Attachment 6117 Details for Bug 7836 – after kill of the running and new launch of smbd (3.5.6)

after kill of the running and new launch of smbd (3.5.6)

log.smbd.5.add (text/plain), 520.46 KB, created by Lars Müller on 2010-12-05 13:11:52 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Lars Müller

Created: 2010-12-05 13:11:52 UTC

Size: 520.46 KB

patch

obsolete

>[2010/12/05 19:58:00.909540,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:00.909670,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:00.909708,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:00.909781,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:00.909831,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to 
>[2010/12/05 19:58:00.910015, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 0C2E0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:00.910119, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f31de2e0c30
>[2010/12/05 19:58:00.910197, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 0C2E0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:00.910606,  3] smbd/server.c:902(exit_server_common)
>  Server exit (termination signal)
>[2010/12/05 19:58:00.911085,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:00.911195,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:00.911227,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:00.911290,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:00.911341,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to 
>[2010/12/05 19:58:00.911512, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key 322E0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:00.911593, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7f31de2e68d0
>[2010/12/05 19:58:00.911633,  3] smbd/connection.c:42(yield_connection)
>  deleting connection record returned NT_STATUS_NOT_FOUND
>[2010/12/05 19:58:00.911682, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key 322E0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:00.911993,  3] smbd/server.c:902(exit_server_common)
>  Server exit (termination signal)
>[2010/12/05 19:58:01,  0] smbd/server.c:1119(main)
>  smbd version 3.5.6-12.1-2470-SUSE-SL11.3-x86_64 started.
>  Copyright Andrew Tridgell and the Samba Team 1992-2010
>[2010/12/05 19:58:01.016008,  5] lib/debug.c:405(debug_dump_status)
>  INFO: Current debug levels:
>    all: True/99
>    tdb: False/0
>    printdrivers: False/0
>    lanman: False/0
>    smb: False/0
>    rpc_parse: False/0
>    rpc_srv: False/0
>    rpc_cli: False/0
>    passdb: False/0
>    sam: False/0
>    auth: False/0
>    winbind: False/0
>    vfs: False/0
>    idmap: False/0
>    quota: False/0
>    acls: False/0
>    locking: False/0
>    msdfs: False/0
>    dmapi: False/0
>    registry: False/0
>  doing parameter include = registry
>[2010/12/05 19:58:01.016316,  4] param/loadparm.c:9193(lp_load_ex)
>  pm_process() returned Yes
>[2010/12/05 19:58:01.016355,  7] param/loadparm.c:9399(lp_servicenumber)
>  lp_servicenumber: couldn't find homes
>[2010/12/05 19:58:01.016396, 10] param/loadparm.c:8403(set_server_role)
>  set_server_role: role = ROLE_STANDALONE
>[2010/12/05 19:58:01.016442,  5] lib/iconv.c:104(smb_register_charset)
>  Attempting to register new charset UCS-2LE
>[2010/12/05 19:58:01.016479,  5] lib/iconv.c:112(smb_register_charset)
>  Registered charset UCS-2LE
>[2010/12/05 19:58:01.016510,  5] lib/iconv.c:104(smb_register_charset)
>  Attempting to register new charset UTF-16LE
>[2010/12/05 19:58:01.016601,  5] lib/iconv.c:112(smb_register_charset)
>  Registered charset UTF-16LE
>[2010/12/05 19:58:01.016634,  5] lib/iconv.c:104(smb_register_charset)
>  Attempting to register new charset UCS-2BE
>[2010/12/05 19:58:01.016665,  5] lib/iconv.c:112(smb_register_charset)
>  Registered charset UCS-2BE
>[2010/12/05 19:58:01.016695,  5] lib/iconv.c:104(smb_register_charset)
>  Attempting to register new charset UTF-16BE
>[2010/12/05 19:58:01.016725,  5] lib/iconv.c:112(smb_register_charset)
>  Registered charset UTF-16BE
>[2010/12/05 19:58:01.016756,  5] lib/iconv.c:104(smb_register_charset)
>  Attempting to register new charset UTF8
>[2010/12/05 19:58:01.016786,  5] lib/iconv.c:112(smb_register_charset)
>  Registered charset UTF8
>[2010/12/05 19:58:01.016816,  5] lib/iconv.c:104(smb_register_charset)
>  Attempting to register new charset UTF-8
>[2010/12/05 19:58:01.016847,  5] lib/iconv.c:112(smb_register_charset)
>  Registered charset UTF-8
>[2010/12/05 19:58:01.016877,  5] lib/iconv.c:104(smb_register_charset)
>  Attempting to register new charset ASCII
>[2010/12/05 19:58:01.016913,  5] lib/iconv.c:112(smb_register_charset)
>  Registered charset ASCII
>[2010/12/05 19:58:01.016944,  5] lib/iconv.c:104(smb_register_charset)
>  Attempting to register new charset 646
>[2010/12/05 19:58:01.016978,  5] lib/iconv.c:112(smb_register_charset)
>  Registered charset 646
>[2010/12/05 19:58:01.017009,  5] lib/iconv.c:104(smb_register_charset)
>  Attempting to register new charset ISO-8859-1
>[2010/12/05 19:58:01.017040,  5] lib/iconv.c:112(smb_register_charset)
>  Registered charset ISO-8859-1
>[2010/12/05 19:58:01.017070,  5] lib/iconv.c:104(smb_register_charset)
>  Attempting to register new charset UCS2-HEX
>[2010/12/05 19:58:01.017101,  5] lib/iconv.c:112(smb_register_charset)
>  Registered charset UCS2-HEX
>[2010/12/05 19:58:01.017941,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.018425,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.018542,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.018628,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.018712,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.018793,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.018875,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.019013,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.019100,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.019184,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.019299,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.019453,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.019563,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.019685,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.019934,  2] lib/tallocmsg.c:106(register_msg_pool_usage)
>  Registered MSG_REQ_POOL_USAGE
>[2010/12/05 19:58:01.019979,  2] lib/dmallocmsg.c:77(register_dmalloc_msgs)
>  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
>[2010/12/05 19:58:01.020040,  3] param/loadparm.c:9158(lp_load_ex)
>  lp_load_ex: refreshing parameters
>Initialising global parameters
>rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
>[2010/12/05 19:58:01.020171,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
>[2010/12/05 19:58:01.020214,  3] param/loadparm.c:7842(do_section)
>  Processing section "[global]"
>  doing parameter workgroup = WORKGROUP
>  doing parameter passdb backend = tdbsam
>  doing parameter printing = cups
>  doing parameter printcap name = cups
>  doing parameter printcap cache time = 750
>  doing parameter cups options = raw
>  doing parameter map to guest = Bad User
>  doing parameter include = /etc/samba/dhcp.conf
>[2010/12/05 19:58:01.020504,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/dhcp.conf"
>  doing parameter logon path = \\%L\profiles\.msprofile
>  doing parameter logon home = \\%L\%U\.9xprofile
>  doing parameter logon drive = P:
>  doing parameter usershare allow guests = Yes
>  doing parameter log level = 99
>[2010/12/05 19:58:01.020693,  5] lib/debug.c:405(debug_dump_status)
>  INFO: Current debug levels:
>    all: True/99
>    tdb: False/0
>    printdrivers: False/0
>    lanman: False/0
>    smb: False/0
>    rpc_parse: False/0
>    rpc_srv: False/0
>    rpc_cli: False/0
>    passdb: False/0
>    sam: False/0
>    auth: False/0
>    winbind: False/0
>    vfs: False/0
>    idmap: False/0
>    quota: False/0
>    acls: False/0
>    locking: False/0
>    msdfs: False/0
>    dmapi: False/0
>    registry: False/0
>  doing parameter include = registry
>  doing parameter registry shares = yes
>[2010/12/05 19:58:01.021044, 10] registry/reg_init_smbconf.c:74(registry_init_smbconf)
>  registry_init_smbconf called
>[2010/12/05 19:58:01.021168, 10] registry/reg_cachehook.c:73(reghook_cache_init)
>  reghook_cache_init: new tree with default ops 0x7fc9820913a0 for key []
>[2010/12/05 19:58:01.021242, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.021314, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 66) -> 4
>[2010/12/05 19:58:01.021367, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 53) -> 4
>[2010/12/05 19:58:01.021420, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 15) -> 4
>[2010/12/05 19:58:01.021479, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.021529, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 33) -> 4
>[2010/12/05 19:58:01.021579, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 66) -> 4
>[2010/12/05 19:58:01.021634, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 12) -> 4
>[2010/12/05 19:58:01.021686, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 66) -> 4
>[2010/12/05 19:58:01.021735, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 33) -> 4
>[2010/12/05 19:58:01.021783, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 41) -> 4
>[2010/12/05 19:58:01.021835, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.021900, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 31) -> 4
>[2010/12/05 19:58:01.021952, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.022007, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 21) -> 4
>[2010/12/05 19:58:01.022059, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.022110, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 53) -> 4
>[2010/12/05 19:58:01.022162, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 33) -> 4
>[2010/12/05 19:58:01.022214, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 19) -> 4
>[2010/12/05 19:58:01.022265, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 32) -> 4
>[2010/12/05 19:58:01.022342, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] 
>[2010/12/05 19:58:01.022401, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 66) -> 4
>[2010/12/05 19:58:01.022462, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 33) -> 4
>[2010/12/05 19:58:01.022498, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(fdB, 29) -> 29
>[2010/12/05 19:58:01.022542,  8] registry/reg_backend_db.c:1567(regdb_unpack_values)
>  specific: [Samba Printer Port], len: 2
>[2010/12/05 19:58:01.022588, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] 
>[2010/12/05 19:58:01.022667, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.022722, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 104) -> 4
>[2010/12/05 19:58:01.022756, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(fdB, 100) -> 100
>[2010/12/05 19:58:01.022789,  8] registry/reg_backend_db.c:1567(regdb_unpack_values)
>  specific: [DefaultSpoolDirectory], len: 70
>[2010/12/05 19:58:01.022827, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] 
>[2010/12/05 19:58:01.022872, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.022924, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.022958, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(fdB, 65) -> 40
>[2010/12/05 19:58:01.023042,  8] registry/reg_backend_db.c:1567(regdb_unpack_values)
>  specific: [DisplayName], len: 20
>[2010/12/05 19:58:01.023077, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(fdB, 25) -> 25
>[2010/12/05 19:58:01.023111,  8] registry/reg_backend_db.c:1567(regdb_unpack_values)
>  specific: [ErrorControl], len: 4
>[2010/12/05 19:58:01.023150, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] 
>[2010/12/05 19:58:01.023197, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.023247, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.023281, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(fdB, 65) -> 40
>[2010/12/05 19:58:01.023313,  8] registry/reg_backend_db.c:1567(regdb_unpack_values)
>  specific: [DisplayName], len: 20
>[2010/12/05 19:58:01.023345, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(fdB, 25) -> 25
>[2010/12/05 19:58:01.023378,  8] registry/reg_backend_db.c:1567(regdb_unpack_values)
>  specific: [ErrorControl], len: 4
>[2010/12/05 19:58:01.023429, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 33) -> 4
>[2010/12/05 19:58:01.023471, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7fc9820914a0 for key [/HKLM/SOFTWARE/Samba/smbconf]
>[2010/12/05 19:58:01.023506,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2010/12/05 19:58:01.023542, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [HKLM]
>[2010/12/05 19:58:01.023576, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [NULL]! [HKLM]
>[2010/12/05 19:58:01.023608, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [SOFTWARE]
>[2010/12/05 19:58:01.023642, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [HKLM]! [SOFTWARE]
>[2010/12/05 19:58:01.023674, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Samba]
>[2010/12/05 19:58:01.023708, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [SOFTWARE]! [Samba]
>[2010/12/05 19:58:01.023740, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [smbconf]
>[2010/12/05 19:58:01.024053, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [Samba]! [smbconf]
>[2010/12/05 19:58:01.024095, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SOFTWARE/Samba/smbconf] to tree
>[2010/12/05 19:58:01.024129,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2010/12/05 19:58:01.024161, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (0)
>[2010/12/05 19:58:01.024235,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.024276,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.024314,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.024352,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.024419,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.024553,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.024591, 10] registry/reg_backend_db.c:469(regdb_open)
>  regdb_open: refcount reset (1)
>[2010/12/05 19:58:01.024631,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2010/12/05 19:58:01.024669, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (1)
>[2010/12/05 19:58:01.024710, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2010/12/05 19:58:01.024750, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2010/12/05 19:58:01.024782, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => []
>[2010/12/05 19:58:01.024814, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.024845, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.025065, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.025107, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.025137, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM]
>[2010/12/05 19:58:01.025174, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM]
>[2010/12/05 19:58:01.025229, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 20) -> 4
>[2010/12/05 19:58:01.025265, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 16) -> 9
>[2010/12/05 19:58:01.025304, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 7) -> 7
>[2010/12/05 19:58:01.025349, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.025387, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2010/12/05 19:58:01.025473,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SOFTWARE]
>[2010/12/05 19:58:01.025512, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (2)
>[2010/12/05 19:58:01.025550, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE]
>[2010/12/05 19:58:01.025581, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SOFTWARE]
>[2010/12/05 19:58:01.025613, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE]
>[2010/12/05 19:58:01.025645, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.025676, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.025706, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SOFTWARE], new_path => []
>[2010/12/05 19:58:01.025738, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.025769, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SOFTWARE]
>[2010/12/05 19:58:01.025800, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.025830, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.025861, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SOFTWARE]
>[2010/12/05 19:58:01.025895, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SOFTWARE]
>[2010/12/05 19:58:01.025942, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.025993, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.026027, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 25) -> 10
>[2010/12/05 19:58:01.026094, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 15) -> 6
>[2010/12/05 19:58:01.026131, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.026169, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [3] items
>[2010/12/05 19:58:01.026207, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SOFTWARE]
>[2010/12/05 19:58:01.026250, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.026306,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Samba]
>[2010/12/05 19:58:01.026342, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (3)
>[2010/12/05 19:58:01.026380, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba]
>[2010/12/05 19:58:01.026411, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SOFTWARE/Samba]
>[2010/12/05 19:58:01.026443, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba]
>[2010/12/05 19:58:01.026476, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.026507, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.026538, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba]
>[2010/12/05 19:58:01.026570, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.026601, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SOFTWARE]
>[2010/12/05 19:58:01.026632, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Samba], new_path => []
>[2010/12/05 19:58:01.026664, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Samba]
>[2010/12/05 19:58:01.026695, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Samba]
>[2010/12/05 19:58:01.026726, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.026756, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.026786, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SOFTWARE/Samba]
>[2010/12/05 19:58:01.026820, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba]
>[2010/12/05 19:58:01.026868, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 41) -> 4
>[2010/12/05 19:58:01.026922, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 25) -> 4
>[2010/12/05 19:58:01.026957, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 21) -> 13
>[2010/12/05 19:58:01.027024, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 8) -> 8
>[2010/12/05 19:58:01.027061, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.027098, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SOFTWARE\Samba]
>[2010/12/05 19:58:01.027141, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 41) -> 4
>[2010/12/05 19:58:01.027197, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (3)
>[2010/12/05 19:58:01.027233,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [smbconf]
>[2010/12/05 19:58:01.027266, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (3)
>[2010/12/05 19:58:01.027304, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba/smbconf]
>[2010/12/05 19:58:01.027336, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SOFTWARE/Samba/smbconf]
>[2010/12/05 19:58:01.027368, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba/smbconf]
>[2010/12/05 19:58:01.027428, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.027461, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.027492, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba/smbconf]
>[2010/12/05 19:58:01.027524, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.027555, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SOFTWARE]
>[2010/12/05 19:58:01.027586, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Samba], new_path => [smbconf]
>[2010/12/05 19:58:01.027618, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Samba]
>[2010/12/05 19:58:01.027649, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Samba]
>[2010/12/05 19:58:01.027681, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [smbconf], new_path => []
>[2010/12/05 19:58:01.027713, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [smbconf]
>[2010/12/05 19:58:01.027744, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [smbconf]
>[2010/12/05 19:58:01.027775, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.027806, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.027836, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820914a0 for key [/HKLM/SOFTWARE/Samba/smbconf]
>[2010/12/05 19:58:01.027871, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba\smbconf]
>[2010/12/05 19:58:01.027915, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 33) -> 4
>[2010/12/05 19:58:01.027962, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal)
>  regdb_fetch_keys: no subkeys found for key [HKLM\SOFTWARE\Samba\smbconf]
>[2010/12/05 19:58:01.027998, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (3)
>[2010/12/05 19:58:01.028031, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2010/12/05 19:58:01.028073,  5] param/loadparm.c:6954(process_registry_service)
>  process_registry_service: service name global
>[2010/12/05 19:58:01.028113,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [global]
>[2010/12/05 19:58:01.028146, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (2)
>[2010/12/05 19:58:01.028184, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba/smbconf/global]
>[2010/12/05 19:58:01.028216, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SOFTWARE/Samba/smbconf/global]
>[2010/12/05 19:58:01.028248, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba/smbconf/global]
>[2010/12/05 19:58:01.028280, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.028311, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.028341, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba/smbconf/global]
>[2010/12/05 19:58:01.028373, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.028404, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SOFTWARE]
>[2010/12/05 19:58:01.028434, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Samba], new_path => [smbconf/global]
>[2010/12/05 19:58:01.028466, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Samba]
>[2010/12/05 19:58:01.028497, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Samba]
>[2010/12/05 19:58:01.028556, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [smbconf], new_path => [global]
>[2010/12/05 19:58:01.028588, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [smbconf]
>[2010/12/05 19:58:01.028619, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [smbconf]
>[2010/12/05 19:58:01.028649, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [global], new_path => []
>[2010/12/05 19:58:01.028681, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [global]
>[2010/12/05 19:58:01.028712, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.028742, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.028773, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820914a0 for key [/HKLM/SOFTWARE/Samba/smbconf/global]
>[2010/12/05 19:58:01.028807, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba\smbconf\global]
>[2010/12/05 19:58:01.028854, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 4) -> 4
>[2010/12/05 19:58:01.028891, 10] registry/reg_backend_db.c:1471(regdb_fetch_keys_internal)
>  key [HKLM\SOFTWARE\Samba\smbconf\global] not found
>[2010/12/05 19:58:01.028924, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2010/12/05 19:58:01.028963,  2] param/loadparm.c:7859(do_section)
>  Processing section "[homes]"
>[2010/12/05 19:58:01.029048,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 0 for homes
>[2010/12/05 19:58:01.029083, 10] param/loadparm.c:6201(hash_a_service)
>  hash_a_service: creating servicehash
>[2010/12/05 19:58:01.029116, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 0 for service name homes
>  doing parameter comment = Home Directories
>  doing parameter valid users = %S, %D%w%S
>  doing parameter browseable = No
>  doing parameter read only = No
>  doing parameter inherit acls = Yes
>[2010/12/05 19:58:01.029277,  2] param/loadparm.c:7859(do_section)
>  Processing section "[profiles]"
>[2010/12/05 19:58:01.029342,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 1 for profiles
>[2010/12/05 19:58:01.029375, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 1 for service name profiles
>  doing parameter comment = Network Profiles Service
>  doing parameter path = %H
>  doing parameter read only = No
>  doing parameter store dos attributes = Yes
>  doing parameter create mask = 0600
>  doing parameter directory mask = 0700
>[2010/12/05 19:58:01.029569,  2] param/loadparm.c:7859(do_section)
>  Processing section "[users]"
>[2010/12/05 19:58:01.029634,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 2 for users
>[2010/12/05 19:58:01.029667, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 2 for service name users
>  doing parameter comment = All users
>  doing parameter path = /home
>  doing parameter read only = No
>  doing parameter inherit acls = Yes
>  doing parameter veto files = /aquota.user/groups/shares/
>[2010/12/05 19:58:01.029802,  2] param/loadparm.c:7859(do_section)
>  Processing section "[groups]"
>[2010/12/05 19:58:01.029874,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 3 for groups
>[2010/12/05 19:58:01.029908, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 3 for service name groups
>  doing parameter comment = All groups
>  doing parameter path = /home/groups
>  doing parameter read only = No
>  doing parameter inherit acls = Yes
>[2010/12/05 19:58:01.030013,  2] param/loadparm.c:7859(do_section)
>  Processing section "[printers]"
>[2010/12/05 19:58:01.030077,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 4 for printers
>[2010/12/05 19:58:01.030110, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 4 for service name printers
>  doing parameter comment = All Printers
>  doing parameter path = /var/tmp
>  doing parameter printable = Yes
>  doing parameter create mask = 0600
>  doing parameter browseable = No
>[2010/12/05 19:58:01.030283,  2] param/loadparm.c:7859(do_section)
>  Processing section "[print$]"
>[2010/12/05 19:58:01.030350,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 5 for print$
>[2010/12/05 19:58:01.030383, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 5 for service name print$
>  doing parameter comment = Printer Drivers
>  doing parameter path = /var/lib/samba/drivers
>  doing parameter write list = @ntadmin root
>  doing parameter force group = ntadmin
>  doing parameter create mask = 0664
>  doing parameter directory mask = 0775
>[2010/12/05 19:58:01.030538,  2] param/loadparm.c:7859(do_section)
>  Processing section "[srvnfs]"
>[2010/12/05 19:58:01.030605,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 6 for srvnfs
>[2010/12/05 19:58:01.030638, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 6 for service name srvnfs
>  doing parameter comment = nfs reexport
>  doing parameter path = /srv/samba/nfs
>  doing parameter writeable = Yes
>  doing parameter create mask = 0777
>  doing parameter directory mask = 0777
>[2010/12/05 19:58:01.030765,  4] param/loadparm.c:9193(lp_load_ex)
>  pm_process() returned Yes
>[2010/12/05 19:58:01.030856,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 7 for IPC$
>[2010/12/05 19:58:01.030891, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 7 for service name IPC$
>[2010/12/05 19:58:01.030944,  3] param/loadparm.c:6313(lp_add_ipc)
>  adding IPC service
>[2010/12/05 19:58:01.030993, 10] param/loadparm.c:8403(set_server_role)
>  set_server_role: role = ROLE_STANDALONE
>[2010/12/05 19:58:01.031100,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.031191,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.031284,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.031366,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.031451,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.031533,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.031616,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.031699,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.031782,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.031864,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.031953,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.032044,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.032147,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.032233,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.032284,  3] printing/pcap.c:136(pcap_cache_reload)
>  reloading printcap cache
>[2010/12/05 19:58:01.032325,  5] printing/print_cups.c:408(cups_pcap_load_async)
>  cups_pcap_load_async: asynchronously loading cups printers
>[2010/12/05 19:58:01.033075, 10] printing/print_cups.c:425(cups_pcap_load_async)
>  cups_pcap_load_async: child pid = 12222
>[2010/12/05 19:58:01.033197, 10] printing/print_cups.c:576(cups_cache_reload)
>  cups_cache_reload: sync read on fd 9
>[2010/12/05 19:58:01.033236,  5] printing/print_cups.c:458(cups_async_callback)
>  cups_async_callback: callback received for printer data. fd = 9
>[2010/12/05 19:58:01.033601,  5] printing/print_cups.c:169(cups_cache_reload_async)
>  reloading cups printcap cache
>[2010/12/05 19:58:01.036521, 10] printing/print_cups.c:87(cups_connect)
>  connecting to cups server /var/run/cups/cups.sock:631
>[2010/12/05 19:58:01.054641,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.054787,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.054879,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.054963,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.055055,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.055137,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.055219,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.055303,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.055384,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.055467,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.055583,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.055681,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.055776,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.055863,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.055922, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  pcap_cache_add_specific: Adding name dummy0 info dummy0
>[2010/12/05 19:58:01.055968, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer
>[2010/12/05 19:58:01.056037, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended)
>[2010/12/05 19:58:01.057057, 11] printing/print_cups.c:120(send_pcap_info)
>  send_pcap_info: writing namelen 14
>[2010/12/05 19:58:01.057124, 11] printing/print_cups.c:126(send_pcap_info)
>  send_pcap_info: writing infolen 51
>[2010/12/05 19:58:01.057160, 11] printing/print_cups.c:133(send_pcap_info)
>  send_pcap_info: writing name samsung_color
>[2010/12/05 19:58:01.057198, 11] printing/print_cups.c:141(send_pcap_info)
>[2010/12/05 19:58:01.057150, 11] printing/print_cups.c:477(cups_async_callback)
>  send_pcap_info: writing info Samsung CLP-550N Foomatic/Postscript (recommended)
>  cups_async_callback: read namelen 14
>[2010/12/05 19:58:01.057270, 11] printing/print_cups.c:120(send_pcap_info)
>[2010/12/05 19:58:01.057280, 11] printing/print_cups.c:491(cups_async_callback)
>  send_pcap_info: writing namelen 11
>  cups_async_callback: read infolen 51
>[2010/12/05 19:58:01.057318, 11] printing/print_cups.c:126(send_pcap_info)
>[2010/12/05 19:58:01.057328, 11] printing/print_cups.c:509(cups_async_callback)
>  send_pcap_info: writing infolen 50
>  cups_async_callback: read name samsung_color
>[2010/12/05 19:58:01.057364, 11] printing/print_cups.c:133(send_pcap_info)
>  send_pcap_info: writing name samsung_bw
>[2010/12/05 19:58:01.057373, 11] printing/print_cups.c:529(cups_async_callback)
>  cups_async_callback: read info Samsung CLP-550N Foomatic/Postscript (recommended)
>[2010/12/05 19:58:01.057401, 11] printing/print_cups.c:141(send_pcap_info)
>  send_pcap_info: writing info Samsung CLP-550N via Generic PCL 6/PCL XL Printer
>[2010/12/05 19:58:01.057431, 11] printing/pcap.c:86(pcap_cache_add_specific)
>[2010/12/05 19:58:01.057444, 11] printing/print_cups.c:120(send_pcap_info)
>  pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended)
>  send_pcap_info: writing namelen 7
>[2010/12/05 19:58:01.057482, 11] printing/print_cups.c:477(cups_async_callback)
>[2010/12/05 19:58:01.057489, 11] printing/print_cups.c:126(send_pcap_info)
>  cups_async_callback: read namelen 11
>  send_pcap_info: writing infolen 7
>[2010/12/05 19:58:01.057575, 11] printing/print_cups.c:491(cups_async_callback)
>[2010/12/05 19:58:01.057585, 11] printing/print_cups.c:133(send_pcap_info)
>  cups_async_callback: read infolen 50
>  send_pcap_info: writing name dummy0
>[2010/12/05 19:58:01.057621, 11] printing/print_cups.c:509(cups_async_callback)
>[2010/12/05 19:58:01.057630, 11] printing/print_cups.c:141(send_pcap_info)
>  cups_async_callback: read name samsung_bw
>  send_pcap_info: writing info dummy0
>[2010/12/05 19:58:01.057667, 11] printing/print_cups.c:529(cups_async_callback)
>  cups_async_callback: read info Samsung CLP-550N via Generic PCL 6/PCL XL Printer
>[2010/12/05 19:58:01.057704, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer
>[2010/12/05 19:58:01.057740, 11] printing/print_cups.c:477(cups_async_callback)
>  cups_async_callback: read namelen 7
>[2010/12/05 19:58:01.057776, 11] printing/print_cups.c:491(cups_async_callback)
>  cups_async_callback: read infolen 7
>[2010/12/05 19:58:01.057809, 11] printing/print_cups.c:509(cups_async_callback)
>  cups_async_callback: read name dummy0
>[2010/12/05 19:58:01.057842, 11] printing/print_cups.c:529(cups_async_callback)
>  cups_async_callback: read info dummy0
>[2010/12/05 19:58:01.057878, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  pcap_cache_add_specific: Adding name dummy0 info dummy0
>[2010/12/05 19:58:01.057915, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  pcap_cache_add_specific: Adding name dummy0 info dummy0
>[2010/12/05 19:58:01.057948, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer
>[2010/12/05 19:58:01.057987, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended)
>[2010/12/05 19:58:01.058042,  3] printing/pcap.c:243(pcap_cache_reload)
>  reload status: ok
>[2010/12/05 19:58:01.058132,  7] param/loadparm.c:9399(lp_servicenumber)
>  lp_servicenumber: couldn't find samsung_color
>[2010/12/05 19:58:01.058232,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 8 for samsung_color
>[2010/12/05 19:58:01.058266, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 8 for service name samsung_color
>[2010/12/05 19:58:01.058305,  3] param/loadparm.c:6352(lp_add_printer)
>  adding printer service samsung_color
>[2010/12/05 19:58:01.058366,  7] param/loadparm.c:9399(lp_servicenumber)
>  lp_servicenumber: couldn't find samsung_bw
>[2010/12/05 19:58:01.058449,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 9 for samsung_bw
>[2010/12/05 19:58:01.058484, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 9 for service name samsung_bw
>[2010/12/05 19:58:01.058520,  3] param/loadparm.c:6352(lp_add_printer)
>  adding printer service samsung_bw
>[2010/12/05 19:58:01.058665,  7] param/loadparm.c:9399(lp_servicenumber)
>  lp_servicenumber: couldn't find dummy0
>[2010/12/05 19:58:01.058743,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 10 for dummy0
>[2010/12/05 19:58:01.058778, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 10 for service name dummy0
>[2010/12/05 19:58:01.058814,  3] param/loadparm.c:6352(lp_add_printer)
>  adding printer service dummy0
>[2010/12/05 19:58:01.058890,  6] param/loadparm.c:7133(lp_file_list_changed)
>  lp_file_list_changed()
>  registry config changed
>[2010/12/05 19:58:01.058954,  5] param/loadparm.c:6055(free_service)
>  free_service: Freeing service homes
>[2010/12/05 19:58:01.059021,  5] param/loadparm.c:6055(free_service)
>  free_service: Freeing service profiles
>[2010/12/05 19:58:01.059066,  5] param/loadparm.c:6055(free_service)
>  free_service: Freeing service users
>[2010/12/05 19:58:01.059109,  5] param/loadparm.c:6055(free_service)
>  free_service: Freeing service groups
>[2010/12/05 19:58:01.059202,  5] param/loadparm.c:6055(free_service)
>  free_service: Freeing service printers
>[2010/12/05 19:58:01.059245,  5] param/loadparm.c:6055(free_service)
>  free_service: Freeing service print$
>[2010/12/05 19:58:01.059288,  5] param/loadparm.c:6055(free_service)
>  free_service: Freeing service srvnfs
>[2010/12/05 19:58:01.059330,  5] param/loadparm.c:6055(free_service)
>  free_service: Freeing service IPC$
>[2010/12/05 19:58:01.059374,  3] param/loadparm.c:9158(lp_load_ex)
>  lp_load_ex: refreshing parameters
>Initialising global parameters
>rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
>[2010/12/05 19:58:01.059540,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
>[2010/12/05 19:58:01.059582,  3] param/loadparm.c:7842(do_section)
>  Processing section "[global]"
>  doing parameter workgroup = WORKGROUP
>  doing parameter passdb backend = tdbsam
>  doing parameter printing = cups
>  doing parameter printcap name = cups
>  doing parameter printcap cache time = 750
>  doing parameter cups options = raw
>  doing parameter map to guest = Bad User
>  doing parameter include = /etc/samba/dhcp.conf
>[2010/12/05 19:58:01.059823,  3] ../lib/util/params.c:550(pm_process)
>  params.c:pm_process() - Processing configuration file "/etc/samba/dhcp.conf"
>  doing parameter logon path = \\%L\profiles\.msprofile
>  doing parameter logon home = \\%L\%U\.9xprofile
>  doing parameter logon drive = P:
>  doing parameter usershare allow guests = Yes
>  doing parameter log level = 99
>[2010/12/05 19:58:01.060015,  5] lib/debug.c:405(debug_dump_status)
>  INFO: Current debug levels:
>    all: True/99
>    tdb: False/0
>    printdrivers: False/0
>    lanman: False/0
>    smb: False/0
>    rpc_parse: False/0
>    rpc_srv: False/0
>    rpc_cli: False/0
>    passdb: False/0
>    sam: False/0
>    auth: False/0
>    winbind: False/0
>    vfs: False/0
>    idmap: False/0
>    quota: False/0
>    acls: False/0
>    locking: False/0
>    msdfs: False/0
>    dmapi: False/0
>    registry: False/0
>  doing parameter include = registry
>  doing parameter registry shares = yes
>[2010/12/05 19:58:01.060331,  5] param/loadparm.c:6954(process_registry_service)
>  process_registry_service: service name global
>[2010/12/05 19:58:01.060365,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [global]
>[2010/12/05 19:58:01.060401, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (2)
>[2010/12/05 19:58:01.060446, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba/smbconf/global]
>[2010/12/05 19:58:01.060479, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SOFTWARE/Samba/smbconf/global]
>[2010/12/05 19:58:01.060512, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba/smbconf/global]
>[2010/12/05 19:58:01.060544, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.060576, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.060607, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba/smbconf/global]
>[2010/12/05 19:58:01.060638, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.060669, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SOFTWARE]
>[2010/12/05 19:58:01.060700, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Samba], new_path => [smbconf/global]
>[2010/12/05 19:58:01.060731, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Samba]
>[2010/12/05 19:58:01.060762, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Samba]
>[2010/12/05 19:58:01.060792, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [smbconf], new_path => [global]
>[2010/12/05 19:58:01.060823, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [smbconf]
>[2010/12/05 19:58:01.060885, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [smbconf]
>[2010/12/05 19:58:01.060916, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [global], new_path => []
>[2010/12/05 19:58:01.060950, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [global]
>[2010/12/05 19:58:01.060981, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.061012, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.061042, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820914a0 for key [/HKLM/SOFTWARE/Samba/smbconf/global]
>[2010/12/05 19:58:01.061079, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba\smbconf\global]
>[2010/12/05 19:58:01.061139, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 4) -> 4
>[2010/12/05 19:58:01.061186, 10] registry/reg_backend_db.c:1471(regdb_fetch_keys_internal)
>  key [HKLM\SOFTWARE\Samba\smbconf\global] not found
>[2010/12/05 19:58:01.061221, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2010/12/05 19:58:01.061258,  2] param/loadparm.c:7859(do_section)
>  Processing section "[homes]"
>[2010/12/05 19:58:01.061323,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 7 for homes
>[2010/12/05 19:58:01.061356, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 7 for service name homes
>  doing parameter comment = Home Directories
>  doing parameter valid users = %S, %D%w%S
>  doing parameter browseable = No
>  doing parameter read only = No
>  doing parameter inherit acls = Yes
>[2010/12/05 19:58:01.061500,  2] param/loadparm.c:7859(do_section)
>  Processing section "[profiles]"
>[2010/12/05 19:58:01.061565,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 6 for profiles
>[2010/12/05 19:58:01.061597, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 6 for service name profiles
>  doing parameter comment = Network Profiles Service
>  doing parameter path = %H
>  doing parameter read only = No
>  doing parameter store dos attributes = Yes
>  doing parameter create mask = 0600
>  doing parameter directory mask = 0700
>[2010/12/05 19:58:01.061822,  2] param/loadparm.c:7859(do_section)
>  Processing section "[users]"
>[2010/12/05 19:58:01.061889,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 5 for users
>[2010/12/05 19:58:01.061922, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 5 for service name users
>  doing parameter comment = All users
>  doing parameter path = /home
>  doing parameter read only = No
>  doing parameter inherit acls = Yes
>  doing parameter veto files = /aquota.user/groups/shares/
>[2010/12/05 19:58:01.062056,  2] param/loadparm.c:7859(do_section)
>  Processing section "[groups]"
>[2010/12/05 19:58:01.062119,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 4 for groups
>[2010/12/05 19:58:01.062152, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 4 for service name groups
>  doing parameter comment = All groups
>  doing parameter path = /home/groups
>  doing parameter read only = No
>  doing parameter inherit acls = Yes
>[2010/12/05 19:58:01.062256,  2] param/loadparm.c:7859(do_section)
>  Processing section "[printers]"
>[2010/12/05 19:58:01.062319,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 3 for printers
>[2010/12/05 19:58:01.062352, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 3 for service name printers
>  doing parameter comment = All Printers
>  doing parameter path = /var/tmp
>  doing parameter printable = Yes
>  doing parameter create mask = 0600
>  doing parameter browseable = No
>[2010/12/05 19:58:01.062493,  2] param/loadparm.c:7859(do_section)
>  Processing section "[print$]"
>[2010/12/05 19:58:01.062558,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 2 for print$
>[2010/12/05 19:58:01.062621, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 2 for service name print$
>  doing parameter comment = Printer Drivers
>  doing parameter path = /var/lib/samba/drivers
>  doing parameter write list = @ntadmin root
>  doing parameter force group = ntadmin
>  doing parameter create mask = 0664
>  doing parameter directory mask = 0775
>[2010/12/05 19:58:01.062770,  2] param/loadparm.c:7859(do_section)
>  Processing section "[srvnfs]"
>[2010/12/05 19:58:01.062835,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 1 for srvnfs
>[2010/12/05 19:58:01.062868, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 1 for service name srvnfs
>  doing parameter comment = nfs reexport
>  doing parameter path = /srv/samba/nfs
>  doing parameter writeable = Yes
>  doing parameter create mask = 0777
>  doing parameter directory mask = 0777
>[2010/12/05 19:58:01.063011,  4] param/loadparm.c:9193(lp_load_ex)
>  pm_process() returned Yes
>[2010/12/05 19:58:01.063090,  8] param/loadparm.c:6163(add_a_service)
>  add_a_service: Creating snum = 0 for IPC$
>[2010/12/05 19:58:01.063124, 10] param/loadparm.c:6210(hash_a_service)
>  hash_a_service: hashing index 0 for service name IPC$
>[2010/12/05 19:58:01.063165,  3] param/loadparm.c:6313(lp_add_ipc)
>  adding IPC service
>[2010/12/05 19:58:01.063198, 10] param/loadparm.c:8403(set_server_role)
>  set_server_role: role = ROLE_STANDALONE
>[2010/12/05 19:58:01.063339,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.063439,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.063530,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.063612,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.063695,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.063778,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.063860,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.063944,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.064027,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.064110,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.064198,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.064291,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.064378,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.064474,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.064529,  3] printing/pcap.c:136(pcap_cache_reload)
>  reloading printcap cache
>[2010/12/05 19:58:01.064562,  5] printing/print_cups.c:408(cups_pcap_load_async)
>  cups_pcap_load_async: asynchronously loading cups printers
>[2010/12/05 19:58:01.065290, 10] printing/print_cups.c:425(cups_pcap_load_async)
>  cups_pcap_load_async: child pid = 12223
>[2010/12/05 19:58:01.065416, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  pcap_cache_add_specific: Adding name dummy0 info dummy0
>[2010/12/05 19:58:01.065451, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer
>[2010/12/05 19:58:01.065495, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended)
>[2010/12/05 19:58:01.065531, 10] printing/print_cups.c:591(cups_cache_reload)
>  cups_cache_reload: async read on fd 8
>[2010/12/05 19:58:01.065590,  3] printing/pcap.c:243(pcap_cache_reload)
>  reload status: ok
>[2010/12/05 19:58:01.065888,  5] printing/print_cups.c:169(cups_cache_reload_async)
>  reloading cups printcap cache
>[2010/12/05 19:58:01.066186,  2] lib/interface.c:340(add_interface)
>  added interface br0 ip=fe80::216:17ff:feba:a4a9%br0 bcast=fe80::ffff:ffff:ffff:ffff%br0 netmask=ffff:ffff:ffff:ffff::
>[2010/12/05 19:58:01.066392,  2] lib/interface.c:340(add_interface)
>  added interface br0 ip=192.168.0.22 bcast=192.168.0.255 netmask=255.255.255.0
>[2010/12/05 19:58:01.066656,  2] lib/interface.c:340(add_interface)
>  added interface br0 ip=fe80::216:17ff:feba:a4a9%br0 bcast=fe80::ffff:ffff:ffff:ffff%br0 netmask=ffff:ffff:ffff:ffff::
>[2010/12/05 19:58:01.066737,  2] lib/interface.c:340(add_interface)
>  added interface br0 ip=192.168.0.22 bcast=192.168.0.255 netmask=255.255.255.0
>[2010/12/05 19:58:01.066791,  5] lib/util.c:276(init_names)
>  Netbios name list:-
>  my_netbios_names[0]="GILES"
>[2010/12/05 19:58:01.066941,  3] smbd/server.c:1161(main)
>  loaded services
>[2010/12/05 19:58:01.067002,  3] smbd/server.c:1176(main)
>  Becoming a daemon.
>[2010/12/05 19:58:01.068770, 10] printing/print_cups.c:87(cups_connect)
>  connecting to cups server /var/run/cups/cups.sock:631
>[2010/12/05 19:58:01.069014,  8] ../lib/util/util.c:217(fcntl_lock)
>  fcntl_lock 11 6 0 1 1
>[2010/12/05 19:58:01.069174,  8] ../lib/util/util.c:252(fcntl_lock)
>  fcntl_lock: Lock call successful
>[2010/12/05 19:58:01.069570,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend ldapsam
>[2010/12/05 19:58:01.069632,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'ldapsam'
>[2010/12/05 19:58:01.069665,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend ldapsam_compat
>[2010/12/05 19:58:01.069697,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'ldapsam_compat'
>[2010/12/05 19:58:01.069733,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend NDS_ldapsam
>[2010/12/05 19:58:01.069766,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'NDS_ldapsam'
>[2010/12/05 19:58:01.069797,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend NDS_ldapsam_compat
>[2010/12/05 19:58:01.069830,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'NDS_ldapsam_compat'
>[2010/12/05 19:58:01.069872,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend smbpasswd
>[2010/12/05 19:58:01.069905,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'smbpasswd'
>[2010/12/05 19:58:01.069940,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend tdbsam
>[2010/12/05 19:58:01.069973,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'tdbsam'
>[2010/12/05 19:58:01.070007,  5] passdb/pdb_interface.c:63(smb_register_passdb)
>  Attempting to register passdb backend wbc_sam
>[2010/12/05 19:58:01.070044,  5] passdb/pdb_interface.c:76(smb_register_passdb)
>  Successfully added passdb backend 'wbc_sam'
>[2010/12/05 19:58:01.070076,  5] passdb/pdb_interface.c:133(make_pdb_method_name)
>  Attempting to find a passdb backend to match tdbsam (tdbsam)
>[2010/12/05 19:58:01.070108,  5] passdb/pdb_interface.c:154(make_pdb_method_name)
>  Found pdb backend tdbsam
>[2010/12/05 19:58:01.070149,  5] passdb/pdb_interface.c:165(make_pdb_method_name)
>  pdb backend tdbsam has a valid init
>[2010/12/05 19:58:01.071508,  5] libsmb/namecache.c:51(namecache_enable)
>  namecache_enable: enabling netbios namecache, timeout 660 seconds
>[2010/12/05 19:58:01.071562, 10] registry/reg_backend_db.c:399(regdb_init)
>  regdb_init: incrementing refcount (2)
>[2010/12/05 19:58:01.071646, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.071709, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 66) -> 4
>[2010/12/05 19:58:01.071760, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 53) -> 4
>[2010/12/05 19:58:01.071846, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 15) -> 4
>[2010/12/05 19:58:01.071904, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.071953, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 33) -> 4
>[2010/12/05 19:58:01.072006, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 66) -> 4
>[2010/12/05 19:58:01.072059, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 12) -> 4
>[2010/12/05 19:58:01.072109, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 66) -> 4
>[2010/12/05 19:58:01.072156, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 33) -> 4
>[2010/12/05 19:58:01.072203, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 41) -> 4
>[2010/12/05 19:58:01.072253, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.072316, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 31) -> 4
>[2010/12/05 19:58:01.072366, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.072418, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 21) -> 4
>[2010/12/05 19:58:01.072468, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.072518, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 53) -> 4
>[2010/12/05 19:58:01.072568, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 33) -> 4
>[2010/12/05 19:58:01.072619, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 19) -> 4
>[2010/12/05 19:58:01.072669, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 32) -> 4
>[2010/12/05 19:58:01.072744, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports] 
>[2010/12/05 19:58:01.072799, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 66) -> 4
>[2010/12/05 19:58:01.072858, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 33) -> 4
>[2010/12/05 19:58:01.072896, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(fdB, 29) -> 29
>[2010/12/05 19:58:01.072935,  8] registry/reg_backend_db.c:1567(regdb_unpack_values)
>  specific: [Samba Printer Port], len: 2
>[2010/12/05 19:58:01.072978, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers] 
>[2010/12/05 19:58:01.073026, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.073078, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 104) -> 4
>[2010/12/05 19:58:01.073111, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(fdB, 100) -> 100
>[2010/12/05 19:58:01.073143,  8] registry/reg_backend_db.c:1567(regdb_unpack_values)
>  specific: [DefaultSpoolDirectory], len: 70
>[2010/12/05 19:58:01.073179, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] 
>[2010/12/05 19:58:01.073225, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.073276, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.073308, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(fdB, 65) -> 40
>[2010/12/05 19:58:01.073341,  8] registry/reg_backend_db.c:1567(regdb_unpack_values)
>  specific: [DisplayName], len: 20
>[2010/12/05 19:58:01.073373, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(fdB, 25) -> 25
>[2010/12/05 19:58:01.073410,  8] registry/reg_backend_db.c:1567(regdb_unpack_values)
>  specific: [ErrorControl], len: 4
>[2010/12/05 19:58:01.073448, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog] 
>[2010/12/05 19:58:01.073493, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.073543, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.073575, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(fdB, 65) -> 40
>[2010/12/05 19:58:01.073608,  8] registry/reg_backend_db.c:1567(regdb_unpack_values)
>  specific: [DisplayName], len: 20
>[2010/12/05 19:58:01.073666, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(fdB, 25) -> 25
>[2010/12/05 19:58:01.073700,  8] registry/reg_backend_db.c:1567(regdb_unpack_values)
>  specific: [ErrorControl], len: 4
>[2010/12/05 19:58:01.073744, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7fc982091640 for key [/HKLM/SYSTEM/CurrentControlSet/Control/Print]
>[2010/12/05 19:58:01.073784,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2010/12/05 19:58:01.073819, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.073859, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.073890, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.073920, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [SYSTEM]
>[2010/12/05 19:58:01.073953, 11] lib/adt_tree.c:118(pathtree_birth_child)
>  pathtree_birth_child: Looking for crib; infant -> [SYSTEM], child -> [SOFTWARE]
>[2010/12/05 19:58:01.073984, 11] lib/adt_tree.c:125(pathtree_birth_child)
>  pathtree_birth_child: storing infant in i == [1]
>[2010/12/05 19:58:01.074016, 11] lib/adt_tree.c:135(pathtree_birth_child)
>  pathtree_birth_child: Exiting loop (i == [1])
>[2010/12/05 19:58:01.074047, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [CurrentControlSet]
>[2010/12/05 19:58:01.074080, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [SYSTEM]! [CurrentControlSet]
>[2010/12/05 19:58:01.074111, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Control]
>[2010/12/05 19:58:01.074144, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [CurrentControlSet]! [Control]
>[2010/12/05 19:58:01.074175, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Print]
>[2010/12/05 19:58:01.074206, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [Control]! [Print]
>[2010/12/05 19:58:01.074237, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/Print] to tree
>[2010/12/05 19:58:01.074268,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2010/12/05 19:58:01.074304, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7fc982091640 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers]
>[2010/12/05 19:58:01.074341,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2010/12/05 19:58:01.074372, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.074403, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.074434, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.074465, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.074495, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SOFTWARE]
>[2010/12/05 19:58:01.074526, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Samba]
>[2010/12/05 19:58:01.074557, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Microsoft]
>[2010/12/05 19:58:01.074589, 11] lib/adt_tree.c:118(pathtree_birth_child)
>  pathtree_birth_child: Looking for crib; infant -> [Microsoft], child -> [Samba]
>[2010/12/05 19:58:01.074620, 11] lib/adt_tree.c:135(pathtree_birth_child)
>  pathtree_birth_child: Exiting loop (i == [0])
>[2010/12/05 19:58:01.074650, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Windows NT]
>[2010/12/05 19:58:01.074683, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [Microsoft]! [Windows NT]
>[2010/12/05 19:58:01.074715, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [CurrentVersion]
>[2010/12/05 19:58:01.074775, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [Windows NT]! [CurrentVersion]
>[2010/12/05 19:58:01.074808, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Print]
>[2010/12/05 19:58:01.074840, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [CurrentVersion]! [Print]
>[2010/12/05 19:58:01.074872, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Printers]
>[2010/12/05 19:58:01.074903, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [Print]! [Printers]
>[2010/12/05 19:58:01.074935, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/Printers] to tree
>[2010/12/05 19:58:01.074968,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2010/12/05 19:58:01.075019, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7fc982091640 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports]
>[2010/12/05 19:58:01.075054,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2010/12/05 19:58:01.075085, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.075115, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.075146, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.075177, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.075207, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SOFTWARE]
>[2010/12/05 19:58:01.075238, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Microsoft]
>[2010/12/05 19:58:01.075268, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Samba]
>[2010/12/05 19:58:01.075299, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Microsoft]
>[2010/12/05 19:58:01.075330, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Windows NT]
>[2010/12/05 19:58:01.075360, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Windows NT]
>[2010/12/05 19:58:01.075391, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentVersion]
>[2010/12/05 19:58:01.075422, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentVersion]
>[2010/12/05 19:58:01.075453, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Print]
>[2010/12/05 19:58:01.075483, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Ports]
>[2010/12/05 19:58:01.075516, 11] lib/adt_tree.c:118(pathtree_birth_child)
>  pathtree_birth_child: Looking for crib; infant -> [Ports], child -> [Print]
>[2010/12/05 19:58:01.075548, 11] lib/adt_tree.c:135(pathtree_birth_child)
>  pathtree_birth_child: Exiting loop (i == [0])
>[2010/12/05 19:58:01.075578, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Ports] to tree
>[2010/12/05 19:58:01.075611,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2010/12/05 19:58:01.075647, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7fc9820916a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares]
>[2010/12/05 19:58:01.075680,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2010/12/05 19:58:01.075711, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.075742, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.075773, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.075835, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.075869, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.075901, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.075932, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.075964, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.075995, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Services]
>[2010/12/05 19:58:01.076027, 11] lib/adt_tree.c:118(pathtree_birth_child)
>  pathtree_birth_child: Looking for crib; infant -> [Services], child -> [Control]
>[2010/12/05 19:58:01.076059, 11] lib/adt_tree.c:125(pathtree_birth_child)
>  pathtree_birth_child: storing infant in i == [1]
>[2010/12/05 19:58:01.076090, 11] lib/adt_tree.c:135(pathtree_birth_child)
>  pathtree_birth_child: Exiting loop (i == [1])
>[2010/12/05 19:58:01.076121, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [LanmanServer]
>[2010/12/05 19:58:01.076154, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [Services]! [LanmanServer]
>[2010/12/05 19:58:01.076185, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Shares]
>[2010/12/05 19:58:01.076216, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [LanmanServer]! [Shares]
>[2010/12/05 19:58:01.076247, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/Shares] to tree
>[2010/12/05 19:58:01.076281,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2010/12/05 19:58:01.076315, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7fc9820914a0 for key [/HKLM/SOFTWARE/Samba/smbconf]
>[2010/12/05 19:58:01.076348,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2010/12/05 19:58:01.076380, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.076410, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.076441, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.076471, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.076501, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SOFTWARE]
>[2010/12/05 19:58:01.076532, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Microsoft]
>[2010/12/05 19:58:01.076563, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Samba]
>[2010/12/05 19:58:01.076594, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Samba]
>[2010/12/05 19:58:01.076624, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [smbconf]
>[2010/12/05 19:58:01.076655, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [smbconf]
>[2010/12/05 19:58:01.076687, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SOFTWARE/Samba/smbconf] to tree
>[2010/12/05 19:58:01.076718,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2010/12/05 19:58:01.076753, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7fc982091700 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/Parameters]
>[2010/12/05 19:58:01.076787,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2010/12/05 19:58:01.076818, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.076848, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.076905, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.076938, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.076969, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.077000, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.077032, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.077063, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.077094, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.077124, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.077155, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.077186, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Netlogon]
>[2010/12/05 19:58:01.077218, 11] lib/adt_tree.c:118(pathtree_birth_child)
>  pathtree_birth_child: Looking for crib; infant -> [Netlogon], child -> [LanmanServer]
>[2010/12/05 19:58:01.077250, 11] lib/adt_tree.c:125(pathtree_birth_child)
>  pathtree_birth_child: storing infant in i == [1]
>[2010/12/05 19:58:01.077280, 11] lib/adt_tree.c:135(pathtree_birth_child)
>  pathtree_birth_child: Exiting loop (i == [1])
>[2010/12/05 19:58:01.077312, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Parameters]
>[2010/12/05 19:58:01.077345, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [Netlogon]! [Parameters]
>[2010/12/05 19:58:01.077376, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/Parameters] to tree
>[2010/12/05 19:58:01.077410,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2010/12/05 19:58:01.077446, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7fc982091760 for key [/HKLM/SYSTEM/CurrentControlSet/Control/ProductOptions]
>[2010/12/05 19:58:01.077480,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2010/12/05 19:58:01.077511, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.077542, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.077573, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.077604, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.077635, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.077666, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.077698, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.077729, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.077760, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.077792, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Control]
>[2010/12/05 19:58:01.077823, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Print]
>[2010/12/05 19:58:01.077854, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [ProductOptions]
>[2010/12/05 19:58:01.077887, 11] lib/adt_tree.c:118(pathtree_birth_child)
>  pathtree_birth_child: Looking for crib; infant -> [ProductOptions], child -> [Print]
>[2010/12/05 19:58:01.077919, 11] lib/adt_tree.c:125(pathtree_birth_child)
>  pathtree_birth_child: storing infant in i == [1]
>[2010/12/05 19:58:01.077976, 11] lib/adt_tree.c:135(pathtree_birth_child)
>  pathtree_birth_child: Exiting loop (i == [1])
>[2010/12/05 19:58:01.078011, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Control/ProductOptions] to tree
>[2010/12/05 19:58:01.078051,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2010/12/05 19:58:01.078088, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7fc9820917c0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/Parameters]
>[2010/12/05 19:58:01.078123,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2010/12/05 19:58:01.078154, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.078185, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.078216, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.078247, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.078278, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.078309, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.078341, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.078373, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.078404, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.078435, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.078466, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.078498, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Netlogon]
>[2010/12/05 19:58:01.078529, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Tcpip]
>[2010/12/05 19:58:01.078562, 11] lib/adt_tree.c:118(pathtree_birth_child)
>  pathtree_birth_child: Looking for crib; infant -> [Tcpip], child -> [Netlogon]
>[2010/12/05 19:58:01.078593, 11] lib/adt_tree.c:125(pathtree_birth_child)
>  pathtree_birth_child: storing infant in i == [2]
>[2010/12/05 19:58:01.078624, 11] lib/adt_tree.c:135(pathtree_birth_child)
>  pathtree_birth_child: Exiting loop (i == [2])
>[2010/12/05 19:58:01.078655, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Parameters]
>[2010/12/05 19:58:01.078686, 11] lib/adt_tree.c:101(pathtree_birth_child)
>  pathtree_birth_child: First child of node [Tcpip]! [Parameters]
>[2010/12/05 19:58:01.078718, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/Parameters] to tree
>[2010/12/05 19:58:01.078751,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2010/12/05 19:58:01.078783, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7fc982091820 for key [/HKPT]
>[2010/12/05 19:58:01.078814,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2010/12/05 19:58:01.078845, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.078876, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [HKPT]
>[2010/12/05 19:58:01.078908, 11] lib/adt_tree.c:118(pathtree_birth_child)
>  pathtree_birth_child: Looking for crib; infant -> [HKPT], child -> [HKLM]
>[2010/12/05 19:58:01.078940, 11] lib/adt_tree.c:125(pathtree_birth_child)
>  pathtree_birth_child: storing infant in i == [1]
>[2010/12/05 19:58:01.078971, 11] lib/adt_tree.c:135(pathtree_birth_child)
>  pathtree_birth_child: Exiting loop (i == [1])
>[2010/12/05 19:58:01.079028, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKPT] to tree
>[2010/12/05 19:58:01.079086,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2010/12/05 19:58:01.079129, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7fc982091880 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion]
>[2010/12/05 19:58:01.079163,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2010/12/05 19:58:01.079194, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.079226, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.079257, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.079288, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.079320, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.079351, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SOFTWARE]
>[2010/12/05 19:58:01.079383, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Microsoft]
>[2010/12/05 19:58:01.079414, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Samba]
>[2010/12/05 19:58:01.079446, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Microsoft]
>[2010/12/05 19:58:01.079477, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Windows NT]
>[2010/12/05 19:58:01.079509, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Windows NT]
>[2010/12/05 19:58:01.079541, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentVersion]
>[2010/12/05 19:58:01.079572, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentVersion]
>[2010/12/05 19:58:01.079604, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion] to tree
>[2010/12/05 19:58:01.079637,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2010/12/05 19:58:01.079675, 10] registry/reg_cachehook.c:97(reghook_cache_add)
>  reghook_cache_add: Adding ops 0x7fc9820918e0 for key [/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Perflib]
>[2010/12/05 19:58:01.079709,  8] lib/adt_tree.c:200(pathtree_add)
>  pathtree_add: Enter
>[2010/12/05 19:58:01.079741, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.079772, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.079803, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.079834, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.079866, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.079897, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SOFTWARE]
>[2010/12/05 19:58:01.079929, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Microsoft]
>[2010/12/05 19:58:01.079960, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Samba]
>[2010/12/05 19:58:01.079992, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Microsoft]
>[2010/12/05 19:58:01.080024, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Windows NT]
>[2010/12/05 19:58:01.080055, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Windows NT]
>[2010/12/05 19:58:01.080087, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentVersion]
>[2010/12/05 19:58:01.080119, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentVersion]
>[2010/12/05 19:58:01.080150, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Ports]
>[2010/12/05 19:58:01.080208, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Perflib]
>[2010/12/05 19:58:01.080242, 11] lib/adt_tree.c:118(pathtree_birth_child)
>  pathtree_birth_child: Looking for crib; infant -> [Perflib], child -> [Print]
>[2010/12/05 19:58:01.080274, 11] lib/adt_tree.c:118(pathtree_birth_child)
>  pathtree_birth_child: Looking for crib; infant -> [Perflib], child -> [Ports]
>[2010/12/05 19:58:01.080305, 11] lib/adt_tree.c:135(pathtree_birth_child)
>  pathtree_birth_child: Exiting loop (i == [0])
>[2010/12/05 19:58:01.080336, 10] lib/adt_tree.c:267(pathtree_add)
>  pathtree_add: Successfully added node [HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Perflib] to tree
>[2010/12/05 19:58:01.080369,  8] lib/adt_tree.c:269(pathtree_add)
>  pathtree_add: Exit
>[2010/12/05 19:58:01.080401, 20] registry/reg_cachehook.c:144(reghook_dump_cache)
>  reghook_dump_cache: Starting cache dump now...
>[2010/12/05 19:58:01.080433, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/: [HKLM] (NULL)
>[2010/12/05 19:58:01.080471, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/: [SOFTWARE] (NULL)
>[2010/12/05 19:58:01.080505, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SOFTWARE/: [Microsoft] (NULL)
>[2010/12/05 19:58:01.080540, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SOFTWARE/Microsoft/: [Windows NT] (NULL)
>[2010/12/05 19:58:01.080574, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/: [CurrentVersion] (data)
>[2010/12/05 19:58:01.080621, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Perflib] (data)
>[2010/12/05 19:58:01.080657, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Ports] (data)
>[2010/12/05 19:58:01.080693, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/: [Print] (NULL)
>[2010/12/05 19:58:01.080727, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Print/: [Printers] (data)
>[2010/12/05 19:58:01.080763, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SOFTWARE/: [Samba] (NULL)
>[2010/12/05 19:58:01.080796, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SOFTWARE/Samba/: [smbconf] (data)
>[2010/12/05 19:58:01.080830, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/: [SYSTEM] (NULL)
>[2010/12/05 19:58:01.080863, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SYSTEM/: [CurrentControlSet] (NULL)
>[2010/12/05 19:58:01.080896, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SYSTEM/CurrentControlSet/: [Control] (NULL)
>[2010/12/05 19:58:01.080937, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SYSTEM/CurrentControlSet/Control/: [Print] (data)
>[2010/12/05 19:58:01.080973, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SYSTEM/CurrentControlSet/Control/: [ProductOptions] (data)
>[2010/12/05 19:58:01.081009, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SYSTEM/CurrentControlSet/: [Services] (NULL)
>[2010/12/05 19:58:01.081043, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [LanmanServer] (NULL)
>[2010/12/05 19:58:01.081078, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SYSTEM/CurrentControlSet/Services/LanmanServer/: [Shares] (data)
>[2010/12/05 19:58:01.081113, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [Netlogon] (NULL)
>[2010/12/05 19:58:01.081148, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/: [Parameters] (data)
>[2010/12/05 19:58:01.081189, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SYSTEM/CurrentControlSet/Services/: [Tcpip] (NULL)
>[2010/12/05 19:58:01.081224, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/HKLM/SYSTEM/CurrentControlSet/Services/Tcpip/: [Parameters] (data)
>[2010/12/05 19:58:01.081272, 20] lib/adt_tree.c:295(pathtree_print_children)
>  ROOT/: [HKPT] (data)
>[2010/12/05 19:58:01.081687,  5] lib/gencache.c:65(gencache_init)
>  Opening cache file at /var/lib/samba/gencache.tdb
>[2010/12/05 19:58:01.081838,  5] lib/gencache.c:108(gencache_init)
>  Opening cache file at /var/lib/samba/gencache_notrans.tdb
>[2010/12/05 19:58:01.085761, 10] lib/gencache.c:334(gencache_get_data_blob)
>  Cache entry with key = IDMAP/UID2SID/0 couldn't be found 
>[2010/12/05 19:58:01.091808,  5] passdb/lookup_sid.c:1342(uid_to_sid)
>  uid_to_sid: winbind failed to find a sid for uid 0
>[2010/12/05 19:58:01.091869,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.091910,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.091948,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.091982,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.092017,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.092220,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:01.092260,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.092292,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:01.092324,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.092355,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.092534,  4] passdb/pdb_tdb.c:518(tdbsam_open)
>  tdbsam_open: successfully opened /etc/samba/passdb.tdb
>[2010/12/05 19:58:01.092582,  5] passdb/pdb_tdb.c:557(tdbsam_getsampwnam)
>  pdb_getsampwnam (TDB): error fetching database.
>   Key: USER_root
>[2010/12/05 19:58:01.092633,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.092666,  5] passdb/pdb_interface.c:1214(pdb_default_uid_to_sid)
>  pdb_default_uid_to_sid: Did not find user root (0)
>[2010/12/05 19:58:01.092711,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.092749, 10] passdb/lookup_sid.c:1159(legacy_uid_to_sid)
>  LEGACY: uid 0 -> sid S-1-22-1-0
>[2010/12/05 19:58:01.092819, 10] lib/gencache.c:334(gencache_get_data_blob)
>  Cache entry with key = IDMAP/GID2SID/0 couldn't be found 
>[2010/12/05 19:58:01.095199,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.095362,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.095457,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.095540,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.095626,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.095710,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.095795,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.095880,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.097044,  5] passdb/lookup_sid.c:1395(gid_to_sid)
>  gid_to_sid: winbind failed to find a sid for gid 0
>[2010/12/05 19:58:01.097092,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.097127,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.097159,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.097191,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.097221,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.095964,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.105955,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.106056,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.106151,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.106239,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.106266,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.106308, 10] passdb/lookup_sid.c:1190(legacy_gid_to_sid)
>  LEGACY: gid 0 -> sid S-1-22-2-0
>[2010/12/05 19:58:01.106326,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.106353, 10] auth/token_util.c:356(create_local_nt_token)
>  Create local NT token for S-1-22-1-0
>[2010/12/05 19:58:01.106392, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  pcap_cache_add_specific: Adding name dummy0 info dummy0
>[2010/12/05 19:58:01.106422, 10] lib/gencache.c:345(gencache_get_data_blob)
>[2010/12/05 19:58:01.106441, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  Returning expired cache entry: key = IDMAP/SID2GID/S-1-5-32-544, value = -1, timeout = Sun Dec  5 19:55:47 2010
>  pcap_cache_add_specific: Adding name samsung_bw info Samsung CLP-550N via Generic PCL 6/PCL XL Printer
>[2010/12/05 19:58:01.106513, 10] lib/gencache.c:180(gencache_set_data_blob)
>[2010/12/05 19:58:01.106535, 11] printing/pcap.c:86(pcap_cache_add_specific)
>  Adding cache entry with key = IDMAP/SID2GID/S-1-5-32-544 and timeout = Thu Jan  1 01:00:00 1970
>  pcap_cache_add_specific: Adding name samsung_color info Samsung CLP-550N Foomatic/Postscript (recommended)
>   (-1291575481 seconds in the past)
>[2010/12/05 19:58:01.107679, 11] printing/print_cups.c:120(send_pcap_info)
>  send_pcap_info: writing namelen 14
>[2010/12/05 19:58:01.107737, 11] printing/print_cups.c:126(send_pcap_info)
>  send_pcap_info: writing infolen 51
>[2010/12/05 19:58:01.107773, 11] printing/print_cups.c:133(send_pcap_info)
>  send_pcap_info: writing name samsung_color
>[2010/12/05 19:58:01.107810, 11] printing/print_cups.c:141(send_pcap_info)
>  send_pcap_info: writing info Samsung CLP-550N Foomatic/Postscript (recommended)
>[2010/12/05 19:58:01.107845, 11] printing/print_cups.c:120(send_pcap_info)
>  send_pcap_info: writing namelen 11
>[2010/12/05 19:58:01.107877, 11] printing/print_cups.c:126(send_pcap_info)
>  send_pcap_info: writing infolen 50
>[2010/12/05 19:58:01.107910, 11] printing/print_cups.c:133(send_pcap_info)
>  send_pcap_info: writing name samsung_bw
>[2010/12/05 19:58:01.107942, 11] printing/print_cups.c:141(send_pcap_info)
>  send_pcap_info: writing info Samsung CLP-550N via Generic PCL 6/PCL XL Printer
>[2010/12/05 19:58:01.107993, 11] printing/print_cups.c:120(send_pcap_info)
>  send_pcap_info: writing namelen 7
>[2010/12/05 19:58:01.108029, 11] printing/print_cups.c:126(send_pcap_info)
>  send_pcap_info: writing infolen 7
>[2010/12/05 19:58:01.108061, 11] printing/print_cups.c:133(send_pcap_info)
>  send_pcap_info: writing name dummy0
>[2010/12/05 19:58:01.108094, 11] printing/print_cups.c:141(send_pcap_info)
>  send_pcap_info: writing info dummy0
>[2010/12/05 19:58:01.113227, 10] passdb/lookup_sid.c:1519(sid_to_gid)
>  winbind failed to find a gid for sid S-1-5-32-544
>[2010/12/05 19:58:01.113300,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.113340,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.113375,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.113410,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.113443,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.113705,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.113744, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-5-32-544
>[2010/12/05 19:58:01.113780,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.113813,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.113844,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.113877,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.113907,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.113973,  3] auth/token_util.c:436(create_local_nt_token)
>  Failed to fetch domain sid for WORKGROUP
>[2010/12/05 19:58:01.114015,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.114080, 10] lib/gencache.c:345(gencache_get_data_blob)
>  Returning expired cache entry: key = IDMAP/SID2GID/S-1-5-32-545, value = -1, timeout = Sun Dec  5 19:55:47 2010
>[2010/12/05 19:58:01.114151, 10] lib/gencache.c:180(gencache_set_data_blob)
>  Adding cache entry with key = IDMAP/SID2GID/S-1-5-32-545 and timeout = Thu Jan  1 01:00:00 1970
>   (-1291575481 seconds in the past)
>[2010/12/05 19:58:01.118746, 10] passdb/lookup_sid.c:1519(sid_to_gid)
>  winbind failed to find a gid for sid S-1-5-32-545
>[2010/12/05 19:58:01.118795,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.118831,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.118864,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.118897,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.118927,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.119060,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.119097, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-5-32-545
>[2010/12/05 19:58:01.119133,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.119165,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.119196,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.119228,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.119258,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.119319,  3] auth/token_util.c:467(create_local_nt_token)
>  Failed to fetch domain sid for WORKGROUP
>[2010/12/05 19:58:01.119360,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.119394,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.119427,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.119458,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.119490,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.119520,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.119884,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.120066,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-22-1-0]
>[2010/12/05 19:58:01.120123,  5] lib/privileges.c:128(get_privileges_for_sids)
>  get_privileges_for_sids: sid = S-1-5-32-544
>  Privilege set:
>  SE_PRIV  0xff0 0x0 0x0 0x0
>[2010/12/05 19:58:01.120239,  5] lib/privileges.c:128(get_privileges_for_sids)
>  get_privileges_for_sids: sid = S-1-1-0
>  Privilege set:
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2010/12/05 19:58:01.120321,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2010/12/05 19:58:01.120367,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-11]
>[2010/12/05 19:58:01.120420,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2010/12/05 19:58:01.120461, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (3)
>[2010/12/05 19:58:01.120508, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2010/12/05 19:58:01.120542, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2010/12/05 19:58:01.120575, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => []
>[2010/12/05 19:58:01.120608, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.120642, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.120674, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.120706, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.120737, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.120768, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM]
>[2010/12/05 19:58:01.120805, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM]
>[2010/12/05 19:58:01.120862, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 20) -> 4
>[2010/12/05 19:58:01.120900, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 16) -> 9
>[2010/12/05 19:58:01.120953, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 7) -> 7
>[2010/12/05 19:58:01.120992, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.121030, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2010/12/05 19:58:01.121106,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2010/12/05 19:58:01.121141, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2010/12/05 19:58:01.121178, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.121211, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.121246, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM]
>[2010/12/05 19:58:01.121279, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.121311, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.121342, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.121374, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => []
>[2010/12/05 19:58:01.121406, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.121438, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.121470, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.121501, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.121540, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.121600, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.121636, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM]
>[2010/12/05 19:58:01.121681, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.121728, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 22) -> 4
>[2010/12/05 19:58:01.121763, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 18) -> 18
>[2010/12/05 19:58:01.121798, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.121833, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2010/12/05 19:58:01.121875, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.121928,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2010/12/05 19:58:01.121964, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (5)
>[2010/12/05 19:58:01.122002, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.122043, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.122075, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.122108, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.122139, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.122170, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.122201, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet]
>[2010/12/05 19:58:01.122234, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.122266, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.122297, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.122328, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => []
>[2010/12/05 19:58:01.122360, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.122393, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.122425, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.122455, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.122486, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.122520, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.122572, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.122621, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 21) -> 4
>[2010/12/05 19:58:01.122656, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 17) -> 8
>[2010/12/05 19:58:01.122691, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.122728, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.122762, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.122805, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.122859, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (5)
>[2010/12/05 19:58:01.122923,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2010/12/05 19:58:01.122957, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (5)
>[2010/12/05 19:58:01.122995, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.123028, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.123060, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.123095, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.123126, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.123157, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.123188, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services]
>[2010/12/05 19:58:01.123220, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.123251, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.123282, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.123312, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services]
>[2010/12/05 19:58:01.123344, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.123376, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.123407, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => []
>[2010/12/05 19:58:01.123446, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.123479, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.123511, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.123542, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.123572, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.123603, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.123637, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.123683, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.123732, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.123767, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.123802, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.123839, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.123882, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.123920, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.123958, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.124011, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.124049, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.124085, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.124158, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.124214, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (5)
>[2010/12/05 19:58:01.124248, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2010/12/05 19:58:01.124283, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.124327, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.124374, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.124408, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.124443, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.124481, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.124517, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.124554, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.124592, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.124629, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.124665, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.124725, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.124765, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.124813, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.124860, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.124894, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.124937, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.124975, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.125013, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.125050, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.125086, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.125123, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.125160, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.125207,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2010/12/05 19:58:01.125241, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2010/12/05 19:58:01.125277, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2010/12/05 19:58:01.125309, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2010/12/05 19:58:01.125339, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => []
>[2010/12/05 19:58:01.125371, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.125403, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.125433, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.125464, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.125495, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.125525, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM]
>[2010/12/05 19:58:01.125559, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM]
>[2010/12/05 19:58:01.125609, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 20) -> 4
>[2010/12/05 19:58:01.125644, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 16) -> 9
>[2010/12/05 19:58:01.125709, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 7) -> 7
>[2010/12/05 19:58:01.125746, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.125781, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2010/12/05 19:58:01.125845,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2010/12/05 19:58:01.125881, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (5)
>[2010/12/05 19:58:01.125918, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.125950, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.125982, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM]
>[2010/12/05 19:58:01.126014, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.126046, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.126076, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.126108, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => []
>[2010/12/05 19:58:01.126139, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.126170, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.126201, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.126232, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.126262, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.126293, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.126327, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM]
>[2010/12/05 19:58:01.126377, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.126423, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 22) -> 4
>[2010/12/05 19:58:01.126458, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 18) -> 18
>[2010/12/05 19:58:01.126492, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.126527, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2010/12/05 19:58:01.126567, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.126619,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2010/12/05 19:58:01.126654, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.126692, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.126724, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.126756, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.126788, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.126821, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.126852, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.126883, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet]
>[2010/12/05 19:58:01.126951, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.126984, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.127015, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.127045, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => []
>[2010/12/05 19:58:01.127077, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.127109, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.127140, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.127170, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.127200, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.127234, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.127278, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.127326, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 21) -> 4
>[2010/12/05 19:58:01.127360, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 17) -> 8
>[2010/12/05 19:58:01.127395, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.127438, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.127474, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.127516, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.127569, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.127603,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2010/12/05 19:58:01.127636, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.127673, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.127705, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.127737, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.127769, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.127800, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.127831, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.127861, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services]
>[2010/12/05 19:58:01.127893, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.127924, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.127954, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.128031, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services]
>[2010/12/05 19:58:01.128065, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.128096, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.128127, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => []
>[2010/12/05 19:58:01.128181, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.128214, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.128245, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.128276, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.128306, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.128343, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.128379, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.128426, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.128474, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.128509, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.128544, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.128580, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.128616, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.128654, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.128690, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.128738, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.128776, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.128812, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.128856, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.128910, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.128944,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Spooler]
>[2010/12/05 19:58:01.128977, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.129015, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler]
>[2010/12/05 19:58:01.129047, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler]
>[2010/12/05 19:58:01.129079, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/Spooler]
>[2010/12/05 19:58:01.129111, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.129142, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.129172, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.129203, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/Spooler]
>[2010/12/05 19:58:01.129235, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.129265, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.129296, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.129327, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/Spooler]
>[2010/12/05 19:58:01.129359, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.129390, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.129450, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => [Spooler]
>[2010/12/05 19:58:01.129483, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.129514, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.129544, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.129575, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Spooler], new_path => []
>[2010/12/05 19:58:01.129606, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.129638, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Netlogon]
>[2010/12/05 19:58:01.129669, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Tcpip]
>[2010/12/05 19:58:01.129700, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Spooler]
>[2010/12/05 19:58:01.129730, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.129761, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.129799, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler]
>[2010/12/05 19:58:01.129836, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2010/12/05 19:58:01.129883, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.129932, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 13) -> 4
>[2010/12/05 19:58:01.129967, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.130001, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.130036, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2010/12/05 19:58:01.130080, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.130134, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.130168, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (5)
>[2010/12/05 19:58:01.130202, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2010/12/05 19:58:01.130248, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.130295, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 13) -> 4
>[2010/12/05 19:58:01.130330, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.130364, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.130420, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.130459, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2010/12/05 19:58:01.130507, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.130553, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 13) -> 4
>[2010/12/05 19:58:01.130589, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.130623, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.130916,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.131015,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.131104,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.131217,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.131301,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.131383,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.131465,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.131548,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.131630,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.131713,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.131801,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.131894,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.131997,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.132086,  5] lib/charcnv.c:98(charset_name)
>  Substituting charset 'UTF-8' for LOCALE
>[2010/12/05 19:58:01.132170, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler] 
>[2010/12/05 19:58:01.132219, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.132260, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 0) -> 4
>[2010/12/05 19:58:01.132341, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -4) -> 18
>[2010/12/05 19:58:01.132378, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -22) -> 17
>[2010/12/05 19:58:01.132411, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -39) -> 25
>[2010/12/05 19:58:01.132443, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -64) -> 43
>[2010/12/05 19:58:01.132474, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -107) -> 48
>[2010/12/05 19:58:01.132506, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -155) -> 76
>[2010/12/05 19:58:01.132538, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -231) -> 126
>[2010/12/05 19:58:01.132570, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 357) -> 4
>[2010/12/05 19:58:01.132602, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 353) -> 18
>[2010/12/05 19:58:01.132634, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 335) -> 17
>[2010/12/05 19:58:01.132666, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 318) -> 25
>[2010/12/05 19:58:01.132697, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 293) -> 43
>[2010/12/05 19:58:01.132729, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 250) -> 48
>[2010/12/05 19:58:01.132761, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 202) -> 76
>[2010/12/05 19:58:01.132793, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 126) -> 126
>[2010/12/05 19:58:01.132845, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2010/12/05 19:58:01.132891,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2010/12/05 19:58:01.132925, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2010/12/05 19:58:01.132961, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2010/12/05 19:58:01.132992, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2010/12/05 19:58:01.133023, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => []
>[2010/12/05 19:58:01.133054, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.133085, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.133116, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.133146, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.133204, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.133235, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM]
>[2010/12/05 19:58:01.133269, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM]
>[2010/12/05 19:58:01.133319, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 20) -> 4
>[2010/12/05 19:58:01.133357, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 16) -> 9
>[2010/12/05 19:58:01.133391, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 7) -> 7
>[2010/12/05 19:58:01.133428, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.133463, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2010/12/05 19:58:01.133519,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2010/12/05 19:58:01.133554, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (5)
>[2010/12/05 19:58:01.133591, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.133623, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.133654, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM]
>[2010/12/05 19:58:01.133686, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.133717, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.133748, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.133778, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => []
>[2010/12/05 19:58:01.133810, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.133841, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.133872, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.133903, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.133933, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.133963, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.133997, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM]
>[2010/12/05 19:58:01.134039, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.134085, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 22) -> 4
>[2010/12/05 19:58:01.134120, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 18) -> 18
>[2010/12/05 19:58:01.134159, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.134194, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2010/12/05 19:58:01.134235, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.134286,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2010/12/05 19:58:01.134322, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.134360, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.134392, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.134424, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.134484, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.134517, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.134548, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.134578, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet]
>[2010/12/05 19:58:01.134610, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.134641, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.134672, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.134703, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => []
>[2010/12/05 19:58:01.134734, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.134766, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.134797, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.134828, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.134858, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.134892, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.134936, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.134983, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 21) -> 4
>[2010/12/05 19:58:01.135018, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 17) -> 8
>[2010/12/05 19:58:01.135052, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.135089, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.135126, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.135168, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.135221, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.135255,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2010/12/05 19:58:01.135288, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.135326, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.135358, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.135390, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.135423, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.135453, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.135484, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.135515, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services]
>[2010/12/05 19:58:01.135547, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.135578, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.135609, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.135667, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services]
>[2010/12/05 19:58:01.135701, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.135732, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.135764, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => []
>[2010/12/05 19:58:01.135796, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.135827, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.135858, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.135890, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.135921, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.135951, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.136013, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.136062, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.136110, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.136145, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.136180, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.136217, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.136252, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.136289, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.136325, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.136371, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.136409, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.136446, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.136489, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.136543, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.136579,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Spooler]
>[2010/12/05 19:58:01.136612, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.136651, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler]
>[2010/12/05 19:58:01.136683, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler]
>[2010/12/05 19:58:01.136715, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/Spooler]
>[2010/12/05 19:58:01.136747, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.136779, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.136810, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.136841, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/Spooler]
>[2010/12/05 19:58:01.136873, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.136932, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.136967, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.136998, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/Spooler]
>[2010/12/05 19:58:01.137029, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.137060, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.137092, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => [Spooler]
>[2010/12/05 19:58:01.137123, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.137154, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.137185, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.137242, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Spooler], new_path => []
>[2010/12/05 19:58:01.137257, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.137272, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Netlogon]
>[2010/12/05 19:58:01.137286, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Tcpip]
>[2010/12/05 19:58:01.137300, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Spooler]
>[2010/12/05 19:58:01.137315, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.137329, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.137343, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler]
>[2010/12/05 19:58:01.137361, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2010/12/05 19:58:01.137382, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.137404, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 13) -> 4
>[2010/12/05 19:58:01.137421, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.137437, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.137453, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler]
>[2010/12/05 19:58:01.137473, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.137500, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.137517,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Security]
>[2010/12/05 19:58:01.137532, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.137551, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security]
>[2010/12/05 19:58:01.137567, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security]
>[2010/12/05 19:58:01.137582, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/Spooler/Security]
>[2010/12/05 19:58:01.137598, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.137613, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.137627, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.137657, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/Spooler/Security]
>[2010/12/05 19:58:01.137673, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.137688, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.137703, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.137718, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/Spooler/Security]
>[2010/12/05 19:58:01.137733, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.137756, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.137772, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => [Spooler/Security]
>[2010/12/05 19:58:01.137787, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.137802, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.137817, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.137831, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Spooler], new_path => [Security]
>[2010/12/05 19:58:01.137846, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.137861, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Netlogon]
>[2010/12/05 19:58:01.137876, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Tcpip]
>[2010/12/05 19:58:01.137890, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Spooler]
>[2010/12/05 19:58:01.137905, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.137920, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.137935, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/Spooler/Security]
>[2010/12/05 19:58:01.137952, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
>[2010/12/05 19:58:01.137974, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.137997, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal)
>  regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
>[2010/12/05 19:58:01.138015, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security]
>[2010/12/05 19:58:01.138038, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.138063, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.138080, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (5)
>[2010/12/05 19:58:01.138114, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\Spooler\Security] 
>[2010/12/05 19:58:01.138137, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.138155, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 0) -> 4
>[2010/12/05 19:58:01.138170, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -4) -> 137
>[2010/12/05 19:58:01.138185, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 141) -> 4
>[2010/12/05 19:58:01.138200, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 137) -> 137
>[2010/12/05 19:58:01.138236, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2010/12/05 19:58:01.138262, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.138280, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.138301, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.138323, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.138339, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.138355, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.138371, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.138388, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.138405, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.138422, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.138439, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.138455, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.138474,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2010/12/05 19:58:01.138490, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2010/12/05 19:58:01.138508, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2010/12/05 19:58:01.138522, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2010/12/05 19:58:01.138537, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => []
>[2010/12/05 19:58:01.138552, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.138566, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.138581, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.138595, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.138610, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.138624, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM]
>[2010/12/05 19:58:01.138640, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM]
>[2010/12/05 19:58:01.138663, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 20) -> 4
>[2010/12/05 19:58:01.138680, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 16) -> 9
>[2010/12/05 19:58:01.138696, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 7) -> 7
>[2010/12/05 19:58:01.138713, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.138731, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2010/12/05 19:58:01.138758,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2010/12/05 19:58:01.138775, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (5)
>[2010/12/05 19:58:01.138793, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.138808, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.138822, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM]
>[2010/12/05 19:58:01.138837, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.138853, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.138868, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.138896, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => []
>[2010/12/05 19:58:01.138911, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.138926, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.138940, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.138955, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.138969, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.138983, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.138999, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM]
>[2010/12/05 19:58:01.139019, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.139041, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 22) -> 4
>[2010/12/05 19:58:01.139057, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 18) -> 18
>[2010/12/05 19:58:01.139073, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.139090, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2010/12/05 19:58:01.139110, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.139135,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2010/12/05 19:58:01.139151, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.139169, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.139184, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.139199, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.139214, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.139233, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.139247, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.139262, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet]
>[2010/12/05 19:58:01.139277, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.139292, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.139306, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.139321, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => []
>[2010/12/05 19:58:01.139336, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.139351, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.139365, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.139380, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.139394, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.139410, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.139431, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.139466, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 21) -> 4
>[2010/12/05 19:58:01.139482, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 17) -> 8
>[2010/12/05 19:58:01.139499, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.139516, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.139533, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.139553, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.139577, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.139594,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2010/12/05 19:58:01.139610, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.139628, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.139643, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.139657, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.139673, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.139687, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.139703, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.139717, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services]
>[2010/12/05 19:58:01.139732, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.139747, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.139761, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.139780, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services]
>[2010/12/05 19:58:01.139795, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.139809, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.139824, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => []
>[2010/12/05 19:58:01.139839, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.139854, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.139868, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.139883, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.139897, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.139911, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.139927, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.139948, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.139970, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.139997, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.140013, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.140030, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.140060, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.140078, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.140095, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.140115, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.140133, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.140151, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.140173, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.140198, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.140215,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [NETLOGON]
>[2010/12/05 19:58:01.140231, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.140249, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2010/12/05 19:58:01.140264, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2010/12/05 19:58:01.140279, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2010/12/05 19:58:01.140294, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.140309, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.140324, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.140338, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/NETLOGON]
>[2010/12/05 19:58:01.140353, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.140368, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.140382, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.140397, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/NETLOGON]
>[2010/12/05 19:58:01.140412, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.140426, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.140441, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => [NETLOGON]
>[2010/12/05 19:58:01.140456, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.140470, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.140485, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.140499, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [NETLOGON], new_path => []
>[2010/12/05 19:58:01.140514, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.140530, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Netlogon]
>[2010/12/05 19:58:01.140544, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Tcpip]
>[2010/12/05 19:58:01.140558, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [NETLOGON]
>[2010/12/05 19:58:01.140573, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.140587, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.140614, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2010/12/05 19:58:01.140632, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2010/12/05 19:58:01.140653, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.140676, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 24) -> 4
>[2010/12/05 19:58:01.140692, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 11
>[2010/12/05 19:58:01.140709, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.140727, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.140744, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2010/12/05 19:58:01.140765, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.140791, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.140807, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (5)
>[2010/12/05 19:58:01.140823, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2010/12/05 19:58:01.140844, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.140866, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 24) -> 4
>[2010/12/05 19:58:01.140882, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 11
>[2010/12/05 19:58:01.140899, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.140916, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.140939, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.140957, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2010/12/05 19:58:01.140979, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.141000, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 24) -> 4
>[2010/12/05 19:58:01.141017, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 11
>[2010/12/05 19:58:01.141033, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.141050, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.141087, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON] 
>[2010/12/05 19:58:01.141109, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.141127, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 0) -> 4
>[2010/12/05 19:58:01.141142, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -4) -> 18
>[2010/12/05 19:58:01.141156, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -22) -> 17
>[2010/12/05 19:58:01.141171, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -39) -> 25
>[2010/12/05 19:58:01.141186, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -64) -> 43
>[2010/12/05 19:58:01.141201, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -107) -> 40
>[2010/12/05 19:58:01.141216, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -147) -> 76
>[2010/12/05 19:58:01.141231, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -223) -> 186
>[2010/12/05 19:58:01.141246, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 409) -> 4
>[2010/12/05 19:58:01.141261, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 405) -> 18
>[2010/12/05 19:58:01.141276, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 387) -> 17
>[2010/12/05 19:58:01.141304, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 370) -> 25
>[2010/12/05 19:58:01.141319, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 345) -> 43
>[2010/12/05 19:58:01.141334, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 302) -> 40
>[2010/12/05 19:58:01.141349, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 262) -> 76
>[2010/12/05 19:58:01.141364, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 186) -> 186
>[2010/12/05 19:58:01.141389, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2010/12/05 19:58:01.141409,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2010/12/05 19:58:01.141424, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2010/12/05 19:58:01.141442, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2010/12/05 19:58:01.141457, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2010/12/05 19:58:01.141471, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => []
>[2010/12/05 19:58:01.141486, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.141500, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.141515, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.141529, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.141543, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.141557, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM]
>[2010/12/05 19:58:01.141573, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM]
>[2010/12/05 19:58:01.141595, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 20) -> 4
>[2010/12/05 19:58:01.141612, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 16) -> 9
>[2010/12/05 19:58:01.141628, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 7) -> 7
>[2010/12/05 19:58:01.141645, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.141661, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2010/12/05 19:58:01.141687,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2010/12/05 19:58:01.141704, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (5)
>[2010/12/05 19:58:01.141721, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.141736, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.141750, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM]
>[2010/12/05 19:58:01.141765, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.141780, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.141794, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.141809, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => []
>[2010/12/05 19:58:01.141824, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.141838, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.141853, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.141867, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.141881, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.141908, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.141925, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM]
>[2010/12/05 19:58:01.141944, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.141966, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 22) -> 4
>[2010/12/05 19:58:01.141982, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 18) -> 18
>[2010/12/05 19:58:01.141998, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.142015, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2010/12/05 19:58:01.142034, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.142058,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2010/12/05 19:58:01.142075, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.142092, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.142107, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.142122, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.142137, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.142151, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.142166, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.142180, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet]
>[2010/12/05 19:58:01.142195, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.142210, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.142224, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.142239, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => []
>[2010/12/05 19:58:01.142254, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.142269, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.142284, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.142298, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.142312, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.142328, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.142349, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.142371, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 21) -> 4
>[2010/12/05 19:58:01.142387, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 17) -> 8
>[2010/12/05 19:58:01.142403, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.142424, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.142443, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.142465, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.142503, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.142520,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2010/12/05 19:58:01.142536, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.142554, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.142569, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.142584, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.142599, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.142614, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.142628, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.142642, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services]
>[2010/12/05 19:58:01.142657, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.142672, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.142686, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.142701, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services]
>[2010/12/05 19:58:01.142715, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.142730, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.142745, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => []
>[2010/12/05 19:58:01.142760, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.142774, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.142789, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.142803, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.142817, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.142831, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.142847, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.142869, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.142891, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.142907, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.142923, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.142940, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.142957, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.142974, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.142995, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.143013, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.143030, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.143048, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.143083, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.143109, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.143126,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [NETLOGON]
>[2010/12/05 19:58:01.143142, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.143160, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2010/12/05 19:58:01.143175, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2010/12/05 19:58:01.143190, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2010/12/05 19:58:01.143205, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.143220, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.143235, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.143249, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/NETLOGON]
>[2010/12/05 19:58:01.143264, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.143279, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.143293, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.143308, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/NETLOGON]
>[2010/12/05 19:58:01.143323, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.143337, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.143352, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => [NETLOGON]
>[2010/12/05 19:58:01.143367, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.143381, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.143396, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.143410, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [NETLOGON], new_path => []
>[2010/12/05 19:58:01.143425, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.143440, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Netlogon]
>[2010/12/05 19:58:01.143454, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Tcpip]
>[2010/12/05 19:58:01.143469, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [NETLOGON]
>[2010/12/05 19:58:01.143483, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.143497, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.143512, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON]
>[2010/12/05 19:58:01.143529, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2010/12/05 19:58:01.143550, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.143572, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 24) -> 4
>[2010/12/05 19:58:01.143589, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 11
>[2010/12/05 19:58:01.143619, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.143637, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.143654, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON]
>[2010/12/05 19:58:01.143675, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.143701, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.143717,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Security]
>[2010/12/05 19:58:01.143733, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.143752, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security]
>[2010/12/05 19:58:01.143768, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security]
>[2010/12/05 19:58:01.143783, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/NETLOGON/Security]
>[2010/12/05 19:58:01.143804, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.143819, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.143833, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.143848, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/NETLOGON/Security]
>[2010/12/05 19:58:01.143864, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.143879, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.143893, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.143907, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/NETLOGON/Security]
>[2010/12/05 19:58:01.143922, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.143938, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.143953, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => [NETLOGON/Security]
>[2010/12/05 19:58:01.143968, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.143992, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.144007, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.144022, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [NETLOGON], new_path => [Security]
>[2010/12/05 19:58:01.144037, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.144052, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Netlogon]
>[2010/12/05 19:58:01.144066, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Tcpip]
>[2010/12/05 19:58:01.144081, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [NETLOGON]
>[2010/12/05 19:58:01.144096, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Security], new_path => []
>[2010/12/05 19:58:01.144110, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Parameters]
>[2010/12/05 19:58:01.144126, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [Security]
>[2010/12/05 19:58:01.144153, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.144168, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.144182, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/NETLOGON/Security]
>[2010/12/05 19:58:01.144199, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
>[2010/12/05 19:58:01.144222, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 32) -> 4
>[2010/12/05 19:58:01.144244, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal)
>  regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
>[2010/12/05 19:58:01.144261, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security]
>[2010/12/05 19:58:01.144283, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 32) -> 4
>[2010/12/05 19:58:01.144315, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.144332, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (5)
>[2010/12/05 19:58:01.144354, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\NETLOGON\Security] 
>[2010/12/05 19:58:01.144377, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 32) -> 4
>[2010/12/05 19:58:01.144394, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 0) -> 4
>[2010/12/05 19:58:01.144409, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -4) -> 137
>[2010/12/05 19:58:01.144424, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 141) -> 4
>[2010/12/05 19:58:01.144440, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 137) -> 137
>[2010/12/05 19:58:01.144463, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2010/12/05 19:58:01.144487, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.144506, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.144527, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.144549, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.144565, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.144581, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.144598, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.144615, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.144632, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.144649, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.144667, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.144684, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.144703,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2010/12/05 19:58:01.144719, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2010/12/05 19:58:01.144736, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2010/12/05 19:58:01.144751, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2010/12/05 19:58:01.144765, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => []
>[2010/12/05 19:58:01.144780, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.144795, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.144823, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.144838, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.144853, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.144867, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM]
>[2010/12/05 19:58:01.144883, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM]
>[2010/12/05 19:58:01.144907, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 20) -> 4
>[2010/12/05 19:58:01.144923, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 16) -> 9
>[2010/12/05 19:58:01.144940, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 7) -> 7
>[2010/12/05 19:58:01.144957, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.144974, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2010/12/05 19:58:01.145002,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2010/12/05 19:58:01.145019, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (5)
>[2010/12/05 19:58:01.145036, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.145051, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.145066, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM]
>[2010/12/05 19:58:01.145081, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.145096, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.145110, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.145125, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => []
>[2010/12/05 19:58:01.145140, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.145154, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.145169, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.145183, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.145198, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.145212, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.145228, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM]
>[2010/12/05 19:58:01.145248, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.145269, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 22) -> 4
>[2010/12/05 19:58:01.145285, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 18) -> 18
>[2010/12/05 19:58:01.145302, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.145318, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2010/12/05 19:58:01.145338, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.145367,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2010/12/05 19:58:01.145384, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.145401, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.145429, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.145445, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.145460, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.145475, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.145489, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.145504, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet]
>[2010/12/05 19:58:01.145518, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.145533, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.145547, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.145562, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => []
>[2010/12/05 19:58:01.145577, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.145591, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.145606, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.145620, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.145634, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.145650, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.145671, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.145693, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 21) -> 4
>[2010/12/05 19:58:01.145709, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 17) -> 8
>[2010/12/05 19:58:01.145725, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.145742, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.145759, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.145779, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.145807, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.145823,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2010/12/05 19:58:01.145839, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.145857, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.145872, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.145887, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.145902, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.145917, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.145931, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.145946, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services]
>[2010/12/05 19:58:01.145961, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.145991, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.146006, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.146020, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services]
>[2010/12/05 19:58:01.146035, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.146050, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.146065, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => []
>[2010/12/05 19:58:01.146080, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.146094, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.146109, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.146123, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.146137, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.146151, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.146168, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.146190, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.146212, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.146229, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.146245, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.146262, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.146282, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.146300, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.146317, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.146334, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.146351, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.146370, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.146391, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.146416, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.146433,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [RemoteRegistry]
>[2010/12/05 19:58:01.146449, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.146468, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2010/12/05 19:58:01.146484, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2010/12/05 19:58:01.146499, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2010/12/05 19:58:01.146515, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.146531, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.146545, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.146560, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/RemoteRegistry]
>[2010/12/05 19:58:01.146589, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.146604, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.146619, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.146634, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/RemoteRegistry]
>[2010/12/05 19:58:01.146649, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.146664, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.146679, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry]
>[2010/12/05 19:58:01.146694, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.146709, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.146724, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.146739, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [RemoteRegistry], new_path => []
>[2010/12/05 19:58:01.146754, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.146769, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Netlogon]
>[2010/12/05 19:58:01.146783, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Tcpip]
>[2010/12/05 19:58:01.146798, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [RemoteRegistry]
>[2010/12/05 19:58:01.146813, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.146828, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.146842, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2010/12/05 19:58:01.146859, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2010/12/05 19:58:01.146881, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.146904, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 13) -> 4
>[2010/12/05 19:58:01.146920, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.146941, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.146958, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2010/12/05 19:58:01.146979, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.147005, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.147021, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (5)
>[2010/12/05 19:58:01.147038, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2010/12/05 19:58:01.147060, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.147082, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 13) -> 4
>[2010/12/05 19:58:01.147098, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.147114, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.147138, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.147170, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2010/12/05 19:58:01.147193, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.147215, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 13) -> 4
>[2010/12/05 19:58:01.147231, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.147248, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.147281, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry] 
>[2010/12/05 19:58:01.147304, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.147322, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 0) -> 4
>[2010/12/05 19:58:01.147337, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -4) -> 18
>[2010/12/05 19:58:01.147352, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -22) -> 17
>[2010/12/05 19:58:01.147367, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -39) -> 25
>[2010/12/05 19:58:01.147382, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -64) -> 43
>[2010/12/05 19:58:01.147397, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -107) -> 68
>[2010/12/05 19:58:01.147411, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -175) -> 76
>[2010/12/05 19:58:01.147427, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -251) -> 146
>[2010/12/05 19:58:01.147442, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 397) -> 4
>[2010/12/05 19:58:01.147457, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 393) -> 18
>[2010/12/05 19:58:01.147471, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 375) -> 17
>[2010/12/05 19:58:01.147486, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 358) -> 25
>[2010/12/05 19:58:01.147501, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 333) -> 43
>[2010/12/05 19:58:01.147520, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 290) -> 68
>[2010/12/05 19:58:01.147535, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 222) -> 76
>[2010/12/05 19:58:01.147549, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 146) -> 146
>[2010/12/05 19:58:01.147576, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2010/12/05 19:58:01.147595,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2010/12/05 19:58:01.147611, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2010/12/05 19:58:01.147628, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2010/12/05 19:58:01.147643, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2010/12/05 19:58:01.147658, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => []
>[2010/12/05 19:58:01.147672, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.147687, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.147701, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.147716, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.147730, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.147744, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM]
>[2010/12/05 19:58:01.147760, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM]
>[2010/12/05 19:58:01.147784, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 20) -> 4
>[2010/12/05 19:58:01.147800, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 16) -> 9
>[2010/12/05 19:58:01.147829, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 7) -> 7
>[2010/12/05 19:58:01.147847, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.147863, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2010/12/05 19:58:01.147889,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2010/12/05 19:58:01.147906, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (5)
>[2010/12/05 19:58:01.147923, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.147938, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.147952, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM]
>[2010/12/05 19:58:01.147967, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.147992, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.148007, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.148021, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => []
>[2010/12/05 19:58:01.148036, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.148051, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.148065, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.148080, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.148094, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.148108, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.148124, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM]
>[2010/12/05 19:58:01.148143, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.148165, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 22) -> 4
>[2010/12/05 19:58:01.148181, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 18) -> 18
>[2010/12/05 19:58:01.148197, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.148213, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2010/12/05 19:58:01.148232, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.148257,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2010/12/05 19:58:01.148274, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.148291, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.148306, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.148321, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.148336, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.148350, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.148365, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.148379, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet]
>[2010/12/05 19:58:01.148394, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.148422, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.148437, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.148451, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => []
>[2010/12/05 19:58:01.148467, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.148482, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.148497, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.148511, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.148526, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.148542, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.148563, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.148584, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 21) -> 4
>[2010/12/05 19:58:01.148600, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 17) -> 8
>[2010/12/05 19:58:01.148617, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.148634, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.148653, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.148674, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.148699, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.148715,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2010/12/05 19:58:01.148731, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.148750, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.148765, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.148780, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.148795, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.148810, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.148824, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.148839, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services]
>[2010/12/05 19:58:01.148854, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.148869, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.148883, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.148898, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services]
>[2010/12/05 19:58:01.148913, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.148928, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.148942, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => []
>[2010/12/05 19:58:01.148957, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.148986, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.149001, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.149019, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.149034, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.149048, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.149064, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.149086, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.149109, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.149125, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.149141, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.149158, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.149175, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.149193, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.149210, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.149227, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.149244, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.149261, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.149281, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.149306, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.149322,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [RemoteRegistry]
>[2010/12/05 19:58:01.149338, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.149356, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2010/12/05 19:58:01.149372, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2010/12/05 19:58:01.149387, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2010/12/05 19:58:01.149402, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.149417, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.149431, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.149446, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/RemoteRegistry]
>[2010/12/05 19:58:01.149461, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.149475, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.149490, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.149505, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/RemoteRegistry]
>[2010/12/05 19:58:01.149520, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.149535, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.149563, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry]
>[2010/12/05 19:58:01.149578, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.149593, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.149608, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.149626, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [RemoteRegistry], new_path => []
>[2010/12/05 19:58:01.149641, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.149656, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Netlogon]
>[2010/12/05 19:58:01.149671, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Tcpip]
>[2010/12/05 19:58:01.149685, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [RemoteRegistry]
>[2010/12/05 19:58:01.149700, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.149715, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.149729, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry]
>[2010/12/05 19:58:01.149746, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2010/12/05 19:58:01.149769, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.149791, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 13) -> 4
>[2010/12/05 19:58:01.149807, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.149823, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.149840, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
>[2010/12/05 19:58:01.149861, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.149886, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.149902,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Security]
>[2010/12/05 19:58:01.149917, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.149936, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security]
>[2010/12/05 19:58:01.149953, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security]
>[2010/12/05 19:58:01.149968, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security]
>[2010/12/05 19:58:01.149988, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.150003, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.150017, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.150032, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/RemoteRegistry/Security]
>[2010/12/05 19:58:01.150048, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.150063, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.150077, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.150105, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/RemoteRegistry/Security]
>[2010/12/05 19:58:01.150121, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.150136, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.150151, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => [RemoteRegistry/Security]
>[2010/12/05 19:58:01.150166, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.150180, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.150195, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.150209, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [RemoteRegistry], new_path => [Security]
>[2010/12/05 19:58:01.150224, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.150239, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Netlogon]
>[2010/12/05 19:58:01.150253, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Tcpip]
>[2010/12/05 19:58:01.150268, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [RemoteRegistry]
>[2010/12/05 19:58:01.150283, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.150297, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.150315, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/RemoteRegistry/Security]
>[2010/12/05 19:58:01.150332, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
>[2010/12/05 19:58:01.150355, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.150377, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal)
>  regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
>[2010/12/05 19:58:01.150394, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security]
>[2010/12/05 19:58:01.150416, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.150441, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.150457, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (5)
>[2010/12/05 19:58:01.150486, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\RemoteRegistry\Security] 
>[2010/12/05 19:58:01.150509, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.150527, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 0) -> 4
>[2010/12/05 19:58:01.150542, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -4) -> 137
>[2010/12/05 19:58:01.150557, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 141) -> 4
>[2010/12/05 19:58:01.150572, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 137) -> 137
>[2010/12/05 19:58:01.150594, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2010/12/05 19:58:01.150620, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.150639, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.150660, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.150695, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.150711, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.150727, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.150744, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.150761, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.150778, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.150794, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.150811, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.150828, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.150847,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2010/12/05 19:58:01.150863, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2010/12/05 19:58:01.150880, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2010/12/05 19:58:01.150894, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2010/12/05 19:58:01.150909, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => []
>[2010/12/05 19:58:01.150923, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.150938, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.150952, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.150966, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.150981, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.150995, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM]
>[2010/12/05 19:58:01.151010, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM]
>[2010/12/05 19:58:01.151033, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 20) -> 4
>[2010/12/05 19:58:01.151050, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 16) -> 9
>[2010/12/05 19:58:01.151066, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 7) -> 7
>[2010/12/05 19:58:01.151083, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.151099, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2010/12/05 19:58:01.151125,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2010/12/05 19:58:01.151141, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (5)
>[2010/12/05 19:58:01.151159, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.151174, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.151188, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM]
>[2010/12/05 19:58:01.151203, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.151218, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.151232, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.151247, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => []
>[2010/12/05 19:58:01.151262, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.151276, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.151291, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.151319, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.151333, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.151348, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.151364, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM]
>[2010/12/05 19:58:01.151383, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.151405, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 22) -> 4
>[2010/12/05 19:58:01.151421, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 18) -> 18
>[2010/12/05 19:58:01.151437, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.151453, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2010/12/05 19:58:01.151472, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.151496,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2010/12/05 19:58:01.151513, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.151531, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.151546, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.151561, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.151576, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.151590, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.151605, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.151620, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet]
>[2010/12/05 19:58:01.151635, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.151649, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.151665, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.151679, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => []
>[2010/12/05 19:58:01.151694, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.151714, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.151729, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.151744, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.151758, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.151774, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.151794, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.151816, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 21) -> 4
>[2010/12/05 19:58:01.151832, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 17) -> 8
>[2010/12/05 19:58:01.151848, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.151866, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.151882, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.151915, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.151943, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.151960,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2010/12/05 19:58:01.151984, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.152003, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.152018, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.152033, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.152049, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.152063, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.152078, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.152093, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services]
>[2010/12/05 19:58:01.152108, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.152123, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.152137, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.152152, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services]
>[2010/12/05 19:58:01.152167, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.152182, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.152197, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => []
>[2010/12/05 19:58:01.152212, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.152227, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.152241, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.152256, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.152270, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.152285, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.152301, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.152328, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.152350, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.152367, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.152383, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.152400, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.152417, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.152434, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.152451, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.152468, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.152489, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.152520, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.152542, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.152567, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.152583,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [WINS]
>[2010/12/05 19:58:01.152598, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.152616, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS]
>[2010/12/05 19:58:01.152631, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS]
>[2010/12/05 19:58:01.152646, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/WINS]
>[2010/12/05 19:58:01.152661, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.152676, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.152690, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.152704, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/WINS]
>[2010/12/05 19:58:01.152719, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.152734, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.152748, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.152763, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/WINS]
>[2010/12/05 19:58:01.152778, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.152792, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.152807, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => [WINS]
>[2010/12/05 19:58:01.152822, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.152837, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.152851, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.152866, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [WINS], new_path => []
>[2010/12/05 19:58:01.152881, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.152895, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Netlogon]
>[2010/12/05 19:58:01.152910, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Tcpip]
>[2010/12/05 19:58:01.152924, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [WINS]
>[2010/12/05 19:58:01.152939, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.152953, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.152967, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS]
>[2010/12/05 19:58:01.152988, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2010/12/05 19:58:01.153009, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.153045, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 13) -> 4
>[2010/12/05 19:58:01.153062, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.153079, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.153095, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2010/12/05 19:58:01.153116, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.153141, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.153157, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (5)
>[2010/12/05 19:58:01.153173, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2010/12/05 19:58:01.153194, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.153216, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 13) -> 4
>[2010/12/05 19:58:01.153232, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.153249, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.153272, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.153290, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2010/12/05 19:58:01.153312, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.153334, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 13) -> 4
>[2010/12/05 19:58:01.153350, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.153367, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.153407, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS] 
>[2010/12/05 19:58:01.153430, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.153447, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 0) -> 4
>[2010/12/05 19:58:01.153462, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -4) -> 18
>[2010/12/05 19:58:01.153477, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -22) -> 17
>[2010/12/05 19:58:01.153492, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -39) -> 25
>[2010/12/05 19:58:01.153507, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -64) -> 43
>[2010/12/05 19:58:01.153521, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -107) -> 94
>[2010/12/05 19:58:01.153536, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -201) -> 76
>[2010/12/05 19:58:01.153551, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -277) -> 200
>[2010/12/05 19:58:01.153569, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 477) -> 4
>[2010/12/05 19:58:01.153585, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 473) -> 18
>[2010/12/05 19:58:01.153600, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 455) -> 17
>[2010/12/05 19:58:01.153615, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 438) -> 25
>[2010/12/05 19:58:01.153630, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 413) -> 43
>[2010/12/05 19:58:01.153645, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 370) -> 94
>[2010/12/05 19:58:01.153659, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 276) -> 76
>[2010/12/05 19:58:01.153674, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 200) -> 200
>[2010/12/05 19:58:01.153698, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2010/12/05 19:58:01.153716,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [HKLM]
>[2010/12/05 19:58:01.153732, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (4)
>[2010/12/05 19:58:01.153763, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM]
>[2010/12/05 19:58:01.153778, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM]
>[2010/12/05 19:58:01.153792, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => []
>[2010/12/05 19:58:01.153807, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.153822, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.153836, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.153851, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.153865, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.153879, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM]
>[2010/12/05 19:58:01.153895, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM]
>[2010/12/05 19:58:01.153918, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 20) -> 4
>[2010/12/05 19:58:01.153935, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 16) -> 9
>[2010/12/05 19:58:01.153952, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 7) -> 7
>[2010/12/05 19:58:01.153969, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.153985, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM]
>[2010/12/05 19:58:01.154011,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [SYSTEM]
>[2010/12/05 19:58:01.154028, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (5)
>[2010/12/05 19:58:01.154046, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.154061, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.154076, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM]
>[2010/12/05 19:58:01.154091, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.154106, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.154121, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.154136, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => []
>[2010/12/05 19:58:01.154151, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.154166, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.154181, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.154196, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.154210, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.154225, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM]
>[2010/12/05 19:58:01.154242, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM]
>[2010/12/05 19:58:01.154261, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.154283, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 22) -> 4
>[2010/12/05 19:58:01.154299, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 18) -> 18
>[2010/12/05 19:58:01.154316, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.154333, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM]
>[2010/12/05 19:58:01.154367, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 28) -> 4
>[2010/12/05 19:58:01.154392,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [CurrentControlSet]
>[2010/12/05 19:58:01.154408, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.154427, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.154442, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.154457, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.154472, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.154487, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.154501, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.154516, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet]
>[2010/12/05 19:58:01.154531, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.154546, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.154561, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.154575, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => []
>[2010/12/05 19:58:01.154590, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.154605, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.154620, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.154635, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.154649, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet]
>[2010/12/05 19:58:01.154665, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.154686, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.154708, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 21) -> 4
>[2010/12/05 19:58:01.154724, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 17) -> 8
>[2010/12/05 19:58:01.154740, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.154757, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [2] items
>[2010/12/05 19:58:01.154774, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet]
>[2010/12/05 19:58:01.154793, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 26) -> 4
>[2010/12/05 19:58:01.154817, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.154834,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Services]
>[2010/12/05 19:58:01.154850, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.154868, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.154883, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.154898, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.154926, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.154942, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.154956, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.154971, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services]
>[2010/12/05 19:58:01.154986, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.155000, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.155015, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.155029, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services]
>[2010/12/05 19:58:01.155044, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.155059, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.155074, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => []
>[2010/12/05 19:58:01.155090, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.155105, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.155119, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.155134, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.155148, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.155162, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services]
>[2010/12/05 19:58:01.155178, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.155200, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.155222, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 69) -> 4
>[2010/12/05 19:58:01.155238, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 65) -> 13
>[2010/12/05 19:58:01.155255, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 52) -> 9
>[2010/12/05 19:58:01.155276, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 43) -> 6
>[2010/12/05 19:58:01.155293, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 37) -> 9
>[2010/12/05 19:58:01.155310, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 28) -> 8
>[2010/12/05 19:58:01.155328, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 20) -> 15
>[2010/12/05 19:58:01.155345, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 5) -> 5
>[2010/12/05 19:58:01.155362, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [7] items
>[2010/12/05 19:58:01.155379, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services]
>[2010/12/05 19:58:01.155399, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 29) -> 4
>[2010/12/05 19:58:01.155424, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.155440,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [WINS]
>[2010/12/05 19:58:01.155456, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.155474, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS]
>[2010/12/05 19:58:01.155489, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS]
>[2010/12/05 19:58:01.155517, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/WINS]
>[2010/12/05 19:58:01.155533, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.155547, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.155562, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.155576, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/WINS]
>[2010/12/05 19:58:01.155591, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.155606, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.155620, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.155635, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/WINS]
>[2010/12/05 19:58:01.155650, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.155665, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.155679, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => [WINS]
>[2010/12/05 19:58:01.155695, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.155709, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.155728, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.155742, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [WINS], new_path => []
>[2010/12/05 19:58:01.155757, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.155772, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Netlogon]
>[2010/12/05 19:58:01.155787, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Tcpip]
>[2010/12/05 19:58:01.155801, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [WINS]
>[2010/12/05 19:58:01.155816, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.155830, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.155845, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS]
>[2010/12/05 19:58:01.155862, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2010/12/05 19:58:01.155883, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.155905, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 13) -> 4
>[2010/12/05 19:58:01.155922, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(f, 9) -> 9
>[2010/12/05 19:58:01.155938, 11] registry/reg_backend_db.c:1509(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Exit [1] items
>[2010/12/05 19:58:01.155955, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS]
>[2010/12/05 19:58:01.155984, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 97) -> 4
>[2010/12/05 19:58:01.156014, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.156031,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [Security]
>[2010/12/05 19:58:01.156046, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (6)
>[2010/12/05 19:58:01.156064, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security]
>[2010/12/05 19:58:01.156093, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security]
>[2010/12/05 19:58:01.156108, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SYSTEM/CurrentControlSet/Services/WINS/Security]
>[2010/12/05 19:58:01.156124, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:01.156138, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:01.156153, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:01.156167, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SYSTEM], new_path => [CurrentControlSet/Services/WINS/Security]
>[2010/12/05 19:58:01.156182, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:01.156197, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:01.156211, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SYSTEM]
>[2010/12/05 19:58:01.156226, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [CurrentControlSet], new_path => [Services/WINS/Security]
>[2010/12/05 19:58:01.156241, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [CurrentControlSet]
>[2010/12/05 19:58:01.156256, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [CurrentControlSet]
>[2010/12/05 19:58:01.156270, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Services], new_path => [WINS/Security]
>[2010/12/05 19:58:01.156285, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Control]
>[2010/12/05 19:58:01.156300, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Services]
>[2010/12/05 19:58:01.156314, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Services]
>[2010/12/05 19:58:01.156329, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [WINS], new_path => [Security]
>[2010/12/05 19:58:01.156343, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [LanmanServer]
>[2010/12/05 19:58:01.156358, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Netlogon]
>[2010/12/05 19:58:01.156373, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Tcpip]
>[2010/12/05 19:58:01.156387, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [WINS]
>[2010/12/05 19:58:01.156405, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:01.156420, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:01.156434, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820913a0 for key [/HKLM/SYSTEM/CurrentControlSet/Services/WINS/Security]
>[2010/12/05 19:58:01.156451, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
>[2010/12/05 19:58:01.156474, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.156495, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal)
>  regdb_fetch_keys: no subkeys found for key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
>[2010/12/05 19:58:01.156512, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security]
>[2010/12/05 19:58:01.156533, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.156558, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (6)
>[2010/12/05 19:58:01.156574, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (5)
>[2010/12/05 19:58:01.156621, 10] registry/reg_backend_db.c:1663(regdb_store_values_internal)
>  regdb_store_values: Looking for value of key [HKLM\SYSTEM\CurrentControlSet\Services\WINS\Security] 
>[2010/12/05 19:58:01.156645, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 17) -> 4
>[2010/12/05 19:58:01.156663, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 0) -> 4
>[2010/12/05 19:58:01.156678, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, -4) -> 137
>[2010/12/05 19:58:01.156693, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(d, 141) -> 4
>[2010/12/05 19:58:01.156707, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(fdB, 137) -> 137
>[2010/12/05 19:58:01.156729, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (4)
>[2010/12/05 19:58:01.156755, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (3)
>[2010/12/05 19:58:01.156790, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2010/12/05 19:58:01.157091, 10] printing/nt_printing.c:707(update_c_setprinter)
>  update_c_setprinter: c_setprinter = 0
>[2010/12/05 19:58:01.157128,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.157147,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.157162,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.157178,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.157193,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.157221,  6] passdb/pdb_interface.c:285(pdb_getsampwsid)
>  pdb_getsampwsid: Building guest account
>[2010/12/05 19:58:01.158496, 10] passdb/pdb_get_set.c:608(pdb_set_username)
>  pdb_set_username: setting username nobody, was 
>[2010/12/05 19:58:01.158540, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 12 -> now SET
>[2010/12/05 19:58:01.158557, 10] passdb/pdb_get_set.c:677(pdb_set_fullname)
>  pdb_set_full_name: setting full name nobody, was 
>[2010/12/05 19:58:01.158573, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 13 -> now SET
>[2010/12/05 19:58:01.158590, 10] passdb/pdb_get_set.c:631(pdb_set_domain)
>  pdb_set_domain: setting domain GILES, was 
>[2010/12/05 19:58:01.158605, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 14 -> now DEFAULT
>[2010/12/05 19:58:01.158623, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501
>[2010/12/05 19:58:01.158642, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 18 -> now DEFAULT
>[2010/12/05 19:58:01.158657, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501
>[2010/12/05 19:58:01.158689,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.158743, 10] lib/system_smbd.c:122(sys_getgrouplist)
>  sys_getgrouplist: user [nobody]
>[2010/12/05 19:58:01.159969, 10] lib/gencache.c:334(gencache_get_data_blob)
>  Cache entry with key = IDMAP/GID2SID/65533 couldn't be found 
>[2010/12/05 19:58:01.161106,  5] passdb/lookup_sid.c:1395(gid_to_sid)
>  gid_to_sid: winbind failed to find a sid for gid 65533
>[2010/12/05 19:58:01.161132,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.161150,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.161166,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.161182,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.161197,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.161279,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.161297, 10] passdb/lookup_sid.c:1190(legacy_gid_to_sid)
>  LEGACY: gid 65533 -> sid S-1-22-2-65533
>[2010/12/05 19:58:01.161325, 10] lib/gencache.c:334(gencache_get_data_blob)
>  Cache entry with key = IDMAP/GID2SID/65534 couldn't be found 
>[2010/12/05 19:58:01.162445,  5] passdb/lookup_sid.c:1395(gid_to_sid)
>  gid_to_sid: winbind failed to find a sid for gid 65534
>[2010/12/05 19:58:01.162465,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.162481,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.162497,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.162513,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.162527,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.162577,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.162595, 10] passdb/lookup_sid.c:1190(legacy_gid_to_sid)
>  LEGACY: gid 65534 -> sid S-1-22-2-65534
>[2010/12/05 19:58:01.162614,  5] auth/auth_util.c:649(make_server_info_sam)
>  make_server_info_sam: made server info for user nobody -> nobody
>[2010/12/05 19:58:01.162637, 10] auth/token_util.c:356(create_local_nt_token)
>  Create local NT token for S-1-5-21-779886165-838294741-719422925-501
>[2010/12/05 19:58:01.162668, 10] lib/gencache.c:345(gencache_get_data_blob)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-544, value = -1, timeout = Sun Dec  5 20:00:01 2010
>[2010/12/05 19:58:01.162700,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.162717,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.162732,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.162747,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.162762,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.162820,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.162837, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-5-32-544
>[2010/12/05 19:58:01.162854,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.162869,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.162883,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.162901,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.162915,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.162946,  3] auth/token_util.c:436(create_local_nt_token)
>  Failed to fetch domain sid for WORKGROUP
>[2010/12/05 19:58:01.162966,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.162989, 10] lib/gencache.c:345(gencache_get_data_blob)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-32-545, value = -1, timeout = Sun Dec  5 20:00:01 2010
>[2010/12/05 19:58:01.163027,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.163044,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.163059,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.163075,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.163089,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.163154,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.163171, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-5-32-545
>[2010/12/05 19:58:01.163187,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.163202,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.163217,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.163232,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.163246,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.163273,  3] auth/token_util.c:467(create_local_nt_token)
>  Failed to fetch domain sid for WORKGROUP
>[2010/12/05 19:58:01.163293,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.163309,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.163324,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.163339,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.163353,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.163368,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.163581,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.163607,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-21-779886165-838294741-719422925-501]
>[2010/12/05 19:58:01.163630,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-22-2-65533]
>[2010/12/05 19:58:01.163652,  5] lib/privileges.c:128(get_privileges_for_sids)
>  get_privileges_for_sids: sid = S-1-1-0
>  Privilege set:
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2010/12/05 19:58:01.163684,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-2]
>[2010/12/05 19:58:01.163706,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-5-32-546]
>[2010/12/05 19:58:01.163728,  3] lib/privileges.c:63(get_privileges)
>  get_privileges: No privileges assigned to SID [S-1-22-2-65534]
>[2010/12/05 19:58:01.163755, 10] lib/gencache.c:345(gencache_get_data_blob)
>  Returning expired cache entry: key = IDMAP/SID2GID/S-1-1-0, value = -1, timeout = Sun Dec  5 19:55:47 2010
>[2010/12/05 19:58:01.163781, 10] lib/gencache.c:180(gencache_set_data_blob)
>  Adding cache entry with key = IDMAP/SID2GID/S-1-1-0 and timeout = Thu Jan  1 01:00:00 1970
>   (-1291575481 seconds in the past)
>[2010/12/05 19:58:01.165958, 10] passdb/lookup_sid.c:1519(sid_to_gid)
>  winbind failed to find a gid for sid S-1-1-0
>[2010/12/05 19:58:01.165981,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.165998,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.166013,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.166028,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.166043,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.166102,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.166120, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-1-0
>[2010/12/05 19:58:01.166136, 10] auth/auth_util.c:753(create_local_token)
>  Could not convert SID S-1-1-0 to gid, ignoring it
>[2010/12/05 19:58:01.166178, 10] lib/gencache.c:345(gencache_get_data_blob)
>  Returning expired cache entry: key = IDMAP/SID2GID/S-1-5-2, value = -1, timeout = Sun Dec  5 19:55:47 2010
>[2010/12/05 19:58:01.166205, 10] lib/gencache.c:180(gencache_set_data_blob)
>  Adding cache entry with key = IDMAP/SID2GID/S-1-5-2 and timeout = Thu Jan  1 01:00:00 1970
>   (-1291575481 seconds in the past)
>[2010/12/05 19:58:01.168195, 10] passdb/lookup_sid.c:1519(sid_to_gid)
>  winbind failed to find a gid for sid S-1-5-2
>[2010/12/05 19:58:01.168217,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.168235,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.168251,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.168266,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.168280,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.168341,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.168359, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-5-2
>[2010/12/05 19:58:01.168375, 10] auth/auth_util.c:753(create_local_token)
>  Could not convert SID S-1-5-2 to gid, ignoring it
>[2010/12/05 19:58:01.168402, 10] lib/gencache.c:345(gencache_get_data_blob)
>  Returning expired cache entry: key = IDMAP/SID2GID/S-1-5-32-546, value = -1, timeout = Sun Dec  5 19:55:47 2010
>[2010/12/05 19:58:01.168428, 10] lib/gencache.c:180(gencache_set_data_blob)
>  Adding cache entry with key = IDMAP/SID2GID/S-1-5-32-546 and timeout = Thu Jan  1 01:00:00 1970
>   (-1291575481 seconds in the past)
>[2010/12/05 19:58:01.170182, 10] passdb/lookup_sid.c:1519(sid_to_gid)
>  winbind failed to find a gid for sid S-1-5-32-546
>[2010/12/05 19:58:01.170205,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.170221,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.170237,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:01.170252,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:01.170266,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:01.170326,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:01.170344, 10] passdb/lookup_sid.c:1264(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-5-32-546
>[2010/12/05 19:58:01.170360, 10] auth/auth_util.c:753(create_local_token)
>  Could not convert SID S-1-5-32-546 to gid, ignoring it
>[2010/12/05 19:58:01.170379, 10] auth/token_util.c:531(debug_nt_user_token)
>  NT user token of user S-1-5-21-779886165-838294741-719422925-501
>  contains 7 SIDs
>  SID[  0]: S-1-5-21-779886165-838294741-719422925-501
>  SID[  1]: S-1-22-2-65533
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-32-546
>  SID[  5]: S-1-22-2-65534
>  SID[  6]: S-1-22-1-65534
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2010/12/05 19:58:01.170451, 10] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 65534
>  Primary group is 65533 and contains 2 supplementary groups
>  Group[  0]: 65533
>  Group[  1]: 65534
>[2010/12/05 19:58:01.170548,  3] printing/printing.c:1412(start_background_queue)
>  start_background_queue: Starting background LPQ thread
>[2010/12/05 19:58:01.171024,  5] printing/printing.c:1434(start_background_queue)
>  start_background_queue: background LPQ thread started
>[2010/12/05 19:58:01.171321, 10] lib/util_sock.c:888(open_socket_in)
>[2010/12/05 19:58:01.171346,  5] smbd/connection.c:142(claim_connection)
>  claiming [smbd lpq backend]
>  bind succeeded on port 445
>[2010/12/05 19:58:01.171409,  5] lib/util_sock.c:304(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>[2010/12/05 19:58:01.171441, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 0
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  Locking key C42F0000FFFFFFFFFFFFFFFF736D6264206C7071206261636B656E64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 87380
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>[2010/12/05 19:58:01.171533, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  	TCP_QUICKACK = 1
>  Allocated locked data 0x0x7fc98215a610
>[2010/12/05 19:58:01.171553,  5] lib/util_sock.c:304(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 1
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>[2010/12/05 19:58:01.171593, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 87380
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>  	TCP_QUICKACK = 1
>  Unlocking key C42F0000FFFFFFFFFFFFFFFF736D6264206C7071206261636B656E64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:01.171706,  5] printing/printing.c:1468(start_background_queue)
>[2010/12/05 19:58:01.171707, 10] lib/util_sock.c:888(open_socket_in)
>  start_background_queue: background LPQ thread waiting for messages
>  bind succeeded on port 139
>[2010/12/05 19:58:01.171743,  5] lib/util_sock.c:304(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 0
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 87380
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>  	TCP_QUICKACK = 1
>[2010/12/05 19:58:01.171851,  5] lib/util_sock.c:304(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 1
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 16384
>  	SO_RCVBUF = 87380
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>  	TCP_QUICKACK = 1
>[2010/12/05 19:58:01.172019,  2] lib/util_sock.c:875(open_socket_in)
>  bind failed on port 445 socket_addr = 0.0.0.0.
>  Error = Die Adresse wird bereits verwendet
>[2010/12/05 19:58:01.172237,  0] smbd/server.c:500(smbd_open_one_socket)
>  smbd_open_once_socket: open_socket_in: Die Adresse wird bereits verwendet
>[2010/12/05 19:58:01.172347,  2] lib/util_sock.c:875(open_socket_in)
>  bind failed on port 139 socket_addr = 0.0.0.0.
>  Error = Die Adresse wird bereits verwendet
>[2010/12/05 19:58:01.172375,  0] smbd/server.c:500(smbd_open_one_socket)
>  smbd_open_once_socket: open_socket_in: Die Adresse wird bereits verwendet
>[2010/12/05 19:58:01.172414,  5] smbd/connection.c:142(claim_connection)
>  claiming []
>[2010/12/05 19:58:01.172502, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key C02F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:01.172554, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7fc98215a990
>[2010/12/05 19:58:01.172601, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key C02F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:01.172699,  5] lib/messages.c:297(messaging_register)
>  Overriding messaging pointer for type 1 - private_data=(nil)
>[2010/12/05 19:58:01.173047,  2] smbd/server.c:721(smbd_parent_loop)
>  waiting for connections
>[2010/12/05 19:58:06.680009,  5] lib/util_sock.c:304(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 1
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 50844
>  	SO_RCVBUF = 87712
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>  	TCP_QUICKACK = 1
>[2010/12/05 19:58:06.680395,  5] lib/util_sock.c:304(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 1
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 50844
>  	SO_RCVBUF = 87712
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>  	TCP_QUICKACK = 1
>[2010/12/05 19:58:06.680918,  6] param/loadparm.c:7133(lp_file_list_changed)
>  lp_file_list_changed()
>  file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf  last mod_time: Sun Dec  5 18:06:27 2010
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Dec  5 19:34:56 2010
>  
>[2010/12/05 19:58:06.681293,  3] smbd/oplock.c:895(init_oplocks)
>  init_oplocks: initializing messages.
>[2010/12/05 19:58:06.681929,  3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks)
>  Linux kernel oplocks enabled
>[2010/12/05 19:58:06.681979,  5] lib/messages.c:329(messaging_deregister)
>  Deregistering messaging pointer for type 1 - private_data=(nil)
>[2010/12/05 19:58:06.682045, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Added timed event "smbd_idle_event_handler": 0x7fc982103e20
>[2010/12/05 19:58:06.682082, 10] smbd/process.c:740(event_add_idle)
>  event_add_idle: idle_evt(keepalive) 0x7fc982103e20
>[2010/12/05 19:58:06.682128, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Added timed event "smbd_idle_event_handler": 0x7fc982103ef0
>[2010/12/05 19:58:06.682162, 10] smbd/process.c:740(event_add_idle)
>  event_add_idle: idle_evt(deadtime) 0x7fc982103ef0
>[2010/12/05 19:58:06.682201, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Added timed event "smbd_idle_event_handler": 0x7fc98210c7a0
>[2010/12/05 19:58:06.682233, 10] smbd/process.c:740(event_add_idle)
>  event_add_idle: idle_evt(housekeeping) 0x7fc98210c7a0
>[2010/12/05 19:58:06.682338, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 190
>[2010/12/05 19:58:06.682391,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0xbe
>[2010/12/05 19:58:06.682427,  3] smbd/process.c:1485(process_smb)
>  Transaction 0 of length 194 (0 toread)
>[2010/12/05 19:58:06.682512,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.682536,  5] lib/util.c:627(show_msg)
>  size=190
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=12234
>  smb_uid=0
>  smb_mid=1
>  smt_wct=0
>  smb_bcc=155
>[2010/12/05 19:58:06.682688, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 02 50 43 20 4E 45 54 57   4F 52 4B 20 50 52 4F 47   .PC NETW ORK PROG
>  [0010] 52 41 4D 20 31 2E 30 00   02 4D 49 43 52 4F 53 4F   RAM 1.0. .MICROSO
>  [0020] 46 54 20 4E 45 54 57 4F   52 4B 53 20 31 2E 30 33   FT NETWO RKS 1.03
>  [0030] 00 02 4D 49 43 52 4F 53   4F 46 54 20 4E 45 54 57   ..MICROS OFT NETW
>  [0040] 4F 52 4B 53 20 33 2E 30   00 02 4C 41 4E 4D 41 4E   ORKS 3.0 ..LANMAN
>  [0050] 31 2E 30 00 02 4C 4D 31   2E 32 58 30 30 32 00 02   1.0..LM1 .2X002..
>  [0060] 44 4F 53 20 4C 41 4E 4D   41 4E 32 2E 31 00 02 4C   DOS LANM AN2.1..L
>  [0070] 41 4E 4D 41 4E 32 2E 31   00 02 53 61 6D 62 61 00   ANMAN2.1 ..Samba.
>  [0080] 02 4E 54 20 4C 41 4E 4D   41 4E 20 31 2E 30 00 02   .NT LANM AN 1.0..
>  [0090] 4E 54 20 4C 4D 20 30 2E   31 32 00                 NT LM 0. 12.
>[2010/12/05 19:58:06.683121,  3] smbd/process.c:1294(switch_message)
>  switch message SMBnegprot (pid 12235) conn 0x0
>[2010/12/05 19:58:06.683427,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBnegprot.19.req len 194
>[2010/12/05 19:58:06.683559,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.684028,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.684072,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.684145,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:06.684304,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [PC NETWORK PROGRAM 1.0]
>[2010/12/05 19:58:06.684347,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [MICROSOFT NETWORKS 1.03]
>[2010/12/05 19:58:06.684383,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [MICROSOFT NETWORKS 3.0]
>[2010/12/05 19:58:06.684418,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [LANMAN1.0]
>[2010/12/05 19:58:06.684452,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [LM1.2X002]
>[2010/12/05 19:58:06.684485,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [DOS LANMAN2.1]
>[2010/12/05 19:58:06.684519,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [LANMAN2.1]
>[2010/12/05 19:58:06.684552,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [Samba]
>[2010/12/05 19:58:06.684586,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [NT LANMAN 1.0]
>[2010/12/05 19:58:06.684620,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [NT LM 0.12]
>[2010/12/05 19:58:06.684665, 10] lib/util.c:1969(set_remote_arch)
>  set_remote_arch: Client arch is 'Samba'
>[2010/12/05 19:58:06.684726,  6] param/loadparm.c:7133(lp_file_list_changed)
>  lp_file_list_changed()
>  file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf  last mod_time: Sun Dec  5 18:06:27 2010
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Dec  5 19:34:56 2010
>  
>[2010/12/05 19:58:06.684854,  5] smbd/connection.c:142(claim_connection)
>  claiming []
>[2010/12/05 19:58:06.685055, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key CB2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:06.685129, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7fc98213d040
>[2010/12/05 19:58:06.685256, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key CB2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:06.685499,  6] param/loadparm.c:7133(lp_file_list_changed)
>  lp_file_list_changed()
>  file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf  last mod_time: Sun Dec  5 18:06:27 2010
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Dec  5 19:34:56 2010
>  
>[2010/12/05 19:58:06.685714,  3] smbd/negprot.c:404(reply_nt1)
>  using SPNEGO
>[2010/12/05 19:58:06.685749,  3] smbd/negprot.c:691(reply_negprot)
>  Selected protocol NT LANMAN 1.0
>[2010/12/05 19:58:06.685782,  5] smbd/negprot.c:698(reply_negprot)
>  negprot index=8
>[2010/12/05 19:58:06.685815,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.685835,  5] lib/util.c:627(show_msg)
>  size=127
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=12234
>  smb_uid=0
>  smb_mid=1
>  smt_wct=17
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=12803 (0x3203)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=51968 (0xCB00)
>  smb_vwv[ 8]=   47 (0x2F)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=33011 (0x80F3)
>  smb_vwv[11]=  128 (0x80)
>  smb_vwv[12]=44595 (0xAE33)
>  smb_vwv[13]=44633 (0xAE59)
>  smb_vwv[14]=52116 (0xCB94)
>  smb_vwv[15]=50177 (0xC401)
>  smb_vwv[16]=  255 (0xFF)
>  smb_bcc=58
>[2010/12/05 19:58:06.686176, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 67 69 6C 65 73 00 00 00   00 00 00 00 00 00 00 00   giles... ........
>  [0010] 60 28 06 06 2B 06 01 05   05 02 A0 1E 30 1C A0 0E   `(..+... ....0...
>  [0020] 30 0C 06 0A 2B 06 01 04   01 82 37 02 02 0A A3 0A   0...+... ..7.....
>  [0030] 30 08 A0 06 1B 04 4E 4F   4E 45                    0.....NO NE
>[2010/12/05 19:58:06.686849, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 162
>[2010/12/05 19:58:06.686895,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0xa2
>[2010/12/05 19:58:06.686930,  3] smbd/process.c:1485(process_smb)
>  Transaction 1 of length 166 (0 toread)
>[2010/12/05 19:58:06.686964,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.687003,  5] lib/util.c:627(show_msg)
>  size=162
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=12234
>  smb_uid=0
>  smb_mid=2
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=   80 (0x50)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=53340 (0xD05C)
>  smb_vwv[11]=32768 (0x8000)
>  smb_bcc=103
>[2010/12/05 19:58:06.687293, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 60 4E 06 06 2B 06 01 05   05 02 A0 44 30 42 A0 0E   `N..+... ...D0B..
>  [0010] 30 0C 06 0A 2B 06 01 04   01 82 37 02 02 0A A2 30   0...+... ..7....0
>  [0020] 04 2E 4E 54 4C 4D 53 53   50 00 01 00 00 00 15 82   ..NTLMSS P.......
>  [0030] 08 60 09 00 09 00 20 00   00 00 05 00 05 00 29 00   .`.... . ......).
>  [0040] 00 00 57 4F 52 4B 47 52   4F 55 50 47 49 4C 45 53   ..WORKGR OUPGILES
>  [0050] 00 55 00 6E 00 69 00 78   00 00 00 53 00 61 00 6D   .U.n.i.x ...S.a.m
>  [0060] 00 62 00 61 00 00 00                              .b.a... 
>[2010/12/05 19:58:06.687570,  3] smbd/process.c:1294(switch_message)
>  switch message SMBsesssetupX (pid 12235) conn 0x0
>[2010/12/05 19:58:06.687974,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBsesssetupX.37.req len 166
>[2010/12/05 19:58:06.688161,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.688201,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.688235,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.688294,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:06.688337,  3] smbd/sesssetup.c:1436(reply_sesssetup_and_X)
>  wct=12 flg2=0xc801
>[2010/12/05 19:58:06.688381,  3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2010/12/05 19:58:06.688422,  3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego)
>  NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
>[2010/12/05 19:58:06.688461, 10] smbd/password.c:184(register_initial_vuid)
>  register_initial_vuid: allocated vuid = 100
>[2010/12/05 19:58:06.688507, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete)
>  check_spnego_blob_complete: needed_len = 80, pblob->length = 80
>[2010/12/05 19:58:06.688584,  5] smbd/sesssetup.c:754(parse_spnego_mechanisms)
>  parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10
>[2010/12/05 19:58:06.688618,  3] smbd/sesssetup.c:806(reply_spnego_negotiate)
>  reply_spnego_negotiate: Got secblob of size 46
>[2010/12/05 19:58:06.688677,  5] auth/auth.c:487(make_auth_context_subsystem)
>  Making default auth method list for standalone security=user, encrypt passwords = yes
>[2010/12/05 19:58:06.688729,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend sam
>[2010/12/05 19:58:06.688764,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'sam'
>[2010/12/05 19:58:06.688796,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend sam_ignoredomain
>[2010/12/05 19:58:06.688829,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'sam_ignoredomain'
>[2010/12/05 19:58:06.688861,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend unix
>[2010/12/05 19:58:06.688893,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'unix'
>[2010/12/05 19:58:06.688926,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend winbind
>[2010/12/05 19:58:06.688959,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'winbind'
>[2010/12/05 19:58:06.688993,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend wbc
>[2010/12/05 19:58:06.689027,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'wbc'
>[2010/12/05 19:58:06.689062,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend smbserver
>[2010/12/05 19:58:06.689095,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'smbserver'
>[2010/12/05 19:58:06.689131,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend trustdomain
>[2010/12/05 19:58:06.689164,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'trustdomain'
>[2010/12/05 19:58:06.689195,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend ntdomain
>[2010/12/05 19:58:06.689227,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'ntdomain'
>[2010/12/05 19:58:06.689260,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend guest
>[2010/12/05 19:58:06.689292,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'guest'
>[2010/12/05 19:58:06.689328,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend netlogond
>[2010/12/05 19:58:06.689364,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'netlogond'
>[2010/12/05 19:58:06.689397,  5] auth/auth.c:383(load_auth_module)
>  load_auth_module: Attempting to find an auth method to match guest
>[2010/12/05 19:58:06.689434,  5] auth/auth.c:408(load_auth_module)
>  load_auth_module: auth method guest has a valid init
>[2010/12/05 19:58:06.689467,  5] auth/auth.c:383(load_auth_module)
>  load_auth_module: Attempting to find an auth method to match sam
>[2010/12/05 19:58:06.689535,  5] auth/auth.c:408(load_auth_module)
>  load_auth_module: auth method sam has a valid init
>[2010/12/05 19:58:06.689606,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0x60088215
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_SIGN
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_KEY_EXCH
>[2010/12/05 19:58:06.689782,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       &negotiate: struct NEGOTIATE_MESSAGE
>          Signature                : 'NTLMSSP'
>          MessageType              : NtLmNegotiate (1)
>          NegotiateFlags           : 0x60088215 (1611170325)
>                 1: NTLMSSP_NEGOTIATE_UNICODE
>                 0: NTLMSSP_NEGOTIATE_OEM    
>                 1: NTLMSSP_REQUEST_TARGET   
>                 1: NTLMSSP_NEGOTIATE_SIGN   
>                 0: NTLMSSP_NEGOTIATE_SEAL   
>                 0: NTLMSSP_NEGOTIATE_DATAGRAM
>                 0: NTLMSSP_NEGOTIATE_LM_KEY 
>                 0: NTLMSSP_NEGOTIATE_NETWARE
>                 1: NTLMSSP_NEGOTIATE_NTLM   
>                 0: NTLMSSP_NEGOTIATE_NT_ONLY
>                 0: NTLMSSP_ANONYMOUS        
>                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
>                 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>                 0: NTLMSSP_TARGET_TYPE_DOMAIN
>                 0: NTLMSSP_TARGET_TYPE_SERVER
>                 0: NTLMSSP_TARGET_TYPE_SHARE
>                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
>                 0: NTLMSSP_NEGOTIATE_IDENTIFY
>                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
>                 0: NTLMSSP_NEGOTIATE_TARGET_INFO
>                 0: NTLMSSP_NEGOTIATE_VERSION
>                 1: NTLMSSP_NEGOTIATE_128    
>                 1: NTLMSSP_NEGOTIATE_KEY_EXCH
>                 0: NTLMSSP_NEGOTIATE_56     
>          DomainNameLen            : 0x0009 (9)
>          DomainNameMaxLen         : 0x0009 (9)
>          DomainName               : *
>              DomainName               : 'WORKGROUP'
>          WorkstationLen           : 0x0005 (5)
>          WorkstationMaxLen        : 0x0005 (5)
>          Workstation              : *
>              Workstation              : 'GILES'
>[2010/12/05 19:58:06.690356,  5] auth/auth.c:97(get_ntlm_challenge)
>  auth_get_challenge: module guest did not want to specify a challenge
>[2010/12/05 19:58:06.690395,  5] auth/auth.c:97(get_ntlm_challenge)
>  auth_get_challenge: module sam did not want to specify a challenge
>[2010/12/05 19:58:06.690441,  5] auth/auth.c:132(get_ntlm_challenge)
>  auth_context challenge created by random
>[2010/12/05 19:58:06.690474,  5] auth/auth.c:133(get_ntlm_challenge)
>  challenge is: 
>[2010/12/05 19:58:06.690505,  5] ../lib/util/util.c:278(_dump_data)
>  [0000] D4 8E D1 85 43 2E 20 AB                            ....C. . 
>[2010/12/05 19:58:06.691305,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       &challenge: struct CHALLENGE_MESSAGE
>          Signature                : 'NTLMSSP'
>          MessageType              : NtLmChallenge (0x2)
>          TargetNameLen            : 0x000a (10)
>          TargetNameMaxLen         : 0x000a (10)
>          TargetName               : *
>              TargetName               : 'GILES'
>          NegotiateFlags           : 0x608a8215 (1619690005)
>                 1: NTLMSSP_NEGOTIATE_UNICODE
>                 0: NTLMSSP_NEGOTIATE_OEM    
>                 1: NTLMSSP_REQUEST_TARGET   
>                 1: NTLMSSP_NEGOTIATE_SIGN   
>                 0: NTLMSSP_NEGOTIATE_SEAL   
>                 0: NTLMSSP_NEGOTIATE_DATAGRAM
>                 0: NTLMSSP_NEGOTIATE_LM_KEY 
>                 0: NTLMSSP_NEGOTIATE_NETWARE
>                 1: NTLMSSP_NEGOTIATE_NTLM   
>                 0: NTLMSSP_NEGOTIATE_NT_ONLY
>                 0: NTLMSSP_ANONYMOUS        
>                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
>                 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>                 0: NTLMSSP_TARGET_TYPE_DOMAIN
>                 1: NTLMSSP_TARGET_TYPE_SERVER
>                 0: NTLMSSP_TARGET_TYPE_SHARE
>                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
>                 0: NTLMSSP_NEGOTIATE_IDENTIFY
>                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
>                 1: NTLMSSP_NEGOTIATE_TARGET_INFO
>                 0: NTLMSSP_NEGOTIATE_VERSION
>                 1: NTLMSSP_NEGOTIATE_128    
>                 1: NTLMSSP_NEGOTIATE_KEY_EXCH
>                 0: NTLMSSP_NEGOTIATE_56     
>          ServerChallenge          : d48ed185432e20ab
>          Reserved                 : 0000000000000000
>          TargetInfoLen            : 0x0050 (80)
>          TargetNameInfoMaxLen     : 0x0050 (80)
>          TargetInfo               : *
>              TargetInfo: struct AV_PAIR_LIST
>                  count                    : 0x00000005 (5)
>                  pair: ARRAY(5)
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvNbDomainName (0x2)
>                          AvLen                    : 0x000a (10)
>                          Value                    : union ntlmssp_AvValue(case 0x2)
>                          AvNbDomainName           : 'GILES'
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvNbComputerName (0x1)
>                          AvLen                    : 0x000a (10)
>                          Value                    : union ntlmssp_AvValue(case 0x1)
>                          AvNbComputerName         : 'GILES'
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvDnsDomainName (0x4)
>                          AvLen                    : 0x000e (14)
>                          Value                    : union ntlmssp_AvValue(case 0x4)
>                          AvDnsDomainName          : 'suse.de'
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvDnsComputerName (0x3)
>                          AvLen                    : 0x001a (26)
>                          Value                    : union ntlmssp_AvValue(case 0x3)
>                          AvDnsComputerName        : 'giles.suse.de'
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvEOL (0x0)
>                          AvLen                    : 0x0000 (0)
>                          Value                    : union ntlmssp_AvValue(case 0x0)
>[2010/12/05 19:58:06.692427,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.692451,  5] lib/util.c:627(show_msg)
>  size=324
>  smb_com=0x73
>  smb_rcls=22
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51203
>  smb_tid=0
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=2
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  169 (0xA9)
>  smb_bcc=281
>[2010/12/05 19:58:06.692649, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] A1 81 A6 30 81 A3 A0 03   0A 01 01 A1 0C 06 0A 2B   ...0.... .......+
>  [0010] 06 01 04 01 82 37 02 02   0A A2 81 8D 04 81 8A 4E   .....7.. .......N
>  [0020] 54 4C 4D 53 53 50 00 02   00 00 00 0A 00 0A 00 30   TLMSSP.. .......0
>  [0030] 00 00 00 15 82 8A 60 D4   8E D1 85 43 2E 20 AB 00   ......`. ...C. ..
>  [0040] 00 00 00 00 00 00 00 50   00 50 00 3A 00 00 00 47   .......P .P.:...G
>  [0050] 00 49 00 4C 00 45 00 53   00 02 00 0A 00 47 00 49   .I.L.E.S .....G.I
>  [0060] 00 4C 00 45 00 53 00 01   00 0A 00 47 00 49 00 4C   .L.E.S.. ...G.I.L
>  [0070] 00 45 00 53 00 04 00 0E   00 73 00 75 00 73 00 65   .E.S.... .s.u.s.e
>  [0080] 00 2E 00 64 00 65 00 03   00 1A 00 67 00 69 00 6C   ...d.e.. ...g.i.l
>  [0090] 00 65 00 73 00 2E 00 73   00 75 00 73 00 65 00 2E   .e.s...s .u.s.e..
>  [00A0] 00 64 00 65 00 00 00 00   00 55 00 6E 00 69 00 78   .d.e.... .U.n.i.x
>  [00B0] 00 00 00 53 00 61 00 6D   00 62 00 61 00 20 00 33   ...S.a.m .b.a. .3
>  [00C0] 00 2E 00 35 00 2E 00 36   00 2D 00 31 00 32 00 2E   ...5...6 .-.1.2..
>  [00D0] 00 31 00 2D 00 32 00 34   00 37 00 30 00 2D 00 53   .1.-.2.4 .7.0.-.S
>  [00E0] 00 55 00 53 00 45 00 2D   00 53 00 4C 00 31 00 31   .U.S.E.- .S.L.1.1
>  [00F0] 00 2E 00 33 00 2D 00 78   00 38 00 36 00 5F 00 36   ...3.-.x .8.6._.6
>  [0100] 00 34 00 00 00 57 00 4F   00 52 00 4B 00 47 00 52   .4...W.O .R.K.G.R
>  [0110] 00 4F 00 55 00 50 00 00   00                       .O.U.P.. .
>[2010/12/05 19:58:06.693830, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 258
>[2010/12/05 19:58:06.693876,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0x102
>[2010/12/05 19:58:06.693911,  3] smbd/process.c:1485(process_smb)
>  Transaction 2 of length 262 (0 toread)
>[2010/12/05 19:58:06.693944,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.693965,  5] lib/util.c:627(show_msg)
>  size=258
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=3
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=  176 (0xB0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=53340 (0xD05C)
>  smb_vwv[11]=32768 (0x8000)
>  smb_bcc=199
>[2010/12/05 19:58:06.694247, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] A1 81 AD 30 81 AA A2 81   A7 04 81 A4 4E 54 4C 4D   ...0.... ....NTLM
>  [0010] 53 53 50 00 03 00 00 00   18 00 18 00 40 00 00 00   SSP..... ....@...
>  [0020] 18 00 18 00 58 00 00 00   12 00 12 00 70 00 00 00   ....X... ....p...
>  [0030] 08 00 08 00 82 00 00 00   0A 00 0A 00 8A 00 00 00   ........ ........
>  [0040] 10 00 10 00 94 00 00 00   15 82 08 60 57 7E BC E6   ........ ...`W~..
>  [0050] F5 48 72 1B 00 00 00 00   00 00 00 00 00 00 00 00   .Hr..... ........
>  [0060] 00 00 00 00 94 19 F9 9C   C9 D1 25 EE F3 BB 30 66   ........ ..%...0f
>  [0070] F7 0F E5 6B AA 37 CD 72   35 28 EE 40 57 00 4F 00   ...k.7.r 5(.@W.O.
>  [0080] 52 00 4B 00 47 00 52 00   4F 00 55 00 50 00 72 00   R.K.G.R. O.U.P.r.
>  [0090] 6F 00 6F 00 74 00 47 00   49 00 4C 00 45 00 53 00   o.o.t.G. I.L.E.S.
>  [00A0] 89 A3 DA 9C E7 1C 17 72   05 2E A7 A1 7A E9 D2 AD   .......r ....z...
>  [00B0] 00 55 00 6E 00 69 00 78   00 00 00 53 00 61 00 6D   .U.n.i.x ...S.a.m
>  [00C0] 00 62 00 61 00 00 00                              .b.a... 
>[2010/12/05 19:58:06.694740,  3] smbd/process.c:1294(switch_message)
>  switch message SMBsesssetupX (pid 12235) conn 0x0
>[2010/12/05 19:58:06.695154,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBsesssetupX.38.req len 262
>[2010/12/05 19:58:06.695242,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.695277,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.695309,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.695365,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:06.695401,  3] smbd/sesssetup.c:1436(reply_sesssetup_and_X)
>  wct=12 flg2=0xc801
>[2010/12/05 19:58:06.695433,  3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2010/12/05 19:58:06.695468,  3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego)
>  NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
>[2010/12/05 19:58:06.695505, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete)
>  check_spnego_blob_complete: needed_len = 176, pblob->length = 176
>[2010/12/05 19:58:06.695584,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       &authenticate: struct AUTHENTICATE_MESSAGE
>          Signature                : 'NTLMSSP'
>          MessageType              : NtLmAuthenticate (3)
>          LmChallengeResponseLen   : 0x0018 (24)
>          LmChallengeResponseMaxLen: 0x0018 (24)
>          LmChallengeResponse      : *
>              LmChallengeResponse      : union ntlmssp_LM_RESPONSE(case 24)
>              v1: struct LM_RESPONSE
>                  Response                 : 577ebce6f548721b00000000000000000000000000000000
>          NtChallengeResponseLen   : 0x0018 (24)
>          NtChallengeResponseMaxLen: 0x0018 (24)
>          NtChallengeResponse      : *
>              NtChallengeResponse      : union ntlmssp_NTLM_RESPONSE(case 24)
>              v1: struct NTLM_RESPONSE
>                  Response                 : 9419f99cc9d125eef3bb3066f70fe56baa37cd723528ee40
>          DomainNameLen            : 0x0012 (18)
>          DomainNameMaxLen         : 0x0012 (18)
>          DomainName               : *
>              DomainName               : 'WORKGROUP'
>          UserNameLen              : 0x0008 (8)
>          UserNameMaxLen           : 0x0008 (8)
>          UserName                 : *
>              UserName                 : 'root'
>          WorkstationLen           : 0x000a (10)
>          WorkstationMaxLen        : 0x000a (10)
>          Workstation              : *
>              Workstation              : 'GILES'
>          EncryptedRandomSessionKeyLen: 0x0010 (16)
>          EncryptedRandomSessionKeyMaxLen: 0x0010 (16)
>          EncryptedRandomSessionKey: *
>              EncryptedRandomSessionKey: DATA_BLOB length=16
>[2010/12/05 19:58:06.696102, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 89 A3 DA 9C E7 1C 17 72   05 2E A7 A1 7A E9 D2 AD   .......r ....z...
>          NegotiateFlags           : 0x60088215 (1611170325)
>                 1: NTLMSSP_NEGOTIATE_UNICODE
>                 0: NTLMSSP_NEGOTIATE_OEM    
>                 1: NTLMSSP_REQUEST_TARGET   
>                 1: NTLMSSP_NEGOTIATE_SIGN   
>                 0: NTLMSSP_NEGOTIATE_SEAL   
>                 0: NTLMSSP_NEGOTIATE_DATAGRAM
>                 0: NTLMSSP_NEGOTIATE_LM_KEY 
>                 0: NTLMSSP_NEGOTIATE_NETWARE
>                 1: NTLMSSP_NEGOTIATE_NTLM   
>                 0: NTLMSSP_NEGOTIATE_NT_ONLY
>                 0: NTLMSSP_ANONYMOUS        
>                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
>                 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>                 0: NTLMSSP_TARGET_TYPE_DOMAIN
>                 0: NTLMSSP_TARGET_TYPE_SERVER
>                 0: NTLMSSP_TARGET_TYPE_SHARE
>                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
>                 0: NTLMSSP_NEGOTIATE_IDENTIFY
>                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
>                 0: NTLMSSP_NEGOTIATE_TARGET_INFO
>                 0: NTLMSSP_NEGOTIATE_VERSION
>                 1: NTLMSSP_NEGOTIATE_128    
>                 1: NTLMSSP_NEGOTIATE_KEY_EXCH
>                 0: NTLMSSP_NEGOTIATE_56     
>[2010/12/05 19:58:06.696519,  3] libsmb/ntlmssp.c:747(ntlmssp_server_auth)
>  Got user=[root] domain=[WORKGROUP] workstation=[GILES] len1=24 len2=24
>[2010/12/05 19:58:06.696560,  5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge)
>  auth_context challenge set by NTLMSSP callback (NTLM2)
>[2010/12/05 19:58:06.696594,  5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge)
>  challenge is: 
>[2010/12/05 19:58:06.696624,  5] ../lib/util/util.c:278(_dump_data)
>  [0000] 82 E8 0D 21 CA 44 D5 B5                            ...!.D.. 
>[2010/12/05 19:58:06.696701,  6] param/loadparm.c:7133(lp_file_list_changed)
>  lp_file_list_changed()
>  file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf  last mod_time: Sun Dec  5 18:06:27 2010
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Dec  5 19:34:56 2010
>  
>[2010/12/05 19:58:06.696830,  5] auth/auth_util.c:211(make_user_info_map)
>  Mapping user [WORKGROUP]\[root] from workstation [GILES]
>[2010/12/05 19:58:06.696873,  5] auth/auth_util.c:232(make_user_info_map)
>  Mapped domain from [WORKGROUP] to [GILES] for user [root] from workstation [GILES]
>[2010/12/05 19:58:06.696908,  5] auth/auth_util.c:122(make_user_info)
>  attempting to make a user_info for root (root)
>[2010/12/05 19:58:06.696942,  5] auth/auth_util.c:132(make_user_info)
>  making strings for root's user_info struct
>[2010/12/05 19:58:06.697007,  5] auth/auth_util.c:164(make_user_info)
>  making blobs for root's user_info struct
>[2010/12/05 19:58:06.697041, 10] auth/auth_util.c:182(make_user_info)
>  made an encrypted user_info for root (root)
>[2010/12/05 19:58:06.697075,  3] auth/auth.c:216(check_ntlm_password)
>  check_ntlm_password:  Checking password for unmapped user [WORKGROUP]\[root]@[GILES] with the new password interface
>[2010/12/05 19:58:06.697113,  3] auth/auth.c:219(check_ntlm_password)
>  check_ntlm_password:  mapped user is: [GILES]\[root]@[GILES]
>[2010/12/05 19:58:06.697146, 10] auth/auth.c:228(check_ntlm_password)
>  check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2)
>[2010/12/05 19:58:06.697180, 10] auth/auth.c:230(check_ntlm_password)
>  challenge is: 
>[2010/12/05 19:58:06.697210,  5] ../lib/util/util.c:278(_dump_data)
>  [0000] 82 E8 0D 21 CA 44 D5 B5                            ...!.D.. 
>[2010/12/05 19:58:06.697267, 10] auth/auth.c:256(check_ntlm_password)
>  check_ntlm_password: guest had nothing to say
>[2010/12/05 19:58:06.697306,  8] lib/util.c:1869(is_myname)
>  is_myname("GILES") returns 1
>[2010/12/05 19:58:06.697346,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.697385,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.697420,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.697452,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.697484,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.697572,  5] passdb/pdb_tdb.c:557(tdbsam_getsampwnam)
>  pdb_getsampwnam (TDB): error fetching database.
>   Key: USER_root
>[2010/12/05 19:58:06.697634,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.697669,  3] auth/auth_sam.c:399(check_sam_security)
>  check_sam_security: Couldn't find user 'root' in passdb.
>[2010/12/05 19:58:06.697704,  5] auth/auth.c:268(check_ntlm_password)
>  check_ntlm_password: sam authentication for user [root] FAILED with error NT_STATUS_NO_SUCH_USER
>[2010/12/05 19:58:06.697740,  2] auth/auth.c:314(check_ntlm_password)
>  check_ntlm_password:  Authentication for user [root] -> [root] FAILED with error NT_STATUS_NO_SUCH_USER
>[2010/12/05 19:58:06.697776,  5] auth/auth_util.c:2119(free_user_info)
>  attempting to free (and zero) a user_info structure
>[2010/12/05 19:58:06.697809, 10] auth/auth_util.c:2123(free_user_info)
>  structure was created for root
>[2010/12/05 19:58:06.697843,  3] smbd/sesssetup.c:50(do_map_to_guest)
>  No such user root [WORKGROUP] - using guest account
>[2010/12/05 19:58:06.698050, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 3: DEFAULT
>[2010/12/05 19:58:06.698093, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 1: DEFAULT
>[2010/12/05 19:58:06.698125, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 4: DEFAULT
>[2010/12/05 19:58:06.698156, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 2: DEFAULT
>[2010/12/05 19:58:06.698189,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.698222,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.698255,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.698288,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.698318,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.698398, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:06.698440,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.698514, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175
>[2010/12/05 19:58:06.698551, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:06.698595, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:06.698633, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 5 -> now SET
>[2010/12/05 19:58:06.698665, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 6 -> now SET
>[2010/12/05 19:58:06.698696, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 7 -> now SET
>[2010/12/05 19:58:06.698726, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 8 -> now SET
>[2010/12/05 19:58:06.698757, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 9 -> now SET
>[2010/12/05 19:58:06.698788, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 10 -> now SET
>[2010/12/05 19:58:06.698821, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 21 -> now SET
>[2010/12/05 19:58:06.698856, 10] passdb/pdb_get_set.c:608(pdb_set_username)
>  pdb_set_username: setting username nobody, was 
>[2010/12/05 19:58:06.698889, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 12 -> now SET
>[2010/12/05 19:58:06.698921, 10] passdb/pdb_get_set.c:631(pdb_set_domain)
>  pdb_set_domain: setting domain GILES, was 
>[2010/12/05 19:58:06.698954, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 14 -> now SET
>[2010/12/05 19:58:06.699006, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2010/12/05 19:58:06.699041, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 15 -> now SET
>[2010/12/05 19:58:06.699073, 10] passdb/pdb_get_set.c:677(pdb_set_fullname)
>  pdb_set_full_name: setting full name nobody, was 
>[2010/12/05 19:58:06.699106, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 13 -> now SET
>[2010/12/05 19:58:06.699151, 10] passdb/pdb_get_set.c:770(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\giles\nobody\.9xprofile, was 
>[2010/12/05 19:58:06.699186, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 1 -> now DEFAULT
>[2010/12/05 19:58:06.699219, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive P:, was NULL
>[2010/12/05 19:58:06.699252, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 3 -> now DEFAULT
>[2010/12/05 19:58:06.699286, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2010/12/05 19:58:06.699320, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 4 -> now DEFAULT
>[2010/12/05 19:58:06.699356, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\giles\profiles\.msprofile, was 
>[2010/12/05 19:58:06.699391, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 2 -> now DEFAULT
>[2010/12/05 19:58:06.699424, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 22 -> now SET
>[2010/12/05 19:58:06.699459, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 24 -> now SET
>[2010/12/05 19:58:06.699492, 10] passdb/pdb_get_set.c:813(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2010/12/05 19:58:06.699524, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 23 -> now SET
>[2010/12/05 19:58:06.699556, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 25 -> now SET
>[2010/12/05 19:58:06.699589,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.699622,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.699654,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.699687,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.699718,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.699807, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:06.699851,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.699887, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 33 -> now SET
>[2010/12/05 19:58:06.699920, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501
>[2010/12/05 19:58:06.699963, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 18 -> now SET
>[2010/12/05 19:58:06.699995, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501
>[2010/12/05 19:58:06.700047, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 16 -> now SET
>[2010/12/05 19:58:06.700079, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 28 -> now SET
>[2010/12/05 19:58:06.700111, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 29 -> now SET
>[2010/12/05 19:58:06.700142, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 30 -> now SET
>[2010/12/05 19:58:06.700174, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 20 -> now SET
>[2010/12/05 19:58:06.700205, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 17 -> now SET
>[2010/12/05 19:58:06.700237, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 26 -> now SET
>[2010/12/05 19:58:06.700326, 10] lib/gencache.c:345(gencache_get_data_blob)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec  5 19:58:10 2010
>[2010/12/05 19:58:06.700394,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.700428,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.700461,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.700493,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.700524,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.700580,  5] passdb/pdb_interface.c:1473(lookup_global_sam_rid)
>  lookup_global_sam_rid: looking up RID 513.
>[2010/12/05 19:58:06.700619,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:06.700653,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.700687,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:06.700720,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.700750,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.700817,  5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid)
>  pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201.
>[2010/12/05 19:58:06.700944,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.700981,  5] passdb/pdb_interface.c:1536(lookup_global_sam_rid)
>  Can't find a unix id for an unmapped group
>[2010/12/05 19:58:06.701020,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.701054, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:06.701092, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid)
>  pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:06.701129, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 19 -> now SET
>[2010/12/05 19:58:06.701166, 10] smbd/password.c:278(register_existing_vuid)
>  register_existing_vuid: (65534,65533) nobody root GILES guest=1
>[2010/12/05 19:58:06.701229,  3] smbd/password.c:282(register_existing_vuid)
>  register_existing_vuid: User name: nobody	Real name: nobody
>[2010/12/05 19:58:06.701262,  3] smbd/password.c:292(register_existing_vuid)
>  register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 100
>[2010/12/05 19:58:06.701317,  6] param/loadparm.c:7133(lp_file_list_changed)
>  lp_file_list_changed()
>  file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf  last mod_time: Sun Dec  5 18:06:27 2010
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Dec  5 19:34:56 2010
>  
>[2010/12/05 19:58:06.701453,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.701475,  5] lib/util.c:627(show_msg)
>  size=164
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51203
>  smb_tid=0
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=3
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_vwv[ 3]=    9 (0x9)
>  smb_bcc=121
>[2010/12/05 19:58:06.701660, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] A1 07 30 05 A0 03 0A 01   00 55 00 6E 00 69 00 78   ..0..... .U.n.i.x
>  [0010] 00 00 00 53 00 61 00 6D   00 62 00 61 00 20 00 33   ...S.a.m .b.a. .3
>  [0020] 00 2E 00 35 00 2E 00 36   00 2D 00 31 00 32 00 2E   ...5...6 .-.1.2..
>  [0030] 00 31 00 2D 00 32 00 34   00 37 00 30 00 2D 00 53   .1.-.2.4 .7.0.-.S
>  [0040] 00 55 00 53 00 45 00 2D   00 53 00 4C 00 31 00 31   .U.S.E.- .S.L.1.1
>  [0050] 00 2E 00 33 00 2D 00 78   00 38 00 36 00 5F 00 36   ...3.-.x .8.6._.6
>  [0060] 00 34 00 00 00 57 00 4F   00 52 00 4B 00 47 00 52   .4...W.O .R.K.G.R
>  [0070] 00 4F 00 55 00 50 00 00   00                       .O.U.P.. .
>[2010/12/05 19:58:06.702204, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 84
>[2010/12/05 19:58:06.702250,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0x54
>[2010/12/05 19:58:06.702284,  3] smbd/process.c:1485(process_smb)
>  Transaction 3 of length 88 (0 toread)
>[2010/12/05 19:58:06.702316,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.702336,  5] lib/util.c:627(show_msg)
>  size=84
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=65535
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=4
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=41
>[2010/12/05 19:58:06.702518, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 00 5C 00 5C 00 4C 00 4F   00 43 00 41 00 4C 00 48   .\.\.L.O .C.A.L.H
>  [0010] 00 4F 00 53 00 54 00 5C   00 49 00 50 00 43 00 24   .O.S.T.\ .I.P.C.$
>  [0020] 00 00 00 3F 3F 3F 3F 3F   00                       ...????? .
>[2010/12/05 19:58:06.702644,  3] smbd/process.c:1294(switch_message)
>  switch message SMBtconX (pid 12235) conn 0x0
>[2010/12/05 19:58:06.702897,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBtconX.19.req len 88
>[2010/12/05 19:58:06.702997,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.703033,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.703064,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.703116,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:06.703163,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [IPC$]
>[2010/12/05 19:58:06.703241,  5] smbd/service.c:1227(make_connection)
>  making a connection to 'normal' service ipc$
>[2010/12/05 19:58:06.703460, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 3: DEFAULT
>[2010/12/05 19:58:06.703500, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 1: DEFAULT
>[2010/12/05 19:58:06.703531, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 4: DEFAULT
>[2010/12/05 19:58:06.703562, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 2: DEFAULT
>[2010/12/05 19:58:06.703594,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.703659,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.703692,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.703724,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.703755,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.703816, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:06.703865,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.703901, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175
>[2010/12/05 19:58:06.703937, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:06.703974, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:06.704008, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 5 -> now SET
>[2010/12/05 19:58:06.704040, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 6 -> now SET
>[2010/12/05 19:58:06.704069, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 7 -> now SET
>[2010/12/05 19:58:06.704100, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 8 -> now SET
>[2010/12/05 19:58:06.704130, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 9 -> now SET
>[2010/12/05 19:58:06.704160, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 10 -> now SET
>[2010/12/05 19:58:06.704190, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 21 -> now SET
>[2010/12/05 19:58:06.704220, 10] passdb/pdb_get_set.c:608(pdb_set_username)
>  pdb_set_username: setting username nobody, was 
>[2010/12/05 19:58:06.704252, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 12 -> now SET
>[2010/12/05 19:58:06.704282, 10] passdb/pdb_get_set.c:631(pdb_set_domain)
>  pdb_set_domain: setting domain GILES, was 
>[2010/12/05 19:58:06.704314, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 14 -> now SET
>[2010/12/05 19:58:06.704344, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2010/12/05 19:58:06.704375, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 15 -> now SET
>[2010/12/05 19:58:06.704406, 10] passdb/pdb_get_set.c:677(pdb_set_fullname)
>  pdb_set_full_name: setting full name nobody, was 
>[2010/12/05 19:58:06.704437, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 13 -> now SET
>[2010/12/05 19:58:06.704476, 10] passdb/pdb_get_set.c:770(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\giles\nobody\.9xprofile, was 
>[2010/12/05 19:58:06.704509, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 1 -> now DEFAULT
>[2010/12/05 19:58:06.704539, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive P:, was NULL
>[2010/12/05 19:58:06.704570, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 3 -> now DEFAULT
>[2010/12/05 19:58:06.704602, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2010/12/05 19:58:06.704634, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 4 -> now DEFAULT
>[2010/12/05 19:58:06.704668, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\giles\profiles\.msprofile, was 
>[2010/12/05 19:58:06.704700, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 2 -> now DEFAULT
>[2010/12/05 19:58:06.704730, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 22 -> now SET
>[2010/12/05 19:58:06.704761, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 24 -> now SET
>[2010/12/05 19:58:06.704792, 10] passdb/pdb_get_set.c:813(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2010/12/05 19:58:06.704850, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 23 -> now SET
>[2010/12/05 19:58:06.704882, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 25 -> now SET
>[2010/12/05 19:58:06.704912,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.704945,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.704976,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.705007,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.705037,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.705097, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:06.705138,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.705173, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 33 -> now SET
>[2010/12/05 19:58:06.705204, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501
>[2010/12/05 19:58:06.705241, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 18 -> now SET
>[2010/12/05 19:58:06.705271, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501
>[2010/12/05 19:58:06.705318, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 16 -> now SET
>[2010/12/05 19:58:06.705348, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 28 -> now SET
>[2010/12/05 19:58:06.705379, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 29 -> now SET
>[2010/12/05 19:58:06.705409, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 30 -> now SET
>[2010/12/05 19:58:06.705440, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 20 -> now SET
>[2010/12/05 19:58:06.705470, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 17 -> now SET
>[2010/12/05 19:58:06.705502, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 26 -> now SET
>[2010/12/05 19:58:06.705564, 10] lib/gencache.c:345(gencache_get_data_blob)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec  5 19:58:10 2010
>[2010/12/05 19:58:06.705621,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.705655,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.705687,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.705719,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.705750,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.705800,  5] passdb/pdb_interface.c:1473(lookup_global_sam_rid)
>  lookup_global_sam_rid: looking up RID 513.
>[2010/12/05 19:58:06.705835,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:06.705867,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.705900,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:06.705932,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.705962,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.706029,  5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid)
>  pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201.
>[2010/12/05 19:58:06.706140,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.706177,  5] passdb/pdb_interface.c:1536(lookup_global_sam_rid)
>  Can't find a unix id for an unmapped group
>[2010/12/05 19:58:06.706244,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.706278, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:06.706316, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid)
>  pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:06.706352, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 19 -> now SET
>[2010/12/05 19:58:06.706389,  5] lib/username.c:133(Get_Pwnam_alloc)
>  Finding user nobody
>[2010/12/05 19:58:06.706421,  5] lib/username.c:77(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is nobody
>[2010/12/05 19:58:06.706455,  5] lib/username.c:110(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [nobody]!
>[2010/12/05 19:58:06.706517, 10] smbd/service.c:163(set_conn_connectpath)
>  set_conn_connectpath: service IPC$, connectpath = /var/tmp
>[2010/12/05 19:58:06.706553,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/var/tmp' for service [IPC$]
>[2010/12/05 19:58:06.706614, 10] lib/util_seaccess.c:58(se_map_generic)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2010/12/05 19:58:06.706662,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2010/12/05 19:58:06.706702, 10] smbd/vfs.c:48(vfs_find_backend_entry)
>  vfs_find_backend_entry called for /[Default VFS]/
>[2010/12/05 19:58:06.706736,  5] smbd/vfs.c:87(smb_register_vfs)
>  Successfully added vfs backend '/[Default VFS]/'
>[2010/12/05 19:58:06.706774, 10] smbd/vfs.c:48(vfs_find_backend_entry)
>  vfs_find_backend_entry called for posixacl
>[2010/12/05 19:58:06.706806,  5] smbd/vfs.c:87(smb_register_vfs)
>  Successfully added vfs backend 'posixacl'
>[2010/12/05 19:58:06.706837,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2010/12/05 19:58:06.706870, 10] smbd/vfs.c:48(vfs_find_backend_entry)
>  vfs_find_backend_entry called for /[Default VFS]/
>  Successfully loaded vfs module [/[Default VFS]/] with the new modules system
>[2010/12/05 19:58:06.706918,  5] smbd/connection.c:142(claim_connection)
>  claiming [IPC$]
>[2010/12/05 19:58:06.707143, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key CB2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:06.707210, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7fc98212a3b0
>[2010/12/05 19:58:06.707266, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key CB2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:06.707539, 10] smbd/service.c:163(set_conn_connectpath)
>  set_conn_connectpath: service IPC$, connectpath = /var/tmp
>[2010/12/05 19:58:06.707584, 10] smbd/share_access.c:238(user_ok_token)
>  user_ok_token: share IPC$ is ok for unix user nobody
>[2010/12/05 19:58:06.707620, 10] smbd/share_access.c:283(is_share_read_only_for_token)
>  is_share_read_only_for_user: share IPC$ is read-only for unix user nobody
>[2010/12/05 19:58:06.707698, 10] lib/util_seaccess.c:58(se_map_generic)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2010/12/05 19:58:06.707742, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 3: DEFAULT
>[2010/12/05 19:58:06.707774, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 1: DEFAULT
>[2010/12/05 19:58:06.707803, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 4: DEFAULT
>[2010/12/05 19:58:06.707833, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 2: DEFAULT
>[2010/12/05 19:58:06.707864,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.707896,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.707927,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.707959,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.707991,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.708243, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:06.708287,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.708323, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175
>[2010/12/05 19:58:06.708358, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:06.708393, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:06.708428, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 5 -> now SET
>[2010/12/05 19:58:06.708459, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 6 -> now SET
>[2010/12/05 19:58:06.708489, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 7 -> now SET
>[2010/12/05 19:58:06.708519, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 8 -> now SET
>[2010/12/05 19:58:06.708549, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 9 -> now SET
>[2010/12/05 19:58:06.708578, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 10 -> now SET
>[2010/12/05 19:58:06.708609, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 21 -> now SET
>[2010/12/05 19:58:06.708639, 10] passdb/pdb_get_set.c:608(pdb_set_username)
>  pdb_set_username: setting username nobody, was 
>[2010/12/05 19:58:06.708671, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 12 -> now SET
>[2010/12/05 19:58:06.708701, 10] passdb/pdb_get_set.c:631(pdb_set_domain)
>  pdb_set_domain: setting domain GILES, was 
>[2010/12/05 19:58:06.708731, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 14 -> now SET
>[2010/12/05 19:58:06.708761, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2010/12/05 19:58:06.708792, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 15 -> now SET
>[2010/12/05 19:58:06.708822, 10] passdb/pdb_get_set.c:677(pdb_set_fullname)
>  pdb_set_full_name: setting full name nobody, was 
>[2010/12/05 19:58:06.708853, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 13 -> now SET
>[2010/12/05 19:58:06.708892, 10] passdb/pdb_get_set.c:770(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\giles\nobody\.9xprofile, was 
>[2010/12/05 19:58:06.708925, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 1 -> now DEFAULT
>[2010/12/05 19:58:06.708955, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive P:, was NULL
>[2010/12/05 19:58:06.708986, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 3 -> now DEFAULT
>[2010/12/05 19:58:06.709019, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2010/12/05 19:58:06.709050, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 4 -> now DEFAULT
>[2010/12/05 19:58:06.709084, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\giles\profiles\.msprofile, was 
>[2010/12/05 19:58:06.709150, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 2 -> now DEFAULT
>[2010/12/05 19:58:06.709182, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 22 -> now SET
>[2010/12/05 19:58:06.709213, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 24 -> now SET
>[2010/12/05 19:58:06.709243, 10] passdb/pdb_get_set.c:813(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2010/12/05 19:58:06.709274, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 23 -> now SET
>[2010/12/05 19:58:06.709305, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 25 -> now SET
>[2010/12/05 19:58:06.709336,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.709369,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.709401,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.709433,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.709463,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.709523, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:06.709570,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.709604, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 33 -> now SET
>[2010/12/05 19:58:06.709635, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501
>[2010/12/05 19:58:06.709672, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 18 -> now SET
>[2010/12/05 19:58:06.709702, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501
>[2010/12/05 19:58:06.709748, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 16 -> now SET
>[2010/12/05 19:58:06.709780, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 28 -> now SET
>[2010/12/05 19:58:06.709810, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 29 -> now SET
>[2010/12/05 19:58:06.709842, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 30 -> now SET
>[2010/12/05 19:58:06.709872, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 20 -> now SET
>[2010/12/05 19:58:06.709902, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 17 -> now SET
>[2010/12/05 19:58:06.709932, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 26 -> now SET
>[2010/12/05 19:58:06.709993, 10] lib/gencache.c:345(gencache_get_data_blob)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec  5 19:58:10 2010
>[2010/12/05 19:58:06.710051,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.710085,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.710117,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.710149,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.710179,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.710229,  5] passdb/pdb_interface.c:1473(lookup_global_sam_rid)
>  lookup_global_sam_rid: looking up RID 513.
>[2010/12/05 19:58:06.710263,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:06.710295,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.710326,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:06.710388,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.710419,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.710480,  5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid)
>  pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201.
>[2010/12/05 19:58:06.710592,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.710627,  5] passdb/pdb_interface.c:1536(lookup_global_sam_rid)
>  Can't find a unix id for an unmapped group
>[2010/12/05 19:58:06.710664,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.710697, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:06.710734, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid)
>  pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:06.710770, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 19 -> now SET
>[2010/12/05 19:58:06.710811,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.710844,  5] auth/token_util.c:531(debug_nt_user_token)
>  NT user token of user S-1-5-21-779886165-838294741-719422925-501
>  contains 7 SIDs
>  SID[  0]: S-1-5-21-779886165-838294741-719422925-501
>  SID[  1]: S-1-22-2-65533
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-32-546
>  SID[  5]: S-1-22-2-65534
>  SID[  6]: S-1-22-1-65534
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2010/12/05 19:58:06.711309,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 65534
>  Primary group is 65533 and contains 2 supplementary groups
>  Group[  0]: 65533
>  Group[  1]: 65534
>[2010/12/05 19:58:06.711391,  5] smbd/uid.c:354(change_to_user)
>  change_to_user uid=(0,65534) gid=(0,65533)
>[2010/12/05 19:58:06.711453, 10] smbd/service.c:163(set_conn_connectpath)
>  set_conn_connectpath: service IPC$, connectpath = /var/tmp
>[2010/12/05 19:58:06.711506,  3] smbd/service.c:1070(make_connection_snum)
>  giles (::ffff:127.0.0.1) connect to service IPC$ initially as user nobody (uid=65534, gid=65533) (pid 12235)
>[2010/12/05 19:58:06.711550,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.711585,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.711615,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.711671,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:06.711713,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=IPC$ 
>[2010/12/05 19:58:06.721119, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 102
>[2010/12/05 19:58:06.721171,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0x66
>[2010/12/05 19:58:06.721207,  3] smbd/process.c:1485(process_smb)
>  Transaction 4 of length 106 (0 toread)
>[2010/12/05 19:58:06.721239,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.721260,  5] lib/util.c:627(show_msg)
>  size=102
>  smb_com=0xa2
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=5
>  smt_wct=24
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]= 4096 (0x1000)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=40704 (0x9F00)
>  smb_vwv[ 8]=  513 (0x201)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=    0 (0x0)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=    0 (0x0)
>  smb_vwv[13]=    0 (0x0)
>  smb_vwv[14]=    0 (0x0)
>  smb_vwv[15]=  768 (0x300)
>  smb_vwv[16]=    0 (0x0)
>  smb_vwv[17]=  256 (0x100)
>  smb_vwv[18]=    0 (0x0)
>  smb_vwv[19]=    0 (0x0)
>  smb_vwv[20]=    0 (0x0)
>  smb_vwv[21]=  512 (0x200)
>  smb_vwv[22]=    0 (0x0)
>  smb_vwv[23]=    0 (0x0)
>  smb_bcc=19
>[2010/12/05 19:58:06.721705, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 00 5C 00 73 00 72 00 76   00 73 00 76 00 63 00 00   .\.s.r.v .s.v.c..
>  [0010] 00 00 00                                          ... 
>[2010/12/05 19:58:06.721799,  3] smbd/process.c:1294(switch_message)
>  switch message SMBntcreateX (pid 12235) conn 0x7fc9821211f0
>[2010/12/05 19:58:06.722034,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBntcreateX.10.req len 106
>[2010/12/05 19:58:06.722134,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.722169,  5] auth/token_util.c:531(debug_nt_user_token)
>  NT user token of user S-1-5-21-779886165-838294741-719422925-501
>  contains 7 SIDs
>  SID[  0]: S-1-5-21-779886165-838294741-719422925-501
>  SID[  1]: S-1-22-2-65533
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-32-546
>  SID[  5]: S-1-22-2-65534
>  SID[  6]: S-1-22-1-65534
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2010/12/05 19:58:06.722329,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 65534
>  Primary group is 65533 and contains 2 supplementary groups
>  Group[  0]: 65533
>  Group[  1]: 65534
>[2010/12/05 19:58:06.722406,  5] smbd/uid.c:354(change_to_user)
>  change_to_user uid=(0,65534) gid=(0,65533)
>[2010/12/05 19:58:06.722451,  4] smbd/vfs.c:721(vfs_ChDir)
>  vfs_ChDir to /var/tmp
>[2010/12/05 19:58:06.722527, 10] smbd/nttrans.c:498(reply_ntcreate_and_X)
>  reply_ntcreate_and_X: flags = 0x0, access_mask = 0x2019f file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x0 root_dir_fid = 0x0, fname = srvsvc
>[2010/12/05 19:58:06.722578,  4] smbd/nttrans.c:283(nt_open_pipe)
>  nt_open_pipe: Opening pipe \srvsvc.
>[2010/12/05 19:58:06.722622,  5] smbd/files.c:119(file_new)
>  allocated file structure 3957, fnum = 8053 (1 used)
>[2010/12/05 19:58:06.722679,  4] rpc_server/srv_pipe_hnd.c:99(make_internal_rpc_pipe_p)
>  Create pipe requested \srvsvc
>[2010/12/05 19:58:06.722760, 10] rpc_server/srv_lsa_hnd.c:114(init_pipe_handle_list)
>  init_pipe_handles: created handle list for pipe \srvsvc
>[2010/12/05 19:58:06.722796, 10] rpc_server/srv_lsa_hnd.c:131(init_pipe_handle_list)
>  init_pipe_handles: pipe_handles ref count = 1 for pipe \srvsvc
>[2010/12/05 19:58:06.722845, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 3: DEFAULT
>[2010/12/05 19:58:06.722878, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 1: DEFAULT
>[2010/12/05 19:58:06.722910, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 4: DEFAULT
>[2010/12/05 19:58:06.722941, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 2: DEFAULT
>[2010/12/05 19:58:06.722973,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.723028,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.723063,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.723096,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.723127,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.723198, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:06.723242,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.723282, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175
>[2010/12/05 19:58:06.723319, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:06.723358, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:06.723395, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 5 -> now SET
>[2010/12/05 19:58:06.723428, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 6 -> now SET
>[2010/12/05 19:58:06.723492, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 7 -> now SET
>[2010/12/05 19:58:06.723524, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 8 -> now SET
>[2010/12/05 19:58:06.723555, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 9 -> now SET
>[2010/12/05 19:58:06.723586, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 10 -> now SET
>[2010/12/05 19:58:06.723617, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 21 -> now SET
>[2010/12/05 19:58:06.723648, 10] passdb/pdb_get_set.c:608(pdb_set_username)
>  pdb_set_username: setting username nobody, was 
>[2010/12/05 19:58:06.723681, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 12 -> now SET
>[2010/12/05 19:58:06.723713, 10] passdb/pdb_get_set.c:631(pdb_set_domain)
>  pdb_set_domain: setting domain GILES, was 
>[2010/12/05 19:58:06.723746, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 14 -> now SET
>[2010/12/05 19:58:06.723777, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2010/12/05 19:58:06.723810, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 15 -> now SET
>[2010/12/05 19:58:06.723841, 10] passdb/pdb_get_set.c:677(pdb_set_fullname)
>  pdb_set_full_name: setting full name nobody, was 
>[2010/12/05 19:58:06.723874, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 13 -> now SET
>[2010/12/05 19:58:06.723916, 10] passdb/pdb_get_set.c:770(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\giles\nobody\.9xprofile, was 
>[2010/12/05 19:58:06.723951, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 1 -> now DEFAULT
>[2010/12/05 19:58:06.723983, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive P:, was NULL
>[2010/12/05 19:58:06.724166, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 3 -> now DEFAULT
>[2010/12/05 19:58:06.724204, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2010/12/05 19:58:06.724238, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 4 -> now DEFAULT
>[2010/12/05 19:58:06.724275, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\giles\profiles\.msprofile, was 
>[2010/12/05 19:58:06.724308, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 2 -> now DEFAULT
>[2010/12/05 19:58:06.724340, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 22 -> now SET
>[2010/12/05 19:58:06.724372, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 24 -> now SET
>[2010/12/05 19:58:06.724402, 10] passdb/pdb_get_set.c:813(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2010/12/05 19:58:06.724434, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 23 -> now SET
>[2010/12/05 19:58:06.724466, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 25 -> now SET
>[2010/12/05 19:58:06.724498,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.724534,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.724567,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.724600,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.724631,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.724700, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:06.724745,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.724782, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 33 -> now SET
>[2010/12/05 19:58:06.724814, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501
>[2010/12/05 19:58:06.724883, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 18 -> now SET
>[2010/12/05 19:58:06.724916, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501
>[2010/12/05 19:58:06.724965, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 16 -> now SET
>[2010/12/05 19:58:06.724996, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 28 -> now SET
>[2010/12/05 19:58:06.725028, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 29 -> now SET
>[2010/12/05 19:58:06.725059, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 30 -> now SET
>[2010/12/05 19:58:06.725090, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 20 -> now SET
>[2010/12/05 19:58:06.725120, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 17 -> now SET
>[2010/12/05 19:58:06.725152, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 26 -> now SET
>[2010/12/05 19:58:06.725220, 10] lib/gencache.c:345(gencache_get_data_blob)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec  5 19:58:10 2010
>[2010/12/05 19:58:06.725283,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.725321,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.725354,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.725387,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.725418,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.725475,  5] passdb/pdb_interface.c:1473(lookup_global_sam_rid)
>  lookup_global_sam_rid: looking up RID 513.
>[2010/12/05 19:58:06.725511,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:06.725544,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.725576,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:06.725608,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.725638,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.725700,  5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid)
>  pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201.
>[2010/12/05 19:58:06.725824,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.725861,  5] passdb/pdb_interface.c:1536(lookup_global_sam_rid)
>  Can't find a unix id for an unmapped group
>[2010/12/05 19:58:06.725900,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.725935, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:06.725973, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid)
>  pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:06.726011, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 19 -> now SET
>[2010/12/05 19:58:06.726045,  4] rpc_server/srv_pipe_hnd.c:162(make_internal_rpc_pipe_p)
>  Created internal pipe \srvsvc (pipes_open=0)
>[2010/12/05 19:58:06.726087,  5] smbd/nttrans.c:372(do_ntcreate_pipe_open)
>  do_ntcreate_pipe_open: open pipe = \srvsvc
>[2010/12/05 19:58:06.726474, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 154
>[2010/12/05 19:58:06.726525,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0x9a
>[2010/12/05 19:58:06.726560,  3] smbd/process.c:1485(process_smb)
>  Transaction 5 of length 158 (0 toread)
>[2010/12/05 19:58:06.726593,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.726644,  5] lib/util.c:627(show_msg)
>  size=154
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=6
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   72 (0x48)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=   72 (0x48)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 8053 (0x1F75)
>  smb_bcc=87
>[2010/12/05 19:58:06.726967, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 05   .\.P.I.P .E.\....
>  [0010] 00 0B 03 10 00 00 00 48   00 00 00 01 00 00 00 B8   .......H ........
>  [0020] 10 B8 10 00 00 00 00 01   00 00 00 00 00 01 00 C8   ........ ........
>  [0030] 4F 32 4B 70 16 D3 01 12   78 5A 47 BF 6E E1 88 03   O2Kp.... xZG.n...
>  [0040] 00 00 00 04 5D 88 8A EB   1C C9 11 9F E8 08 00 2B   ....]... .......+
>  [0050] 10 48 60 02 00 00 00                              .H`.... 
>[2010/12/05 19:58:06.727272,  3] smbd/process.c:1294(switch_message)
>  switch message SMBtrans (pid 12235) conn 0x7fc9821211f0
>[2010/12/05 19:58:06.727690,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBtrans.37.req len 158
>[2010/12/05 19:58:06.727894,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2010/12/05 19:58:06.727950,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=72 params=0 setup=2
>[2010/12/05 19:58:06.727993,  5] smbd/ipc.c:578(handle_trans)
>  calling named_pipe
>[2010/12/05 19:58:06.728220,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2010/12/05 19:58:06.728263,  5] smbd/ipc.c:419(api_fd_reply)
>  api_fd_reply
>[2010/12/05 19:58:06.728297,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "srvsvc" (pnum 1f75)
>[2010/12/05 19:58:06.728339, 10] smbd/ipc.c:462(api_fd_reply)
>  api_fd_reply: p:0x7fc9821440b0 max_trans_reply: 4280
>[2010/12/05 19:58:06.728373,  6] rpc_server/srv_pipe_hnd.c:1208(np_write_send)
>  np_write_send: len: 72
>[2010/12/05 19:58:06.728406, 50] ../lib/util/util.c:278(_dump_data)
>  [0000] 05 00 0B 03 10 00 00 00   48 00 00 00 01 00 00 00   ........ H.......
>  [0010] B8 10 B8 10 00 00 00 00   01 00 00 00 00 00 01 00   ........ ........
>  [0020] C8 4F 32 4B 70 16 D3 01   12 78 5A 47 BF 6E E1 88   .O2Kp... .xZG.n..
>  [0030] 03 00 00 00 04 5D 88 8A   EB 1C C9 11 9F E8 08 00   .....].. ........
>  [0040] 2B 10 48 60 02 00 00 00                            +.H`.... 
>[2010/12/05 19:58:06.728610, 10] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe)
>  write_to_pipe: data_left = 72
>[2010/12/05 19:58:06.728648, 10] rpc_server/srv_pipe_hnd.c:682(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 72
>[2010/12/05 19:58:06.728682, 10] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 72, len_needed_to_complete_hdr = 16, receive_len = 0
>[2010/12/05 19:58:06.728717, 10] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2010/12/05 19:58:06.728748, 10] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2010/12/05 19:58:06.728780, 10] rpc_server/srv_pipe_hnd.c:682(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 56
>[2010/12/05 19:58:06.728817,  5] rpc_parse/parse_prs.c:89(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0b
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0048
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2010/12/05 19:58:06.728991,  5] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2010/12/05 19:58:06.729056, 10] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 11, flags = 3
>[2010/12/05 19:58:06.729091, 10] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2010/12/05 19:58:06.729122, 10] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe)
>  write_to_pipe: data_left = 56
>[2010/12/05 19:58:06.729152, 10] rpc_server/srv_pipe_hnd.c:682(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 56, incoming data = 56
>[2010/12/05 19:58:06.729185, 10] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu)
>  process_complete_pdu: processing packet type 11
>[2010/12/05 19:58:06.729232,  5] rpc_server/srv_pipe.c:1642(api_pipe_bind_req)
>  api_pipe_bind_req: decode request. 1642
>[2010/12/05 19:58:06.729271,  5] rpc_parse/parse_prs.c:89(prs_debug)
>  000000 smb_io_rpc_hdr_rb 
>[2010/12/05 19:58:06.729305,  6] rpc_parse/parse_prs.c:89(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 00000000
>      0008 num_contexts: 01
>      000c context_id  : 0000
>      000e num_transfer_syntaxes: 01
>[2010/12/05 19:58:06.729416,  6] rpc_parse/parse_prs.c:89(prs_debug)
>      00000f smb_io_rpc_iface 
>[2010/12/05 19:58:06.729454,  7] rpc_parse/parse_prs.c:89(prs_debug)
>          000010 smb_io_uuid uuid
>              0010 data   : 4b324fc8
>              0014 data   : 1670
>              0016 data   : 01d3
>              0018 data   : 12 78 
>              001a data   : 5a 47 bf 6e e1 88 
>          0020 version: 00000003
>[2010/12/05 19:58:06.729575,  6] rpc_parse/parse_prs.c:89(prs_debug)
>      000024 smb_io_rpc_iface 
>[2010/12/05 19:58:06.729609,  7] rpc_parse/parse_prs.c:89(prs_debug)
>          000024 smb_io_uuid uuid
>              0024 data   : 8a885d04
>              0028 data   : 1ceb
>              002a data   : 11c9
>              002c data   : 9f e8 
>              002e data   : 08 00 2b 10 48 60 
>          0034 version: 00000002
>[2010/12/05 19:58:06.729724,  3] rpc_server/srv_pipe.c:1668(api_pipe_bind_req)
>  api_pipe_bind_req: \PIPE\srvsvc -> \PIPE\srvsvc
>[2010/12/05 19:58:06.729758,  5] rpc_server/srv_pipe.c:1718(api_pipe_bind_req)
>  api_pipe_bind_req: make response. 1718
>[2010/12/05 19:58:06.729791,  3] rpc_server/srv_pipe.c:998(check_bind_req)
>  check_bind_req for \srvsvc
>  checking lsarpc
>  checking winreg
>  checking initshutdown
>  checking dssetup
>  checking wkssvc
>  checking svcctl
>  checking ntsvcs
>  checking netlogon
>  checking netdfs
>  checking srvsvc
>[2010/12/05 19:58:06.729920,  5] rpc_parse/parse_prs.c:89(prs_debug)
>  000000 smb_io_rpc_hdr_ba 
>[2010/12/05 19:58:06.729953,  6] rpc_parse/parse_prs.c:89(prs_debug)
>      000000 smb_io_rpc_hdr_bba 
>          0000 max_tsize: 10b8
>          0002 max_rsize: 10b8
>          0004 assoc_gid: 000053f0
>[2010/12/05 19:58:06.730022,  6] rpc_parse/parse_prs.c:89(prs_debug)
>      000008 smb_io_rpc_addr_str 
>          0008 len: 000d
>          000a str: \PIPE\srvsvc.
>[2010/12/05 19:58:06.730091,  6] rpc_parse/parse_prs.c:89(prs_debug)
>      000017 smb_io_rpc_results 
>          0018 num_results: 01
>          001c result     : 0000
>          001e reason     : 0000
>[2010/12/05 19:58:06.730161,  6] rpc_parse/parse_prs.c:89(prs_debug)
>      000020 smb_io_rpc_iface 
>[2010/12/05 19:58:06.730194,  7] rpc_parse/parse_prs.c:89(prs_debug)
>          000020 smb_io_uuid uuid
>              0020 data   : 8a885d04
>              0024 data   : 1ceb
>              0026 data   : 11c9
>              0028 data   : 9f e8 
>              002a data   : 08 00 2b 10 48 60 
>          0030 version: 00000002
>[2010/12/05 19:58:06.730308,  5] rpc_parse/parse_prs.c:89(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 0c
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 0044
>      000a auth_len  : 0000
>      000c call_id   : 00000001
>[2010/12/05 19:58:06.730476, 10] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe)
>  write_to_pipe: data_used = 56
>[2010/12/05 19:58:06.730542, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7fc98213bfc0
>[2010/12/05 19:58:06.730594, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7fc98213bfc0
>[2010/12/05 19:58:06.730641,  6] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe)
>   name: \srvsvc len: 4280
>[2010/12/05 19:58:06.730676, 10] rpc_server/srv_pipe_hnd.c:854(read_from_internal_pipe)
>  read_from_pipe: \srvsvc: current_pdu_len = 68, current_pdu_sent = 0 returning 68 bytes.
>[2010/12/05 19:58:06.730715, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7fc9821087c0
>[2010/12/05 19:58:06.730754, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7fc9821087c0
>[2010/12/05 19:58:06.730791,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..68] (align 0)
>[2010/12/05 19:58:06.730826,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.730848,  5] lib/util.c:627(show_msg)
>  size=124
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51203
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=6
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   68 (0x44)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   68 (0x44)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=69
>[2010/12/05 19:58:06.731160, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 00 05 00 0C 03 10 00 00   00 44 00 00 00 01 00 00   ........ .D......
>  [0010] 00 B8 10 B8 10 F0 53 00   00 0D 00 5C 50 49 50 45   ......S. ...\PIPE
>  [0020] 5C 73 72 76 73 76 63 00   00 01 00 00 00 00 00 00   \srvsvc. ........
>  [0030] 00 04 5D 88 8A EB 1C C9   11 9F E8 08 00 2B 10 48   ..]..... .....+.H
>  [0040] 60 02 00 00 00                                    `.... 
>[2010/12/05 19:58:06.731667, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 174
>[2010/12/05 19:58:06.731717,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0xae
>[2010/12/05 19:58:06.731752,  3] smbd/process.c:1485(process_smb)
>  Transaction 6 of length 178 (0 toread)
>[2010/12/05 19:58:06.731786,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.731808,  5] lib/util.c:627(show_msg)
>  size=174
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=7
>  smt_wct=16
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]=   92 (0x5C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]= 4280 (0x10B8)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=   82 (0x52)
>  smb_vwv[11]=   92 (0x5C)
>  smb_vwv[12]=   82 (0x52)
>  smb_vwv[13]=    2 (0x2)
>  smb_vwv[14]=   38 (0x26)
>  smb_vwv[15]= 8053 (0x1F75)
>  smb_bcc=107
>[2010/12/05 19:58:06.732128, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 00 00 05   .\.P.I.P .E.\....
>  [0010] 00 00 03 10 00 00 00 5C   00 00 00 02 00 00 00 44   .......\ .......D
>  [0020] 00 00 00 00 00 0F 00 00   00 02 00 0A 00 00 00 00   ........ ........
>  [0030] 00 00 00 0A 00 00 00 6C   00 6F 00 63 00 61 00 6C   .......l .o.c.a.l
>  [0040] 00 68 00 6F 00 73 00 74   00 00 00 01 00 00 00 01   .h.o.s.t ........
>  [0050] 00 00 00 04 00 02 00 00   00 00 00 00 00 00 00 FF   ........ ........
>  [0060] FF FF FF 08 00 02 00 00   00 00 00                 ........ ...
>[2010/12/05 19:58:06.732403,  3] smbd/process.c:1294(switch_message)
>  switch message SMBtrans (pid 12235) conn 0x7fc9821211f0
>[2010/12/05 19:58:06.732807,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBtrans.38.req len 178
>[2010/12/05 19:58:06.732982,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2010/12/05 19:58:06.733027,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\> data=92 params=0 setup=2
>[2010/12/05 19:58:06.733097,  5] smbd/ipc.c:578(handle_trans)
>  calling named_pipe
>[2010/12/05 19:58:06.733131,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <> name
>[2010/12/05 19:58:06.733163,  5] smbd/ipc.c:419(api_fd_reply)
>  api_fd_reply
>[2010/12/05 19:58:06.733195,  3] smbd/ipc.c:460(api_fd_reply)
>  Got API command 0x26 on pipe "srvsvc" (pnum 1f75)
>[2010/12/05 19:58:06.733230, 10] smbd/ipc.c:462(api_fd_reply)
>  api_fd_reply: p:0x7fc9821440b0 max_trans_reply: 4280
>[2010/12/05 19:58:06.733265,  6] rpc_server/srv_pipe_hnd.c:1208(np_write_send)
>  np_write_send: len: 92
>[2010/12/05 19:58:06.733298, 50] ../lib/util/util.c:278(_dump_data)
>  [0000] 05 00 00 03 10 00 00 00   5C 00 00 00 02 00 00 00   ........ \.......
>  [0010] 44 00 00 00 00 00 0F 00   00 00 02 00 0A 00 00 00   D....... ........
>  [0020] 00 00 00 00 0A 00 00 00   6C 00 6F 00 63 00 61 00   ........ l.o.c.a.
>  [0030] 6C 00 68 00 6F 00 73 00   74 00 00 00 01 00 00 00   l.h.o.s. t.......
>  [0040] 01 00 00 00 04 00 02 00   00 00 00 00 00 00 00 00   ........ ........
>  [0050] FF FF FF FF 08 00 02 00   00 00 00 00              ........ ....
>[2010/12/05 19:58:06.733542, 10] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe)
>  write_to_pipe: data_left = 92
>[2010/12/05 19:58:06.733574, 10] rpc_server/srv_pipe_hnd.c:682(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0, incoming data = 92
>[2010/12/05 19:58:06.733609, 10] rpc_server/srv_pipe_hnd.c:193(fill_rpc_header)
>  fill_rpc_header: data_to_copy = 92, len_needed_to_complete_hdr = 16, receive_len = 0
>[2010/12/05 19:58:06.733643, 10] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe)
>  write_to_pipe: data_used = 16
>[2010/12/05 19:58:06.733675, 10] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe)
>  write_to_pipe: data_left = 76
>[2010/12/05 19:58:06.733706, 10] rpc_server/srv_pipe_hnd.c:682(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0, incoming data = 76
>[2010/12/05 19:58:06.733741,  5] rpc_parse/parse_prs.c:89(prs_debug)
>  000000 smb_io_rpc_hdr 
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 00
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 005c
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2010/12/05 19:58:06.733910,  5] rpc_server/srv_pipe_hnd.c:289(unmarshall_rpc_header)
>  unmarshall_rpc_header: using little-endian RPC
>[2010/12/05 19:58:06.733942, 10] rpc_server/srv_pipe_hnd.c:318(unmarshall_rpc_header)
>  unmarshall_rpc_header: type = 0, flags = 3
>[2010/12/05 19:58:06.733976, 10] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe)
>  write_to_pipe: data_used = 0
>[2010/12/05 19:58:06.734007, 10] rpc_server/srv_pipe_hnd.c:772(write_to_internal_pipe)
>  write_to_pipe: data_left = 76
>[2010/12/05 19:58:06.734039, 10] rpc_server/srv_pipe_hnd.c:682(process_incoming_data)
>  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 76, incoming data = 76
>[2010/12/05 19:58:06.734073, 10] rpc_server/srv_pipe_hnd.c:537(process_complete_pdu)
>  process_complete_pdu: processing packet type 0
>[2010/12/05 19:58:06.734106,  5] rpc_parse/parse_prs.c:89(prs_debug)
>  000000 smb_io_rpc_hdr_req req
>      0000 alloc_hint: 00000044
>      0004 context_id: 0000
>      0006 opnum     : 000f
>[2010/12/05 19:58:06.734179,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 80
>[2010/12/05 19:58:06.734216,  5] rpc_server/srv_pipe.c:2367(api_pipe_request)
>  Requested \PIPE\\srvsvc
>[2010/12/05 19:58:06.734259,  4] rpc_server/srv_pipe.c:2404(api_rpcTNP)
>  api_rpcTNP: \srvsvc op 0xf - created /tmp/in_\srvsvc_15.10.prs
>[2010/12/05 19:58:06.734470,  3] rpc_server/srv_pipe.c:2415(api_rpcTNP)
>  api_rpcTNP: rpc command: SRVSVC_NETSHAREENUMALL
>[2010/12/05 19:58:06.734506,  6] rpc_server/srv_pipe.c:2434(api_rpcTNP)
>  api_rpc_cmds[15].fn == 0x7fc9817c3de0
>[2010/12/05 19:58:06.734568,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       srvsvc_NetShareEnumAll: struct srvsvc_NetShareEnumAll
>          in: struct srvsvc_NetShareEnumAll
>              server_unc               : *
>                  server_unc               : 'localhost'
>              info_ctr                 : *
>                  info_ctr: struct srvsvc_NetShareInfoCtr
>                      level                    : 0x00000001 (1)
>                      ctr                      : union srvsvc_NetShareCtr(case 1)
>                      ctr1                     : *
>                          ctr1: struct srvsvc_NetShareCtr1
>                              count                    : 0x00000000 (0)
>                              array                    : NULL
>              max_buffer               : 0xffffffff (4294967295)
>              resume_handle            : *
>                  resume_handle            : 0x00000000 (0)
>[2010/12/05 19:58:06.734879,  5] rpc_server/srv_srvsvc_nt.c:1339(_srvsvc_NetShareEnumAll)
>  _srvsvc_NetShareEnumAll: 1339
>[2010/12/05 19:58:06.734921,  5] rpc_server/srv_srvsvc_nt.c:527(init_srv_share_info_ctr)
>  init_srv_share_info_ctr
>[2010/12/05 19:58:06.734956,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.735028,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.735064,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.735097,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.735129,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.735191,  8] smbd/service.c:249(load_registry_shares)
>  load_registry_shares()
>[2010/12/05 19:58:06.735249, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba\smbconf]
>[2010/12/05 19:58:06.742893, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 33) -> 4
>[2010/12/05 19:58:06.742952, 10] registry/reg_backend_db.c:1483(regdb_fetch_keys_internal)
>  regdb_fetch_keys: no subkeys found for key [HKLM\SOFTWARE\Samba\smbconf]
>[2010/12/05 19:58:06.743000, 10] registry/reg_dispatcher.c:147(fetch_reg_values)
>  fetch_reg_values called for key 'HKLM\SOFTWARE\Samba\smbconf' (ops 0x7fc9820914a0)
>[2010/12/05 19:58:06.743042, 10] registry/reg_backend_db.c:1620(regdb_fetch_values_internal)
>  regdb_fetch_values: Looking for value of key [HKLM\SOFTWARE\Samba\smbconf] 
>[2010/12/05 19:58:06.743086, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 33) -> 4
>[2010/12/05 19:58:06.743141, 10] registry/reg_backend_db.c:1726(regdb_get_secdesc)
>  regdb_get_secdesc: Getting secdesc of key [HKLM\SOFTWARE\Samba\smbconf]
>[2010/12/05 19:58:06.743186, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 33) -> 4
>[2010/12/05 19:58:06.743257,  7] registry/reg_api.c:133(regkey_open_onelevel)
>  regkey_open_onelevel: name = [global]
>[2010/12/05 19:58:06.743293, 10] registry/reg_backend_db.c:451(regdb_open)
>  regdb_open: incrementing refcount (2)
>[2010/12/05 19:58:06.743333, 10] registry/reg_cachehook.c:125(reghook_cache_find)
>  reghook_cache_find: Searching for keyname [/HKLM/SOFTWARE/Samba/smbconf/global]
>[2010/12/05 19:58:06.743365, 10] lib/adt_tree.c:352(pathtree_find)
>  pathtree_find: Enter [/HKLM/SOFTWARE/Samba/smbconf/global]
>[2010/12/05 19:58:06.743398, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [HKLM], new_path => [SOFTWARE/Samba/smbconf/global]
>[2010/12/05 19:58:06.743431, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKLM]
>[2010/12/05 19:58:06.743466, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [HKPT]
>[2010/12/05 19:58:06.743497, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [HKLM]
>[2010/12/05 19:58:06.743528, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [SOFTWARE], new_path => [Samba/smbconf/global]
>[2010/12/05 19:58:06.743587, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SOFTWARE]
>[2010/12/05 19:58:06.743619, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [SYSTEM]
>[2010/12/05 19:58:06.743649, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [SOFTWARE]
>[2010/12/05 19:58:06.743680, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [Samba], new_path => [smbconf/global]
>[2010/12/05 19:58:06.743711, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Microsoft]
>[2010/12/05 19:58:06.743743, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [Samba]
>[2010/12/05 19:58:06.743774, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [Samba]
>[2010/12/05 19:58:06.743805, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [smbconf], new_path => [global]
>[2010/12/05 19:58:06.743836, 11] lib/adt_tree.c:169(pathtree_find_child)
>  pathtree_find_child: child key => [smbconf]
>[2010/12/05 19:58:06.743868, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Found [smbconf]
>[2010/12/05 19:58:06.743898, 11] lib/adt_tree.c:398(pathtree_find)
>  pathtree_find: [loop] base => [global], new_path => []
>[2010/12/05 19:58:06.743930, 11] lib/adt_tree.c:185(pathtree_find_child)
>  pathtree_find_child: Did not find [global]
>[2010/12/05 19:58:06.743962, 11] lib/adt_tree.c:421(pathtree_find)
>  pathtree_find: Found data_p!
>[2010/12/05 19:58:06.743992, 10] lib/adt_tree.c:425(pathtree_find)
>  pathtree_find: Exit
>[2010/12/05 19:58:06.744022, 10] registry/reg_cachehook.c:130(reghook_cache_find)
>  reghook_cache_find: found ops 0x7fc9820914a0 for key [/HKLM/SOFTWARE/Samba/smbconf/global]
>[2010/12/05 19:58:06.744057, 11] registry/reg_backend_db.c:1466(regdb_fetch_keys_internal)
>  regdb_fetch_keys: Enter key => [HKLM\SOFTWARE\Samba\smbconf\global]
>[2010/12/05 19:58:06.744103, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(d, 4) -> 4
>[2010/12/05 19:58:06.744141, 10] registry/reg_backend_db.c:1471(regdb_fetch_keys_internal)
>  key [HKLM\SOFTWARE\Samba\smbconf\global] not found
>[2010/12/05 19:58:06.744176, 10] registry/reg_backend_db.c:485(regdb_close)
>  regdb_close: decrementing refcount (2)
>[2010/12/05 19:58:06.744227,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.744265, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr)
>  counting service IPC$
>[2010/12/05 19:58:06.744302, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr)
>  counting service srvnfs
>[2010/12/05 19:58:06.744336, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr)
>  counting service print$
>[2010/12/05 19:58:06.744370, 10] rpc_server/srv_srvsvc_nt.c:550(init_srv_share_info_ctr)
>  NOT counting service printers
>[2010/12/05 19:58:06.744405, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr)
>  counting service groups
>[2010/12/05 19:58:06.744439, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr)
>  counting service users
>[2010/12/05 19:58:06.744473, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr)
>  counting service profiles
>[2010/12/05 19:58:06.744507, 10] rpc_server/srv_srvsvc_nt.c:550(init_srv_share_info_ctr)
>  NOT counting service homes
>[2010/12/05 19:58:06.744541, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr)
>  counting service samsung_color
>[2010/12/05 19:58:06.744577, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr)
>  counting service samsung_bw
>[2010/12/05 19:58:06.744611, 10] rpc_server/srv_srvsvc_nt.c:545(init_srv_share_info_ctr)
>  counting service dummy0
>[2010/12/05 19:58:06.744732,  5] rpc_server/srv_srvsvc_nt.c:1353(_srvsvc_NetShareEnumAll)
>  _srvsvc_NetShareEnumAll: 1353
>[2010/12/05 19:58:06.744766,  1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>       srvsvc_NetShareEnumAll: struct srvsvc_NetShareEnumAll
>          out: struct srvsvc_NetShareEnumAll
>              info_ctr                 : *
>                  info_ctr: struct srvsvc_NetShareInfoCtr
>                      level                    : 0x00000001 (1)
>                      ctr                      : union srvsvc_NetShareCtr(case 1)
>                      ctr1                     : *
>                          ctr1: struct srvsvc_NetShareCtr1
>                              count                    : 0x00000009 (9)
>                              array                    : *
>                                  array: ARRAY(9)
>                                      array: struct srvsvc_NetShareInfo1
>                                          name                     : *
>                                              name                     : 'IPC$'
>                                          type                     : STYPE_IPC_HIDDEN (0x80000003)
>                                          comment                  : *
>                                              comment                  : 'IPC Service (Samba 3.5.6-12.1-2470-SUSE-SL11.3-x86_64)'
>                                      array: struct srvsvc_NetShareInfo1
>                                          name                     : *
>                                              name                     : 'srvnfs'
>                                          type                     : STYPE_DISKTREE (0x0)
>                                          comment                  : *
>                                              comment                  : 'nfs reexport'
>                                      array: struct srvsvc_NetShareInfo1
>                                          name                     : *
>                                              name                     : 'print$'
>                                          type                     : STYPE_DISKTREE (0x0)
>                                          comment                  : *
>                                              comment                  : 'Printer Drivers'
>                                      array: struct srvsvc_NetShareInfo1
>                                          name                     : *
>                                              name                     : 'groups'
>                                          type                     : STYPE_DISKTREE (0x0)
>                                          comment                  : *
>                                              comment                  : 'All groups'
>                                      array: struct srvsvc_NetShareInfo1
>                                          name                     : *
>                                              name                     : 'users'
>                                          type                     : STYPE_DISKTREE (0x0)
>                                          comment                  : *
>                                              comment                  : 'All users'
>                                      array: struct srvsvc_NetShareInfo1
>                                          name                     : *
>                                              name                     : 'profiles'
>                                          type                     : STYPE_DISKTREE (0x0)
>                                          comment                  : *
>                                              comment                  : 'Network Profiles Service'
>                                      array: struct srvsvc_NetShareInfo1
>                                          name                     : *
>                                              name                     : 'samsung_color'
>                                          type                     : STYPE_PRINTQ (0x1)
>                                          comment                  : *
>                                              comment                  : 'Samsung CLP-550N Foomatic/Postscript (recommended)'
>                                      array: struct srvsvc_NetShareInfo1
>                                          name                     : *
>                                              name                     : 'samsung_bw'
>                                          type                     : STYPE_PRINTQ (0x1)
>                                          comment                  : *
>                                              comment                  : 'Samsung CLP-550N via Generic PCL 6/PCL XL Printer'
>                                      array: struct srvsvc_NetShareInfo1
>                                          name                     : *
>                                              name                     : 'dummy0'
>                                          type                     : STYPE_PRINTQ (0x1)
>                                          comment                  : *
>                                              comment                  : 'dummy0'
>              totalentries             : *
>                  totalentries             : 0x00000009 (9)
>              resume_handle            : *
>                  resume_handle            : 0x00000000 (0)
>              result                   : WERR_OK
>[2010/12/05 19:58:06.746257,  0] rpc_parse/parse_prs.c:74(prs_dump_region)
>  created /tmp/out_\srvsvc_15.10.prs
>[2010/12/05 19:58:06.746422,  5] rpc_server/srv_pipe.c:2469(api_rpcTNP)
>  api_rpcTNP: called \srvsvc successfully
>[2010/12/05 19:58:06.746474,  3] rpc_server/srv_pipe_hnd.c:344(free_pipe_context)
>  free_pipe_context: destroying talloc pool of size 719
>[2010/12/05 19:58:06.746512, 10] rpc_server/srv_pipe_hnd.c:776(write_to_internal_pipe)
>  write_to_pipe: data_used = 76
>[2010/12/05 19:58:06.746552, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7fc98213bff0
>[2010/12/05 19:58:06.746604, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7fc98213bff0
>[2010/12/05 19:58:06.746644,  6] rpc_server/srv_pipe_hnd.c:813(read_from_internal_pipe)
>   name: \srvsvc len: 4280
>[2010/12/05 19:58:06.746680, 10] rpc_server/srv_pipe_hnd.c:875(read_from_internal_pipe)
>  read_from_pipe: \srvsvc: fault_state = 0 : data_sent_length = 0, prs_offset(&p->out_data.rdata) = 1012.
>[2010/12/05 19:58:06.746718,  5] rpc_parse/parse_prs.c:89(prs_debug)
>  000000 smb_io_rpc_hdr hdr
>      0000 major     : 05
>      0001 minor     : 00
>      0002 pkt_type  : 02
>      0003 flags     : 03
>      0004 pack_type0: 10
>      0005 pack_type1: 00
>      0006 pack_type2: 00
>      0007 pack_type3: 00
>      0008 frag_len  : 040c
>      000a auth_len  : 0000
>      000c call_id   : 00000002
>[2010/12/05 19:58:06.746887,  5] rpc_parse/parse_prs.c:89(prs_debug)
>  000010 smb_io_rpc_hdr_resp resp
>      0010 alloc_hint: 000003f4
>      0014 context_id: 0000
>      0016 cancel_ct : 00
>      0017 reserved  : 00
>[2010/12/05 19:58:06.747019, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Schedule immediate event "tevent_req_trigger": 0x7fc98210f4d0
>[2010/12/05 19:58:06.747062, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Run immediate event "tevent_req_trigger": 0x7fc98210f4d0
>[2010/12/05 19:58:06.747100,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..0] data[0..1036] (align 0)
>[2010/12/05 19:58:06.747206,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.747228,  5] lib/util.c:627(show_msg)
>  size=1092
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51203
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=7
>  smt_wct=10
>  smb_vwv[ 0]=    0 (0x0)
>  smb_vwv[ 1]= 1036 (0x40C)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    0 (0x0)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]= 1036 (0x40C)
>  smb_vwv[ 7]=   56 (0x38)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=1037
>[2010/12/05 19:58:06.747483, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 00 05 00 02 03 10 00 00   00 0C 04 00 00 02 00 00   ........ ........
>  [0010] 00 F4 03 00 00 00 00 00   00 01 00 00 00 01 00 00   ........ ........
>  [0020] 00 00 00 02 00 09 00 00   00 04 00 02 00 09 00 00   ........ ........
>  [0030] 00 08 00 02 00 03 00 00   80 0C 00 02 00 10 00 02   ........ ........
>  [0040] 00 00 00 00 00 14 00 02   00 18 00 02 00 00 00 00   ........ ........
>  [0050] 00 1C 00 02 00 20 00 02   00 00 00 00 00 24 00 02   ..... .. .....$..
>  [0060] 00 28 00 02 00 00 00 00   00 2C 00 02 00 30 00 02   .(...... .,...0..
>  [0070] 00 00 00 00 00 34 00 02   00 38 00 02 00 01 00 00   .....4.. .8......
>  [0080] 00 3C 00 02 00 40 00 02   00 01 00 00 00 44 00 02   .<...@.. .....D..
>  [0090] 00 48 00 02 00 01 00 00   00 4C 00 02 00 05 00 00   .H...... .L......
>  [00A0] 00 00 00 00 00 05 00 00   00 49 00 50 00 43 00 24   ........ .I.P.C.$
>  [00B0] 00 00 00 00 00 37 00 00   00 00 00 00 00 37 00 00   .....7.. .....7..
>  [00C0] 00 49 00 50 00 43 00 20   00 53 00 65 00 72 00 76   .I.P.C.  .S.e.r.v
>  [00D0] 00 69 00 63 00 65 00 20   00 28 00 53 00 61 00 6D   .i.c.e.  .(.S.a.m
>  [00E0] 00 62 00 61 00 20 00 33   00 2E 00 35 00 2E 00 36   .b.a. .3 ...5...6
>  [00F0] 00 2D 00 31 00 32 00 2E   00 31 00 2D 00 32 00 34   .-.1.2.. .1.-.2.4
>  [0100] 00 37 00 30 00 2D 00 53   00 55 00 53 00 45 00 2D   .7.0.-.S .U.S.E.-
>  [0110] 00 53 00 4C 00 31 00 31   00 2E 00 33 00 2D 00 78   .S.L.1.1 ...3.-.x
>  [0120] 00 38 00 36 00 5F 00 36   00 34 00 29 00 00 00 00   .8.6._.6 .4.)....
>  [0130] 00 07 00 00 00 00 00 00   00 07 00 00 00 73 00 72   ........ .....s.r
>  [0140] 00 76 00 6E 00 66 00 73   00 00 00 00 00 0D 00 00   .v.n.f.s ........
>  [0150] 00 00 00 00 00 0D 00 00   00 6E 00 66 00 73 00 20   ........ .n.f.s. 
>  [0160] 00 72 00 65 00 65 00 78   00 70 00 6F 00 72 00 74   .r.e.e.x .p.o.r.t
>  [0170] 00 00 00 00 00 07 00 00   00 00 00 00 00 07 00 00   ........ ........
>  [0180] 00 70 00 72 00 69 00 6E   00 74 00 24 00 00 00 00   .p.r.i.n .t.$....
>  [0190] 00 10 00 00 00 00 00 00   00 10 00 00 00 50 00 72   ........ .....P.r
>  [01A0] 00 69 00 6E 00 74 00 65   00 72 00 20 00 44 00 72   .i.n.t.e .r. .D.r
>  [01B0] 00 69 00 76 00 65 00 72   00 73 00 00 00 07 00 00   .i.v.e.r .s......
>  [01C0] 00 00 00 00 00 07 00 00   00 67 00 72 00 6F 00 75   ........ .g.r.o.u
>  [01D0] 00 70 00 73 00 00 00 00   00 0B 00 00 00 00 00 00   .p.s.... ........
>  [01E0] 00 0B 00 00 00 41 00 6C   00 6C 00 20 00 67 00 72   .....A.l .l. .g.r
>  [01F0] 00 6F 00 75 00 70 00 73   00 00 00 00 00 06 00 00   .o.u.p.s ........
>  [0200] 00 00 00 00 00 06 00 00   00 75 00 73 00 65 00 72   ........ .u.s.e.r
>  [0210] 00 73 00 00 00 0A 00 00   00 00 00 00 00 0A 00 00   .s...... ........
>  [0220] 00 41 00 6C 00 6C 00 20   00 75 00 73 00 65 00 72   .A.l.l.  .u.s.e.r
>  [0230] 00 73 00 00 00 09 00 00   00 00 00 00 00 09 00 00   .s...... ........
>  [0240] 00 70 00 72 00 6F 00 66   00 69 00 6C 00 65 00 73   .p.r.o.f .i.l.e.s
>  [0250] 00 00 00 00 00 19 00 00   00 00 00 00 00 19 00 00   ........ ........
>  [0260] 00 4E 00 65 00 74 00 77   00 6F 00 72 00 6B 00 20   .N.e.t.w .o.r.k. 
>  [0270] 00 50 00 72 00 6F 00 66   00 69 00 6C 00 65 00 73   .P.r.o.f .i.l.e.s
>  [0280] 00 20 00 53 00 65 00 72   00 76 00 69 00 63 00 65   . .S.e.r .v.i.c.e
>  [0290] 00 00 00 00 00 0E 00 00   00 00 00 00 00 0E 00 00   ........ ........
>  [02A0] 00 73 00 61 00 6D 00 73   00 75 00 6E 00 67 00 5F   .s.a.m.s .u.n.g._
>  [02B0] 00 63 00 6F 00 6C 00 6F   00 72 00 00 00 33 00 00   .c.o.l.o .r...3..
>  [02C0] 00 00 00 00 00 33 00 00   00 53 00 61 00 6D 00 73   .....3.. .S.a.m.s
>  [02D0] 00 75 00 6E 00 67 00 20   00 43 00 4C 00 50 00 2D   .u.n.g.  .C.L.P.-
>  [02E0] 00 35 00 35 00 30 00 4E   00 20 00 46 00 6F 00 6F   .5.5.0.N . .F.o.o
>  [02F0] 00 6D 00 61 00 74 00 69   00 63 00 2F 00 50 00 6F   .m.a.t.i .c./.P.o
>  [0300] 00 73 00 74 00 73 00 63   00 72 00 69 00 70 00 74   .s.t.s.c .r.i.p.t
>  [0310] 00 20 00 28 00 72 00 65   00 63 00 6F 00 6D 00 6D   . .(.r.e .c.o.m.m
>  [0320] 00 65 00 6E 00 64 00 65   00 64 00 29 00 00 00 00   .e.n.d.e .d.)....
>  [0330] 00 0B 00 00 00 00 00 00   00 0B 00 00 00 73 00 61   ........ .....s.a
>  [0340] 00 6D 00 73 00 75 00 6E   00 67 00 5F 00 62 00 77   .m.s.u.n .g._.b.w
>  [0350] 00 00 00 00 00 32 00 00   00 00 00 00 00 32 00 00   .....2.. .....2..
>  [0360] 00 53 00 61 00 6D 00 73   00 75 00 6E 00 67 00 20   .S.a.m.s .u.n.g. 
>  [0370] 00 43 00 4C 00 50 00 2D   00 35 00 35 00 30 00 4E   .C.L.P.- .5.5.0.N
>  [0380] 00 20 00 76 00 69 00 61   00 20 00 47 00 65 00 6E   . .v.i.a . .G.e.n
>  [0390] 00 65 00 72 00 69 00 63   00 20 00 50 00 43 00 4C   .e.r.i.c . .P.C.L
>  [03A0] 00 20 00 36 00 2F 00 50   00 43 00 4C 00 20 00 58   . .6./.P .C.L. .X
>  [03B0] 00 4C 00 20 00 50 00 72   00 69 00 6E 00 74 00 65   .L. .P.r .i.n.t.e
>  [03C0] 00 72 00 00 00 07 00 00   00 00 00 00 00 07 00 00   .r...... ........
>  [03D0] 00 64 00 75 00 6D 00 6D   00 79 00 30 00 00 00 00   .d.u.m.m .y.0....
>  [03E0] 00 07 00 00 00 00 00 00   00 07 00 00 00 64 00 75   ........ .....d.u
>  [03F0] 00 6D 00 6D 00 79 00 30   00 00 00 00 00 09 00 00   .m.m.y.0 ........
>  [0400] 00 50 00 02 00 00 00 00   00 00 00 00 00           .P...... .....
>[2010/12/05 19:58:06.750410, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 41
>[2010/12/05 19:58:06.750459,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0x29
>[2010/12/05 19:58:06.750494,  3] smbd/process.c:1485(process_smb)
>  Transaction 7 of length 45 (0 toread)
>[2010/12/05 19:58:06.750528,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.750549,  5] lib/util.c:627(show_msg)
>  size=41
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=8
>  smt_wct=3
>  smb_vwv[ 0]= 8053 (0x1F75)
>  smb_vwv[ 1]=65535 (0xFFFF)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_bcc=0
>[2010/12/05 19:58:06.750730,  3] smbd/process.c:1294(switch_message)
>  switch message SMBclose (pid 12235) conn 0x7fc9821211f0
>[2010/12/05 19:58:06.750944,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBclose.10.req len 45
>[2010/12/05 19:58:06.751406,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2010/12/05 19:58:06.751453,  3] smbd/reply.c:4653(reply_close)
>  close fd=-1 fnum=8053 (numopen=1)
>[2010/12/05 19:58:06.751495,  6] smbd/close.c:501(set_close_write_time)
>  close_write_time: Sun Feb  7 07:28:15 2106
>[2010/12/05 19:58:06.752042, 10] rpc_server/srv_lsa_hnd.c:290(close_policy_by_pipe)
>  close_policy_by_pipe: deleted handle list for pipe \srvsvc
>[2010/12/05 19:58:06.752102,  5] smbd/files.c:497(file_free)
>  freed files structure 8053 (0 used)
>[2010/12/05 19:58:06.752138,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.752159,  5] lib/util.c:627(show_msg)
>  size=35
>  smb_com=0x4
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51203
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=8
>  smt_wct=0
>  smb_bcc=0
>[2010/12/05 19:58:06.752977, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 35
>[2010/12/05 19:58:06.753028,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0x23
>[2010/12/05 19:58:06.753064,  3] smbd/process.c:1485(process_smb)
>  Transaction 8 of length 39 (0 toread)
>[2010/12/05 19:58:06.753097,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.753118,  5] lib/util.c:627(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=9
>  smt_wct=0
>  smb_bcc=0
>[2010/12/05 19:58:06.753266,  3] smbd/process.c:1294(switch_message)
>  switch message SMBtdis (pid 12235) conn 0x7fc9821211f0
>[2010/12/05 19:58:06.753550,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBtdis.19.req len 39
>[2010/12/05 19:58:06.753728,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.753769,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.753803,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.753875,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:06.753918,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.753953,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.753984,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.754070,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:06.754105,  3] smbd/service.c:1251(close_cnum)
>  giles (::ffff:127.0.0.1) closed connection to service IPC$
>[2010/12/05 19:58:06.754275,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to IPC$
>[2010/12/05 19:58:06.754449, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key CB2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:06.754521, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7fc98211b1a0
>[2010/12/05 19:58:06.754577, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key CB2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:06.754783,  4] smbd/vfs.c:721(vfs_ChDir)
>  vfs_ChDir to /
>[2010/12/05 19:58:06.754823,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.754856,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.754888,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.754941,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:06.755481,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.755515,  5] lib/util.c:627(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51203
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=9
>  smt_wct=0
>  smb_bcc=0
>[2010/12/05 19:58:06.757300,  5] lib/util_sock.c:462(read_fd_with_timeout)
>  read_fd_with_timeout: blocking read. EOF from client.
>[2010/12/05 19:58:06.757390, 10] smbd/process.c:286(receive_smb_raw_talloc)
>  receive_smb_raw: NT_STATUS_END_OF_FILE
>[2010/12/05 19:58:06.757428,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.757463,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.757494,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.757556,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:06.757614,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to 
>[2010/12/05 19:58:06.757804, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key CB2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:06.757920, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7fc98214f4a0
>[2010/12/05 19:58:06.757977, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key CB2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:06.758283,  3] smbd/server.c:902(exit_server_common)
>  Server exit (failed to receive smb request)
>[2010/12/05 19:58:06.760162,  5] lib/util_sock.c:304(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 1
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 50844
>  	SO_RCVBUF = 87712
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>  	TCP_QUICKACK = 1
>[2010/12/05 19:58:06.776056,  5] lib/util_sock.c:304(print_socket_options)
>  Socket options:
>  	SO_KEEPALIVE = 1
>  	SO_REUSEADDR = 1
>  	SO_BROADCAST = 0
>  	TCP_NODELAY = 1
>  	TCP_KEEPCNT = 9
>  	TCP_KEEPIDLE = 7200
>  	TCP_KEEPINTVL = 75
>  	IPTOS_LOWDELAY = 0
>  	IPTOS_THROUGHPUT = 0
>  	SO_SNDBUF = 50844
>  	SO_RCVBUF = 87712
>  	SO_SNDLOWAT = 1
>  	SO_RCVLOWAT = 1
>  	SO_SNDTIMEO = 0
>  	SO_RCVTIMEO = 0
>  	TCP_QUICKACK = 1
>[2010/12/05 19:58:06.776671,  6] param/loadparm.c:7133(lp_file_list_changed)
>  lp_file_list_changed()
>  file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf  last mod_time: Sun Dec  5 18:06:27 2010
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Dec  5 19:34:56 2010
>  
>[2010/12/05 19:58:06.777075,  3] smbd/oplock.c:895(init_oplocks)
>  init_oplocks: initializing messages.
>[2010/12/05 19:58:06.777802,  3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks)
>  Linux kernel oplocks enabled
>[2010/12/05 19:58:06.777857,  5] lib/messages.c:329(messaging_deregister)
>  Deregistering messaging pointer for type 1 - private_data=(nil)
>[2010/12/05 19:58:06.777923, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Added timed event "smbd_idle_event_handler": 0x7fc982103e20
>[2010/12/05 19:58:06.777961, 10] smbd/process.c:740(event_add_idle)
>  event_add_idle: idle_evt(keepalive) 0x7fc982103e20
>[2010/12/05 19:58:06.778007, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Added timed event "smbd_idle_event_handler": 0x7fc982103ef0
>[2010/12/05 19:58:06.778040, 10] smbd/process.c:740(event_add_idle)
>  event_add_idle: idle_evt(deadtime) 0x7fc982103ef0
>[2010/12/05 19:58:06.778079, 11] lib/events.c:313(s3_event_debug)
>  s3_event: Added timed event "smbd_idle_event_handler": 0x7fc98210c7a0
>[2010/12/05 19:58:06.778112, 10] smbd/process.c:740(event_add_idle)
>  event_add_idle: idle_evt(housekeeping) 0x7fc98210c7a0
>[2010/12/05 19:58:06.778223, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 68
>[2010/12/05 19:58:06.778275,  6] smbd/process.c:1482(process_smb)
>  got message type 0x81 of len 0x44
>[2010/12/05 19:58:06.778311,  3] smbd/process.c:1485(process_smb)
>  Transaction 0 of length 72 (0 toread)
>[2010/12/05 19:58:06.778366,  2] smbd/reply.c:554(reply_special)
>  netbios connect: name1=LOCALHOST      0x20 name2=GILES          0x0
>[2010/12/05 19:58:06.778453,  2] smbd/reply.c:565(reply_special)
>  netbios connect: local=localhost remote=giles, name type = 0
>[2010/12/05 19:58:06.778509,  6] param/loadparm.c:7133(lp_file_list_changed)
>  lp_file_list_changed()
>  file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf  last mod_time: Sun Dec  5 18:06:27 2010
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Dec  5 19:34:56 2010
>  
>[2010/12/05 19:58:06.778639,  5] smbd/reply.c:606(reply_special)
>  init msg_type=0x81 msg_flags=0x0
>[2010/12/05 19:58:06.779102, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 190
>[2010/12/05 19:58:06.779148,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0xbe
>[2010/12/05 19:58:06.779183,  3] smbd/process.c:1485(process_smb)
>  Transaction 0 of length 194 (0 toread)
>[2010/12/05 19:58:06.779217,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.779238,  5] lib/util.c:627(show_msg)
>  size=190
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=12234
>  smb_uid=0
>  smb_mid=2
>  smt_wct=0
>  smb_bcc=155
>[2010/12/05 19:58:06.779391, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 02 50 43 20 4E 45 54 57   4F 52 4B 20 50 52 4F 47   .PC NETW ORK PROG
>  [0010] 52 41 4D 20 31 2E 30 00   02 4D 49 43 52 4F 53 4F   RAM 1.0. .MICROSO
>  [0020] 46 54 20 4E 45 54 57 4F   52 4B 53 20 31 2E 30 33   FT NETWO RKS 1.03
>  [0030] 00 02 4D 49 43 52 4F 53   4F 46 54 20 4E 45 54 57   ..MICROS OFT NETW
>  [0040] 4F 52 4B 53 20 33 2E 30   00 02 4C 41 4E 4D 41 4E   ORKS 3.0 ..LANMAN
>  [0050] 31 2E 30 00 02 4C 4D 31   2E 32 58 30 30 32 00 02   1.0..LM1 .2X002..
>  [0060] 44 4F 53 20 4C 41 4E 4D   41 4E 32 2E 31 00 02 4C   DOS LANM AN2.1..L
>  [0070] 41 4E 4D 41 4E 32 2E 31   00 02 53 61 6D 62 61 00   ANMAN2.1 ..Samba.
>  [0080] 02 4E 54 20 4C 41 4E 4D   41 4E 20 31 2E 30 00 02   .NT LANM AN 1.0..
>  [0090] 4E 54 20 4C 4D 20 30 2E   31 32 00                 NT LM 0. 12.
>[2010/12/05 19:58:06.779800,  3] smbd/process.c:1294(switch_message)
>  switch message SMBnegprot (pid 12236) conn 0x0
>[2010/12/05 19:58:06.780133,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBnegprot.20.req len 194
>[2010/12/05 19:58:06.780261,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.780709,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.780751,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.780824,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:06.780961,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [PC NETWORK PROGRAM 1.0]
>[2010/12/05 19:58:06.781004,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [MICROSOFT NETWORKS 1.03]
>[2010/12/05 19:58:06.781038,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [MICROSOFT NETWORKS 3.0]
>[2010/12/05 19:58:06.781073,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [LANMAN1.0]
>[2010/12/05 19:58:06.781107,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [LM1.2X002]
>[2010/12/05 19:58:06.781141,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [DOS LANMAN2.1]
>[2010/12/05 19:58:06.781175,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [LANMAN2.1]
>[2010/12/05 19:58:06.781208,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [Samba]
>[2010/12/05 19:58:06.781243,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [NT LANMAN 1.0]
>[2010/12/05 19:58:06.781277,  3] smbd/negprot.c:586(reply_negprot)
>  Requested protocol [NT LM 0.12]
>[2010/12/05 19:58:06.781323, 10] lib/util.c:1969(set_remote_arch)
>  set_remote_arch: Client arch is 'Samba'
>[2010/12/05 19:58:06.781376,  6] param/loadparm.c:7133(lp_file_list_changed)
>  lp_file_list_changed()
>  file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf  last mod_time: Sun Dec  5 18:06:27 2010
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Dec  5 19:34:56 2010
>  
>[2010/12/05 19:58:06.781499,  5] smbd/connection.c:142(claim_connection)
>  claiming []
>[2010/12/05 19:58:06.781700, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key CC2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:06.781813, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7fc98213d040
>[2010/12/05 19:58:06.781904, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key CC2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:06.782147,  6] param/loadparm.c:7133(lp_file_list_changed)
>  lp_file_list_changed()
>  file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf  last mod_time: Sun Dec  5 18:06:27 2010
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Dec  5 19:34:56 2010
>  
>[2010/12/05 19:58:06.782355,  3] smbd/negprot.c:404(reply_nt1)
>  using SPNEGO
>[2010/12/05 19:58:06.782390,  3] smbd/negprot.c:691(reply_negprot)
>  Selected protocol NT LANMAN 1.0
>[2010/12/05 19:58:06.782421,  5] smbd/negprot.c:698(reply_negprot)
>  negprot index=8
>[2010/12/05 19:58:06.782452,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.782472,  5] lib/util.c:627(show_msg)
>  size=127
>  smb_com=0x72
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=12234
>  smb_uid=0
>  smb_mid=2
>  smt_wct=17
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=12803 (0x3203)
>  smb_vwv[ 2]=  256 (0x100)
>  smb_vwv[ 3]= 1024 (0x400)
>  smb_vwv[ 4]=   65 (0x41)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=  256 (0x100)
>  smb_vwv[ 7]=52224 (0xCC00)
>  smb_vwv[ 8]=   47 (0x2F)
>  smb_vwv[ 9]=64768 (0xFD00)
>  smb_vwv[10]=33011 (0x80F3)
>  smb_vwv[11]=  128 (0x80)
>  smb_vwv[12]=44595 (0xAE33)
>  smb_vwv[13]=44633 (0xAE59)
>  smb_vwv[14]=52116 (0xCB94)
>  smb_vwv[15]=50177 (0xC401)
>  smb_vwv[16]=  255 (0xFF)
>  smb_bcc=58
>[2010/12/05 19:58:06.782801, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 67 69 6C 65 73 00 00 00   00 00 00 00 00 00 00 00   giles... ........
>  [0010] 60 28 06 06 2B 06 01 05   05 02 A0 1E 30 1C A0 0E   `(..+... ....0...
>  [0020] 30 0C 06 0A 2B 06 01 04   01 82 37 02 02 0A A3 0A   0...+... ..7.....
>  [0030] 30 08 A0 06 1B 04 4E 4F   4E 45                    0.....NO NE
>[2010/12/05 19:58:06.783343, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 162
>[2010/12/05 19:58:06.783388,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0xa2
>[2010/12/05 19:58:06.783423,  3] smbd/process.c:1485(process_smb)
>  Transaction 1 of length 166 (0 toread)
>[2010/12/05 19:58:06.783456,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.783476,  5] lib/util.c:627(show_msg)
>  size=162
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=12234
>  smb_uid=0
>  smb_mid=3
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=   80 (0x50)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=53340 (0xD05C)
>  smb_vwv[11]=32768 (0x8000)
>  smb_bcc=103
>[2010/12/05 19:58:06.783756, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 60 4E 06 06 2B 06 01 05   05 02 A0 44 30 42 A0 0E   `N..+... ...D0B..
>  [0010] 30 0C 06 0A 2B 06 01 04   01 82 37 02 02 0A A2 30   0...+... ..7....0
>  [0020] 04 2E 4E 54 4C 4D 53 53   50 00 01 00 00 00 15 82   ..NTLMSS P.......
>  [0030] 08 60 09 00 09 00 20 00   00 00 05 00 05 00 29 00   .`.... . ......).
>  [0040] 00 00 57 4F 52 4B 47 52   4F 55 50 47 49 4C 45 53   ..WORKGR OUPGILES
>  [0050] 00 55 00 6E 00 69 00 78   00 00 00 53 00 61 00 6D   .U.n.i.x ...S.a.m
>  [0060] 00 62 00 61 00 00 00                              .b.a... 
>[2010/12/05 19:58:06.784079,  3] smbd/process.c:1294(switch_message)
>  switch message SMBsesssetupX (pid 12236) conn 0x0
>[2010/12/05 19:58:06.784463,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBsesssetupX.39.req len 166
>[2010/12/05 19:58:06.784905,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.784946,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.784980,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.785037,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:06.785077,  3] smbd/sesssetup.c:1436(reply_sesssetup_and_X)
>  wct=12 flg2=0xc801
>[2010/12/05 19:58:06.785118,  3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2010/12/05 19:58:06.785159,  3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego)
>  NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
>[2010/12/05 19:58:06.785199, 10] smbd/password.c:184(register_initial_vuid)
>  register_initial_vuid: allocated vuid = 100
>[2010/12/05 19:58:06.785243, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete)
>  check_spnego_blob_complete: needed_len = 80, pblob->length = 80
>[2010/12/05 19:58:06.785320,  5] smbd/sesssetup.c:754(parse_spnego_mechanisms)
>  parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10
>[2010/12/05 19:58:06.785354,  3] smbd/sesssetup.c:806(reply_spnego_negotiate)
>  reply_spnego_negotiate: Got secblob of size 46
>[2010/12/05 19:58:06.785412,  5] auth/auth.c:487(make_auth_context_subsystem)
>  Making default auth method list for standalone security=user, encrypt passwords = yes
>[2010/12/05 19:58:06.785466,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend sam
>[2010/12/05 19:58:06.785501,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'sam'
>[2010/12/05 19:58:06.785534,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend sam_ignoredomain
>[2010/12/05 19:58:06.785567,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'sam_ignoredomain'
>[2010/12/05 19:58:06.785599,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend unix
>[2010/12/05 19:58:06.785632,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'unix'
>[2010/12/05 19:58:06.785664,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend winbind
>[2010/12/05 19:58:06.785696,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'winbind'
>[2010/12/05 19:58:06.785732,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend wbc
>[2010/12/05 19:58:06.785765,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'wbc'
>[2010/12/05 19:58:06.785800,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend smbserver
>[2010/12/05 19:58:06.785834,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'smbserver'
>[2010/12/05 19:58:06.785869,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend trustdomain
>[2010/12/05 19:58:06.785903,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'trustdomain'
>[2010/12/05 19:58:06.785934,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend ntdomain
>[2010/12/05 19:58:06.785967,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'ntdomain'
>[2010/12/05 19:58:06.785999,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend guest
>[2010/12/05 19:58:06.786032,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'guest'
>[2010/12/05 19:58:06.786068,  5] auth/auth.c:46(smb_register_auth)
>  Attempting to register auth backend netlogond
>[2010/12/05 19:58:06.786105,  5] auth/auth.c:58(smb_register_auth)
>  Successfully added auth method 'netlogond'
>[2010/12/05 19:58:06.786168,  5] auth/auth.c:383(load_auth_module)
>  load_auth_module: Attempting to find an auth method to match guest
>[2010/12/05 19:58:06.786208,  5] auth/auth.c:408(load_auth_module)
>  load_auth_module: auth method guest has a valid init
>[2010/12/05 19:58:06.786241,  5] auth/auth.c:383(load_auth_module)
>  load_auth_module: Attempting to find an auth method to match sam
>[2010/12/05 19:58:06.786276,  5] auth/auth.c:408(load_auth_module)
>  load_auth_module: auth method sam has a valid init
>[2010/12/05 19:58:06.786347,  3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags)
>  Got NTLMSSP neg_flags=0x60088215
>    NTLMSSP_NEGOTIATE_UNICODE
>    NTLMSSP_REQUEST_TARGET
>    NTLMSSP_NEGOTIATE_SIGN
>    NTLMSSP_NEGOTIATE_NTLM
>    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>    NTLMSSP_NEGOTIATE_NTLM2
>    NTLMSSP_NEGOTIATE_128
>    NTLMSSP_NEGOTIATE_KEY_EXCH
>[2010/12/05 19:58:06.786528,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       &negotiate: struct NEGOTIATE_MESSAGE
>          Signature                : 'NTLMSSP'
>          MessageType              : NtLmNegotiate (1)
>          NegotiateFlags           : 0x60088215 (1611170325)
>                 1: NTLMSSP_NEGOTIATE_UNICODE
>                 0: NTLMSSP_NEGOTIATE_OEM    
>                 1: NTLMSSP_REQUEST_TARGET   
>                 1: NTLMSSP_NEGOTIATE_SIGN   
>                 0: NTLMSSP_NEGOTIATE_SEAL   
>                 0: NTLMSSP_NEGOTIATE_DATAGRAM
>                 0: NTLMSSP_NEGOTIATE_LM_KEY 
>                 0: NTLMSSP_NEGOTIATE_NETWARE
>                 1: NTLMSSP_NEGOTIATE_NTLM   
>                 0: NTLMSSP_NEGOTIATE_NT_ONLY
>                 0: NTLMSSP_ANONYMOUS        
>                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
>                 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>                 0: NTLMSSP_TARGET_TYPE_DOMAIN
>                 0: NTLMSSP_TARGET_TYPE_SERVER
>                 0: NTLMSSP_TARGET_TYPE_SHARE
>                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
>                 0: NTLMSSP_NEGOTIATE_IDENTIFY
>                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
>                 0: NTLMSSP_NEGOTIATE_TARGET_INFO
>                 0: NTLMSSP_NEGOTIATE_VERSION
>                 1: NTLMSSP_NEGOTIATE_128    
>                 1: NTLMSSP_NEGOTIATE_KEY_EXCH
>                 0: NTLMSSP_NEGOTIATE_56     
>          DomainNameLen            : 0x0009 (9)
>          DomainNameMaxLen         : 0x0009 (9)
>          DomainName               : *
>              DomainName               : 'WORKGROUP'
>          WorkstationLen           : 0x0005 (5)
>          WorkstationMaxLen        : 0x0005 (5)
>          Workstation              : *
>              Workstation              : 'GILES'
>[2010/12/05 19:58:06.787096,  5] auth/auth.c:97(get_ntlm_challenge)
>  auth_get_challenge: module guest did not want to specify a challenge
>[2010/12/05 19:58:06.787134,  5] auth/auth.c:97(get_ntlm_challenge)
>  auth_get_challenge: module sam did not want to specify a challenge
>[2010/12/05 19:58:06.787179,  5] auth/auth.c:132(get_ntlm_challenge)
>  auth_context challenge created by random
>[2010/12/05 19:58:06.787212,  5] auth/auth.c:133(get_ntlm_challenge)
>  challenge is: 
>[2010/12/05 19:58:06.787242,  5] ../lib/util/util.c:278(_dump_data)
>  [0000] 18 5D 6D A3 38 4A AF 49                            .]m.8J.I 
>[2010/12/05 19:58:06.788093,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       &challenge: struct CHALLENGE_MESSAGE
>          Signature                : 'NTLMSSP'
>          MessageType              : NtLmChallenge (0x2)
>          TargetNameLen            : 0x000a (10)
>          TargetNameMaxLen         : 0x000a (10)
>          TargetName               : *
>              TargetName               : 'GILES'
>          NegotiateFlags           : 0x608a8215 (1619690005)
>                 1: NTLMSSP_NEGOTIATE_UNICODE
>                 0: NTLMSSP_NEGOTIATE_OEM    
>                 1: NTLMSSP_REQUEST_TARGET   
>                 1: NTLMSSP_NEGOTIATE_SIGN   
>                 0: NTLMSSP_NEGOTIATE_SEAL   
>                 0: NTLMSSP_NEGOTIATE_DATAGRAM
>                 0: NTLMSSP_NEGOTIATE_LM_KEY 
>                 0: NTLMSSP_NEGOTIATE_NETWARE
>                 1: NTLMSSP_NEGOTIATE_NTLM   
>                 0: NTLMSSP_NEGOTIATE_NT_ONLY
>                 0: NTLMSSP_ANONYMOUS        
>                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
>                 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>                 0: NTLMSSP_TARGET_TYPE_DOMAIN
>                 1: NTLMSSP_TARGET_TYPE_SERVER
>                 0: NTLMSSP_TARGET_TYPE_SHARE
>                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
>                 0: NTLMSSP_NEGOTIATE_IDENTIFY
>                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
>                 1: NTLMSSP_NEGOTIATE_TARGET_INFO
>                 0: NTLMSSP_NEGOTIATE_VERSION
>                 1: NTLMSSP_NEGOTIATE_128    
>                 1: NTLMSSP_NEGOTIATE_KEY_EXCH
>                 0: NTLMSSP_NEGOTIATE_56     
>          ServerChallenge          : 185d6da3384aaf49
>          Reserved                 : 0000000000000000
>          TargetInfoLen            : 0x0050 (80)
>          TargetNameInfoMaxLen     : 0x0050 (80)
>          TargetInfo               : *
>              TargetInfo: struct AV_PAIR_LIST
>                  count                    : 0x00000005 (5)
>                  pair: ARRAY(5)
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvNbDomainName (0x2)
>                          AvLen                    : 0x000a (10)
>                          Value                    : union ntlmssp_AvValue(case 0x2)
>                          AvNbDomainName           : 'GILES'
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvNbComputerName (0x1)
>                          AvLen                    : 0x000a (10)
>                          Value                    : union ntlmssp_AvValue(case 0x1)
>                          AvNbComputerName         : 'GILES'
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvDnsDomainName (0x4)
>                          AvLen                    : 0x000e (14)
>                          Value                    : union ntlmssp_AvValue(case 0x4)
>                          AvDnsDomainName          : 'suse.de'
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvDnsComputerName (0x3)
>                          AvLen                    : 0x001a (26)
>                          Value                    : union ntlmssp_AvValue(case 0x3)
>                          AvDnsComputerName        : 'giles.suse.de'
>                      pair: struct AV_PAIR
>                          AvId                     : MsvAvEOL (0x0)
>                          AvLen                    : 0x0000 (0)
>                          Value                    : union ntlmssp_AvValue(case 0x0)
>[2010/12/05 19:58:06.789195,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.789219,  5] lib/util.c:627(show_msg)
>  size=324
>  smb_com=0x73
>  smb_rcls=22
>  smb_reh=0
>  smb_err=49152
>  smb_flg=136
>  smb_flg2=51203
>  smb_tid=0
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=3
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=  169 (0xA9)
>  smb_bcc=281
>[2010/12/05 19:58:06.789416, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] A1 81 A6 30 81 A3 A0 03   0A 01 01 A1 0C 06 0A 2B   ...0.... .......+
>  [0010] 06 01 04 01 82 37 02 02   0A A2 81 8D 04 81 8A 4E   .....7.. .......N
>  [0020] 54 4C 4D 53 53 50 00 02   00 00 00 0A 00 0A 00 30   TLMSSP.. .......0
>  [0030] 00 00 00 15 82 8A 60 18   5D 6D A3 38 4A AF 49 00   ......`. ]m.8J.I.
>  [0040] 00 00 00 00 00 00 00 50   00 50 00 3A 00 00 00 47   .......P .P.:...G
>  [0050] 00 49 00 4C 00 45 00 53   00 02 00 0A 00 47 00 49   .I.L.E.S .....G.I
>  [0060] 00 4C 00 45 00 53 00 01   00 0A 00 47 00 49 00 4C   .L.E.S.. ...G.I.L
>  [0070] 00 45 00 53 00 04 00 0E   00 73 00 75 00 73 00 65   .E.S.... .s.u.s.e
>  [0080] 00 2E 00 64 00 65 00 03   00 1A 00 67 00 69 00 6C   ...d.e.. ...g.i.l
>  [0090] 00 65 00 73 00 2E 00 73   00 75 00 73 00 65 00 2E   .e.s...s .u.s.e..
>  [00A0] 00 64 00 65 00 00 00 00   00 55 00 6E 00 69 00 78   .d.e.... .U.n.i.x
>  [00B0] 00 00 00 53 00 61 00 6D   00 62 00 61 00 20 00 33   ...S.a.m .b.a. .3
>  [00C0] 00 2E 00 35 00 2E 00 36   00 2D 00 31 00 32 00 2E   ...5...6 .-.1.2..
>  [00D0] 00 31 00 2D 00 32 00 34   00 37 00 30 00 2D 00 53   .1.-.2.4 .7.0.-.S
>  [00E0] 00 55 00 53 00 45 00 2D   00 53 00 4C 00 31 00 31   .U.S.E.- .S.L.1.1
>  [00F0] 00 2E 00 33 00 2D 00 78   00 38 00 36 00 5F 00 36   ...3.-.x .8.6._.6
>  [0100] 00 34 00 00 00 57 00 4F   00 52 00 4B 00 47 00 52   .4...W.O .R.K.G.R
>  [0110] 00 4F 00 55 00 50 00 00   00                       .O.U.P.. .
>[2010/12/05 19:58:06.790562, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 258
>[2010/12/05 19:58:06.790608,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0x102
>[2010/12/05 19:58:06.790642,  3] smbd/process.c:1485(process_smb)
>  Transaction 2 of length 262 (0 toread)
>[2010/12/05 19:58:06.790675,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.790695,  5] lib/util.c:627(show_msg)
>  size=258
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=0
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=4
>  smt_wct=12
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=65535 (0xFFFF)
>  smb_vwv[ 3]=    2 (0x2)
>  smb_vwv[ 4]=    1 (0x1)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=  176 (0xB0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_vwv[10]=53340 (0xD05C)
>  smb_vwv[11]=32768 (0x8000)
>  smb_bcc=199
>[2010/12/05 19:58:06.790971, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] A1 81 AD 30 81 AA A2 81   A7 04 81 A4 4E 54 4C 4D   ...0.... ....NTLM
>  [0010] 53 53 50 00 03 00 00 00   18 00 18 00 40 00 00 00   SSP..... ....@...
>  [0020] 18 00 18 00 58 00 00 00   12 00 12 00 70 00 00 00   ....X... ....p...
>  [0030] 08 00 08 00 82 00 00 00   0A 00 0A 00 8A 00 00 00   ........ ........
>  [0040] 10 00 10 00 94 00 00 00   15 82 08 60 0C 67 4B 96   ........ ...`.gK.
>  [0050] 6B 38 4F 9C 00 00 00 00   00 00 00 00 00 00 00 00   k8O..... ........
>  [0060] 00 00 00 00 69 C8 2B 92   FF 77 AC 33 7D BA 95 E5   ....i.+. .w.3}...
>  [0070] A4 B4 89 17 87 64 04 01   A0 AD 73 5E 57 00 4F 00   .....d.. ..s^W.O.
>  [0080] 52 00 4B 00 47 00 52 00   4F 00 55 00 50 00 72 00   R.K.G.R. O.U.P.r.
>  [0090] 6F 00 6F 00 74 00 47 00   49 00 4C 00 45 00 53 00   o.o.t.G. I.L.E.S.
>  [00A0] DF 91 C5 96 EB 0E 98 F2   71 86 AF A7 49 DC C3 5E   ........ q...I..^
>  [00B0] 00 55 00 6E 00 69 00 78   00 00 00 53 00 61 00 6D   .U.n.i.x ...S.a.m
>  [00C0] 00 62 00 61 00 00 00                              .b.a... 
>[2010/12/05 19:58:06.791460,  3] smbd/process.c:1294(switch_message)
>  switch message SMBsesssetupX (pid 12236) conn 0x0
>[2010/12/05 19:58:06.791846,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBsesssetupX.40.req len 262
>[2010/12/05 19:58:06.792286,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.792326,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.792357,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.792415,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:06.792451,  3] smbd/sesssetup.c:1436(reply_sesssetup_and_X)
>  wct=12 flg2=0xc801
>[2010/12/05 19:58:06.792483,  3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego)
>  Doing spnego session setup
>[2010/12/05 19:58:06.792518,  3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego)
>  NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
>[2010/12/05 19:58:06.792555, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete)
>  check_spnego_blob_complete: needed_len = 176, pblob->length = 176
>[2010/12/05 19:58:06.792638,  1] ../librpc/ndr/ndr.c:214(ndr_print_debug)
>       &authenticate: struct AUTHENTICATE_MESSAGE
>          Signature                : 'NTLMSSP'
>          MessageType              : NtLmAuthenticate (3)
>          LmChallengeResponseLen   : 0x0018 (24)
>          LmChallengeResponseMaxLen: 0x0018 (24)
>          LmChallengeResponse      : *
>              LmChallengeResponse      : union ntlmssp_LM_RESPONSE(case 24)
>              v1: struct LM_RESPONSE
>                  Response                 : 0c674b966b384f9c00000000000000000000000000000000
>          NtChallengeResponseLen   : 0x0018 (24)
>          NtChallengeResponseMaxLen: 0x0018 (24)
>          NtChallengeResponse      : *
>              NtChallengeResponse      : union ntlmssp_NTLM_RESPONSE(case 24)
>              v1: struct NTLM_RESPONSE
>                  Response                 : 69c82b92ff77ac337dba95e5a4b4891787640401a0ad735e
>          DomainNameLen            : 0x0012 (18)
>          DomainNameMaxLen         : 0x0012 (18)
>          DomainName               : *
>              DomainName               : 'WORKGROUP'
>          UserNameLen              : 0x0008 (8)
>          UserNameMaxLen           : 0x0008 (8)
>          UserName                 : *
>              UserName                 : 'root'
>          WorkstationLen           : 0x000a (10)
>          WorkstationMaxLen        : 0x000a (10)
>          Workstation              : *
>              Workstation              : 'GILES'
>          EncryptedRandomSessionKeyLen: 0x0010 (16)
>          EncryptedRandomSessionKeyMaxLen: 0x0010 (16)
>          EncryptedRandomSessionKey: *
>              EncryptedRandomSessionKey: DATA_BLOB length=16
>[2010/12/05 19:58:06.793162, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] DF 91 C5 96 EB 0E 98 F2   71 86 AF A7 49 DC C3 5E   ........ q...I..^
>          NegotiateFlags           : 0x60088215 (1611170325)
>                 1: NTLMSSP_NEGOTIATE_UNICODE
>                 0: NTLMSSP_NEGOTIATE_OEM    
>                 1: NTLMSSP_REQUEST_TARGET   
>                 1: NTLMSSP_NEGOTIATE_SIGN   
>                 0: NTLMSSP_NEGOTIATE_SEAL   
>                 0: NTLMSSP_NEGOTIATE_DATAGRAM
>                 0: NTLMSSP_NEGOTIATE_LM_KEY 
>                 0: NTLMSSP_NEGOTIATE_NETWARE
>                 1: NTLMSSP_NEGOTIATE_NTLM   
>                 0: NTLMSSP_NEGOTIATE_NT_ONLY
>                 0: NTLMSSP_ANONYMOUS        
>                 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED
>                 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL
>                 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>                 0: NTLMSSP_TARGET_TYPE_DOMAIN
>                 0: NTLMSSP_TARGET_TYPE_SERVER
>                 0: NTLMSSP_TARGET_TYPE_SHARE
>                 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
>                 0: NTLMSSP_NEGOTIATE_IDENTIFY
>                 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY
>                 0: NTLMSSP_NEGOTIATE_TARGET_INFO
>                 0: NTLMSSP_NEGOTIATE_VERSION
>                 1: NTLMSSP_NEGOTIATE_128    
>                 1: NTLMSSP_NEGOTIATE_KEY_EXCH
>                 0: NTLMSSP_NEGOTIATE_56     
>[2010/12/05 19:58:06.793586,  3] libsmb/ntlmssp.c:747(ntlmssp_server_auth)
>  Got user=[root] domain=[WORKGROUP] workstation=[GILES] len1=24 len2=24
>[2010/12/05 19:58:06.793628,  5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge)
>  auth_context challenge set by NTLMSSP callback (NTLM2)
>[2010/12/05 19:58:06.793660,  5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge)
>  challenge is: 
>[2010/12/05 19:58:06.793690,  5] ../lib/util/util.c:278(_dump_data)
>  [0000] 05 96 4D 99 2B A9 D2 33                            ..M.+..3 
>[2010/12/05 19:58:06.793767,  6] param/loadparm.c:7133(lp_file_list_changed)
>  lp_file_list_changed()
>  file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf  last mod_time: Sun Dec  5 18:06:27 2010
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Dec  5 19:34:56 2010
>  
>[2010/12/05 19:58:06.793898,  5] auth/auth_util.c:211(make_user_info_map)
>  Mapping user [WORKGROUP]\[root] from workstation [GILES]
>[2010/12/05 19:58:06.793968,  5] auth/auth_util.c:232(make_user_info_map)
>  Mapped domain from [WORKGROUP] to [GILES] for user [root] from workstation [GILES]
>[2010/12/05 19:58:06.794004,  5] auth/auth_util.c:122(make_user_info)
>  attempting to make a user_info for root (root)
>[2010/12/05 19:58:06.794037,  5] auth/auth_util.c:132(make_user_info)
>  making strings for root's user_info struct
>[2010/12/05 19:58:06.794070,  5] auth/auth_util.c:164(make_user_info)
>  making blobs for root's user_info struct
>[2010/12/05 19:58:06.794102, 10] auth/auth_util.c:182(make_user_info)
>  made an encrypted user_info for root (root)
>[2010/12/05 19:58:06.794136,  3] auth/auth.c:216(check_ntlm_password)
>  check_ntlm_password:  Checking password for unmapped user [WORKGROUP]\[root]@[GILES] with the new password interface
>[2010/12/05 19:58:06.794172,  3] auth/auth.c:219(check_ntlm_password)
>  check_ntlm_password:  mapped user is: [GILES]\[root]@[GILES]
>[2010/12/05 19:58:06.794204, 10] auth/auth.c:228(check_ntlm_password)
>  check_ntlm_password: auth_context challenge created by NTLMSSP callback (NTLM2)
>[2010/12/05 19:58:06.794237, 10] auth/auth.c:230(check_ntlm_password)
>  challenge is: 
>[2010/12/05 19:58:06.794267,  5] ../lib/util/util.c:278(_dump_data)
>  [0000] 05 96 4D 99 2B A9 D2 33                            ..M.+..3 
>[2010/12/05 19:58:06.794324, 10] auth/auth.c:256(check_ntlm_password)
>  check_ntlm_password: guest had nothing to say
>[2010/12/05 19:58:06.794362,  8] lib/util.c:1869(is_myname)
>  is_myname("GILES") returns 1
>[2010/12/05 19:58:06.794401,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.794440,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.794473,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.794506,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.794536,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.794627,  5] passdb/pdb_tdb.c:557(tdbsam_getsampwnam)
>  pdb_getsampwnam (TDB): error fetching database.
>   Key: USER_root
>[2010/12/05 19:58:06.794691,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.794725,  3] auth/auth_sam.c:399(check_sam_security)
>  check_sam_security: Couldn't find user 'root' in passdb.
>[2010/12/05 19:58:06.794758,  5] auth/auth.c:268(check_ntlm_password)
>  check_ntlm_password: sam authentication for user [root] FAILED with error NT_STATUS_NO_SUCH_USER
>[2010/12/05 19:58:06.794795,  2] auth/auth.c:314(check_ntlm_password)
>  check_ntlm_password:  Authentication for user [root] -> [root] FAILED with error NT_STATUS_NO_SUCH_USER
>[2010/12/05 19:58:06.794830,  5] auth/auth_util.c:2119(free_user_info)
>  attempting to free (and zero) a user_info structure
>[2010/12/05 19:58:06.794862, 10] auth/auth_util.c:2123(free_user_info)
>  structure was created for root
>[2010/12/05 19:58:06.794896,  3] smbd/sesssetup.c:50(do_map_to_guest)
>  No such user root [WORKGROUP] - using guest account
>[2010/12/05 19:58:06.795108, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 3: DEFAULT
>[2010/12/05 19:58:06.795151, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 1: DEFAULT
>[2010/12/05 19:58:06.795182, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 4: DEFAULT
>[2010/12/05 19:58:06.795212, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 2: DEFAULT
>[2010/12/05 19:58:06.795244,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.795276,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.795308,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.795340,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.795371,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.795480, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:06.795524,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.795568, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175
>[2010/12/05 19:58:06.795605, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:06.795650, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:06.795688, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 5 -> now SET
>[2010/12/05 19:58:06.795719, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 6 -> now SET
>[2010/12/05 19:58:06.795749, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 7 -> now SET
>[2010/12/05 19:58:06.795779, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 8 -> now SET
>[2010/12/05 19:58:06.795809, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 9 -> now SET
>[2010/12/05 19:58:06.795839, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 10 -> now SET
>[2010/12/05 19:58:06.795871, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 21 -> now SET
>[2010/12/05 19:58:06.795904, 10] passdb/pdb_get_set.c:608(pdb_set_username)
>  pdb_set_username: setting username nobody, was 
>[2010/12/05 19:58:06.795937, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 12 -> now SET
>[2010/12/05 19:58:06.795968, 10] passdb/pdb_get_set.c:631(pdb_set_domain)
>  pdb_set_domain: setting domain GILES, was 
>[2010/12/05 19:58:06.796036, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 14 -> now SET
>[2010/12/05 19:58:06.796068, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2010/12/05 19:58:06.796101, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 15 -> now SET
>[2010/12/05 19:58:06.796132, 10] passdb/pdb_get_set.c:677(pdb_set_fullname)
>  pdb_set_full_name: setting full name nobody, was 
>[2010/12/05 19:58:06.796164, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 13 -> now SET
>[2010/12/05 19:58:06.796209, 10] passdb/pdb_get_set.c:770(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\localhost\nobody\.9xprofile, was 
>[2010/12/05 19:58:06.796244, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 1 -> now DEFAULT
>[2010/12/05 19:58:06.796276, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive P:, was NULL
>[2010/12/05 19:58:06.796309, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 3 -> now DEFAULT
>[2010/12/05 19:58:06.796342, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2010/12/05 19:58:06.796375, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 4 -> now DEFAULT
>[2010/12/05 19:58:06.796410, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\localhost\profiles\.msprofile, was 
>[2010/12/05 19:58:06.796444, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 2 -> now DEFAULT
>[2010/12/05 19:58:06.796475, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 22 -> now SET
>[2010/12/05 19:58:06.796510, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 24 -> now SET
>[2010/12/05 19:58:06.796542, 10] passdb/pdb_get_set.c:813(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2010/12/05 19:58:06.796574, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 23 -> now SET
>[2010/12/05 19:58:06.796606, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 25 -> now SET
>[2010/12/05 19:58:06.796637,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.796669,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.796701,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.796762,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.796794,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.796854, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:06.796896,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.796932, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 33 -> now SET
>[2010/12/05 19:58:06.796966, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501
>[2010/12/05 19:58:06.797009, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 18 -> now SET
>[2010/12/05 19:58:06.797040, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501
>[2010/12/05 19:58:06.797093, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 16 -> now SET
>[2010/12/05 19:58:06.797125, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 28 -> now SET
>[2010/12/05 19:58:06.797156, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 29 -> now SET
>[2010/12/05 19:58:06.797187, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 30 -> now SET
>[2010/12/05 19:58:06.797217, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 20 -> now SET
>[2010/12/05 19:58:06.797248, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 17 -> now SET
>[2010/12/05 19:58:06.797278, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 26 -> now SET
>[2010/12/05 19:58:06.951320, 10] lib/gencache.c:345(gencache_get_data_blob)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec  5 19:58:10 2010
>[2010/12/05 19:58:06.951404,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.951440,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.951472,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.951505,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.951535,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.951592,  5] passdb/pdb_interface.c:1473(lookup_global_sam_rid)
>  lookup_global_sam_rid: looking up RID 513.
>[2010/12/05 19:58:06.951636,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:06.951670,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.951703,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:06.951736,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.951767,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.951833,  5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid)
>  pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201.
>[2010/12/05 19:58:06.951961,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.963057,  5] passdb/pdb_interface.c:1536(lookup_global_sam_rid)
>  Can't find a unix id for an unmapped group
>[2010/12/05 19:58:06.963103,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.963136, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:06.963175, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid)
>  pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:06.963261, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 19 -> now SET
>[2010/12/05 19:58:06.963301, 10] smbd/password.c:278(register_existing_vuid)
>  register_existing_vuid: (65534,65533) nobody root GILES guest=1
>[2010/12/05 19:58:06.963336,  3] smbd/password.c:282(register_existing_vuid)
>  register_existing_vuid: User name: nobody	Real name: nobody
>[2010/12/05 19:58:06.963368,  3] smbd/password.c:292(register_existing_vuid)
>  register_existing_vuid: UNIX uid 65534 is UNIX user nobody, and will be vuid 100
>[2010/12/05 19:58:06.963430,  6] param/loadparm.c:7133(lp_file_list_changed)
>  lp_file_list_changed()
>  file /etc/samba/dhcp.conf -> /etc/samba/dhcp.conf  last mod_time: Sun Dec  5 18:06:27 2010
>  
>  file /etc/samba/smb.conf -> /etc/samba/smb.conf  last mod_time: Sun Dec  5 19:34:56 2010
>  
>[2010/12/05 19:58:06.963574,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.963596,  5] lib/util.c:627(show_msg)
>  size=164
>  smb_com=0x73
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51203
>  smb_tid=0
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=4
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    1 (0x1)
>  smb_vwv[ 3]=    9 (0x9)
>  smb_bcc=121
>[2010/12/05 19:58:06.963783, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] A1 07 30 05 A0 03 0A 01   00 55 00 6E 00 69 00 78   ..0..... .U.n.i.x
>  [0010] 00 00 00 53 00 61 00 6D   00 62 00 61 00 20 00 33   ...S.a.m .b.a. .3
>  [0020] 00 2E 00 35 00 2E 00 36   00 2D 00 31 00 32 00 2E   ...5...6 .-.1.2..
>  [0030] 00 31 00 2D 00 32 00 34   00 37 00 30 00 2D 00 53   .1.-.2.4 .7.0.-.S
>  [0040] 00 55 00 53 00 45 00 2D   00 53 00 4C 00 31 00 31   .U.S.E.- .S.L.1.1
>  [0050] 00 2E 00 33 00 2D 00 78   00 38 00 36 00 5F 00 36   ...3.-.x .8.6._.6
>  [0060] 00 34 00 00 00 57 00 4F   00 52 00 4B 00 47 00 52   .4...W.O .R.K.G.R
>  [0070] 00 4F 00 55 00 50 00 00   00                       .O.U.P.. .
>[2010/12/05 19:58:06.964601, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 84
>[2010/12/05 19:58:06.964649,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0x54
>[2010/12/05 19:58:06.964684,  3] smbd/process.c:1485(process_smb)
>  Transaction 3 of length 88 (0 toread)
>[2010/12/05 19:58:06.964717,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:06.964737,  5] lib/util.c:627(show_msg)
>  size=84
>  smb_com=0x75
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=65535
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=5
>  smt_wct=4
>  smb_vwv[ 0]=  255 (0xFF)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=    1 (0x1)
>  smb_bcc=41
>[2010/12/05 19:58:06.964930, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 00 5C 00 5C 00 4C 00 4F   00 43 00 41 00 4C 00 48   .\.\.L.O .C.A.L.H
>  [0010] 00 4F 00 53 00 54 00 5C   00 49 00 50 00 43 00 24   .O.S.T.\ .I.P.C.$
>  [0020] 00 00 00 3F 3F 3F 3F 3F   00                       ...????? .
>[2010/12/05 19:58:06.965058,  3] smbd/process.c:1294(switch_message)
>  switch message SMBtconX (pid 12236) conn 0x0
>[2010/12/05 19:58:06.965339,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBtconX.20.req len 88
>[2010/12/05 19:58:06.965435,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.965834,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.965870,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.965925,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:06.965974,  4] smbd/reply.c:786(reply_tcon_and_X)
>  Client requested device type [?????] for share [IPC$]
>[2010/12/05 19:58:06.966049,  5] smbd/service.c:1227(make_connection)
>  making a connection to 'normal' service ipc$
>[2010/12/05 19:58:06.966115, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 3: DEFAULT
>[2010/12/05 19:58:06.966149, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 1: DEFAULT
>[2010/12/05 19:58:06.966212, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 4: DEFAULT
>[2010/12/05 19:58:06.966243, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 2: DEFAULT
>[2010/12/05 19:58:06.966276,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.966309,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.966342,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.966374,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.966405,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.966474, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:06.966518,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.966557, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175
>[2010/12/05 19:58:06.966592, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:06.966630, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:06.966666, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 5 -> now SET
>[2010/12/05 19:58:06.966697, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 6 -> now SET
>[2010/12/05 19:58:06.966728, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 7 -> now SET
>[2010/12/05 19:58:06.966758, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 8 -> now SET
>[2010/12/05 19:58:06.966788, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 9 -> now SET
>[2010/12/05 19:58:06.966819, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 10 -> now SET
>[2010/12/05 19:58:06.966849, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 21 -> now SET
>[2010/12/05 19:58:06.966880, 10] passdb/pdb_get_set.c:608(pdb_set_username)
>  pdb_set_username: setting username nobody, was 
>[2010/12/05 19:58:06.966912, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 12 -> now SET
>[2010/12/05 19:58:06.966942, 10] passdb/pdb_get_set.c:631(pdb_set_domain)
>  pdb_set_domain: setting domain GILES, was 
>[2010/12/05 19:58:06.966973, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 14 -> now SET
>[2010/12/05 19:58:06.967004, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2010/12/05 19:58:06.967035, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 15 -> now SET
>[2010/12/05 19:58:06.967065, 10] passdb/pdb_get_set.c:677(pdb_set_fullname)
>  pdb_set_full_name: setting full name nobody, was 
>[2010/12/05 19:58:06.967096, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 13 -> now SET
>[2010/12/05 19:58:06.967137, 10] passdb/pdb_get_set.c:770(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\localhost\nobody\.9xprofile, was 
>[2010/12/05 19:58:06.967171, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 1 -> now DEFAULT
>[2010/12/05 19:58:06.967202, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive P:, was NULL
>[2010/12/05 19:58:06.967233, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 3 -> now DEFAULT
>[2010/12/05 19:58:06.967265, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2010/12/05 19:58:06.967297, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 4 -> now DEFAULT
>[2010/12/05 19:58:06.967331, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\localhost\profiles\.msprofile, was 
>[2010/12/05 19:58:06.967364, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 2 -> now DEFAULT
>[2010/12/05 19:58:06.967395, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 22 -> now SET
>[2010/12/05 19:58:06.967454, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 24 -> now SET
>[2010/12/05 19:58:06.967485, 10] passdb/pdb_get_set.c:813(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2010/12/05 19:58:06.967516, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 23 -> now SET
>[2010/12/05 19:58:06.967547, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 25 -> now SET
>[2010/12/05 19:58:06.967578,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.967611,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.967643,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:06.967675,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:06.967705,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:06.967767, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:06.967808,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:06.967843, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 33 -> now SET
>[2010/12/05 19:58:06.967875, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501
>[2010/12/05 19:58:06.967912, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 18 -> now SET
>[2010/12/05 19:58:06.967943, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501
>[2010/12/05 19:58:06.968018, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 16 -> now SET
>[2010/12/05 19:58:06.968051, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 28 -> now SET
>[2010/12/05 19:58:06.968082, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 29 -> now SET
>[2010/12/05 19:58:06.968113, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 30 -> now SET
>[2010/12/05 19:58:06.968144, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 20 -> now SET
>[2010/12/05 19:58:06.968174, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 17 -> now SET
>[2010/12/05 19:58:06.968207, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 26 -> now SET
>[2010/12/05 19:58:07.121722, 10] lib/gencache.c:345(gencache_get_data_blob)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec  5 19:58:10 2010
>[2010/12/05 19:58:07.121886,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:07.121926,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.121959,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:07.121992,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:07.122024,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:07.122090,  5] passdb/pdb_interface.c:1473(lookup_global_sam_rid)
>  lookup_global_sam_rid: looking up RID 513.
>[2010/12/05 19:58:07.122130,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:07.122163,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2010/12/05 19:58:07.122194,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:07.122226,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:07.122256,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:07.122380,  5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid)
>  pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201.
>[2010/12/05 19:58:07.122531,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:07.122568,  5] passdb/pdb_interface.c:1536(lookup_global_sam_rid)
>  Can't find a unix id for an unmapped group
>[2010/12/05 19:58:07.122607,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.122640, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:07.122679, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid)
>  pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:07.122718, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 19 -> now SET
>[2010/12/05 19:58:07.122764,  5] lib/username.c:133(Get_Pwnam_alloc)
>  Finding user nobody
>[2010/12/05 19:58:07.122797,  5] lib/username.c:77(Get_Pwnam_internals)
>  Trying _Get_Pwnam(), username as lowercase is nobody
>[2010/12/05 19:58:07.122832,  5] lib/username.c:110(Get_Pwnam_internals)
>  Get_Pwnam_internals did find user [nobody]!
>[2010/12/05 19:58:07.122902, 10] smbd/service.c:163(set_conn_connectpath)
>  set_conn_connectpath: service IPC$, connectpath = /var/tmp
>[2010/12/05 19:58:07.122939,  3] smbd/service.c:807(make_connection_snum)
>  Connect path is '/var/tmp' for service [IPC$]
>[2010/12/05 19:58:07.123002, 10] lib/util_seaccess.c:58(se_map_generic)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2010/12/05 19:58:07.123053,  3] smbd/vfs.c:97(vfs_init_default)
>  Initialising default vfs hooks
>[2010/12/05 19:58:07.123094, 10] smbd/vfs.c:48(vfs_find_backend_entry)
>  vfs_find_backend_entry called for /[Default VFS]/
>[2010/12/05 19:58:07.123129,  5] smbd/vfs.c:87(smb_register_vfs)
>  Successfully added vfs backend '/[Default VFS]/'
>[2010/12/05 19:58:07.123164, 10] smbd/vfs.c:48(vfs_find_backend_entry)
>  vfs_find_backend_entry called for posixacl
>[2010/12/05 19:58:07.123196,  5] smbd/vfs.c:87(smb_register_vfs)
>  Successfully added vfs backend 'posixacl'
>[2010/12/05 19:58:07.123227,  3] smbd/vfs.c:122(vfs_init_custom)
>  Initialising custom vfs hooks from [/[Default VFS]/]
>[2010/12/05 19:58:07.123261, 10] smbd/vfs.c:48(vfs_find_backend_entry)
>  vfs_find_backend_entry called for /[Default VFS]/
>  Successfully loaded vfs module [/[Default VFS]/] with the new modules system
>[2010/12/05 19:58:07.123310,  5] smbd/connection.c:142(claim_connection)
>  claiming [IPC$]
>[2010/12/05 19:58:07.123498, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key CC2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:07.123558, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7fc98212a3b0
>[2010/12/05 19:58:07.123615, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key CC2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:07.123913, 10] smbd/service.c:163(set_conn_connectpath)
>  set_conn_connectpath: service IPC$, connectpath = /var/tmp
>[2010/12/05 19:58:07.124031, 10] smbd/share_access.c:238(user_ok_token)
>  user_ok_token: share IPC$ is ok for unix user nobody
>[2010/12/05 19:58:07.124071, 10] smbd/share_access.c:283(is_share_read_only_for_token)
>  is_share_read_only_for_user: share IPC$ is read-only for unix user nobody
>[2010/12/05 19:58:07.124118, 10] lib/util_seaccess.c:58(se_map_generic)
>  se_map_generic(): mapped mask 0x10000000 to 0x001f01ff
>[2010/12/05 19:58:07.124168, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 3: DEFAULT
>[2010/12/05 19:58:07.124200, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 1: DEFAULT
>[2010/12/05 19:58:07.124231, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 4: DEFAULT
>[2010/12/05 19:58:07.124262, 11] passdb/pdb_get_set.c:309(pdb_get_init_flags)
>  element 2: DEFAULT
>[2010/12/05 19:58:07.124294,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:07.124326,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.124357,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:07.124389,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:07.124422,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:07.124486, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:07.124528,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.124566, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 0) -> 175
>[2010/12/05 19:58:07.124602, 18] lib/util_tdb.c:204(tdb_pack_va)
>  tdb_pack_va(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:07.124640, 18] lib/util_tdb.c:358(tdb_unpack)
>  tdb_unpack(dddddddBBBBBBBBBBBBddBBBdwdBwwd, 175) -> 175
>[2010/12/05 19:58:07.124676, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 5 -> now SET
>[2010/12/05 19:58:07.124708, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 6 -> now SET
>[2010/12/05 19:58:07.124738, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 7 -> now SET
>[2010/12/05 19:58:07.124769, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 8 -> now SET
>[2010/12/05 19:58:07.124800, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 9 -> now SET
>[2010/12/05 19:58:07.124830, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 10 -> now SET
>[2010/12/05 19:58:07.124861, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 21 -> now SET
>[2010/12/05 19:58:07.124891, 10] passdb/pdb_get_set.c:608(pdb_set_username)
>  pdb_set_username: setting username nobody, was 
>[2010/12/05 19:58:07.124923, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 12 -> now SET
>[2010/12/05 19:58:07.124954, 10] passdb/pdb_get_set.c:631(pdb_set_domain)
>  pdb_set_domain: setting domain GILES, was 
>[2010/12/05 19:58:07.124986, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 14 -> now SET
>[2010/12/05 19:58:07.125017, 10] passdb/pdb_get_set.c:654(pdb_set_nt_username)
>  pdb_set_nt_username: setting nt username , was 
>[2010/12/05 19:58:07.125048, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 15 -> now SET
>[2010/12/05 19:58:07.125079, 10] passdb/pdb_get_set.c:677(pdb_set_fullname)
>  pdb_set_full_name: setting full name nobody, was 
>[2010/12/05 19:58:07.125111, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 13 -> now SET
>[2010/12/05 19:58:07.125158, 10] passdb/pdb_get_set.c:770(pdb_set_homedir)
>  pdb_set_homedir: setting home dir \\localhost\nobody\.9xprofile, was 
>[2010/12/05 19:58:07.125193, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 1 -> now DEFAULT
>[2010/12/05 19:58:07.125225, 10] passdb/pdb_get_set.c:746(pdb_set_dir_drive)
>  pdb_set_dir_drive: setting dir drive P:, was NULL
>[2010/12/05 19:58:07.125258, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 3 -> now DEFAULT
>[2010/12/05 19:58:07.125321, 10] passdb/pdb_get_set.c:700(pdb_set_logon_script)
>  pdb_set_logon_script: setting logon script , was 
>[2010/12/05 19:58:07.125354, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 4 -> now DEFAULT
>[2010/12/05 19:58:07.125390, 10] passdb/pdb_get_set.c:723(pdb_set_profile_path)
>  pdb_set_profile_path: setting profile path \\localhost\profiles\.msprofile, was 
>[2010/12/05 19:58:07.125423, 11] passdb/pdb_get_set.c:522(pdb_set_init_flags)
>  element 2 -> now DEFAULT
>[2010/12/05 19:58:07.125455, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 22 -> now SET
>[2010/12/05 19:58:07.125486, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 24 -> now SET
>[2010/12/05 19:58:07.125517, 10] passdb/pdb_get_set.c:813(pdb_set_workstations)
>  pdb_set_workstations: setting workstations , was 
>[2010/12/05 19:58:07.125549, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 23 -> now SET
>[2010/12/05 19:58:07.125581, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 25 -> now SET
>[2010/12/05 19:58:07.125612,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:07.125645,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.125677,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:07.125710,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:07.125740,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:07.125800, 10] lib/account_pol.c:333(account_policy_get)
>  account_policy_get: name: password history, val: 0
>[2010/12/05 19:58:07.125840,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.125875, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 33 -> now SET
>[2010/12/05 19:58:07.125907, 10] passdb/pdb_get_set.c:537(pdb_set_user_sid)
>  pdb_set_user_sid: setting user sid S-1-5-21-779886165-838294741-719422925-501
>[2010/12/05 19:58:07.125944, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 18 -> now SET
>[2010/12/05 19:58:07.125975, 10] passdb/pdb_compat.c:72(pdb_set_user_sid_from_rid)
>  pdb_set_user_sid_from_rid:
>  	setting user sid S-1-5-21-779886165-838294741-719422925-501 from rid 501
>[2010/12/05 19:58:07.126022, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 16 -> now SET
>[2010/12/05 19:58:07.126053, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 28 -> now SET
>[2010/12/05 19:58:07.126083, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 29 -> now SET
>[2010/12/05 19:58:07.126114, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 30 -> now SET
>[2010/12/05 19:58:07.126145, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 20 -> now SET
>[2010/12/05 19:58:07.126174, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 17 -> now SET
>[2010/12/05 19:58:07.126204, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 26 -> now SET
>[2010/12/05 19:58:07.126265, 10] lib/gencache.c:345(gencache_get_data_blob)
>  Returning valid cache entry: key = IDMAP/SID2GID/S-1-5-21-779886165-838294741-719422925-513, value = -1, timeout = Sun Dec  5 19:58:10 2010
>[2010/12/05 19:58:07.126322,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:07.126356,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.126388,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:07.126421,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:07.126450,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:07.126500,  5] passdb/pdb_interface.c:1473(lookup_global_sam_rid)
>  lookup_global_sam_rid: looking up RID 513.
>[2010/12/05 19:58:07.126563,  3] smbd/sec_ctx.c:210(push_sec_ctx)
>  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:07.126597,  3] smbd/uid.c:429(push_conn_ctx)
>  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
>[2010/12/05 19:58:07.126628,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
>[2010/12/05 19:58:07.126661,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:07.126690,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:07.126750,  5] passdb/pdb_tdb.c:609(tdbsam_getsampwrid)
>  pdb_getsampwrid (TDB): error looking up RID 513 by key RID_00000201.
>[2010/12/05 19:58:07.126862,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2010/12/05 19:58:07.126898,  5] passdb/pdb_interface.c:1536(lookup_global_sam_rid)
>  Can't find a unix id for an unmapped group
>[2010/12/05 19:58:07.126936,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
>  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.126969, 10] passdb/lookup_sid.c:1291(legacy_sid_to_gid)
>  LEGACY: mapping failed for sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:07.127007, 10] passdb/pdb_get_set.c:595(pdb_set_group_sid)
>  pdb_set_group_sid: setting group sid S-1-5-21-779886165-838294741-719422925-513
>[2010/12/05 19:58:07.127044, 11] passdb/pdb_get_set.c:510(pdb_set_init_flags)
>  element 19 -> now SET
>[2010/12/05 19:58:07.127086,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.127119,  5] auth/token_util.c:531(debug_nt_user_token)
>  NT user token of user S-1-5-21-779886165-838294741-719422925-501
>  contains 7 SIDs
>  SID[  0]: S-1-5-21-779886165-838294741-719422925-501
>  SID[  1]: S-1-22-2-65533
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-32-546
>  SID[  5]: S-1-22-2-65534
>  SID[  6]: S-1-22-1-65534
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2010/12/05 19:58:07.127276,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 65534
>  Primary group is 65533 and contains 2 supplementary groups
>  Group[  0]: 65533
>  Group[  1]: 65534
>[2010/12/05 19:58:07.127350,  5] smbd/uid.c:354(change_to_user)
>  change_to_user uid=(0,65534) gid=(0,65533)
>[2010/12/05 19:58:07.127411, 10] smbd/service.c:163(set_conn_connectpath)
>  set_conn_connectpath: service IPC$, connectpath = /var/tmp
>[2010/12/05 19:58:07.127461,  3] smbd/service.c:1070(make_connection_snum)
>  giles (::ffff:127.0.0.1) connect to service IPC$ initially as user nobody (uid=65534, gid=65533) (pid 12236)
>[2010/12/05 19:58:07.127504,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.127537,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:07.127567,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:07.127622,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:07.127666,  3] smbd/reply.c:865(reply_tcon_and_X)
>  tconX service=IPC$ 
>[2010/12/05 19:58:07.128004, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 126
>[2010/12/05 19:58:07.128053,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0x7e
>[2010/12/05 19:58:07.128088,  3] smbd/process.c:1485(process_smb)
>  Transaction 4 of length 130 (0 toread)
>[2010/12/05 19:58:07.128121,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:07.128141,  5] lib/util.c:627(show_msg)
>  size=126
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=6
>  smt_wct=14
>  smb_vwv[ 0]=   36 (0x24)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=65535 (0xFFFF)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   36 (0x24)
>  smb_vwv[10]=   90 (0x5A)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=  126 (0x7E)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=63
>[2010/12/05 19:58:07.128470, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 4C 00 41   .\.P.I.P .E.\.L.A
>  [0010] 00 4E 00 4D 00 41 00 4E   00 00 00 68 00 57 72 4C   .N.M.A.N ...h.WrL
>  [0020] 65 68 44 7A 00 42 31 36   42 42 44 7A 00 01 00 FF   ehDz.B16 BBDz....
>  [0030] FF FF FF FF FF 57 4F 52   4B 47 52 4F 55 50 00     .....WOR KGROUP.
>[2010/12/05 19:58:07.128645,  3] smbd/process.c:1294(switch_message)
>  switch message SMBtrans (pid 12236) conn 0x7fc9821211f0
>[2010/12/05 19:58:07.129061,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBtrans.39.req len 130
>[2010/12/05 19:58:07.129166,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.129659,  5] auth/token_util.c:531(debug_nt_user_token)
>  NT user token of user S-1-5-21-779886165-838294741-719422925-501
>  contains 7 SIDs
>  SID[  0]: S-1-5-21-779886165-838294741-719422925-501
>  SID[  1]: S-1-22-2-65533
>  SID[  2]: S-1-1-0
>  SID[  3]: S-1-5-2
>  SID[  4]: S-1-5-32-546
>  SID[  5]: S-1-22-2-65534
>  SID[  6]: S-1-22-1-65534
>  SE_PRIV  0x0 0x0 0x0 0x0
>[2010/12/05 19:58:07.129820,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 65534
>  Primary group is 65533 and contains 2 supplementary groups
>  Group[  0]: 65533
>  Group[  1]: 65534
>[2010/12/05 19:58:07.129899,  5] smbd/uid.c:354(change_to_user)
>  change_to_user uid=(0,65534) gid=(0,65533)
>[2010/12/05 19:58:07.129943,  4] smbd/vfs.c:721(vfs_ChDir)
>  vfs_ChDir to /var/tmp
>[2010/12/05 19:58:07.130017,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\LANMAN> data=0 params=36 setup=0
>[2010/12/05 19:58:07.130060,  5] smbd/ipc.c:578(handle_trans)
>  calling named_pipe
>[2010/12/05 19:58:07.130092,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <LANMAN> name
>[2010/12/05 19:58:07.130130,  3] smbd/lanman.c:4910(api_reply)
>  Got API command 104 of form <WrLehDz> <B16BBDz> (tdscnt=0,tpscnt=36,mdrcnt=65535,mprcnt=8)
>[2010/12/05 19:58:07.130168,  3] smbd/lanman.c:4914(api_reply)
>  Doing NetServerEnum2
>[2010/12/05 19:58:07.130217,  4] smbd/lanman.c:1420(api_RNetServerEnum2)
>  server request level: B16BBDz 3fffffff domains_req:No local_only:No
>[2010/12/05 19:58:07.130256,  4] smbd/lanman.c:1433(api_RNetServerEnum2)
>  domain [WORKGROUP]
>[2010/12/05 19:58:07.130331,  4] smbd/lanman.c:1169(get_server_info)
>  Servertype search: 3fffffff
>[2010/12/05 19:58:07.130422,  4] smbd/lanman.c:1248(get_server_info)
>  s: dom mismatch            WORKGROUP 80001000                     GILES       WORKGROUP
>[2010/12/05 19:58:07.130471,  4] smbd/lanman.c:1261(get_server_info)
>  **SV**                GILES   849a03 Samba 3.5.6-12.1-2470-SUSE-SL11.3-x86_64       WORKGROUP
>[2010/12/05 19:58:07.130510,  4] smbd/lanman.c:1458(api_RNetServerEnum2)
>  fill_srv_info[0]                GILES   849a03 Samba 3.5.6-12.1-2470-SUSE-SL11.3-x86_64       WORKGROUP
>[2010/12/05 19:58:07.130560,  4] smbd/lanman.c:1494(api_RNetServerEnum2)
>  fill_srv_info[0]                GILES   849a03 Samba 3.5.6-12.1-2470-SUSE-SL11.3-x86_64       WORKGROUP
>[2010/12/05 19:58:07.130602,  3] smbd/lanman.c:1512(api_RNetServerEnum2)
>  NetServerEnum2 domain = WORKGROUP uLevel=1 counted=1 total=1
>[2010/12/05 19:58:07.130642,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..8] data[0..67] (align 0)
>[2010/12/05 19:58:07.130678,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:07.130699,  5] lib/util.c:627(show_msg)
>  size=131
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51203
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=6
>  smt_wct=10
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=   67 (0x43)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    8 (0x8)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   67 (0x43)
>  smb_vwv[ 7]=   64 (0x40)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=76
>[2010/12/05 19:58:07.130952, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 00 00 00 00 00 01 00 01   00 47 49 4C 45 53 00 00   ........ .GILES..
>  [0010] 00 00 00 00 00 00 00 00   00 00 00 03 9A 84 00 1A   ........ ........
>  [0020] 00 00 00 53 61 6D 62 61   20 33 2E 35 2E 36 2D 31   ...Samba  3.5.6-1
>  [0030] 32 2E 31 2D 32 34 37 30   2D 53 55 53 45 2D 53 4C   2.1-2470 -SUSE-SL
>  [0040] 31 31 2E 33 2D 78 38 36   5F 36 34 00              11.3-x86 _64.
>[2010/12/05 19:58:07.131390, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 126
>[2010/12/05 19:58:07.131434,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0x7e
>[2010/12/05 19:58:07.131469,  3] smbd/process.c:1485(process_smb)
>  Transaction 5 of length 130 (0 toread)
>[2010/12/05 19:58:07.131502,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:07.131523,  5] lib/util.c:627(show_msg)
>  size=126
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=7
>  smt_wct=14
>  smb_vwv[ 0]=   36 (0x24)
>  smb_vwv[ 1]=    0 (0x0)
>  smb_vwv[ 2]=    8 (0x8)
>  smb_vwv[ 3]=65535 (0xFFFF)
>  smb_vwv[ 4]=    0 (0x0)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=    0 (0x0)
>  smb_vwv[ 7]=    0 (0x0)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=   36 (0x24)
>  smb_vwv[10]=   90 (0x5A)
>  smb_vwv[11]=    0 (0x0)
>  smb_vwv[12]=  126 (0x7E)
>  smb_vwv[13]=    0 (0x0)
>  smb_bcc=63
>[2010/12/05 19:58:07.131819, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 00 5C 00 50 00 49 00 50   00 45 00 5C 00 4C 00 41   .\.P.I.P .E.\.L.A
>  [0010] 00 4E 00 4D 00 41 00 4E   00 00 00 68 00 57 72 4C   .N.M.A.N ...h.WrL
>  [0020] 65 68 44 7A 00 42 31 36   42 42 44 7A 00 01 00 FF   ehDz.B16 BBDz....
>  [0030] FF 00 00 00 80 57 4F 52   4B 47 52 4F 55 50 00     .....WOR KGROUP.
>[2010/12/05 19:58:07.132003,  3] smbd/process.c:1294(switch_message)
>  switch message SMBtrans (pid 12236) conn 0x7fc9821211f0
>[2010/12/05 19:58:07.132409,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBtrans.40.req len 130
>[2010/12/05 19:58:07.132801,  4] smbd/uid.c:257(change_to_user)
>  change_to_user: Skipping user change - already user
>[2010/12/05 19:58:07.132848,  3] smbd/ipc.c:545(handle_trans)
>  trans <\PIPE\LANMAN> data=0 params=36 setup=0
>[2010/12/05 19:58:07.132885,  5] smbd/ipc.c:578(handle_trans)
>  calling named_pipe
>[2010/12/05 19:58:07.132917,  3] smbd/ipc.c:496(named_pipe)
>  named pipe command on <LANMAN> name
>[2010/12/05 19:58:07.132995,  3] smbd/lanman.c:4910(api_reply)
>  Got API command 104 of form <WrLehDz> <B16BBDz> (tdscnt=0,tpscnt=36,mdrcnt=65535,mprcnt=8)
>[2010/12/05 19:58:07.133031,  3] smbd/lanman.c:4914(api_reply)
>  Doing NetServerEnum2
>[2010/12/05 19:58:07.133068,  4] smbd/lanman.c:1420(api_RNetServerEnum2)
>  server request level: B16BBDz 80000000 domains_req:Yes local_only:No
>[2010/12/05 19:58:07.133105,  4] smbd/lanman.c:1433(api_RNetServerEnum2)
>  domain [WORKGROUP]
>[2010/12/05 19:58:07.133167,  4] smbd/lanman.c:1169(get_server_info)
>  Servertype search: 80000000
>[2010/12/05 19:58:07.133218,  4] smbd/lanman.c:1261(get_server_info)
>  **SV**            WORKGROUP 80001000                     GILES       WORKGROUP
>[2010/12/05 19:58:07.133262,  4] smbd/lanman.c:1242(get_server_info)
>  r:serv type s: dom mismatch                GILES   849a03 Samba 3.5.6-12.1-2470-SUSE-SL11.3-x86_64       WORKGROUP
>[2010/12/05 19:58:07.133303,  4] smbd/lanman.c:1458(api_RNetServerEnum2)
>  fill_srv_info[0]            WORKGROUP 80001000                     GILES       WORKGROUP
>[2010/12/05 19:58:07.133344,  4] smbd/lanman.c:1494(api_RNetServerEnum2)
>  fill_srv_info[0]            WORKGROUP 80001000                     GILES       WORKGROUP
>[2010/12/05 19:58:07.133382,  3] smbd/lanman.c:1512(api_RNetServerEnum2)
>  NetServerEnum2 domain = WORKGROUP uLevel=1 counted=1 total=1
>[2010/12/05 19:58:07.133417,  5] smbd/ipc.c:59(copy_trans_params_and_data)
>  copy_trans_params_and_data: params[0..8] data[0..32] (align 0)
>[2010/12/05 19:58:07.133451,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:07.133472,  5] lib/util.c:627(show_msg)
>  size=96
>  smb_com=0x25
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51203
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=7
>  smt_wct=10
>  smb_vwv[ 0]=    8 (0x8)
>  smb_vwv[ 1]=   32 (0x20)
>  smb_vwv[ 2]=    0 (0x0)
>  smb_vwv[ 3]=    8 (0x8)
>  smb_vwv[ 4]=   56 (0x38)
>  smb_vwv[ 5]=    0 (0x0)
>  smb_vwv[ 6]=   32 (0x20)
>  smb_vwv[ 7]=   64 (0x40)
>  smb_vwv[ 8]=    0 (0x0)
>  smb_vwv[ 9]=    0 (0x0)
>  smb_bcc=41
>[2010/12/05 19:58:07.133763, 10] ../lib/util/util.c:278(_dump_data)
>  [0000] 00 00 00 00 00 01 00 01   00 57 4F 52 4B 47 52 4F   ........ .WORKGRO
>  [0010] 55 50 00 00 00 00 00 00   00 00 00 00 10 00 80 1A   UP...... ........
>  [0020] 00 00 00 47 49 4C 45 53   00                       ...GILES .
>[2010/12/05 19:58:07.134018, 10] lib/util_sock.c:726(read_smb_length_return_keepalive)
>  got smb length of 35
>[2010/12/05 19:58:07.134060,  6] smbd/process.c:1482(process_smb)
>  got message type 0x0 of len 0x23
>[2010/12/05 19:58:07.134095,  3] smbd/process.c:1485(process_smb)
>  Transaction 6 of length 39 (0 toread)
>[2010/12/05 19:58:07.134128,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:07.134149,  5] lib/util.c:627(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=8
>  smb_flg2=51201
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=8
>  smt_wct=0
>  smb_bcc=0
>[2010/12/05 19:58:07.134294,  3] smbd/process.c:1294(switch_message)
>  switch message SMBtdis (pid 12236) conn 0x7fc9821211f0
>[2010/12/05 19:58:07.134559,  0] smbd/process.c:1243(smb_dump)
>  created /tmp/SMBtdis.20.req len 39
>[2010/12/05 19:58:07.134935,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.134978,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:07.135010,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:07.135074,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:07.135119,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.135152,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:07.135182,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:07.135232,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:07.135266,  3] smbd/service.c:1251(close_cnum)
>  giles (::ffff:127.0.0.1) closed connection to service IPC$
>[2010/12/05 19:58:07.135308,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to IPC$
>[2010/12/05 19:58:07.135495, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key CC2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:07.135561, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7fc98211b1a0
>[2010/12/05 19:58:07.135616, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key CC2F0000FFFFFFFF0100000049504324000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:07.135851,  4] smbd/vfs.c:721(vfs_ChDir)
>  vfs_ChDir to /
>[2010/12/05 19:58:07.135890,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.135923,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:07.135954,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:07.136054,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:07.136102,  5] lib/util.c:617(show_msg)
>[2010/12/05 19:58:07.136124,  5] lib/util.c:627(show_msg)
>  size=35
>  smb_com=0x71
>  smb_rcls=0
>  smb_reh=0
>  smb_err=0
>  smb_flg=136
>  smb_flg2=51203
>  smb_tid=1
>  smb_pid=12234
>  smb_uid=100
>  smb_mid=8
>  smt_wct=0
>  smb_bcc=0
>[2010/12/05 19:58:07.136362,  5] lib/util_sock.c:462(read_fd_with_timeout)
>  read_fd_with_timeout: blocking read. EOF from client.
>[2010/12/05 19:58:07.136401, 10] smbd/process.c:286(receive_smb_raw_talloc)
>  receive_smb_raw: NT_STATUS_END_OF_FILE
>[2010/12/05 19:58:07.136433,  3] smbd/sec_ctx.c:310(set_sec_ctx)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
>[2010/12/05 19:58:07.136465,  5] auth/token_util.c:525(debug_nt_user_token)
>  NT user token: (NULL)
>[2010/12/05 19:58:07.136495,  5] auth/token_util.c:551(debug_unix_user_token)
>  UNIX token of user 0
>  Primary group is 0 and contains 0 supplementary groups
>[2010/12/05 19:58:07.136544,  5] smbd/uid.c:369(change_to_root_user)
>  change_to_root_user: now uid=(0,0) gid=(0,0)
>[2010/12/05 19:58:07.136595,  3] smbd/connection.c:31(yield_connection)
>  Yielding connection to 
>[2010/12/05 19:58:07.136780, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked)
>  Locking key CC2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:07.136836, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked)
>  Allocated locked data 0x0x7fc98214f4a0
>[2010/12/05 19:58:07.136885, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr)
>  Unlocking key CC2F0000FFFFFFFFFFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>[2010/12/05 19:58:07.137190,  3] smbd/server.c:902(exit_server_common)
>  Server exit (failed to receive smb request)

Actions: View

Attachments on bug 7836: 6104 | 6105 | 6106 | 6107 | 6112 | 6113 | 6114 | 6115 | 6116 | 6117 | 6154 | 6170 | 6186 | 6188 | 6190 | 6191 | 6208 | 6209 | 6474 | 6475