58:01.156405, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:01.156420, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:01.156434, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security] [2010/12/05 19:58:01.156451, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2010/12/05 19:58:01.156474, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.156495, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal) regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2010/12/05 19:58:01.156512, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2010/12/05 19:58:01.156533, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.156558, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (6) [2010/12/05 19:58:01.156574, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (5) [2010/12/05 19:58:01.156621, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal) regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] [2010/12/05 19:58:01.156645, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 17) -> 4 [2010/12/05 19:58:01.156663, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 0) -> 4 [2010/12/05 19:58:01.156678, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, -4) -> 137 [2010/12/05 19:58:01.156693, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(d, 141) -> 4 [2010/12/05 19:58:01.156707, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(fdB, 137) -> 137 [2010/12/05 19:58:01.156729, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (4) [2010/12/05 19:58:01.156755, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (3) [2010/12/05 19:58:01.156790, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (2) [2010/12/05 19:58:01.157091, 10] printing/nt_printing.c:707(update_c_setprinter) update_c_setprinter: c_setprinter = 0 [2010/12/05 19:58:01.157128, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.157147, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.157162, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.157178, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.157193, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.157221, 6] passdb/pdb_interface.c:285(pdb_getsampwsid) pdb_getsampwsid: Building guest account [2010/12/05 19:58:01.158496, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/05 19:58:01.158540, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 12 -> now SET [2010/12/05 19:58:01.158557, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/05 19:58:01.158573, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 13 -> now SET [2010/12/05 19:58:01.158590, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain GILES, was [2010/12/05 19:58:01.158605, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 14 -> now DEFAULT [2010/12/05 19:58:01.158623, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501 [2010/12/05 19:58:01.158642, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 18 -> now DEFAULT [2010/12/05 19:58:01.158657, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501 [2010/12/05 19:58:01.158689, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.158743, 10] lib/system_smbd.c:122(sys_getgrouplist) sys_getgrouplist: user [nobody] [2010/12/05 19:58:01.159969, 10] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/GID2SID/65533 couldn't be found [2010/12/05 19:58:01.161106, 5] passdb/lookup_sid.c:1395(gid_to_sid) gid_to_sid: winbind failed to find a sid for gid 65533 [2010/12/05 19:58:01.161132, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.161150, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.161166, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.161182, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.161197, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.161279, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.161297, 10] passdb/lookup_sid.c:1190(legacy_gid_to_sid) LEGACY: gid 65533 -> sid S-1-22-2-65533 [2010/12/05 19:58:01.161325, 10] lib/gencache.c:334(gencache_get_data_blob) Cache entry with key = IDMAP/GID2SID/65534 couldn't be found [2010/12/05 19:58:01.162445, 5] passdb/lookup_sid.c:1395(gid_to_sid) gid_to_sid: winbind failed to find a sid for gid 65534 [2010/12/05 19:58:01.162465, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.162481, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.162497, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.162513, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.162527, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.162577, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.162595, 10] passdb/lookup_sid.c:1190(legacy_gid_to_sid) LEGACY: gid 65534 -> sid S-1-22-2-65534 [2010/12/05 19:58:01.162614, 5] auth/auth_util.c:649(make_server_info_sam) make_server_info_sam: made server info for user nobody -> nobody [2010/12/05 19:58:01.162637, 10] auth/token_util.c:356(create_local_nt_token) Create local NT token for S-1-5-21-779886165-838294741-719422925-501 [2010/12/05 19:58:01.162668, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-544, value = -1, timeout = Sun Dec 5 20:00:01 2010 [2010/12/05 19:58:01.162700, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.162717, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.162732, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.162747, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.162762, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.162820, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.162837, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-544 [2010/12/05 19:58:01.162854, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.162869, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.162883, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.162901, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.162915, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.162946, 3] auth/token_util.c:436(create_local_nt_token) Failed to fetch domain sid for WORKGROUP [2010/12/05 19:58:01.162966, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.162989, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-545, value = -1, timeout = Sun Dec 5 20:00:01 2010 [2010/12/05 19:58:01.163027, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.163044, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.163059, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.163075, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.163089, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.163154, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.163171, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-545 [2010/12/05 19:58:01.163187, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.163202, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.163217, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.163232, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.163246, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.163273, 3] auth/token_util.c:467(create_local_nt_token) Failed to fetch domain sid for WORKGROUP [2010/12/05 19:58:01.163293, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.163309, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.163324, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.163339, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.163353, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.163368, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.163581, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.163607, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-21-779886165-838294741-719422925-501] [2010/12/05 19:58:01.163630, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-65533] [2010/12/05 19:58:01.163652, 5] lib/privileges.c:128(get_privileges_for_sids) get_privileges_for_sids: sid = S-1-1-0 Privilege set: SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/05 19:58:01.163684, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-2] [2010/12/05 19:58:01.163706, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-5-32-546] [2010/12/05 19:58:01.163728, 3] lib/privileges.c:63(get_privileges) get_privileges: No privileges assigned to SID [S-1-22-2-65534] [2010/12/05 19:58:01.163755, 10] lib/gencache.c:345(gencache_get_data_blob) Returning expired cache entry: key = IDMAP/SID2GID/S-1-1-0, value = -1, timeout = Sun Dec 5 19:55:47 2010 [2010/12/05 19:58:01.163781, 10] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = IDMAP/SID2GID/S-1-1-0 and timeout = Thu Jan 1 01:00:00 1970 (-1291575481 seconds in the past) [2010/12/05 19:58:01.165958, 10] passdb/lookup_sid.c:1519(sid_to_gid) winbind failed to find a gid for sid S-1-1-0 [2010/12/05 19:58:01.165981, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.165998, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.166013, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.166028, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.166043, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.166102, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.166120, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-1-0 [2010/12/05 19:58:01.166136, 10] auth/auth_util.c:753(create_local_token) Could not convert SID S-1-1-0 to gid, ignoring it [2010/12/05 19:58:01.166178, 10] lib/gencache.c:345(gencache_get_data_blob) Returning expired cache entry: key = IDMAP/SID2GID/S-1-5-2, value = -1, timeout = Sun Dec 5 19:55:47 2010 [2010/12/05 19:58:01.166205, 10] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = IDMAP/SID2GID/S-1-5-2 and timeout = Thu Jan 1 01:00:00 1970 (-1291575481 seconds in the past) [2010/12/05 19:58:01.168195, 10] passdb/lookup_sid.c:1519(sid_to_gid) winbind failed to find a gid for sid S-1-5-2 [2010/12/05 19:58:01.168217, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.168235, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.168251, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.168266, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.168280, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.168341, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.168359, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-2 [2010/12/05 19:58:01.168375, 10] auth/auth_util.c:753(create_local_token) Could not convert SID S-1-5-2 to gid, ignoring it [2010/12/05 19:58:01.168402, 10] lib/gencache.c:345(gencache_get_data_blob) Returning expired cache entry: key = IDMAP/SID2GID/S-1-5-32-546, value = -1, timeout = Sun Dec 5 19:55:47 2010 [2010/12/05 19:58:01.168428, 10] lib/gencache.c:180(gencache_set_data_blob) Adding cache entry with key = IDMAP/SID2GID/S-1-5-32-546 and timeout = Thu Jan 1 01:00:00 1970 (-1291575481 seconds in the past) [2010/12/05 19:58:01.170182, 10] passdb/lookup_sid.c:1519(sid_to_gid) winbind failed to find a gid for sid S-1-5-32-546 [2010/12/05 19:58:01.170205, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.170221, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:01.170237, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:01.170252, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:01.170266, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:01.170326, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:01.170344, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-32-546 [2010/12/05 19:58:01.170360, 10] auth/auth_util.c:753(create_local_token) Could not convert SID S-1-5-32-546 to gid, ignoring it [2010/12/05 19:58:01.170379, 10] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-779886165-838294741-719422925-501 contains 7 SIDs SID[ 0]: S-1-5-21-779886165-838294741-719422925-501 SID[ 1]: S-1-22-2-65533 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-22-2-65534 SID[ 6]: S-1-22-1-65534 SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/05 19:58:01.170451, 10] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 65534 Primary group is 65533 and contains 2 supplementary groups Group[ 0]: 65533 Group[ 1]: 65534 [2010/12/05 19:58:01.170548, 3] printing/printing.c:1412(start_background_queue) start_background_queue: Starting background LPQ thread [2010/12/05 19:58:01.171024, 5] printing/printing.c:1434(start_background_queue) start_background_queue: background LPQ thread started [2010/12/05 19:58:01.171321, 10] lib/util_sock.c:888(open_socket_in) [2010/12/05 19:58:01.171346, 5] smbd/connection.c:142(claim_connection) claiming [smbd lpq backend] bind succeeded on port 445 [2010/12/05 19:58:01.171409, 5] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 [2010/12/05 19:58:01.171441, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 Locking key C42F0000FFFFFFFFFFFFFFFF736D6264206C7071206261636B656E64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 [2010/12/05 19:58:01.171533, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) TCP_QUICKACK = 1 Allocated locked data 0x0x7fc98215a610 [2010/12/05 19:58:01.171553, 5] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 [2010/12/05 19:58:01.171593, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 Unlocking key C42F0000FFFFFFFFFFFFFFFF736D6264206C7071206261636B656E64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:01.171706, 5] printing/printing.c:1468(start_background_queue) [2010/12/05 19:58:01.171707, 10] lib/util_sock.c:888(open_socket_in) start_background_queue: background LPQ thread waiting for messages bind succeeded on port 139 [2010/12/05 19:58:01.171743, 5] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 0 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 [2010/12/05 19:58:01.171851, 5] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 16384 SO_RCVBUF = 87380 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 [2010/12/05 19:58:01.172019, 2] lib/util_sock.c:875(open_socket_in) bind failed on port 445 socket_addr = 0.0.0.0. Error = Die Adresse wird bereits verwendet [2010/12/05 19:58:01.172237, 0] smbd/server.c:500(smbd_open_one_socket) smbd_open_once_socket: open_socket_in: Die Adresse wird bereits verwendet [2010/12/05 19:58:01.172347, 2] lib/util_sock.c:875(open_socket_in) bind failed on port 139 socket_addr = 0.0.0.0. Error = Die Adresse wird bereits verwendet [2010/12/05 19:58:01.172375, 0] smbd/server.c:500(smbd_open_one_socket) smbd_open_once_socket: open_socket_in: Die Adresse wird bereits verwendet [2010/12/05 19:58:01.172414, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/12/05 19:58:01.172502, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key C02F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:01.172554, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7fc98215a990 [2010/12/05 19:58:01.172601, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key C02F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:01.172699, 5] lib/messages.c:297(messaging_register) Overriding messaging pointer for type 1 - private_data=(nil) [2010/12/05 19:58:01.173047, 2] smbd/server.c:721(smbd_parent_loop) waiting for connections [2010/12/05 19:58:06.680009, 5] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 50844 SO_RCVBUF = 87712 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 [2010/12/05 19:58:06.680395, 5] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 50844 SO_RCVBUF = 87712 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 [2010/12/05 19:58:06.680918, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Sun Dec 5 18:06:27 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sun Dec 5 19:34:56 2010 [2010/12/05 19:58:06.681293, 3] smbd/oplock.c:895(init_oplocks) init_oplocks: initializing messages. [2010/12/05 19:58:06.681929, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/12/05 19:58:06.681979, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/12/05 19:58:06.682045, 11] lib/events.c:313(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7fc982103e20 [2010/12/05 19:58:06.682082, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0x7fc982103e20 [2010/12/05 19:58:06.682128, 11] lib/events.c:313(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7fc982103ef0 [2010/12/05 19:58:06.682162, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0x7fc982103ef0 [2010/12/05 19:58:06.682201, 11] lib/events.c:313(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7fc98210c7a0 [2010/12/05 19:58:06.682233, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x7fc98210c7a0 [2010/12/05 19:58:06.682338, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/12/05 19:58:06.682391, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/12/05 19:58:06.682427, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/12/05 19:58:06.682512, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.682536, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=12234 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2010/12/05 19:58:06.682688, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/12/05 19:58:06.683121, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 12235) conn 0x0 [2010/12/05 19:58:06.683427, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBnegprot.19.req len 194 [2010/12/05 19:58:06.683559, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.684028, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.684072, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.684145, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:06.684304, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/12/05 19:58:06.684347, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/12/05 19:58:06.684383, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/12/05 19:58:06.684418, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/12/05 19:58:06.684452, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/12/05 19:58:06.684485, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/12/05 19:58:06.684519, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/12/05 19:58:06.684552, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/12/05 19:58:06.684586, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/12/05 19:58:06.684620, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/12/05 19:58:06.684665, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/12/05 19:58:06.684726, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Sun Dec 5 18:06:27 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sun Dec 5 19:34:56 2010 [2010/12/05 19:58:06.684854, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/12/05 19:58:06.685055, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key CB2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:06.685129, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7fc98213d040 [2010/12/05 19:58:06.685256, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key CB2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:06.685499, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Sun Dec 5 18:06:27 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sun Dec 5 19:34:56 2010 [2010/12/05 19:58:06.685714, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/12/05 19:58:06.685749, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/12/05 19:58:06.685782, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/12/05 19:58:06.685815, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.685835, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=12234 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=51968 (0xCB00) smb_vwv[ 8]= 47 (0x2F) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=44595 (0xAE33) smb_vwv[13]=44633 (0xAE59) smb_vwv[14]=52116 (0xCB94) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/12/05 19:58:06.686176, 10] ../lib/util/util.c:278(_dump_data) [0000] 67 69 6C 65 73 00 00 00 00 00 00 00 00 00 00 00 giles... ........ [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/12/05 19:58:06.686849, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 162 [2010/12/05 19:58:06.686895, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa2 [2010/12/05 19:58:06.686930, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 166 (0 toread) [2010/12/05 19:58:06.686964, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.687003, 5] lib/util.c:627(show_msg) size=162 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=12234 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 80 (0x50) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=103 [2010/12/05 19:58:06.687293, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 4E 06 06 2B 06 01 05 05 02 A0 44 30 42 A0 0E `N..+... ...D0B.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 30 0...+... ..7....0 [0020] 04 2E 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 ..NTLMSS P....... [0030] 08 60 09 00 09 00 20 00 00 00 05 00 05 00 29 00 .`.... . ......). [0040] 00 00 57 4F 52 4B 47 52 4F 55 50 47 49 4C 45 53 ..WORKGR OUPGILES [0050] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [0060] 00 62 00 61 00 00 00 .b.a... [2010/12/05 19:58:06.687570, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 12235) conn 0x0 [2010/12/05 19:58:06.687974, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBsesssetupX.37.req len 166 [2010/12/05 19:58:06.688161, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.688201, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.688235, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.688294, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:06.688337, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/12/05 19:58:06.688381, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/12/05 19:58:06.688422, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/12/05 19:58:06.688461, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/12/05 19:58:06.688507, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 80, pblob->length = 80 [2010/12/05 19:58:06.688584, 5] smbd/sesssetup.c:754(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/12/05 19:58:06.688618, 3] smbd/sesssetup.c:806(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 46 [2010/12/05 19:58:06.688677, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/12/05 19:58:06.688729, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/12/05 19:58:06.688764, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/12/05 19:58:06.688796, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/12/05 19:58:06.688829, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/12/05 19:58:06.688861, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/12/05 19:58:06.688893, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/12/05 19:58:06.688926, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/12/05 19:58:06.688959, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/12/05 19:58:06.688993, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/12/05 19:58:06.689027, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/12/05 19:58:06.689062, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/12/05 19:58:06.689095, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/12/05 19:58:06.689131, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/12/05 19:58:06.689164, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/12/05 19:58:06.689195, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/12/05 19:58:06.689227, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/12/05 19:58:06.689260, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/12/05 19:58:06.689292, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/12/05 19:58:06.689328, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/12/05 19:58:06.689364, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/12/05 19:58:06.689397, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/12/05 19:58:06.689434, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/12/05 19:58:06.689467, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/12/05 19:58:06.689535, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/12/05 19:58:06.689606, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/12/05 19:58:06.689782, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0009 (9) DomainNameMaxLen : 0x0009 (9) DomainName : * DomainName : 'WORKGROUP' WorkstationLen : 0x0005 (5) WorkstationMaxLen : 0x0005 (5) Workstation : * Workstation : 'GILES' [2010/12/05 19:58:06.690356, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/12/05 19:58:06.690395, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/12/05 19:58:06.690441, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/12/05 19:58:06.690474, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/12/05 19:58:06.690505, 5] ../lib/util/util.c:278(_dump_data) [0000] D4 8E D1 85 43 2E 20 AB ....C. . [2010/12/05 19:58:06.691305, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x000a (10) TargetNameMaxLen : 0x000a (10) TargetName : * TargetName : 'GILES' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : d48ed185432e20ab Reserved : 0000000000000000 TargetInfoLen : 0x0050 (80) TargetNameInfoMaxLen : 0x0050 (80) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'GILES' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'GILES' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'suse.de' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x001a (26) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'giles.suse.de' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/12/05 19:58:06.692427, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.692451, 5] lib/util.c:627(show_msg) size=324 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=12234 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 169 (0xA9) smb_bcc=281 [2010/12/05 19:58:06.692649, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 A6 30 81 A3 A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 8D 04 81 8A 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 0A 00 0A 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 D4 8E D1 85 43 2E 20 AB 00 ......`. ...C. .. [0040] 00 00 00 00 00 00 00 50 00 50 00 3A 00 00 00 47 .......P .P.:...G [0050] 00 49 00 4C 00 45 00 53 00 02 00 0A 00 47 00 49 .I.L.E.S .....G.I [0060] 00 4C 00 45 00 53 00 01 00 0A 00 47 00 49 00 4C .L.E.S.. ...G.I.L [0070] 00 45 00 53 00 04 00 0E 00 73 00 75 00 73 00 65 .E.S.... .s.u.s.e [0080] 00 2E 00 64 00 65 00 03 00 1A 00 67 00 69 00 6C ...d.e.. ...g.i.l [0090] 00 65 00 73 00 2E 00 73 00 75 00 73 00 65 00 2E .e.s...s .u.s.e.. [00A0] 00 64 00 65 00 00 00 00 00 55 00 6E 00 69 00 78 .d.e.... .U.n.i.x [00B0] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [00C0] 00 2E 00 35 00 2E 00 36 00 2D 00 31 00 32 00 2E ...5...6 .-.1.2.. [00D0] 00 31 00 2D 00 32 00 34 00 37 00 30 00 2D 00 53 .1.-.2.4 .7.0.-.S [00E0] 00 55 00 53 00 45 00 2D 00 53 00 4C 00 31 00 31 .U.S.E.- .S.L.1.1 [00F0] 00 2E 00 33 00 2D 00 78 00 38 00 36 00 5F 00 36 ...3.-.x .8.6._.6 [0100] 00 34 00 00 00 57 00 4F 00 52 00 4B 00 47 00 52 .4...W.O .R.K.G.R [0110] 00 4F 00 55 00 50 00 00 00 .O.U.P.. . [2010/12/05 19:58:06.693830, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 258 [2010/12/05 19:58:06.693876, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x102 [2010/12/05 19:58:06.693911, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 262 (0 toread) [2010/12/05 19:58:06.693944, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.693965, 5] lib/util.c:627(show_msg) size=258 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=12234 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 176 (0xB0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=199 [2010/12/05 19:58:06.694247, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 AD 30 81 AA A2 81 A7 04 81 A4 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 12 00 12 00 70 00 00 00 ....X... ....p... [0030] 08 00 08 00 82 00 00 00 0A 00 0A 00 8A 00 00 00 ........ ........ [0040] 10 00 10 00 94 00 00 00 15 82 08 60 57 7E BC E6 ........ ...`W~.. [0050] F5 48 72 1B 00 00 00 00 00 00 00 00 00 00 00 00 .Hr..... ........ [0060] 00 00 00 00 94 19 F9 9C C9 D1 25 EE F3 BB 30 66 ........ ..%...0f [0070] F7 0F E5 6B AA 37 CD 72 35 28 EE 40 57 00 4F 00 ...k.7.r 5(.@W.O. [0080] 52 00 4B 00 47 00 52 00 4F 00 55 00 50 00 72 00 R.K.G.R. O.U.P.r. [0090] 6F 00 6F 00 74 00 47 00 49 00 4C 00 45 00 53 00 o.o.t.G. I.L.E.S. [00A0] 89 A3 DA 9C E7 1C 17 72 05 2E A7 A1 7A E9 D2 AD .......r ....z... [00B0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00C0] 00 62 00 61 00 00 00 .b.a... [2010/12/05 19:58:06.694740, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 12235) conn 0x0 [2010/12/05 19:58:06.695154, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBsesssetupX.38.req len 262 [2010/12/05 19:58:06.695242, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.695277, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.695309, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.695365, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:06.695401, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/12/05 19:58:06.695433, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/12/05 19:58:06.695468, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/12/05 19:58:06.695505, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 176, pblob->length = 176 [2010/12/05 19:58:06.695584, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 577ebce6f548721b00000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 9419f99cc9d125eef3bb3066f70fe56baa37cd723528ee40 DomainNameLen : 0x0012 (18) DomainNameMaxLen : 0x0012 (18) DomainName : * DomainName : 'WORKGROUP' UserNameLen : 0x0008 (8) UserNameMaxLen : 0x0008 (8) UserName : * UserName : 'root' WorkstationLen : 0x000a (10) WorkstationMaxLen : 0x000a (10) Workstation : * Workstation : 'GILES' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/12/05 19:58:06.696102, 10] ../lib/util/util.c:278(_dump_data) [0000] 89 A3 DA 9C E7 1C 17 72 05 2E A7 A1 7A E9 D2 AD .......r ....z... NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/12/05 19:58:06.696519, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[root] domain=[WORKGROUP] workstation=[GILES] len1=24 len2=24 [2010/12/05 19:58:06.696560, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/12/05 19:58:06.696594, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/12/05 19:58:06.696624, 5] ../lib/util/util.c:278(_dump_data) [0000] 82 E8 0D 21 CA 44 D5 B5 ...!.D.. [2010/12/05 19:58:06.696701, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Sun Dec 5 18:06:27 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sun Dec 5 19:34:56 2010 [2010/12/05 19:58:06.696830, 5] auth/auth_util.c:211(make_user_info_map) Mapping user [WORKGROUP]\[root] from workstation [GILES] [2010/12/05 19:58:06.696873, 5] auth/auth_util.c:232(make_user_info_map) Mapped domain from [WORKGROUP] to [GILES] for user [root] from workstation [GILES] [2010/12/05 19:58:06.696908, 5] auth/auth_util.c:122(make_user_info) attempting to make a user_info for root (root) [2010/12/05 19:58:06.696942, 5] auth/auth_util.c:132(make_user_info) making strings for root's user_info struct [2010/12/05 19:58:06.697007, 5] auth/auth_util.c:164(make_user_info) making blobs for root's user_info struct [2010/12/05 19:58:06.697041, 10] auth/auth_util.c:182(make_user_info) made an encrypted user_info for root (root) [2010/12/05 19:58:06.697075, 3] auth/auth.c:216(check_ntlm_password) check_ntlm_password: Checking password for unmapped user [WORKGROUP]\[root]@[GILES] with the new password interface [2010/12/05 19:58:06.697113, 3] auth/auth.c:219(check_ntlm_password) check_ntlm_password: mapped user is: [GILES]\[root]@[GILES] [2010/12/05 19:58:06.697146, 10] auth/auth.c:228(check_ntlm_password) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2010/12/05 19:58:06.697180, 10] auth/auth.c:230(check_ntlm_password) challenge is: [2010/12/05 19:58:06.697210, 5] ../lib/util/util.c:278(_dump_data) [0000] 82 E8 0D 21 CA 44 D5 B5 ...!.D.. [2010/12/05 19:58:06.697267, 10] auth/auth.c:256(check_ntlm_password) check_ntlm_password: guest had nothing to say [2010/12/05 19:58:06.697306, 8] lib/util.c:1869(is_myname) is_myname("GILES") returns 1 [2010/12/05 19:58:06.697346, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.697385, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.697420, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.697452, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.697484, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.697572, 5] passdb/pdb_tdb.c:557(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_root [2010/12/05 19:58:06.697634, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.697669, 3] auth/auth_sam.c:399(check_sam_security) check_sam_security: Couldn't find user 'root' in passdb. [2010/12/05 19:58:06.697704, 5] auth/auth.c:268(check_ntlm_password) check_ntlm_password: sam authentication for user [root] FAILED with error NT_STATUS_NO_SUCH_USER [2010/12/05 19:58:06.697740, 2] auth/auth.c:314(check_ntlm_password) check_ntlm_password: Authentication for user [root] -> [root] FAILED with error NT_STATUS_NO_SUCH_USER [2010/12/05 19:58:06.697776, 5] auth/auth_util.c:2119(free_user_info) attempting to free (and zero) a user_info structure [2010/12/05 19:58:06.697809, 10] auth/auth_util.c:2123(free_user_info) structure was created for root [2010/12/05 19:58:06.697843, 3] smbd/sesssetup.c:50(do_map_to_guest) No such user root [WORKGROUP] - using guest account [2010/12/05 19:58:06.698050, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 3: DEFAULT [2010/12/05 19:58:06.698093, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 1: DEFAULT [2010/12/05 19:58:06.698125, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 4: DEFAULT [2010/12/05 19:58:06.698156, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 2: DEFAULT [2010/12/05 19:58:06.698189, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.698222, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.698255, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.698288, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.698318, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.698398, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:06.698440, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.698514, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175 [2010/12/05 19:58:06.698551, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:06.698595, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:06.698633, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 5 -> now SET [2010/12/05 19:58:06.698665, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 6 -> now SET [2010/12/05 19:58:06.698696, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 7 -> now SET [2010/12/05 19:58:06.698726, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 8 -> now SET [2010/12/05 19:58:06.698757, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 9 -> now SET [2010/12/05 19:58:06.698788, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 10 -> now SET [2010/12/05 19:58:06.698821, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 21 -> now SET [2010/12/05 19:58:06.698856, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/05 19:58:06.698889, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 12 -> now SET [2010/12/05 19:58:06.698921, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain GILES, was [2010/12/05 19:58:06.698954, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 14 -> now SET [2010/12/05 19:58:06.699006, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/05 19:58:06.699041, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 15 -> now SET [2010/12/05 19:58:06.699073, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/05 19:58:06.699106, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 13 -> now SET [2010/12/05 19:58:06.699151, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\giles\nobody\.9xprofile, was [2010/12/05 19:58:06.699186, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/05 19:58:06.699219, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/05 19:58:06.699252, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/05 19:58:06.699286, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/05 19:58:06.699320, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/05 19:58:06.699356, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\giles\profiles\.msprofile, was [2010/12/05 19:58:06.699391, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/05 19:58:06.699424, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 22 -> now SET [2010/12/05 19:58:06.699459, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 24 -> now SET [2010/12/05 19:58:06.699492, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/05 19:58:06.699524, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 23 -> now SET [2010/12/05 19:58:06.699556, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 25 -> now SET [2010/12/05 19:58:06.699589, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.699622, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.699654, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.699687, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.699718, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.699807, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:06.699851, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.699887, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 33 -> now SET [2010/12/05 19:58:06.699920, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501 [2010/12/05 19:58:06.699963, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 18 -> now SET [2010/12/05 19:58:06.699995, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501 [2010/12/05 19:58:06.700047, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 16 -> now SET [2010/12/05 19:58:06.700079, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 28 -> now SET [2010/12/05 19:58:06.700111, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 29 -> now SET [2010/12/05 19:58:06.700142, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 30 -> now SET [2010/12/05 19:58:06.700174, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 20 -> now SET [2010/12/05 19:58:06.700205, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 17 -> now SET [2010/12/05 19:58:06.700237, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 26 -> now SET [2010/12/05 19:58:06.700326, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec 5 19:58:10 2010 [2010/12/05 19:58:06.700394, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.700428, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.700461, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.700493, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.700524, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.700580, 5] passdb/pdb_interface.c:1473(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 513. [2010/12/05 19:58:06.700619, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/12/05 19:58:06.700653, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/12/05 19:58:06.700687, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/12/05 19:58:06.700720, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.700750, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.700817, 5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. [2010/12/05 19:58:06.700944, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.700981, 5] passdb/pdb_interface.c:1536(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2010/12/05 19:58:06.701020, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.701054, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:06.701092, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:06.701129, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 19 -> now SET [2010/12/05 19:58:06.701166, 10] smbd/password.c:278(register_existing_vuid) register_existing_vuid: (65534,65533) nobody root GILES guest=1 [2010/12/05 19:58:06.701229, 3] smbd/password.c:282(register_existing_vuid) register_existing_vuid: User name: nobody Real name: nobody [2010/12/05 19:58:06.701262, 3] smbd/password.c:292(register_existing_vuid) register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 100 [2010/12/05 19:58:06.701317, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Sun Dec 5 18:06:27 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sun Dec 5 19:34:56 2010 [2010/12/05 19:58:06.701453, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.701475, 5] lib/util.c:627(show_msg) size=164 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=12234 smb_uid=100 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 9 (0x9) smb_bcc=121 [2010/12/05 19:58:06.701660, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [0010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [0020] 00 2E 00 35 00 2E 00 36 00 2D 00 31 00 32 00 2E ...5...6 .-.1.2.. [0030] 00 31 00 2D 00 32 00 34 00 37 00 30 00 2D 00 53 .1.-.2.4 .7.0.-.S [0040] 00 55 00 53 00 45 00 2D 00 53 00 4C 00 31 00 31 .U.S.E.- .S.L.1.1 [0050] 00 2E 00 33 00 2D 00 78 00 38 00 36 00 5F 00 36 ...3.-.x .8.6._.6 [0060] 00 34 00 00 00 57 00 4F 00 52 00 4B 00 47 00 52 .4...W.O .R.K.G.R [0070] 00 4F 00 55 00 50 00 00 00 .O.U.P.. . [2010/12/05 19:58:06.702204, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 84 [2010/12/05 19:58:06.702250, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x54 [2010/12/05 19:58:06.702284, 3] smbd/process.c:1485(process_smb) Transaction 3 of length 88 (0 toread) [2010/12/05 19:58:06.702316, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.702336, 5] lib/util.c:627(show_msg) size=84 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=65535 smb_pid=12234 smb_uid=100 smb_mid=4 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=41 [2010/12/05 19:58:06.702518, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 5C 00 4C 00 4F 00 43 00 41 00 4C 00 48 .\.\.L.O .C.A.L.H [0010] 00 4F 00 53 00 54 00 5C 00 49 00 50 00 43 00 24 .O.S.T.\ .I.P.C.$ [0020] 00 00 00 3F 3F 3F 3F 3F 00 ...????? . [2010/12/05 19:58:06.702644, 3] smbd/process.c:1294(switch_message) switch message SMBtconX (pid 12235) conn 0x0 [2010/12/05 19:58:06.702897, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBtconX.19.req len 88 [2010/12/05 19:58:06.702997, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.703033, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.703064, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.703116, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:06.703163, 4] smbd/reply.c:786(reply_tcon_and_X) Client requested device type [?????] for share [IPC$] [2010/12/05 19:58:06.703241, 5] smbd/service.c:1227(make_connection) making a connection to 'normal' service ipc$ [2010/12/05 19:58:06.703460, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 3: DEFAULT [2010/12/05 19:58:06.703500, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 1: DEFAULT [2010/12/05 19:58:06.703531, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 4: DEFAULT [2010/12/05 19:58:06.703562, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 2: DEFAULT [2010/12/05 19:58:06.703594, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.703659, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.703692, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.703724, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.703755, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.703816, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:06.703865, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.703901, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175 [2010/12/05 19:58:06.703937, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:06.703974, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:06.704008, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 5 -> now SET [2010/12/05 19:58:06.704040, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 6 -> now SET [2010/12/05 19:58:06.704069, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 7 -> now SET [2010/12/05 19:58:06.704100, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 8 -> now SET [2010/12/05 19:58:06.704130, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 9 -> now SET [2010/12/05 19:58:06.704160, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 10 -> now SET [2010/12/05 19:58:06.704190, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 21 -> now SET [2010/12/05 19:58:06.704220, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/05 19:58:06.704252, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 12 -> now SET [2010/12/05 19:58:06.704282, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain GILES, was [2010/12/05 19:58:06.704314, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 14 -> now SET [2010/12/05 19:58:06.704344, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/05 19:58:06.704375, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 15 -> now SET [2010/12/05 19:58:06.704406, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/05 19:58:06.704437, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 13 -> now SET [2010/12/05 19:58:06.704476, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\giles\nobody\.9xprofile, was [2010/12/05 19:58:06.704509, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/05 19:58:06.704539, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/05 19:58:06.704570, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/05 19:58:06.704602, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/05 19:58:06.704634, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/05 19:58:06.704668, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\giles\profiles\.msprofile, was [2010/12/05 19:58:06.704700, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/05 19:58:06.704730, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 22 -> now SET [2010/12/05 19:58:06.704761, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 24 -> now SET [2010/12/05 19:58:06.704792, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/05 19:58:06.704850, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 23 -> now SET [2010/12/05 19:58:06.704882, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 25 -> now SET [2010/12/05 19:58:06.704912, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.704945, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.704976, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.705007, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.705037, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.705097, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:06.705138, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.705173, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 33 -> now SET [2010/12/05 19:58:06.705204, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501 [2010/12/05 19:58:06.705241, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 18 -> now SET [2010/12/05 19:58:06.705271, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501 [2010/12/05 19:58:06.705318, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 16 -> now SET [2010/12/05 19:58:06.705348, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 28 -> now SET [2010/12/05 19:58:06.705379, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 29 -> now SET [2010/12/05 19:58:06.705409, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 30 -> now SET [2010/12/05 19:58:06.705440, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 20 -> now SET [2010/12/05 19:58:06.705470, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 17 -> now SET [2010/12/05 19:58:06.705502, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 26 -> now SET [2010/12/05 19:58:06.705564, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec 5 19:58:10 2010 [2010/12/05 19:58:06.705621, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.705655, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.705687, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.705719, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.705750, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.705800, 5] passdb/pdb_interface.c:1473(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 513. [2010/12/05 19:58:06.705835, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/12/05 19:58:06.705867, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/12/05 19:58:06.705900, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/12/05 19:58:06.705932, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.705962, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.706029, 5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. [2010/12/05 19:58:06.706140, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.706177, 5] passdb/pdb_interface.c:1536(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2010/12/05 19:58:06.706244, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.706278, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:06.706316, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:06.706352, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 19 -> now SET [2010/12/05 19:58:06.706389, 5] lib/username.c:133(Get_Pwnam_alloc) Finding user nobody [2010/12/05 19:58:06.706421, 5] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2010/12/05 19:58:06.706455, 5] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2010/12/05 19:58:06.706517, 10] smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /var/tmp [2010/12/05 19:58:06.706553, 3] smbd/service.c:807(make_connection_snum) Connect path is '/var/tmp' for service [IPC$] [2010/12/05 19:58:06.706614, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2010/12/05 19:58:06.706662, 3] smbd/vfs.c:97(vfs_init_default) Initialising default vfs hooks [2010/12/05 19:58:06.706702, 10] smbd/vfs.c:48(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ [2010/12/05 19:58:06.706736, 5] smbd/vfs.c:87(smb_register_vfs) Successfully added vfs backend '/[Default VFS]/' [2010/12/05 19:58:06.706774, 10] smbd/vfs.c:48(vfs_find_backend_entry) vfs_find_backend_entry called for posixacl [2010/12/05 19:58:06.706806, 5] smbd/vfs.c:87(smb_register_vfs) Successfully added vfs backend 'posixacl' [2010/12/05 19:58:06.706837, 3] smbd/vfs.c:122(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2010/12/05 19:58:06.706870, 10] smbd/vfs.c:48(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2010/12/05 19:58:06.706918, 5] smbd/connection.c:142(claim_connection) claiming [IPC$] [2010/12/05 19:58:06.707143, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key CB2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:06.707210, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7fc98212a3b0 [2010/12/05 19:58:06.707266, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key CB2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:06.707539, 10] smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /var/tmp [2010/12/05 19:58:06.707584, 10] smbd/share_access.c:238(user_ok_token) user_ok_token: share IPC$ is ok for unix user nobody [2010/12/05 19:58:06.707620, 10] smbd/share_access.c:283(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2010/12/05 19:58:06.707698, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2010/12/05 19:58:06.707742, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 3: DEFAULT [2010/12/05 19:58:06.707774, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 1: DEFAULT [2010/12/05 19:58:06.707803, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 4: DEFAULT [2010/12/05 19:58:06.707833, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 2: DEFAULT [2010/12/05 19:58:06.707864, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.707896, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.707927, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.707959, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.707991, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.708243, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:06.708287, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.708323, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175 [2010/12/05 19:58:06.708358, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:06.708393, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:06.708428, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 5 -> now SET [2010/12/05 19:58:06.708459, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 6 -> now SET [2010/12/05 19:58:06.708489, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 7 -> now SET [2010/12/05 19:58:06.708519, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 8 -> now SET [2010/12/05 19:58:06.708549, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 9 -> now SET [2010/12/05 19:58:06.708578, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 10 -> now SET [2010/12/05 19:58:06.708609, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 21 -> now SET [2010/12/05 19:58:06.708639, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/05 19:58:06.708671, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 12 -> now SET [2010/12/05 19:58:06.708701, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain GILES, was [2010/12/05 19:58:06.708731, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 14 -> now SET [2010/12/05 19:58:06.708761, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/05 19:58:06.708792, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 15 -> now SET [2010/12/05 19:58:06.708822, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/05 19:58:06.708853, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 13 -> now SET [2010/12/05 19:58:06.708892, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\giles\nobody\.9xprofile, was [2010/12/05 19:58:06.708925, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/05 19:58:06.708955, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/05 19:58:06.708986, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/05 19:58:06.709019, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/05 19:58:06.709050, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/05 19:58:06.709084, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\giles\profiles\.msprofile, was [2010/12/05 19:58:06.709150, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/05 19:58:06.709182, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 22 -> now SET [2010/12/05 19:58:06.709213, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 24 -> now SET [2010/12/05 19:58:06.709243, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/05 19:58:06.709274, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 23 -> now SET [2010/12/05 19:58:06.709305, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 25 -> now SET [2010/12/05 19:58:06.709336, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.709369, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.709401, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.709433, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.709463, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.709523, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:06.709570, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.709604, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 33 -> now SET [2010/12/05 19:58:06.709635, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501 [2010/12/05 19:58:06.709672, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 18 -> now SET [2010/12/05 19:58:06.709702, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501 [2010/12/05 19:58:06.709748, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 16 -> now SET [2010/12/05 19:58:06.709780, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 28 -> now SET [2010/12/05 19:58:06.709810, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 29 -> now SET [2010/12/05 19:58:06.709842, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 30 -> now SET [2010/12/05 19:58:06.709872, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 20 -> now SET [2010/12/05 19:58:06.709902, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 17 -> now SET [2010/12/05 19:58:06.709932, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 26 -> now SET [2010/12/05 19:58:06.709993, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec 5 19:58:10 2010 [2010/12/05 19:58:06.710051, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.710085, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.710117, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.710149, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.710179, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.710229, 5] passdb/pdb_interface.c:1473(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 513. [2010/12/05 19:58:06.710263, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/12/05 19:58:06.710295, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/12/05 19:58:06.710326, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/12/05 19:58:06.710388, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.710419, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.710480, 5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. [2010/12/05 19:58:06.710592, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.710627, 5] passdb/pdb_interface.c:1536(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2010/12/05 19:58:06.710664, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.710697, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:06.710734, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:06.710770, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 19 -> now SET [2010/12/05 19:58:06.710811, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.710844, 5] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-779886165-838294741-719422925-501 contains 7 SIDs SID[ 0]: S-1-5-21-779886165-838294741-719422925-501 SID[ 1]: S-1-22-2-65533 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-22-2-65534 SID[ 6]: S-1-22-1-65534 SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/05 19:58:06.711309, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 65534 Primary group is 65533 and contains 2 supplementary groups Group[ 0]: 65533 Group[ 1]: 65534 [2010/12/05 19:58:06.711391, 5] smbd/uid.c:354(change_to_user) change_to_user uid=(0,65534) gid=(0,65533) [2010/12/05 19:58:06.711453, 10] smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /var/tmp [2010/12/05 19:58:06.711506, 3] smbd/service.c:1070(make_connection_snum) giles (::ffff:127.0.0.1) connect to service IPC$ initially as user nobody (uid=65534, gid=65533) (pid 12235) [2010/12/05 19:58:06.711550, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.711585, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.711615, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.711671, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:06.711713, 3] smbd/reply.c:865(reply_tcon_and_X) tconX service=IPC$ [2010/12/05 19:58:06.721119, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 102 [2010/12/05 19:58:06.721171, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x66 [2010/12/05 19:58:06.721207, 3] smbd/process.c:1485(process_smb) Transaction 4 of length 106 (0 toread) [2010/12/05 19:58:06.721239, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.721260, 5] lib/util.c:627(show_msg) size=102 smb_com=0xa2 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=5 smt_wct=24 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 4096 (0x1000) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]=40704 (0x9F00) smb_vwv[ 8]= 513 (0x201) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 0 (0x0) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 0 (0x0) smb_vwv[13]= 0 (0x0) smb_vwv[14]= 0 (0x0) smb_vwv[15]= 768 (0x300) smb_vwv[16]= 0 (0x0) smb_vwv[17]= 256 (0x100) smb_vwv[18]= 0 (0x0) smb_vwv[19]= 0 (0x0) smb_vwv[20]= 0 (0x0) smb_vwv[21]= 512 (0x200) smb_vwv[22]= 0 (0x0) smb_vwv[23]= 0 (0x0) smb_bcc=19 [2010/12/05 19:58:06.721705, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 73 00 72 00 76 00 73 00 76 00 63 00 00 .\.s.r.v .s.v.c.. [0010] 00 00 00 ... [2010/12/05 19:58:06.721799, 3] smbd/process.c:1294(switch_message) switch message SMBntcreateX (pid 12235) conn 0x7fc9821211f0 [2010/12/05 19:58:06.722034, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBntcreateX.10.req len 106 [2010/12/05 19:58:06.722134, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.722169, 5] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-779886165-838294741-719422925-501 contains 7 SIDs SID[ 0]: S-1-5-21-779886165-838294741-719422925-501 SID[ 1]: S-1-22-2-65533 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-22-2-65534 SID[ 6]: S-1-22-1-65534 SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/05 19:58:06.722329, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 65534 Primary group is 65533 and contains 2 supplementary groups Group[ 0]: 65533 Group[ 1]: 65534 [2010/12/05 19:58:06.722406, 5] smbd/uid.c:354(change_to_user) change_to_user uid=(0,65534) gid=(0,65533) [2010/12/05 19:58:06.722451, 4] smbd/vfs.c:721(vfs_ChDir) vfs_ChDir to /var/tmp [2010/12/05 19:58:06.722527, 10] smbd/nttrans.c:498(reply_ntcreate_and_X) reply_ntcreate_and_X: flags = 0x0, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = srvsvc [2010/12/05 19:58:06.722578, 4] smbd/nttrans.c:283(nt_open_pipe) nt_open_pipe: Opening pipe \srvsvc. [2010/12/05 19:58:06.722622, 5] smbd/files.c:119(file_new) allocated file structure 3957, fnum = 8053 (1 used) [2010/12/05 19:58:06.722679, 4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p) Create pipe requested \srvsvc [2010/12/05 19:58:06.722760, 10] rpc_server/srv_lsa_hnd.c:114(init_pipe_handle_list) init_pipe_handles: created handle list for pipe \srvsvc [2010/12/05 19:58:06.722796, 10] rpc_server/srv_lsa_hnd.c:131(init_pipe_handle_list) init_pipe_handles: pipe_handles ref count = 1 for pipe \srvsvc [2010/12/05 19:58:06.722845, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 3: DEFAULT [2010/12/05 19:58:06.722878, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 1: DEFAULT [2010/12/05 19:58:06.722910, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 4: DEFAULT [2010/12/05 19:58:06.722941, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 2: DEFAULT [2010/12/05 19:58:06.722973, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.723028, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.723063, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.723096, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.723127, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.723198, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:06.723242, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.723282, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175 [2010/12/05 19:58:06.723319, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:06.723358, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:06.723395, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 5 -> now SET [2010/12/05 19:58:06.723428, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 6 -> now SET [2010/12/05 19:58:06.723492, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 7 -> now SET [2010/12/05 19:58:06.723524, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 8 -> now SET [2010/12/05 19:58:06.723555, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 9 -> now SET [2010/12/05 19:58:06.723586, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 10 -> now SET [2010/12/05 19:58:06.723617, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 21 -> now SET [2010/12/05 19:58:06.723648, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/05 19:58:06.723681, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 12 -> now SET [2010/12/05 19:58:06.723713, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain GILES, was [2010/12/05 19:58:06.723746, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 14 -> now SET [2010/12/05 19:58:06.723777, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/05 19:58:06.723810, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 15 -> now SET [2010/12/05 19:58:06.723841, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/05 19:58:06.723874, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 13 -> now SET [2010/12/05 19:58:06.723916, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\giles\nobody\.9xprofile, was [2010/12/05 19:58:06.723951, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/05 19:58:06.723983, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/05 19:58:06.724166, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/05 19:58:06.724204, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/05 19:58:06.724238, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/05 19:58:06.724275, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\giles\profiles\.msprofile, was [2010/12/05 19:58:06.724308, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/05 19:58:06.724340, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 22 -> now SET [2010/12/05 19:58:06.724372, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 24 -> now SET [2010/12/05 19:58:06.724402, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/05 19:58:06.724434, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 23 -> now SET [2010/12/05 19:58:06.724466, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 25 -> now SET [2010/12/05 19:58:06.724498, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.724534, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.724567, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.724600, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.724631, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.724700, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:06.724745, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.724782, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 33 -> now SET [2010/12/05 19:58:06.724814, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501 [2010/12/05 19:58:06.724883, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 18 -> now SET [2010/12/05 19:58:06.724916, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501 [2010/12/05 19:58:06.724965, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 16 -> now SET [2010/12/05 19:58:06.724996, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 28 -> now SET [2010/12/05 19:58:06.725028, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 29 -> now SET [2010/12/05 19:58:06.725059, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 30 -> now SET [2010/12/05 19:58:06.725090, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 20 -> now SET [2010/12/05 19:58:06.725120, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 17 -> now SET [2010/12/05 19:58:06.725152, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 26 -> now SET [2010/12/05 19:58:06.725220, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec 5 19:58:10 2010 [2010/12/05 19:58:06.725283, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.725321, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.725354, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.725387, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.725418, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.725475, 5] passdb/pdb_interface.c:1473(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 513. [2010/12/05 19:58:06.725511, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/12/05 19:58:06.725544, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 1 [2010/12/05 19:58:06.725576, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/12/05 19:58:06.725608, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.725638, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.725700, 5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. [2010/12/05 19:58:06.725824, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.725861, 5] passdb/pdb_interface.c:1536(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2010/12/05 19:58:06.725900, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.725935, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:06.725973, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:06.726011, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 19 -> now SET [2010/12/05 19:58:06.726045, 4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p) Created internal pipe \srvsvc (pipes_open=0) [2010/12/05 19:58:06.726087, 5] smbd/nttrans.c:372(do_ntcreate_pipe_open) do_ntcreate_pipe_open: open pipe = \srvsvc [2010/12/05 19:58:06.726474, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 154 [2010/12/05 19:58:06.726525, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x9a [2010/12/05 19:58:06.726560, 3] smbd/process.c:1485(process_smb) Transaction 5 of length 158 (0 toread) [2010/12/05 19:58:06.726593, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.726644, 5] lib/util.c:627(show_msg) size=154 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=6 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 72 (0x48) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 72 (0x48) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 8053 (0x1F75) smb_bcc=87 [2010/12/05 19:58:06.726967, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 B8 .......H ........ [0020] 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 C8 ........ ........ [0030] 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 88 03 O2Kp.... xZG.n... [0040] 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B ....]... .......+ [0050] 10 48 60 02 00 00 00 .H`.... [2010/12/05 19:58:06.727272, 3] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 12235) conn 0x7fc9821211f0 [2010/12/05 19:58:06.727690, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBtrans.37.req len 158 [2010/12/05 19:58:06.727894, 4] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/12/05 19:58:06.727950, 3] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=72 params=0 setup=2 [2010/12/05 19:58:06.727993, 5] smbd/ipc.c:578(handle_trans) calling named_pipe [2010/12/05 19:58:06.728220, 3] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2010/12/05 19:58:06.728263, 5] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2010/12/05 19:58:06.728297, 3] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "srvsvc" (pnum 1f75) [2010/12/05 19:58:06.728339, 10] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0x7fc9821440b0 max_trans_reply: 4280 [2010/12/05 19:58:06.728373, 6] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 72 [2010/12/05 19:58:06.728406, 50] ../lib/util/util.c:278(_dump_data) [0000] 05 00 0B 03 10 00 00 00 48 00 00 00 01 00 00 00 ........ H....... [0010] B8 10 B8 10 00 00 00 00 01 00 00 00 00 00 01 00 ........ ........ [0020] C8 4F 32 4B 70 16 D3 01 12 78 5A 47 BF 6E E1 88 .O2Kp... .xZG.n.. [0030] 03 00 00 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 .....].. ........ [0040] 2B 10 48 60 02 00 00 00 +.H`.... [2010/12/05 19:58:06.728610, 10] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 72 [2010/12/05 19:58:06.728648, 10] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72 [2010/12/05 19:58:06.728682, 10] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/05 19:58:06.728717, 10] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/05 19:58:06.728748, 10] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 56 [2010/12/05 19:58:06.728780, 10] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56 [2010/12/05 19:58:06.728817, 5] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0b 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0048 000a auth_len : 0000 000c call_id : 00000001 [2010/12/05 19:58:06.728991, 5] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/05 19:58:06.729056, 10] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 11, flags = 3 [2010/12/05 19:58:06.729091, 10] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/05 19:58:06.729122, 10] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 56 [2010/12/05 19:58:06.729152, 10] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56 [2010/12/05 19:58:06.729185, 10] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 11 [2010/12/05 19:58:06.729232, 5] rpc_server/srv_pipe.c:1642(api_pipe_bind_req) api_pipe_bind_req: decode request. 1642 [2010/12/05 19:58:06.729271, 5] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_rb [2010/12/05 19:58:06.729305, 6] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 00000000 0008 num_contexts: 01 000c context_id : 0000 000e num_transfer_syntaxes: 01 [2010/12/05 19:58:06.729416, 6] rpc_parse/parse_prs.c:89(prs_debug) 00000f smb_io_rpc_iface [2010/12/05 19:58:06.729454, 7] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_uuid uuid 0010 data : 4b324fc8 0014 data : 1670 0016 data : 01d3 0018 data : 12 78 001a data : 5a 47 bf 6e e1 88 0020 version: 00000003 [2010/12/05 19:58:06.729575, 6] rpc_parse/parse_prs.c:89(prs_debug) 000024 smb_io_rpc_iface [2010/12/05 19:58:06.729609, 7] rpc_parse/parse_prs.c:89(prs_debug) 000024 smb_io_uuid uuid 0024 data : 8a885d04 0028 data : 1ceb 002a data : 11c9 002c data : 9f e8 002e data : 08 00 2b 10 48 60 0034 version: 00000002 [2010/12/05 19:58:06.729724, 3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req) api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc [2010/12/05 19:58:06.729758, 5] rpc_server/srv_pipe.c:1718(api_pipe_bind_req) api_pipe_bind_req: make response. 1718 [2010/12/05 19:58:06.729791, 3] rpc_server/srv_pipe.c:998(check_bind_req) check_bind_req for \srvsvc checking lsarpc checking winreg checking initshutdown checking dssetup checking wkssvc checking svcctl checking ntsvcs checking netlogon checking netdfs checking srvsvc [2010/12/05 19:58:06.729920, 5] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_ba [2010/12/05 19:58:06.729953, 6] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_bba 0000 max_tsize: 10b8 0002 max_rsize: 10b8 0004 assoc_gid: 000053f0 [2010/12/05 19:58:06.730022, 6] rpc_parse/parse_prs.c:89(prs_debug) 000008 smb_io_rpc_addr_str 0008 len: 000d 000a str: \PIPE\srvsvc. [2010/12/05 19:58:06.730091, 6] rpc_parse/parse_prs.c:89(prs_debug) 000017 smb_io_rpc_results 0018 num_results: 01 001c result : 0000 001e reason : 0000 [2010/12/05 19:58:06.730161, 6] rpc_parse/parse_prs.c:89(prs_debug) 000020 smb_io_rpc_iface [2010/12/05 19:58:06.730194, 7] rpc_parse/parse_prs.c:89(prs_debug) 000020 smb_io_uuid uuid 0020 data : 8a885d04 0024 data : 1ceb 0026 data : 11c9 0028 data : 9f e8 002a data : 08 00 2b 10 48 60 0030 version: 00000002 [2010/12/05 19:58:06.730308, 5] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 0c 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 0044 000a auth_len : 0000 000c call_id : 00000001 [2010/12/05 19:58:06.730476, 10] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 56 [2010/12/05 19:58:06.730542, 11] lib/events.c:313(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7fc98213bfc0 [2010/12/05 19:58:06.730594, 11] lib/events.c:313(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7fc98213bfc0 [2010/12/05 19:58:06.730641, 6] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \srvsvc len: 4280 [2010/12/05 19:58:06.730676, 10] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe) read_from_pipe: \srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes. [2010/12/05 19:58:06.730715, 11] lib/events.c:313(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7fc9821087c0 [2010/12/05 19:58:06.730754, 11] lib/events.c:313(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7fc9821087c0 [2010/12/05 19:58:06.730791, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..68] (align 0) [2010/12/05 19:58:06.730826, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.730848, 5] lib/util.c:627(show_msg) size=124 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 68 (0x44) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 68 (0x44) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=69 [2010/12/05 19:58:06.731160, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 0C 03 10 00 00 00 44 00 00 00 01 00 00 ........ .D...... [0010] 00 B8 10 B8 10 F0 53 00 00 0D 00 5C 50 49 50 45 ......S. ...\PIPE [0020] 5C 73 72 76 73 76 63 00 00 01 00 00 00 00 00 00 \srvsvc. ........ [0030] 00 04 5D 88 8A EB 1C C9 11 9F E8 08 00 2B 10 48 ..]..... .....+.H [0040] 60 02 00 00 00 `.... [2010/12/05 19:58:06.731667, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 174 [2010/12/05 19:58:06.731717, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xae [2010/12/05 19:58:06.731752, 3] smbd/process.c:1485(process_smb) Transaction 6 of length 178 (0 toread) [2010/12/05 19:58:06.731786, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.731808, 5] lib/util.c:627(show_msg) size=174 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=7 smt_wct=16 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 92 (0x5C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 4280 (0x10B8) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]= 82 (0x52) smb_vwv[11]= 92 (0x5C) smb_vwv[12]= 82 (0x52) smb_vwv[13]= 2 (0x2) smb_vwv[14]= 38 (0x26) smb_vwv[15]= 8053 (0x1F75) smb_bcc=107 [2010/12/05 19:58:06.732128, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 00 00 05 .\.P.I.P .E.\.... [0010] 00 00 03 10 00 00 00 5C 00 00 00 02 00 00 00 44 .......\ .......D [0020] 00 00 00 00 00 0F 00 00 00 02 00 0A 00 00 00 00 ........ ........ [0030] 00 00 00 0A 00 00 00 6C 00 6F 00 63 00 61 00 6C .......l .o.c.a.l [0040] 00 68 00 6F 00 73 00 74 00 00 00 01 00 00 00 01 .h.o.s.t ........ [0050] 00 00 00 04 00 02 00 00 00 00 00 00 00 00 00 FF ........ ........ [0060] FF FF FF 08 00 02 00 00 00 00 00 ........ ... [2010/12/05 19:58:06.732403, 3] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 12235) conn 0x7fc9821211f0 [2010/12/05 19:58:06.732807, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBtrans.38.req len 178 [2010/12/05 19:58:06.732982, 4] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/12/05 19:58:06.733027, 3] smbd/ipc.c:545(handle_trans) trans <\PIPE\> data=92 params=0 setup=2 [2010/12/05 19:58:06.733097, 5] smbd/ipc.c:578(handle_trans) calling named_pipe [2010/12/05 19:58:06.733131, 3] smbd/ipc.c:496(named_pipe) named pipe command on <> name [2010/12/05 19:58:06.733163, 5] smbd/ipc.c:419(api_fd_reply) api_fd_reply [2010/12/05 19:58:06.733195, 3] smbd/ipc.c:460(api_fd_reply) Got API command 0x26 on pipe "srvsvc" (pnum 1f75) [2010/12/05 19:58:06.733230, 10] smbd/ipc.c:462(api_fd_reply) api_fd_reply: p:0x7fc9821440b0 max_trans_reply: 4280 [2010/12/05 19:58:06.733265, 6] rpc_server/srv_pipe_hnd.c:1208(np_write_send) np_write_send: len: 92 [2010/12/05 19:58:06.733298, 50] ../lib/util/util.c:278(_dump_data) [0000] 05 00 00 03 10 00 00 00 5C 00 00 00 02 00 00 00 ........ \....... [0010] 44 00 00 00 00 00 0F 00 00 00 02 00 0A 00 00 00 D....... ........ [0020] 00 00 00 00 0A 00 00 00 6C 00 6F 00 63 00 61 00 ........ l.o.c.a. [0030] 6C 00 68 00 6F 00 73 00 74 00 00 00 01 00 00 00 l.h.o.s. t....... [0040] 01 00 00 00 04 00 02 00 00 00 00 00 00 00 00 00 ........ ........ [0050] FF FF FF FF 08 00 02 00 00 00 00 00 ........ .... [2010/12/05 19:58:06.733542, 10] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 92 [2010/12/05 19:58:06.733574, 10] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 92 [2010/12/05 19:58:06.733609, 10] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header) fill_rpc_header: data_to_copy = 92, len_needed_to_complete_hdr = 16, receive_len = 0 [2010/12/05 19:58:06.733643, 10] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 16 [2010/12/05 19:58:06.733675, 10] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 76 [2010/12/05 19:58:06.733706, 10] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 76 [2010/12/05 19:58:06.733741, 5] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 00 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 005c 000a auth_len : 0000 000c call_id : 00000002 [2010/12/05 19:58:06.733910, 5] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header) unmarshall_rpc_header: using little-endian RPC [2010/12/05 19:58:06.733942, 10] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header) unmarshall_rpc_header: type = 0, flags = 3 [2010/12/05 19:58:06.733976, 10] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 0 [2010/12/05 19:58:06.734007, 10] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe) write_to_pipe: data_left = 76 [2010/12/05 19:58:06.734039, 10] rpc_server/srv_pipe_hnd.c:682(process_incoming_data) process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 76, incoming data = 76 [2010/12/05 19:58:06.734073, 10] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu) process_complete_pdu: processing packet type 0 [2010/12/05 19:58:06.734106, 5] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr_req req 0000 alloc_hint: 00000044 0004 context_id: 0000 0006 opnum : 000f [2010/12/05 19:58:06.734179, 3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 80 [2010/12/05 19:58:06.734216, 5] rpc_server/srv_pipe.c:2367(api_pipe_request) Requested \PIPE\\srvsvc [2010/12/05 19:58:06.734259, 4] rpc_server/srv_pipe.c:2404(api_rpcTNP) api_rpcTNP: \srvsvc op 0xf - created /tmp/in_\srvsvc_15.10.prs [2010/12/05 19:58:06.734470, 3] rpc_server/srv_pipe.c:2415(api_rpcTNP) api_rpcTNP: rpc command: SRVSVC_NETSHAREENUMALL [2010/12/05 19:58:06.734506, 6] rpc_server/srv_pipe.c:2434(api_rpcTNP) api_rpc_cmds[15].fn == 0x7fc9817c3de0 [2010/12/05 19:58:06.734568, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) srvsvc_NetShareEnumAll: struct srvsvc_NetShareEnumAll in: struct srvsvc_NetShareEnumAll server_unc : * server_unc : 'localhost' info_ctr : * info_ctr: struct srvsvc_NetShareInfoCtr level : 0x00000001 (1) ctr : union srvsvc_NetShareCtr(case 1) ctr1 : * ctr1: struct srvsvc_NetShareCtr1 count : 0x00000000 (0) array : NULL max_buffer : 0xffffffff (4294967295) resume_handle : * resume_handle : 0x00000000 (0) [2010/12/05 19:58:06.734879, 5] rpc_server/srv_srvsvc_nt.c:1339(_srvsvc_NetShareEnumAll) _srvsvc_NetShareEnumAll: 1339 [2010/12/05 19:58:06.734921, 5] rpc_server/srv_srvsvc_nt.c:527(init_srv_share_info_ctr) init_srv_share_info_ctr [2010/12/05 19:58:06.734956, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.735028, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(100) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.735064, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.735097, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.735129, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.735191, 8] smbd/service.c:249(load_registry_shares) load_registry_shares() [2010/12/05 19:58:06.735249, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba\smbconf] [2010/12/05 19:58:06.742893, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:58:06.742952, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal) regdb_fetch_keys: no subkeys found for key [HKLM\SOFTWARE\Samba\smbconf] [2010/12/05 19:58:06.743000, 10] registry/reg_dispatcher.c:147(fetch_reg_values) fetch_reg_values called for key 'HKLM\SOFTWARE\Samba\smbconf' (ops 0x7fc9820914a0) [2010/12/05 19:58:06.743042, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal) regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Samba\smbconf] [2010/12/05 19:58:06.743086, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:58:06.743141, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc) regdb_get_secdesc: Getting secdesc of key [HKLM\SOFTWARE\Samba\smbconf] [2010/12/05 19:58:06.743186, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 33) -> 4 [2010/12/05 19:58:06.743257, 7] registry/reg_api.c:133(regkey_open_onelevel) regkey_open_onelevel: name = [global] [2010/12/05 19:58:06.743293, 10] registry/reg_backend_db.c:451(regdb_open) regdb_open: incrementing refcount (2) [2010/12/05 19:58:06.743333, 10] registry/reg_cachehook.c:125(reghook_cache_find) reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:58:06.743365, 10] lib/adt_tree.c:352(pathtree_find) pathtree_find: Enter [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:58:06.743398, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba/smbconf/global] [2010/12/05 19:58:06.743431, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKLM] [2010/12/05 19:58:06.743466, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [HKPT] [2010/12/05 19:58:06.743497, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [HKLM] [2010/12/05 19:58:06.743528, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba/smbconf/global] [2010/12/05 19:58:06.743587, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SOFTWARE] [2010/12/05 19:58:06.743619, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [SYSTEM] [2010/12/05 19:58:06.743649, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [SOFTWARE] [2010/12/05 19:58:06.743680, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [Samba], new_path => [smbconf/global] [2010/12/05 19:58:06.743711, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Microsoft] [2010/12/05 19:58:06.743743, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [Samba] [2010/12/05 19:58:06.743774, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [Samba] [2010/12/05 19:58:06.743805, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [smbconf], new_path => [global] [2010/12/05 19:58:06.743836, 11] lib/adt_tree.c:169(pathtree_find_child) pathtree_find_child: child key => [smbconf] [2010/12/05 19:58:06.743868, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Found [smbconf] [2010/12/05 19:58:06.743898, 11] lib/adt_tree.c:398(pathtree_find) pathtree_find: [loop] base => [global], new_path => [] [2010/12/05 19:58:06.743930, 11] lib/adt_tree.c:185(pathtree_find_child) pathtree_find_child: Did not find [global] [2010/12/05 19:58:06.743962, 11] lib/adt_tree.c:421(pathtree_find) pathtree_find: Found data_p! [2010/12/05 19:58:06.743992, 10] lib/adt_tree.c:425(pathtree_find) pathtree_find: Exit [2010/12/05 19:58:06.744022, 10] registry/reg_cachehook.c:130(reghook_cache_find) reghook_cache_find: found ops 0x7fc9820914a0 for key [/HKLM/SOFTWARE/Samba/smbconf/global] [2010/12/05 19:58:06.744057, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal) regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba\smbconf\global] [2010/12/05 19:58:06.744103, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(d, 4) -> 4 [2010/12/05 19:58:06.744141, 10] registry/reg_backend_db.c:1471(regdb_fetch_keys_internal) key [HKLM\SOFTWARE\Samba\smbconf\global] not found [2010/12/05 19:58:06.744176, 10] registry/reg_backend_db.c:485(regdb_close) regdb_close: decrementing refcount (2) [2010/12/05 19:58:06.744227, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.744265, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr) counting service IPC$ [2010/12/05 19:58:06.744302, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr) counting service srvnfs [2010/12/05 19:58:06.744336, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr) counting service print$ [2010/12/05 19:58:06.744370, 10] rpc_server/srv_srvsvc_nt.c:550(init_srv_share_info_ctr) NOT counting service printers [2010/12/05 19:58:06.744405, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr) counting service groups [2010/12/05 19:58:06.744439, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr) counting service users [2010/12/05 19:58:06.744473, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr) counting service profiles [2010/12/05 19:58:06.744507, 10] rpc_server/srv_srvsvc_nt.c:550(init_srv_share_info_ctr) NOT counting service homes [2010/12/05 19:58:06.744541, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr) counting service samsung_color [2010/12/05 19:58:06.744577, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr) counting service samsung_bw [2010/12/05 19:58:06.744611, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr) counting service dummy0 [2010/12/05 19:58:06.744732, 5] rpc_server/srv_srvsvc_nt.c:1353(_srvsvc_NetShareEnumAll) _srvsvc_NetShareEnumAll: 1353 [2010/12/05 19:58:06.744766, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug) srvsvc_NetShareEnumAll: struct srvsvc_NetShareEnumAll out: struct srvsvc_NetShareEnumAll info_ctr : * info_ctr: struct srvsvc_NetShareInfoCtr level : 0x00000001 (1) ctr : union srvsvc_NetShareCtr(case 1) ctr1 : * ctr1: struct srvsvc_NetShareCtr1 count : 0x00000009 (9) array : * array: ARRAY(9) array: struct srvsvc_NetShareInfo1 name : * name : 'IPC$' type : STYPE_IPC_HIDDEN (0x80000003) comment : * comment : 'IPC Service (Samba 3.5.6-12.1-2470-SUSE-SL11.3-x86_64)' array: struct srvsvc_NetShareInfo1 name : * name : 'srvnfs' type : STYPE_DISKTREE (0x0) comment : * comment : 'nfs reexport' array: struct srvsvc_NetShareInfo1 name : * name : 'print$' type : STYPE_DISKTREE (0x0) comment : * comment : 'Printer Drivers' array: struct srvsvc_NetShareInfo1 name : * name : 'groups' type : STYPE_DISKTREE (0x0) comment : * comment : 'All groups' array: struct srvsvc_NetShareInfo1 name : * name : 'users' type : STYPE_DISKTREE (0x0) comment : * comment : 'All users' array: struct srvsvc_NetShareInfo1 name : * name : 'profiles' type : STYPE_DISKTREE (0x0) comment : * comment : 'Network Profiles Service' array: struct srvsvc_NetShareInfo1 name : * name : 'samsung_color' type : STYPE_PRINTQ (0x1) comment : * comment : 'Samsung CLP-550N Foomatic/Postscript (recommended)' array: struct srvsvc_NetShareInfo1 name : * name : 'samsung_bw' type : STYPE_PRINTQ (0x1) comment : * comment : 'Samsung CLP-550N via Generic PCL 6/PCL XL Printer' array: struct srvsvc_NetShareInfo1 name : * name : 'dummy0' type : STYPE_PRINTQ (0x1) comment : * comment : 'dummy0' totalentries : * totalentries : 0x00000009 (9) resume_handle : * resume_handle : 0x00000000 (0) result : WERR_OK [2010/12/05 19:58:06.746257, 0] rpc_parse/parse_prs.c:74(prs_dump_region) created /tmp/out_\srvsvc_15.10.prs [2010/12/05 19:58:06.746422, 5] rpc_server/srv_pipe.c:2469(api_rpcTNP) api_rpcTNP: called \srvsvc successfully [2010/12/05 19:58:06.746474, 3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context) free_pipe_context: destroying talloc pool of size 719 [2010/12/05 19:58:06.746512, 10] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe) write_to_pipe: data_used = 76 [2010/12/05 19:58:06.746552, 11] lib/events.c:313(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7fc98213bff0 [2010/12/05 19:58:06.746604, 11] lib/events.c:313(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7fc98213bff0 [2010/12/05 19:58:06.746644, 6] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe) name: \srvsvc len: 4280 [2010/12/05 19:58:06.746680, 10] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe) read_from_pipe: \srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 1012. [2010/12/05 19:58:06.746718, 5] rpc_parse/parse_prs.c:89(prs_debug) 000000 smb_io_rpc_hdr hdr 0000 major : 05 0001 minor : 00 0002 pkt_type : 02 0003 flags : 03 0004 pack_type0: 10 0005 pack_type1: 00 0006 pack_type2: 00 0007 pack_type3: 00 0008 frag_len : 040c 000a auth_len : 0000 000c call_id : 00000002 [2010/12/05 19:58:06.746887, 5] rpc_parse/parse_prs.c:89(prs_debug) 000010 smb_io_rpc_hdr_resp resp 0010 alloc_hint: 000003f4 0014 context_id: 0000 0016 cancel_ct : 00 0017 reserved : 00 [2010/12/05 19:58:06.747019, 11] lib/events.c:313(s3_event_debug) s3_event: Schedule immediate event "tevent_req_trigger": 0x7fc98210f4d0 [2010/12/05 19:58:06.747062, 11] lib/events.c:313(s3_event_debug) s3_event: Run immediate event "tevent_req_trigger": 0x7fc98210f4d0 [2010/12/05 19:58:06.747100, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..0] data[0..1036] (align 0) [2010/12/05 19:58:06.747206, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.747228, 5] lib/util.c:627(show_msg) size=1092 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 0 (0x0) smb_vwv[ 1]= 1036 (0x40C) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 0 (0x0) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 1036 (0x40C) smb_vwv[ 7]= 56 (0x38) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=1037 [2010/12/05 19:58:06.747483, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 05 00 02 03 10 00 00 00 0C 04 00 00 02 00 00 ........ ........ [0010] 00 F4 03 00 00 00 00 00 00 01 00 00 00 01 00 00 ........ ........ [0020] 00 00 00 02 00 09 00 00 00 04 00 02 00 09 00 00 ........ ........ [0030] 00 08 00 02 00 03 00 00 80 0C 00 02 00 10 00 02 ........ ........ [0040] 00 00 00 00 00 14 00 02 00 18 00 02 00 00 00 00 ........ ........ [0050] 00 1C 00 02 00 20 00 02 00 00 00 00 00 24 00 02 ..... .. .....$.. [0060] 00 28 00 02 00 00 00 00 00 2C 00 02 00 30 00 02 .(...... .,...0.. [0070] 00 00 00 00 00 34 00 02 00 38 00 02 00 01 00 00 .....4.. .8...... [0080] 00 3C 00 02 00 40 00 02 00 01 00 00 00 44 00 02 .<...@.. .....D.. [0090] 00 48 00 02 00 01 00 00 00 4C 00 02 00 05 00 00 .H...... .L...... [00A0] 00 00 00 00 00 05 00 00 00 49 00 50 00 43 00 24 ........ .I.P.C.$ [00B0] 00 00 00 00 00 37 00 00 00 00 00 00 00 37 00 00 .....7.. .....7.. [00C0] 00 49 00 50 00 43 00 20 00 53 00 65 00 72 00 76 .I.P.C. .S.e.r.v [00D0] 00 69 00 63 00 65 00 20 00 28 00 53 00 61 00 6D .i.c.e. .(.S.a.m [00E0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 36 .b.a. .3 ...5...6 [00F0] 00 2D 00 31 00 32 00 2E 00 31 00 2D 00 32 00 34 .-.1.2.. .1.-.2.4 [0100] 00 37 00 30 00 2D 00 53 00 55 00 53 00 45 00 2D .7.0.-.S .U.S.E.- [0110] 00 53 00 4C 00 31 00 31 00 2E 00 33 00 2D 00 78 .S.L.1.1 ...3.-.x [0120] 00 38 00 36 00 5F 00 36 00 34 00 29 00 00 00 00 .8.6._.6 .4.).... [0130] 00 07 00 00 00 00 00 00 00 07 00 00 00 73 00 72 ........ .....s.r [0140] 00 76 00 6E 00 66 00 73 00 00 00 00 00 0D 00 00 .v.n.f.s ........ [0150] 00 00 00 00 00 0D 00 00 00 6E 00 66 00 73 00 20 ........ .n.f.s. [0160] 00 72 00 65 00 65 00 78 00 70 00 6F 00 72 00 74 .r.e.e.x .p.o.r.t [0170] 00 00 00 00 00 07 00 00 00 00 00 00 00 07 00 00 ........ ........ [0180] 00 70 00 72 00 69 00 6E 00 74 00 24 00 00 00 00 .p.r.i.n .t.$.... [0190] 00 10 00 00 00 00 00 00 00 10 00 00 00 50 00 72 ........ .....P.r [01A0] 00 69 00 6E 00 74 00 65 00 72 00 20 00 44 00 72 .i.n.t.e .r. .D.r [01B0] 00 69 00 76 00 65 00 72 00 73 00 00 00 07 00 00 .i.v.e.r .s...... [01C0] 00 00 00 00 00 07 00 00 00 67 00 72 00 6F 00 75 ........ .g.r.o.u [01D0] 00 70 00 73 00 00 00 00 00 0B 00 00 00 00 00 00 .p.s.... ........ [01E0] 00 0B 00 00 00 41 00 6C 00 6C 00 20 00 67 00 72 .....A.l .l. .g.r [01F0] 00 6F 00 75 00 70 00 73 00 00 00 00 00 06 00 00 .o.u.p.s ........ [0200] 00 00 00 00 00 06 00 00 00 75 00 73 00 65 00 72 ........ .u.s.e.r [0210] 00 73 00 00 00 0A 00 00 00 00 00 00 00 0A 00 00 .s...... ........ [0220] 00 41 00 6C 00 6C 00 20 00 75 00 73 00 65 00 72 .A.l.l. .u.s.e.r [0230] 00 73 00 00 00 09 00 00 00 00 00 00 00 09 00 00 .s...... ........ [0240] 00 70 00 72 00 6F 00 66 00 69 00 6C 00 65 00 73 .p.r.o.f .i.l.e.s [0250] 00 00 00 00 00 19 00 00 00 00 00 00 00 19 00 00 ........ ........ [0260] 00 4E 00 65 00 74 00 77 00 6F 00 72 00 6B 00 20 .N.e.t.w .o.r.k. [0270] 00 50 00 72 00 6F 00 66 00 69 00 6C 00 65 00 73 .P.r.o.f .i.l.e.s [0280] 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 . .S.e.r .v.i.c.e [0290] 00 00 00 00 00 0E 00 00 00 00 00 00 00 0E 00 00 ........ ........ [02A0] 00 73 00 61 00 6D 00 73 00 75 00 6E 00 67 00 5F .s.a.m.s .u.n.g._ [02B0] 00 63 00 6F 00 6C 00 6F 00 72 00 00 00 33 00 00 .c.o.l.o .r...3.. [02C0] 00 00 00 00 00 33 00 00 00 53 00 61 00 6D 00 73 .....3.. .S.a.m.s [02D0] 00 75 00 6E 00 67 00 20 00 43 00 4C 00 50 00 2D .u.n.g. .C.L.P.- [02E0] 00 35 00 35 00 30 00 4E 00 20 00 46 00 6F 00 6F .5.5.0.N . .F.o.o [02F0] 00 6D 00 61 00 74 00 69 00 63 00 2F 00 50 00 6F .m.a.t.i .c./.P.o [0300] 00 73 00 74 00 73 00 63 00 72 00 69 00 70 00 74 .s.t.s.c .r.i.p.t [0310] 00 20 00 28 00 72 00 65 00 63 00 6F 00 6D 00 6D . .(.r.e .c.o.m.m [0320] 00 65 00 6E 00 64 00 65 00 64 00 29 00 00 00 00 .e.n.d.e .d.).... [0330] 00 0B 00 00 00 00 00 00 00 0B 00 00 00 73 00 61 ........ .....s.a [0340] 00 6D 00 73 00 75 00 6E 00 67 00 5F 00 62 00 77 .m.s.u.n .g._.b.w [0350] 00 00 00 00 00 32 00 00 00 00 00 00 00 32 00 00 .....2.. .....2.. [0360] 00 53 00 61 00 6D 00 73 00 75 00 6E 00 67 00 20 .S.a.m.s .u.n.g. [0370] 00 43 00 4C 00 50 00 2D 00 35 00 35 00 30 00 4E .C.L.P.- .5.5.0.N [0380] 00 20 00 76 00 69 00 61 00 20 00 47 00 65 00 6E . .v.i.a . .G.e.n [0390] 00 65 00 72 00 69 00 63 00 20 00 50 00 43 00 4C .e.r.i.c . .P.C.L [03A0] 00 20 00 36 00 2F 00 50 00 43 00 4C 00 20 00 58 . .6./.P .C.L. .X [03B0] 00 4C 00 20 00 50 00 72 00 69 00 6E 00 74 00 65 .L. .P.r .i.n.t.e [03C0] 00 72 00 00 00 07 00 00 00 00 00 00 00 07 00 00 .r...... ........ [03D0] 00 64 00 75 00 6D 00 6D 00 79 00 30 00 00 00 00 .d.u.m.m .y.0.... [03E0] 00 07 00 00 00 00 00 00 00 07 00 00 00 64 00 75 ........ .....d.u [03F0] 00 6D 00 6D 00 79 00 30 00 00 00 00 00 09 00 00 .m.m.y.0 ........ [0400] 00 50 00 02 00 00 00 00 00 00 00 00 00 .P...... ..... [2010/12/05 19:58:06.750410, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 41 [2010/12/05 19:58:06.750459, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x29 [2010/12/05 19:58:06.750494, 3] smbd/process.c:1485(process_smb) Transaction 7 of length 45 (0 toread) [2010/12/05 19:58:06.750528, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.750549, 5] lib/util.c:627(show_msg) size=41 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=8 smt_wct=3 smb_vwv[ 0]= 8053 (0x1F75) smb_vwv[ 1]=65535 (0xFFFF) smb_vwv[ 2]=65535 (0xFFFF) smb_bcc=0 [2010/12/05 19:58:06.750730, 3] smbd/process.c:1294(switch_message) switch message SMBclose (pid 12235) conn 0x7fc9821211f0 [2010/12/05 19:58:06.750944, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBclose.10.req len 45 [2010/12/05 19:58:06.751406, 4] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/12/05 19:58:06.751453, 3] smbd/reply.c:4653(reply_close) close fd=-1 fnum=8053 (numopen=1) [2010/12/05 19:58:06.751495, 6] smbd/close.c:501(set_close_write_time) close_write_time: Sun Feb 7 07:28:15 2106 [2010/12/05 19:58:06.752042, 10] rpc_server/srv_lsa_hnd.c:290(close_policy_by_pipe) close_policy_by_pipe: deleted handle list for pipe \srvsvc [2010/12/05 19:58:06.752102, 5] smbd/files.c:497(file_free) freed files structure 8053 (0 used) [2010/12/05 19:58:06.752138, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.752159, 5] lib/util.c:627(show_msg) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=8 smt_wct=0 smb_bcc=0 [2010/12/05 19:58:06.752977, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 35 [2010/12/05 19:58:06.753028, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x23 [2010/12/05 19:58:06.753064, 3] smbd/process.c:1485(process_smb) Transaction 8 of length 39 (0 toread) [2010/12/05 19:58:06.753097, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.753118, 5] lib/util.c:627(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=9 smt_wct=0 smb_bcc=0 [2010/12/05 19:58:06.753266, 3] smbd/process.c:1294(switch_message) switch message SMBtdis (pid 12235) conn 0x7fc9821211f0 [2010/12/05 19:58:06.753550, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBtdis.19.req len 39 [2010/12/05 19:58:06.753728, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.753769, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.753803, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.753875, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:06.753918, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.753953, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.753984, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.754070, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:06.754105, 3] smbd/service.c:1251(close_cnum) giles (::ffff:127.0.0.1) closed connection to service IPC$ [2010/12/05 19:58:06.754275, 3] smbd/connection.c:31(yield_connection) Yielding connection to IPC$ [2010/12/05 19:58:06.754449, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key CB2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:06.754521, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7fc98211b1a0 [2010/12/05 19:58:06.754577, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key CB2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:06.754783, 4] smbd/vfs.c:721(vfs_ChDir) vfs_ChDir to / [2010/12/05 19:58:06.754823, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.754856, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.754888, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.754941, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:06.755481, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.755515, 5] lib/util.c:627(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=9 smt_wct=0 smb_bcc=0 [2010/12/05 19:58:06.757300, 5] lib/util_sock.c:462(read_fd_with_timeout) read_fd_with_timeout: blocking read. EOF from client. [2010/12/05 19:58:06.757390, 10] smbd/process.c:286(receive_smb_raw_talloc) receive_smb_raw: NT_STATUS_END_OF_FILE [2010/12/05 19:58:06.757428, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.757463, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.757494, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.757556, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:06.757614, 3] smbd/connection.c:31(yield_connection) Yielding connection to [2010/12/05 19:58:06.757804, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key CB2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:06.757920, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7fc98214f4a0 [2010/12/05 19:58:06.757977, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key CB2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:06.758283, 3] smbd/server.c:902(exit_server_common) Server exit (failed to receive smb request) [2010/12/05 19:58:06.760162, 5] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 50844 SO_RCVBUF = 87712 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 [2010/12/05 19:58:06.776056, 5] lib/util_sock.c:304(print_socket_options) Socket options: SO_KEEPALIVE = 1 SO_REUSEADDR = 1 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 50844 SO_RCVBUF = 87712 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 [2010/12/05 19:58:06.776671, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Sun Dec 5 18:06:27 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sun Dec 5 19:34:56 2010 [2010/12/05 19:58:06.777075, 3] smbd/oplock.c:895(init_oplocks) init_oplocks: initializing messages. [2010/12/05 19:58:06.777802, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2010/12/05 19:58:06.777857, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2010/12/05 19:58:06.777923, 11] lib/events.c:313(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7fc982103e20 [2010/12/05 19:58:06.777961, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0x7fc982103e20 [2010/12/05 19:58:06.778007, 11] lib/events.c:313(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7fc982103ef0 [2010/12/05 19:58:06.778040, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0x7fc982103ef0 [2010/12/05 19:58:06.778079, 11] lib/events.c:313(s3_event_debug) s3_event: Added timed event "smbd_idle_event_handler": 0x7fc98210c7a0 [2010/12/05 19:58:06.778112, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0x7fc98210c7a0 [2010/12/05 19:58:06.778223, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 68 [2010/12/05 19:58:06.778275, 6] smbd/process.c:1482(process_smb) got message type 0x81 of len 0x44 [2010/12/05 19:58:06.778311, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 72 (0 toread) [2010/12/05 19:58:06.778366, 2] smbd/reply.c:554(reply_special) netbios connect: name1=LOCALHOST 0x20 name2=GILES 0x0 [2010/12/05 19:58:06.778453, 2] smbd/reply.c:565(reply_special) netbios connect: local=localhost remote=giles, name type = 0 [2010/12/05 19:58:06.778509, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Sun Dec 5 18:06:27 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sun Dec 5 19:34:56 2010 [2010/12/05 19:58:06.778639, 5] smbd/reply.c:606(reply_special) init msg_type=0x81 msg_flags=0x0 [2010/12/05 19:58:06.779102, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2010/12/05 19:58:06.779148, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2010/12/05 19:58:06.779183, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2010/12/05 19:58:06.779217, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.779238, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=12234 smb_uid=0 smb_mid=2 smt_wct=0 smb_bcc=155 [2010/12/05 19:58:06.779391, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2010/12/05 19:58:06.779800, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 12236) conn 0x0 [2010/12/05 19:58:06.780133, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBnegprot.20.req len 194 [2010/12/05 19:58:06.780261, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.780709, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.780751, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.780824, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:06.780961, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2010/12/05 19:58:06.781004, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2010/12/05 19:58:06.781038, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2010/12/05 19:58:06.781073, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2010/12/05 19:58:06.781107, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2010/12/05 19:58:06.781141, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2010/12/05 19:58:06.781175, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2010/12/05 19:58:06.781208, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2010/12/05 19:58:06.781243, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2010/12/05 19:58:06.781277, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2010/12/05 19:58:06.781323, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2010/12/05 19:58:06.781376, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Sun Dec 5 18:06:27 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sun Dec 5 19:34:56 2010 [2010/12/05 19:58:06.781499, 5] smbd/connection.c:142(claim_connection) claiming [] [2010/12/05 19:58:06.781700, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key CC2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:06.781813, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7fc98213d040 [2010/12/05 19:58:06.781904, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key CC2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:06.782147, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Sun Dec 5 18:06:27 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sun Dec 5 19:34:56 2010 [2010/12/05 19:58:06.782355, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2010/12/05 19:58:06.782390, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2010/12/05 19:58:06.782421, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2010/12/05 19:58:06.782452, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.782472, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=12234 smb_uid=0 smb_mid=2 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=52224 (0xCC00) smb_vwv[ 8]= 47 (0x2F) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]=44595 (0xAE33) smb_vwv[13]=44633 (0xAE59) smb_vwv[14]=52116 (0xCB94) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2010/12/05 19:58:06.782801, 10] ../lib/util/util.c:278(_dump_data) [0000] 67 69 6C 65 73 00 00 00 00 00 00 00 00 00 00 00 giles... ........ [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2010/12/05 19:58:06.783343, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 162 [2010/12/05 19:58:06.783388, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa2 [2010/12/05 19:58:06.783423, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 166 (0 toread) [2010/12/05 19:58:06.783456, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.783476, 5] lib/util.c:627(show_msg) size=162 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=12234 smb_uid=0 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 80 (0x50) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=103 [2010/12/05 19:58:06.783756, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 4E 06 06 2B 06 01 05 05 02 A0 44 30 42 A0 0E `N..+... ...D0B.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 30 0...+... ..7....0 [0020] 04 2E 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 ..NTLMSS P....... [0030] 08 60 09 00 09 00 20 00 00 00 05 00 05 00 29 00 .`.... . ......). [0040] 00 00 57 4F 52 4B 47 52 4F 55 50 47 49 4C 45 53 ..WORKGR OUPGILES [0050] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [0060] 00 62 00 61 00 00 00 .b.a... [2010/12/05 19:58:06.784079, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 12236) conn 0x0 [2010/12/05 19:58:06.784463, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBsesssetupX.39.req len 166 [2010/12/05 19:58:06.784905, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.784946, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.784980, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.785037, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:06.785077, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/12/05 19:58:06.785118, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/12/05 19:58:06.785159, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/12/05 19:58:06.785199, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2010/12/05 19:58:06.785243, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 80, pblob->length = 80 [2010/12/05 19:58:06.785320, 5] smbd/sesssetup.c:754(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2010/12/05 19:58:06.785354, 3] smbd/sesssetup.c:806(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 46 [2010/12/05 19:58:06.785412, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2010/12/05 19:58:06.785466, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2010/12/05 19:58:06.785501, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2010/12/05 19:58:06.785534, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2010/12/05 19:58:06.785567, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2010/12/05 19:58:06.785599, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2010/12/05 19:58:06.785632, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2010/12/05 19:58:06.785664, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2010/12/05 19:58:06.785696, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2010/12/05 19:58:06.785732, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2010/12/05 19:58:06.785765, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2010/12/05 19:58:06.785800, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2010/12/05 19:58:06.785834, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2010/12/05 19:58:06.785869, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2010/12/05 19:58:06.785903, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2010/12/05 19:58:06.785934, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2010/12/05 19:58:06.785967, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2010/12/05 19:58:06.785999, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2010/12/05 19:58:06.786032, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2010/12/05 19:58:06.786068, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2010/12/05 19:58:06.786105, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2010/12/05 19:58:06.786168, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2010/12/05 19:58:06.786208, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2010/12/05 19:58:06.786241, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2010/12/05 19:58:06.786276, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2010/12/05 19:58:06.786347, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2010/12/05 19:58:06.786528, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0009 (9) DomainNameMaxLen : 0x0009 (9) DomainName : * DomainName : 'WORKGROUP' WorkstationLen : 0x0005 (5) WorkstationMaxLen : 0x0005 (5) Workstation : * Workstation : 'GILES' [2010/12/05 19:58:06.787096, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2010/12/05 19:58:06.787134, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2010/12/05 19:58:06.787179, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2010/12/05 19:58:06.787212, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2010/12/05 19:58:06.787242, 5] ../lib/util/util.c:278(_dump_data) [0000] 18 5D 6D A3 38 4A AF 49 .]m.8J.I [2010/12/05 19:58:06.788093, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x000a (10) TargetNameMaxLen : 0x000a (10) TargetName : * TargetName : 'GILES' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : 185d6da3384aaf49 Reserved : 0000000000000000 TargetInfoLen : 0x0050 (80) TargetNameInfoMaxLen : 0x0050 (80) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'GILES' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'GILES' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x000e (14) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : 'suse.de' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x001a (26) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'giles.suse.de' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2010/12/05 19:58:06.789195, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.789219, 5] lib/util.c:627(show_msg) size=324 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=12234 smb_uid=100 smb_mid=3 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 169 (0xA9) smb_bcc=281 [2010/12/05 19:58:06.789416, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 A6 30 81 A3 A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 8D 04 81 8A 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 0A 00 0A 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 18 5D 6D A3 38 4A AF 49 00 ......`. ]m.8J.I. [0040] 00 00 00 00 00 00 00 50 00 50 00 3A 00 00 00 47 .......P .P.:...G [0050] 00 49 00 4C 00 45 00 53 00 02 00 0A 00 47 00 49 .I.L.E.S .....G.I [0060] 00 4C 00 45 00 53 00 01 00 0A 00 47 00 49 00 4C .L.E.S.. ...G.I.L [0070] 00 45 00 53 00 04 00 0E 00 73 00 75 00 73 00 65 .E.S.... .s.u.s.e [0080] 00 2E 00 64 00 65 00 03 00 1A 00 67 00 69 00 6C ...d.e.. ...g.i.l [0090] 00 65 00 73 00 2E 00 73 00 75 00 73 00 65 00 2E .e.s...s .u.s.e.. [00A0] 00 64 00 65 00 00 00 00 00 55 00 6E 00 69 00 78 .d.e.... .U.n.i.x [00B0] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [00C0] 00 2E 00 35 00 2E 00 36 00 2D 00 31 00 32 00 2E ...5...6 .-.1.2.. [00D0] 00 31 00 2D 00 32 00 34 00 37 00 30 00 2D 00 53 .1.-.2.4 .7.0.-.S [00E0] 00 55 00 53 00 45 00 2D 00 53 00 4C 00 31 00 31 .U.S.E.- .S.L.1.1 [00F0] 00 2E 00 33 00 2D 00 78 00 38 00 36 00 5F 00 36 ...3.-.x .8.6._.6 [0100] 00 34 00 00 00 57 00 4F 00 52 00 4B 00 47 00 52 .4...W.O .R.K.G.R [0110] 00 4F 00 55 00 50 00 00 00 .O.U.P.. . [2010/12/05 19:58:06.790562, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 258 [2010/12/05 19:58:06.790608, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x102 [2010/12/05 19:58:06.790642, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 262 (0 toread) [2010/12/05 19:58:06.790675, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.790695, 5] lib/util.c:627(show_msg) size=258 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=12234 smb_uid=100 smb_mid=4 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 176 (0xB0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=199 [2010/12/05 19:58:06.790971, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 AD 30 81 AA A2 81 A7 04 81 A4 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 12 00 12 00 70 00 00 00 ....X... ....p... [0030] 08 00 08 00 82 00 00 00 0A 00 0A 00 8A 00 00 00 ........ ........ [0040] 10 00 10 00 94 00 00 00 15 82 08 60 0C 67 4B 96 ........ ...`.gK. [0050] 6B 38 4F 9C 00 00 00 00 00 00 00 00 00 00 00 00 k8O..... ........ [0060] 00 00 00 00 69 C8 2B 92 FF 77 AC 33 7D BA 95 E5 ....i.+. .w.3}... [0070] A4 B4 89 17 87 64 04 01 A0 AD 73 5E 57 00 4F 00 .....d.. ..s^W.O. [0080] 52 00 4B 00 47 00 52 00 4F 00 55 00 50 00 72 00 R.K.G.R. O.U.P.r. [0090] 6F 00 6F 00 74 00 47 00 49 00 4C 00 45 00 53 00 o.o.t.G. I.L.E.S. [00A0] DF 91 C5 96 EB 0E 98 F2 71 86 AF A7 49 DC C3 5E ........ q...I..^ [00B0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00C0] 00 62 00 61 00 00 00 .b.a... [2010/12/05 19:58:06.791460, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 12236) conn 0x0 [2010/12/05 19:58:06.791846, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBsesssetupX.40.req len 262 [2010/12/05 19:58:06.792286, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.792326, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.792357, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.792415, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:06.792451, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2010/12/05 19:58:06.792483, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2010/12/05 19:58:06.792518, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2010/12/05 19:58:06.792555, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 176, pblob->length = 176 [2010/12/05 19:58:06.792638, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 0c674b966b384f9c00000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 69c82b92ff77ac337dba95e5a4b4891787640401a0ad735e DomainNameLen : 0x0012 (18) DomainNameMaxLen : 0x0012 (18) DomainName : * DomainName : 'WORKGROUP' UserNameLen : 0x0008 (8) UserNameMaxLen : 0x0008 (8) UserName : * UserName : 'root' WorkstationLen : 0x000a (10) WorkstationMaxLen : 0x000a (10) Workstation : * Workstation : 'GILES' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2010/12/05 19:58:06.793162, 10] ../lib/util/util.c:278(_dump_data) [0000] DF 91 C5 96 EB 0E 98 F2 71 86 AF A7 49 DC C3 5E ........ q...I..^ NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2010/12/05 19:58:06.793586, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[root] domain=[WORKGROUP] workstation=[GILES] len1=24 len2=24 [2010/12/05 19:58:06.793628, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2010/12/05 19:58:06.793660, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2010/12/05 19:58:06.793690, 5] ../lib/util/util.c:278(_dump_data) [0000] 05 96 4D 99 2B A9 D2 33 ..M.+..3 [2010/12/05 19:58:06.793767, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Sun Dec 5 18:06:27 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sun Dec 5 19:34:56 2010 [2010/12/05 19:58:06.793898, 5] auth/auth_util.c:211(make_user_info_map) Mapping user [WORKGROUP]\[root] from workstation [GILES] [2010/12/05 19:58:06.793968, 5] auth/auth_util.c:232(make_user_info_map) Mapped domain from [WORKGROUP] to [GILES] for user [root] from workstation [GILES] [2010/12/05 19:58:06.794004, 5] auth/auth_util.c:122(make_user_info) attempting to make a user_info for root (root) [2010/12/05 19:58:06.794037, 5] auth/auth_util.c:132(make_user_info) making strings for root's user_info struct [2010/12/05 19:58:06.794070, 5] auth/auth_util.c:164(make_user_info) making blobs for root's user_info struct [2010/12/05 19:58:06.794102, 10] auth/auth_util.c:182(make_user_info) made an encrypted user_info for root (root) [2010/12/05 19:58:06.794136, 3] auth/auth.c:216(check_ntlm_password) check_ntlm_password: Checking password for unmapped user [WORKGROUP]\[root]@[GILES] with the new password interface [2010/12/05 19:58:06.794172, 3] auth/auth.c:219(check_ntlm_password) check_ntlm_password: mapped user is: [GILES]\[root]@[GILES] [2010/12/05 19:58:06.794204, 10] auth/auth.c:228(check_ntlm_password) check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2) [2010/12/05 19:58:06.794237, 10] auth/auth.c:230(check_ntlm_password) challenge is: [2010/12/05 19:58:06.794267, 5] ../lib/util/util.c:278(_dump_data) [0000] 05 96 4D 99 2B A9 D2 33 ..M.+..3 [2010/12/05 19:58:06.794324, 10] auth/auth.c:256(check_ntlm_password) check_ntlm_password: guest had nothing to say [2010/12/05 19:58:06.794362, 8] lib/util.c:1869(is_myname) is_myname("GILES") returns 1 [2010/12/05 19:58:06.794401, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.794440, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.794473, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.794506, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.794536, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.794627, 5] passdb/pdb_tdb.c:557(tdbsam_getsampwnam) pdb_getsampwnam (TDB): error fetching database. Key: USER_root [2010/12/05 19:58:06.794691, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.794725, 3] auth/auth_sam.c:399(check_sam_security) check_sam_security: Couldn't find user 'root' in passdb. [2010/12/05 19:58:06.794758, 5] auth/auth.c:268(check_ntlm_password) check_ntlm_password: sam authentication for user [root] FAILED with error NT_STATUS_NO_SUCH_USER [2010/12/05 19:58:06.794795, 2] auth/auth.c:314(check_ntlm_password) check_ntlm_password: Authentication for user [root] -> [root] FAILED with error NT_STATUS_NO_SUCH_USER [2010/12/05 19:58:06.794830, 5] auth/auth_util.c:2119(free_user_info) attempting to free (and zero) a user_info structure [2010/12/05 19:58:06.794862, 10] auth/auth_util.c:2123(free_user_info) structure was created for root [2010/12/05 19:58:06.794896, 3] smbd/sesssetup.c:50(do_map_to_guest) No such user root [WORKGROUP] - using guest account [2010/12/05 19:58:06.795108, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 3: DEFAULT [2010/12/05 19:58:06.795151, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 1: DEFAULT [2010/12/05 19:58:06.795182, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 4: DEFAULT [2010/12/05 19:58:06.795212, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 2: DEFAULT [2010/12/05 19:58:06.795244, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.795276, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.795308, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.795340, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.795371, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.795480, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:06.795524, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.795568, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175 [2010/12/05 19:58:06.795605, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:06.795650, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:06.795688, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 5 -> now SET [2010/12/05 19:58:06.795719, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 6 -> now SET [2010/12/05 19:58:06.795749, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 7 -> now SET [2010/12/05 19:58:06.795779, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 8 -> now SET [2010/12/05 19:58:06.795809, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 9 -> now SET [2010/12/05 19:58:06.795839, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 10 -> now SET [2010/12/05 19:58:06.795871, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 21 -> now SET [2010/12/05 19:58:06.795904, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/05 19:58:06.795937, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 12 -> now SET [2010/12/05 19:58:06.795968, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain GILES, was [2010/12/05 19:58:06.796036, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 14 -> now SET [2010/12/05 19:58:06.796068, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/05 19:58:06.796101, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 15 -> now SET [2010/12/05 19:58:06.796132, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/05 19:58:06.796164, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 13 -> now SET [2010/12/05 19:58:06.796209, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\localhost\nobody\.9xprofile, was [2010/12/05 19:58:06.796244, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/05 19:58:06.796276, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/05 19:58:06.796309, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/05 19:58:06.796342, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/05 19:58:06.796375, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/05 19:58:06.796410, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\localhost\profiles\.msprofile, was [2010/12/05 19:58:06.796444, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/05 19:58:06.796475, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 22 -> now SET [2010/12/05 19:58:06.796510, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 24 -> now SET [2010/12/05 19:58:06.796542, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/05 19:58:06.796574, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 23 -> now SET [2010/12/05 19:58:06.796606, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 25 -> now SET [2010/12/05 19:58:06.796637, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.796669, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.796701, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.796762, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.796794, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.796854, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:06.796896, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.796932, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 33 -> now SET [2010/12/05 19:58:06.796966, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501 [2010/12/05 19:58:06.797009, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 18 -> now SET [2010/12/05 19:58:06.797040, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501 [2010/12/05 19:58:06.797093, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 16 -> now SET [2010/12/05 19:58:06.797125, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 28 -> now SET [2010/12/05 19:58:06.797156, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 29 -> now SET [2010/12/05 19:58:06.797187, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 30 -> now SET [2010/12/05 19:58:06.797217, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 20 -> now SET [2010/12/05 19:58:06.797248, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 17 -> now SET [2010/12/05 19:58:06.797278, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 26 -> now SET [2010/12/05 19:58:06.951320, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec 5 19:58:10 2010 [2010/12/05 19:58:06.951404, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.951440, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.951472, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.951505, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.951535, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.951592, 5] passdb/pdb_interface.c:1473(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 513. [2010/12/05 19:58:06.951636, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/12/05 19:58:06.951670, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/12/05 19:58:06.951703, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/12/05 19:58:06.951736, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.951767, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.951833, 5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. [2010/12/05 19:58:06.951961, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.963057, 5] passdb/pdb_interface.c:1536(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2010/12/05 19:58:06.963103, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.963136, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:06.963175, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:06.963261, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 19 -> now SET [2010/12/05 19:58:06.963301, 10] smbd/password.c:278(register_existing_vuid) register_existing_vuid: (65534,65533) nobody root GILES guest=1 [2010/12/05 19:58:06.963336, 3] smbd/password.c:282(register_existing_vuid) register_existing_vuid: User name: nobody Real name: nobody [2010/12/05 19:58:06.963368, 3] smbd/password.c:292(register_existing_vuid) register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 100 [2010/12/05 19:58:06.963430, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf last mod_time: Sun Dec 5 18:06:27 2010 file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Sun Dec 5 19:34:56 2010 [2010/12/05 19:58:06.963574, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.963596, 5] lib/util.c:627(show_msg) size=164 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=12234 smb_uid=100 smb_mid=4 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 1 (0x1) smb_vwv[ 3]= 9 (0x9) smb_bcc=121 [2010/12/05 19:58:06.963783, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x [0010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3 [0020] 00 2E 00 35 00 2E 00 36 00 2D 00 31 00 32 00 2E ...5...6 .-.1.2.. [0030] 00 31 00 2D 00 32 00 34 00 37 00 30 00 2D 00 53 .1.-.2.4 .7.0.-.S [0040] 00 55 00 53 00 45 00 2D 00 53 00 4C 00 31 00 31 .U.S.E.- .S.L.1.1 [0050] 00 2E 00 33 00 2D 00 78 00 38 00 36 00 5F 00 36 ...3.-.x .8.6._.6 [0060] 00 34 00 00 00 57 00 4F 00 52 00 4B 00 47 00 52 .4...W.O .R.K.G.R [0070] 00 4F 00 55 00 50 00 00 00 .O.U.P.. . [2010/12/05 19:58:06.964601, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 84 [2010/12/05 19:58:06.964649, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x54 [2010/12/05 19:58:06.964684, 3] smbd/process.c:1485(process_smb) Transaction 3 of length 88 (0 toread) [2010/12/05 19:58:06.964717, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:06.964737, 5] lib/util.c:627(show_msg) size=84 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=65535 smb_pid=12234 smb_uid=100 smb_mid=5 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]= 1 (0x1) smb_bcc=41 [2010/12/05 19:58:06.964930, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 5C 00 4C 00 4F 00 43 00 41 00 4C 00 48 .\.\.L.O .C.A.L.H [0010] 00 4F 00 53 00 54 00 5C 00 49 00 50 00 43 00 24 .O.S.T.\ .I.P.C.$ [0020] 00 00 00 3F 3F 3F 3F 3F 00 ...????? . [2010/12/05 19:58:06.965058, 3] smbd/process.c:1294(switch_message) switch message SMBtconX (pid 12236) conn 0x0 [2010/12/05 19:58:06.965339, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBtconX.20.req len 88 [2010/12/05 19:58:06.965435, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.965834, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.965870, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.965925, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:06.965974, 4] smbd/reply.c:786(reply_tcon_and_X) Client requested device type [?????] for share [IPC$] [2010/12/05 19:58:06.966049, 5] smbd/service.c:1227(make_connection) making a connection to 'normal' service ipc$ [2010/12/05 19:58:06.966115, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 3: DEFAULT [2010/12/05 19:58:06.966149, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 1: DEFAULT [2010/12/05 19:58:06.966212, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 4: DEFAULT [2010/12/05 19:58:06.966243, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 2: DEFAULT [2010/12/05 19:58:06.966276, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.966309, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.966342, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.966374, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.966405, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.966474, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:06.966518, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.966557, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175 [2010/12/05 19:58:06.966592, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:06.966630, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:06.966666, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 5 -> now SET [2010/12/05 19:58:06.966697, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 6 -> now SET [2010/12/05 19:58:06.966728, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 7 -> now SET [2010/12/05 19:58:06.966758, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 8 -> now SET [2010/12/05 19:58:06.966788, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 9 -> now SET [2010/12/05 19:58:06.966819, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 10 -> now SET [2010/12/05 19:58:06.966849, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 21 -> now SET [2010/12/05 19:58:06.966880, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/05 19:58:06.966912, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 12 -> now SET [2010/12/05 19:58:06.966942, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain GILES, was [2010/12/05 19:58:06.966973, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 14 -> now SET [2010/12/05 19:58:06.967004, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/05 19:58:06.967035, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 15 -> now SET [2010/12/05 19:58:06.967065, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/05 19:58:06.967096, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 13 -> now SET [2010/12/05 19:58:06.967137, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\localhost\nobody\.9xprofile, was [2010/12/05 19:58:06.967171, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/05 19:58:06.967202, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/05 19:58:06.967233, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/05 19:58:06.967265, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/05 19:58:06.967297, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/05 19:58:06.967331, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\localhost\profiles\.msprofile, was [2010/12/05 19:58:06.967364, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/05 19:58:06.967395, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 22 -> now SET [2010/12/05 19:58:06.967454, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 24 -> now SET [2010/12/05 19:58:06.967485, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/05 19:58:06.967516, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 23 -> now SET [2010/12/05 19:58:06.967547, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 25 -> now SET [2010/12/05 19:58:06.967578, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.967611, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:06.967643, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:06.967675, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:06.967705, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:06.967767, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:06.967808, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:06.967843, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 33 -> now SET [2010/12/05 19:58:06.967875, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501 [2010/12/05 19:58:06.967912, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 18 -> now SET [2010/12/05 19:58:06.967943, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501 [2010/12/05 19:58:06.968018, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 16 -> now SET [2010/12/05 19:58:06.968051, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 28 -> now SET [2010/12/05 19:58:06.968082, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 29 -> now SET [2010/12/05 19:58:06.968113, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 30 -> now SET [2010/12/05 19:58:06.968144, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 20 -> now SET [2010/12/05 19:58:06.968174, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 17 -> now SET [2010/12/05 19:58:06.968207, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 26 -> now SET [2010/12/05 19:58:07.121722, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec 5 19:58:10 2010 [2010/12/05 19:58:07.121886, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:07.121926, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:07.121959, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:07.121992, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:07.122024, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:07.122090, 5] passdb/pdb_interface.c:1473(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 513. [2010/12/05 19:58:07.122130, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/12/05 19:58:07.122163, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/12/05 19:58:07.122194, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/12/05 19:58:07.122226, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:07.122256, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:07.122380, 5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. [2010/12/05 19:58:07.122531, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:07.122568, 5] passdb/pdb_interface.c:1536(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2010/12/05 19:58:07.122607, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:07.122640, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:07.122679, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:07.122718, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 19 -> now SET [2010/12/05 19:58:07.122764, 5] lib/username.c:133(Get_Pwnam_alloc) Finding user nobody [2010/12/05 19:58:07.122797, 5] lib/username.c:77(Get_Pwnam_internals) Trying _Get_Pwnam(), username as lowercase is nobody [2010/12/05 19:58:07.122832, 5] lib/username.c:110(Get_Pwnam_internals) Get_Pwnam_internals did find user [nobody]! [2010/12/05 19:58:07.122902, 10] smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /var/tmp [2010/12/05 19:58:07.122939, 3] smbd/service.c:807(make_connection_snum) Connect path is '/var/tmp' for service [IPC$] [2010/12/05 19:58:07.123002, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2010/12/05 19:58:07.123053, 3] smbd/vfs.c:97(vfs_init_default) Initialising default vfs hooks [2010/12/05 19:58:07.123094, 10] smbd/vfs.c:48(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ [2010/12/05 19:58:07.123129, 5] smbd/vfs.c:87(smb_register_vfs) Successfully added vfs backend '/[Default VFS]/' [2010/12/05 19:58:07.123164, 10] smbd/vfs.c:48(vfs_find_backend_entry) vfs_find_backend_entry called for posixacl [2010/12/05 19:58:07.123196, 5] smbd/vfs.c:87(smb_register_vfs) Successfully added vfs backend 'posixacl' [2010/12/05 19:58:07.123227, 3] smbd/vfs.c:122(vfs_init_custom) Initialising custom vfs hooks from [/[Default VFS]/] [2010/12/05 19:58:07.123261, 10] smbd/vfs.c:48(vfs_find_backend_entry) vfs_find_backend_entry called for /[Default VFS]/ Successfully loaded vfs module [/[Default VFS]/] with the new modules system [2010/12/05 19:58:07.123310, 5] smbd/connection.c:142(claim_connection) claiming [IPC$] [2010/12/05 19:58:07.123498, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key CC2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:07.123558, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7fc98212a3b0 [2010/12/05 19:58:07.123615, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key CC2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:07.123913, 10] smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /var/tmp [2010/12/05 19:58:07.124031, 10] smbd/share_access.c:238(user_ok_token) user_ok_token: share IPC$ is ok for unix user nobody [2010/12/05 19:58:07.124071, 10] smbd/share_access.c:283(is_share_read_only_for_token) is_share_read_only_for_user: share IPC$ is read-only for unix user nobody [2010/12/05 19:58:07.124118, 10] lib/util_seaccess.c:58(se_map_generic) se_map_generic(): mapped mask 0x10000000 to 0x001f01ff [2010/12/05 19:58:07.124168, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 3: DEFAULT [2010/12/05 19:58:07.124200, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 1: DEFAULT [2010/12/05 19:58:07.124231, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 4: DEFAULT [2010/12/05 19:58:07.124262, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags) element 2: DEFAULT [2010/12/05 19:58:07.124294, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:07.124326, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:07.124357, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:07.124389, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:07.124422, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:07.124486, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:07.124528, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:07.124566, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175 [2010/12/05 19:58:07.124602, 18] lib/util_tdb.c:204(tdb_pack_va) tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:07.124640, 18] lib/util_tdb.c:358(tdb_unpack) tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175 [2010/12/05 19:58:07.124676, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 5 -> now SET [2010/12/05 19:58:07.124708, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 6 -> now SET [2010/12/05 19:58:07.124738, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 7 -> now SET [2010/12/05 19:58:07.124769, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 8 -> now SET [2010/12/05 19:58:07.124800, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 9 -> now SET [2010/12/05 19:58:07.124830, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 10 -> now SET [2010/12/05 19:58:07.124861, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 21 -> now SET [2010/12/05 19:58:07.124891, 10] passdb/pdb_get_set.c:608(pdb_set_username) pdb_set_username: setting username nobody, was [2010/12/05 19:58:07.124923, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 12 -> now SET [2010/12/05 19:58:07.124954, 10] passdb/pdb_get_set.c:631(pdb_set_domain) pdb_set_domain: setting domain GILES, was [2010/12/05 19:58:07.124986, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 14 -> now SET [2010/12/05 19:58:07.125017, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username) pdb_set_nt_username: setting nt username , was [2010/12/05 19:58:07.125048, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 15 -> now SET [2010/12/05 19:58:07.125079, 10] passdb/pdb_get_set.c:677(pdb_set_fullname) pdb_set_full_name: setting full name nobody, was [2010/12/05 19:58:07.125111, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 13 -> now SET [2010/12/05 19:58:07.125158, 10] passdb/pdb_get_set.c:770(pdb_set_homedir) pdb_set_homedir: setting home dir \\localhost\nobody\.9xprofile, was [2010/12/05 19:58:07.125193, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 1 -> now DEFAULT [2010/12/05 19:58:07.125225, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive) pdb_set_dir_drive: setting dir drive P:, was NULL [2010/12/05 19:58:07.125258, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 3 -> now DEFAULT [2010/12/05 19:58:07.125321, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script) pdb_set_logon_script: setting logon script , was [2010/12/05 19:58:07.125354, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 4 -> now DEFAULT [2010/12/05 19:58:07.125390, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path) pdb_set_profile_path: setting profile path \\localhost\profiles\.msprofile, was [2010/12/05 19:58:07.125423, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags) element 2 -> now DEFAULT [2010/12/05 19:58:07.125455, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 22 -> now SET [2010/12/05 19:58:07.125486, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 24 -> now SET [2010/12/05 19:58:07.125517, 10] passdb/pdb_get_set.c:813(pdb_set_workstations) pdb_set_workstations: setting workstations , was [2010/12/05 19:58:07.125549, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 23 -> now SET [2010/12/05 19:58:07.125581, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 25 -> now SET [2010/12/05 19:58:07.125612, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:07.125645, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:07.125677, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:07.125710, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:07.125740, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:07.125800, 10] lib/account_pol.c:333(account_policy_get) account_policy_get: name: password history, val: 0 [2010/12/05 19:58:07.125840, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:07.125875, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 33 -> now SET [2010/12/05 19:58:07.125907, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid) pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501 [2010/12/05 19:58:07.125944, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 18 -> now SET [2010/12/05 19:58:07.125975, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid) pdb_set_user_sid_from_rid: setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501 [2010/12/05 19:58:07.126022, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 16 -> now SET [2010/12/05 19:58:07.126053, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 28 -> now SET [2010/12/05 19:58:07.126083, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 29 -> now SET [2010/12/05 19:58:07.126114, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 30 -> now SET [2010/12/05 19:58:07.126145, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 20 -> now SET [2010/12/05 19:58:07.126174, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 17 -> now SET [2010/12/05 19:58:07.126204, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 26 -> now SET [2010/12/05 19:58:07.126265, 10] lib/gencache.c:345(gencache_get_data_blob) Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec 5 19:58:10 2010 [2010/12/05 19:58:07.126322, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2010/12/05 19:58:07.126356, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2010/12/05 19:58:07.126388, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:07.126421, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:07.126450, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:07.126500, 5] passdb/pdb_interface.c:1473(lookup_global_sam_rid) lookup_global_sam_rid: looking up RID 513. [2010/12/05 19:58:07.126563, 3] smbd/sec_ctx.c:210(push_sec_ctx) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2 [2010/12/05 19:58:07.126597, 3] smbd/uid.c:429(push_conn_ctx) push_conn_ctx(0) : conn_ctx_stack_ndx = 1 [2010/12/05 19:58:07.126628, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2010/12/05 19:58:07.126661, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:07.126690, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:07.126750, 5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid) pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201. [2010/12/05 19:58:07.126862, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2010/12/05 19:58:07.126898, 5] passdb/pdb_interface.c:1536(lookup_global_sam_rid) Can't find a unix id for an unmapped group [2010/12/05 19:58:07.126936, 3] smbd/sec_ctx.c:418(pop_sec_ctx) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:07.126969, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid) LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:07.127007, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid) pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513 [2010/12/05 19:58:07.127044, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags) element 19 -> now SET [2010/12/05 19:58:07.127086, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:07.127119, 5] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-779886165-838294741-719422925-501 contains 7 SIDs SID[ 0]: S-1-5-21-779886165-838294741-719422925-501 SID[ 1]: S-1-22-2-65533 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-22-2-65534 SID[ 6]: S-1-22-1-65534 SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/05 19:58:07.127276, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 65534 Primary group is 65533 and contains 2 supplementary groups Group[ 0]: 65533 Group[ 1]: 65534 [2010/12/05 19:58:07.127350, 5] smbd/uid.c:354(change_to_user) change_to_user uid=(0,65534) gid=(0,65533) [2010/12/05 19:58:07.127411, 10] smbd/service.c:163(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /var/tmp [2010/12/05 19:58:07.127461, 3] smbd/service.c:1070(make_connection_snum) giles (::ffff:127.0.0.1) connect to service IPC$ initially as user nobody (uid=65534, gid=65533) (pid 12236) [2010/12/05 19:58:07.127504, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:07.127537, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:07.127567, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:07.127622, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:07.127666, 3] smbd/reply.c:865(reply_tcon_and_X) tconX service=IPC$ [2010/12/05 19:58:07.128004, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 126 [2010/12/05 19:58:07.128053, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7e [2010/12/05 19:58:07.128088, 3] smbd/process.c:1485(process_smb) Transaction 4 of length 130 (0 toread) [2010/12/05 19:58:07.128121, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:07.128141, 5] lib/util.c:627(show_msg) size=126 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=6 smt_wct=14 smb_vwv[ 0]= 36 (0x24) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]=65535 (0xFFFF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 36 (0x24) smb_vwv[10]= 90 (0x5A) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 126 (0x7E) smb_vwv[13]= 0 (0x0) smb_bcc=63 [2010/12/05 19:58:07.128470, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 4C 00 41 .\.P.I.P .E.\.L.A [0010] 00 4E 00 4D 00 41 00 4E 00 00 00 68 00 57 72 4C .N.M.A.N ...h.WrL [0020] 65 68 44 7A 00 42 31 36 42 42 44 7A 00 01 00 FF ehDz.B16 BBDz.... [0030] FF FF FF FF FF 57 4F 52 4B 47 52 4F 55 50 00 .....WOR KGROUP. [2010/12/05 19:58:07.128645, 3] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 12236) conn 0x7fc9821211f0 [2010/12/05 19:58:07.129061, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBtrans.39.req len 130 [2010/12/05 19:58:07.129166, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:07.129659, 5] auth/token_util.c:531(debug_nt_user_token) NT user token of user S-1-5-21-779886165-838294741-719422925-501 contains 7 SIDs SID[ 0]: S-1-5-21-779886165-838294741-719422925-501 SID[ 1]: S-1-22-2-65533 SID[ 2]: S-1-1-0 SID[ 3]: S-1-5-2 SID[ 4]: S-1-5-32-546 SID[ 5]: S-1-22-2-65534 SID[ 6]: S-1-22-1-65534 SE_PRIV 0x0 0x0 0x0 0x0 [2010/12/05 19:58:07.129820, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 65534 Primary group is 65533 and contains 2 supplementary groups Group[ 0]: 65533 Group[ 1]: 65534 [2010/12/05 19:58:07.129899, 5] smbd/uid.c:354(change_to_user) change_to_user uid=(0,65534) gid=(0,65533) [2010/12/05 19:58:07.129943, 4] smbd/vfs.c:721(vfs_ChDir) vfs_ChDir to /var/tmp [2010/12/05 19:58:07.130017, 3] smbd/ipc.c:545(handle_trans) trans <\PIPE\LANMAN> data=0 params=36 setup=0 [2010/12/05 19:58:07.130060, 5] smbd/ipc.c:578(handle_trans) calling named_pipe [2010/12/05 19:58:07.130092, 3] smbd/ipc.c:496(named_pipe) named pipe command on name [2010/12/05 19:58:07.130130, 3] smbd/lanman.c:4910(api_reply) Got API command 104 of form (tdscnt=0,tpscnt=36,mdrcnt=65535,mprcnt=8) [2010/12/05 19:58:07.130168, 3] smbd/lanman.c:4914(api_reply) Doing NetServerEnum2 [2010/12/05 19:58:07.130217, 4] smbd/lanman.c:1420(api_RNetServerEnum2) server request level: B16BBDz 3fffffff domains_req:No local_only:No [2010/12/05 19:58:07.130256, 4] smbd/lanman.c:1433(api_RNetServerEnum2) domain [WORKGROUP] [2010/12/05 19:58:07.130331, 4] smbd/lanman.c:1169(get_server_info) Servertype search: 3fffffff [2010/12/05 19:58:07.130422, 4] smbd/lanman.c:1248(get_server_info) s: dom mismatch WORKGROUP 80001000 GILES WORKGROUP [2010/12/05 19:58:07.130471, 4] smbd/lanman.c:1261(get_server_info) **SV** GILES 849a03 Samba 3.5.6-12.1-2470-SUSE-SL11.3-x86_64 WORKGROUP [2010/12/05 19:58:07.130510, 4] smbd/lanman.c:1458(api_RNetServerEnum2) fill_srv_info[0] GILES 849a03 Samba 3.5.6-12.1-2470-SUSE-SL11.3-x86_64 WORKGROUP [2010/12/05 19:58:07.130560, 4] smbd/lanman.c:1494(api_RNetServerEnum2) fill_srv_info[0] GILES 849a03 Samba 3.5.6-12.1-2470-SUSE-SL11.3-x86_64 WORKGROUP [2010/12/05 19:58:07.130602, 3] smbd/lanman.c:1512(api_RNetServerEnum2) NetServerEnum2 domain = WORKGROUP uLevel=1 counted=1 total=1 [2010/12/05 19:58:07.130642, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..8] data[0..67] (align 0) [2010/12/05 19:58:07.130678, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:07.130699, 5] lib/util.c:627(show_msg) size=131 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=6 smt_wct=10 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 67 (0x43) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 67 (0x43) smb_vwv[ 7]= 64 (0x40) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=76 [2010/12/05 19:58:07.130952, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 00 00 00 00 01 00 01 00 47 49 4C 45 53 00 00 ........ .GILES.. [0010] 00 00 00 00 00 00 00 00 00 00 00 03 9A 84 00 1A ........ ........ [0020] 00 00 00 53 61 6D 62 61 20 33 2E 35 2E 36 2D 31 ...Samba 3.5.6-1 [0030] 32 2E 31 2D 32 34 37 30 2D 53 55 53 45 2D 53 4C 2.1-2470 -SUSE-SL [0040] 31 31 2E 33 2D 78 38 36 5F 36 34 00 11.3-x86 _64. [2010/12/05 19:58:07.131390, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 126 [2010/12/05 19:58:07.131434, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x7e [2010/12/05 19:58:07.131469, 3] smbd/process.c:1485(process_smb) Transaction 5 of length 130 (0 toread) [2010/12/05 19:58:07.131502, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:07.131523, 5] lib/util.c:627(show_msg) size=126 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=7 smt_wct=14 smb_vwv[ 0]= 36 (0x24) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 8 (0x8) smb_vwv[ 3]=65535 (0xFFFF) smb_vwv[ 4]= 0 (0x0) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 0 (0x0) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 36 (0x24) smb_vwv[10]= 90 (0x5A) smb_vwv[11]= 0 (0x0) smb_vwv[12]= 126 (0x7E) smb_vwv[13]= 0 (0x0) smb_bcc=63 [2010/12/05 19:58:07.131819, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 5C 00 50 00 49 00 50 00 45 00 5C 00 4C 00 41 .\.P.I.P .E.\.L.A [0010] 00 4E 00 4D 00 41 00 4E 00 00 00 68 00 57 72 4C .N.M.A.N ...h.WrL [0020] 65 68 44 7A 00 42 31 36 42 42 44 7A 00 01 00 FF ehDz.B16 BBDz.... [0030] FF 00 00 00 80 57 4F 52 4B 47 52 4F 55 50 00 .....WOR KGROUP. [2010/12/05 19:58:07.132003, 3] smbd/process.c:1294(switch_message) switch message SMBtrans (pid 12236) conn 0x7fc9821211f0 [2010/12/05 19:58:07.132409, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBtrans.40.req len 130 [2010/12/05 19:58:07.132801, 4] smbd/uid.c:257(change_to_user) change_to_user: Skipping user change - already user [2010/12/05 19:58:07.132848, 3] smbd/ipc.c:545(handle_trans) trans <\PIPE\LANMAN> data=0 params=36 setup=0 [2010/12/05 19:58:07.132885, 5] smbd/ipc.c:578(handle_trans) calling named_pipe [2010/12/05 19:58:07.132917, 3] smbd/ipc.c:496(named_pipe) named pipe command on name [2010/12/05 19:58:07.132995, 3] smbd/lanman.c:4910(api_reply) Got API command 104 of form (tdscnt=0,tpscnt=36,mdrcnt=65535,mprcnt=8) [2010/12/05 19:58:07.133031, 3] smbd/lanman.c:4914(api_reply) Doing NetServerEnum2 [2010/12/05 19:58:07.133068, 4] smbd/lanman.c:1420(api_RNetServerEnum2) server request level: B16BBDz 80000000 domains_req:Yes local_only:No [2010/12/05 19:58:07.133105, 4] smbd/lanman.c:1433(api_RNetServerEnum2) domain [WORKGROUP] [2010/12/05 19:58:07.133167, 4] smbd/lanman.c:1169(get_server_info) Servertype search: 80000000 [2010/12/05 19:58:07.133218, 4] smbd/lanman.c:1261(get_server_info) **SV** WORKGROUP 80001000 GILES WORKGROUP [2010/12/05 19:58:07.133262, 4] smbd/lanman.c:1242(get_server_info) r:serv type s: dom mismatch GILES 849a03 Samba 3.5.6-12.1-2470-SUSE-SL11.3-x86_64 WORKGROUP [2010/12/05 19:58:07.133303, 4] smbd/lanman.c:1458(api_RNetServerEnum2) fill_srv_info[0] WORKGROUP 80001000 GILES WORKGROUP [2010/12/05 19:58:07.133344, 4] smbd/lanman.c:1494(api_RNetServerEnum2) fill_srv_info[0] WORKGROUP 80001000 GILES WORKGROUP [2010/12/05 19:58:07.133382, 3] smbd/lanman.c:1512(api_RNetServerEnum2) NetServerEnum2 domain = WORKGROUP uLevel=1 counted=1 total=1 [2010/12/05 19:58:07.133417, 5] smbd/ipc.c:59(copy_trans_params_and_data) copy_trans_params_and_data: params[0..8] data[0..32] (align 0) [2010/12/05 19:58:07.133451, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:07.133472, 5] lib/util.c:627(show_msg) size=96 smb_com=0x25 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=7 smt_wct=10 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]= 32 (0x20) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 8 (0x8) smb_vwv[ 4]= 56 (0x38) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 32 (0x20) smb_vwv[ 7]= 64 (0x40) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_bcc=41 [2010/12/05 19:58:07.133763, 10] ../lib/util/util.c:278(_dump_data) [0000] 00 00 00 00 00 01 00 01 00 57 4F 52 4B 47 52 4F ........ .WORKGRO [0010] 55 50 00 00 00 00 00 00 00 00 00 00 10 00 80 1A UP...... ........ [0020] 00 00 00 47 49 4C 45 53 00 ...GILES . [2010/12/05 19:58:07.134018, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 35 [2010/12/05 19:58:07.134060, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x23 [2010/12/05 19:58:07.134095, 3] smbd/process.c:1485(process_smb) Transaction 6 of length 39 (0 toread) [2010/12/05 19:58:07.134128, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:07.134149, 5] lib/util.c:627(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=8 smt_wct=0 smb_bcc=0 [2010/12/05 19:58:07.134294, 3] smbd/process.c:1294(switch_message) switch message SMBtdis (pid 12236) conn 0x7fc9821211f0 [2010/12/05 19:58:07.134559, 0] smbd/process.c:1243(smb_dump) created /tmp/SMBtdis.20.req len 39 [2010/12/05 19:58:07.134935, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:07.134978, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:07.135010, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:07.135074, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:07.135119, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:07.135152, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:07.135182, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:07.135232, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:07.135266, 3] smbd/service.c:1251(close_cnum) giles (::ffff:127.0.0.1) closed connection to service IPC$ [2010/12/05 19:58:07.135308, 3] smbd/connection.c:31(yield_connection) Yielding connection to IPC$ [2010/12/05 19:58:07.135495, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key CC2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:07.135561, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7fc98211b1a0 [2010/12/05 19:58:07.135616, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key CC2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:07.135851, 4] smbd/vfs.c:721(vfs_ChDir) vfs_ChDir to / [2010/12/05 19:58:07.135890, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:07.135923, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:07.135954, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:07.136054, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:07.136102, 5] lib/util.c:617(show_msg) [2010/12/05 19:58:07.136124, 5] lib/util.c:627(show_msg) size=35 smb_com=0x71 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51203 smb_tid=1 smb_pid=12234 smb_uid=100 smb_mid=8 smt_wct=0 smb_bcc=0 [2010/12/05 19:58:07.136362, 5] lib/util_sock.c:462(read_fd_with_timeout) read_fd_with_timeout: blocking read. EOF from client. [2010/12/05 19:58:07.136401, 10] smbd/process.c:286(receive_smb_raw_talloc) receive_smb_raw: NT_STATUS_END_OF_FILE [2010/12/05 19:58:07.136433, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2010/12/05 19:58:07.136465, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2010/12/05 19:58:07.136495, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2010/12/05 19:58:07.136544, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2010/12/05 19:58:07.136595, 3] smbd/connection.c:31(yield_connection) Yielding connection to [2010/12/05 19:58:07.136780, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key CC2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:07.136836, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0x7fc98214f4a0 [2010/12/05 19:58:07.136885, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key CC2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [2010/12/05 19:58:07.137190, 3] smbd/server.c:902(exit_server_common) Server exit (failed to receive smb request)