smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2011/01/05 22:40:58.084638, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 6A E4 08 40 1B 34 C4 CE 00 ......`j ..@.4... [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 36 .b.a. .3 ...5...6 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2011/01/05 22:40:58.085427, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2011/01/05 22:40:58.085473, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2011/01/05 22:40:58.085508, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2011/01/05 22:40:58.085543, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.085563, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17957 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2011/01/05 22:40:58.085908, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 87 9A D7 25 ........ ...`...% [0050] B2 A8 D2 13 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ [0060] 00 00 00 00 3A 65 5C 6A 7D 69 BE 27 73 A0 59 8C ....:e\j }i.'s.Y. [0070] 34 E6 50 FC 94 F8 35 C6 5B BB 9D 54 4D 00 53 00 4.P...5. [..TM.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 1F AD U.B.A.R. ..S.I... [00B0] 4D 47 8D 67 AB 8F 6B 7F 7F B3 A8 D9 BF 22 00 55 MG.g..k. .....".U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2011/01/05 22:40:58.086353, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17958) conn 0x0 [2011/01/05 22:40:58.086389, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.086423, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.086457, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.086520, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.086582, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:58.086616, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:58.086652, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:58.086689, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2011/01/05 22:40:58.086762, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 879ad725b2a8d21300000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 3a655c6a7d69be2773a0598c34e650fc94f835c65bbb9d54 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2011/01/05 22:40:58.087314, 10] ../lib/util/util.c:278(_dump_data) [0000] 1F AD 4D 47 8D 67 AB 8F 6B 7F 7F B3 A8 D9 BF 22 ..MG.g.. k......" NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2011/01/05 22:40:58.087817, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2011/01/05 22:40:58.087860, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2011/01/05 22:40:58.087897, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2011/01/05 22:40:58.087953, 5] ../lib/util/util.c:278(_dump_data) [0000] 6A 86 54 A6 8C B5 CE F7 j.T..... [2011/01/05 22:40:58.242378, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.242491, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2011/01/05 22:40:58.242527, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2011/01/05 22:40:58.243060, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2011/01/05 22:40:58.243275, 3] smbd/oplock.c:895(init_oplocks) init_oplocks: initializing messages. [2011/01/05 22:40:58.243402, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2011/01/05 22:40:58.243441, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2011/01/05 22:40:58.243492, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb78293f8 [2011/01/05 22:40:58.243534, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb787de70 [2011/01/05 22:40:58.243574, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb78211c8 [2011/01/05 22:40:58.243656, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2011/01/05 22:40:58.243699, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2011/01/05 22:40:58.243734, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2011/01/05 22:40:58.243769, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.243789, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17960 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2011/01/05 22:40:58.243974, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2011/01/05 22:40:58.244320, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 17961) conn 0x0 [2011/01/05 22:40:58.244361, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.244402, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.244439, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.244515, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.244606, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2011/01/05 22:40:58.244646, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2011/01/05 22:40:58.244686, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2011/01/05 22:40:58.244721, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2011/01/05 22:40:58.244756, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2011/01/05 22:40:58.244792, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2011/01/05 22:40:58.244876, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2011/01/05 22:40:58.244912, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2011/01/05 22:40:58.244946, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2011/01/05 22:40:58.244981, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2011/01/05 22:40:58.245023, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2011/01/05 22:40:58.245099, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.245178, 5] smbd/connection.c:142(claim_connection) claiming [] [2011/01/05 22:40:58.245295, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 29460000FFFFFFFF0000 [2011/01/05 22:40:58.245348, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb789ec60 [2011/01/05 22:40:58.245421, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 29460000FFFFFFFF0000 [2011/01/05 22:40:58.245557, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.245684, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2011/01/05 22:40:58.245718, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2011/01/05 22:40:58.245752, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2011/01/05 22:40:58.245787, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.245807, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=17960 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=10496 (0x2900) smb_vwv[ 8]= 70 (0x46) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]= 3409 (0xD51) smb_vwv[13]= 8509 (0x213D) smb_vwv[14]=52141 (0xCBAD) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2011/01/05 22:40:58.246223, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2011/01/05 22:40:58.246655, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2011/01/05 22:40:58.246701, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2011/01/05 22:40:58.246736, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2011/01/05 22:40:58.246773, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.246792, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17960 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2011/01/05 22:40:58.247141, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2011/01/05 22:40:58.247410, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17961) conn 0x0 [2011/01/05 22:40:58.247446, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.247480, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.247514, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.247569, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.247610, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:58.247650, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:58.247687, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:58.247724, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2011/01/05 22:40:58.247774, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2011/01/05 22:40:58.247838, 5] smbd/sesssetup.c:754(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2011/01/05 22:40:58.247873, 3] smbd/sesssetup.c:806(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2011/01/05 22:40:58.247925, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2011/01/05 22:40:58.247968, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2011/01/05 22:40:58.248003, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2011/01/05 22:40:58.248036, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2011/01/05 22:40:58.248070, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2011/01/05 22:40:58.248106, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2011/01/05 22:40:58.248140, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2011/01/05 22:40:58.248174, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2011/01/05 22:40:58.248209, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2011/01/05 22:40:58.248243, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2011/01/05 22:40:58.248277, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2011/01/05 22:40:58.248313, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2011/01/05 22:40:58.248348, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2011/01/05 22:40:58.248384, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2011/01/05 22:40:58.248418, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2011/01/05 22:40:58.248452, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2011/01/05 22:40:58.248486, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2011/01/05 22:40:58.248522, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2011/01/05 22:40:58.248557, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2011/01/05 22:40:58.248591, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2011/01/05 22:40:58.248627, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2011/01/05 22:40:58.248685, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2011/01/05 22:40:58.248722, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2011/01/05 22:40:58.248757, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2011/01/05 22:40:58.248792, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2011/01/05 22:40:58.248843, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2011/01/05 22:40:58.249018, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2011/01/05 22:40:58.249679, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2011/01/05 22:40:58.249716, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2011/01/05 22:40:58.249758, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2011/01/05 22:40:58.249793, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2011/01/05 22:40:58.249826, 5] ../lib/util/util.c:278(_dump_data) [0000] B1 6E C5 3C F4 FA D1 F0 .n.<.... [2011/01/05 22:40:58.250239, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : b16ec53cf4fad1f0 Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2011/01/05 22:40:58.251501, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.251524, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=17960 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2011/01/05 22:40:58.251763, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 B1 6E C5 3C F4 FA D1 F0 00 ......`. n.<..... [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 36 .b.a. .3 ...5...6 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2011/01/05 22:40:58.252635, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2011/01/05 22:40:58.252681, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2011/01/05 22:40:58.252715, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2011/01/05 22:40:58.252749, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.252769, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17960 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2011/01/05 22:40:58.253114, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 E4 20 6F 5D ........ ...`. o] [0050] 09 08 1D 6F 00 00 00 00 00 00 00 00 00 00 00 00 ...o.... ........ [0060] 00 00 00 00 2F B5 6E 62 9B 89 30 29 91 FA 3B 4C ..../.nb ..0)..;L [0070] 73 26 D9 6A 18 A1 45 37 55 09 34 54 4D 00 53 00 s&.j..E7 U.4TM.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 55 7C U.B.A.R. ..S.I.U| [00B0] 36 65 D2 FF 45 6D 3E 23 26 A2 E1 B8 2E 43 00 55 6e..Em># &....C.U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2011/01/05 22:40:58.253558, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17961) conn 0x0 [2011/01/05 22:40:58.253594, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.253629, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.253663, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.253720, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.253758, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:58.253793, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:58.253830, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:58.253869, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2011/01/05 22:40:58.253945, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : e4206f5d09081d6f00000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 2fb56e629b89302991fa3b4c7326d96a18a1453755093454 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2011/01/05 22:40:58.254529, 10] ../lib/util/util.c:278(_dump_data) [0000] 55 7C 36 65 D2 FF 45 6D 3E 23 26 A2 E1 B8 2E 43 U|6e..Em >#&....C NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2011/01/05 22:40:58.255030, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2011/01/05 22:40:58.255074, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2011/01/05 22:40:58.255111, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2011/01/05 22:40:58.255145, 5] ../lib/util/util.c:278(_dump_data) [0000] 21 E3 2E CA D8 61 B4 E4 !....a.. [2011/01/05 22:40:58.357015, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.357127, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2011/01/05 22:40:58.357163, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2011/01/05 22:40:58.357720, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2011/01/05 22:40:58.357957, 3] smbd/oplock.c:895(init_oplocks) init_oplocks: initializing messages. [2011/01/05 22:40:58.358091, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2011/01/05 22:40:58.358132, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2011/01/05 22:40:58.358180, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb78293f8 [2011/01/05 22:40:58.358221, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb787de70 [2011/01/05 22:40:58.358262, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb78211c8 [2011/01/05 22:40:58.358343, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2011/01/05 22:40:58.358386, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2011/01/05 22:40:58.358421, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2011/01/05 22:40:58.358456, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.358476, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17969 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2011/01/05 22:40:58.358685, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2011/01/05 22:40:58.359051, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 17970) conn 0x0 [2011/01/05 22:40:58.359091, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.359131, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.359166, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.359238, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.359334, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2011/01/05 22:40:58.359375, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2011/01/05 22:40:58.359414, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2011/01/05 22:40:58.359449, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2011/01/05 22:40:58.359484, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2011/01/05 22:40:58.359519, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2011/01/05 22:40:58.359554, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2011/01/05 22:40:58.359589, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2011/01/05 22:40:58.359624, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2011/01/05 22:40:58.359659, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2011/01/05 22:40:58.359700, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2011/01/05 22:40:58.359775, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.359882, 5] smbd/connection.c:142(claim_connection) claiming [] [2011/01/05 22:40:58.360000, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 32460000FFFFFFFF0000 [2011/01/05 22:40:58.360052, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb789ec60 [2011/01/05 22:40:58.360123, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 32460000FFFFFFFF0000 [2011/01/05 22:40:58.360279, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.360410, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2011/01/05 22:40:58.360445, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2011/01/05 22:40:58.360479, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2011/01/05 22:40:58.360514, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.360534, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=17969 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=12800 (0x3200) smb_vwv[ 8]= 70 (0x46) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]= 3409 (0xD51) smb_vwv[13]= 8509 (0x213D) smb_vwv[14]=52141 (0xCBAD) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2011/01/05 22:40:58.360950, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2011/01/05 22:40:58.361813, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2011/01/05 22:40:58.361863, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2011/01/05 22:40:58.361899, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2011/01/05 22:40:58.361934, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.361954, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17969 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2011/01/05 22:40:58.362303, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2011/01/05 22:40:58.362549, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17970) conn 0x0 [2011/01/05 22:40:58.362584, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.362619, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.362653, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.362708, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.362789, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:58.362847, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:58.362897, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:58.362946, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2011/01/05 22:40:58.363011, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2011/01/05 22:40:58.363105, 5] smbd/sesssetup.c:754(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2011/01/05 22:40:58.363153, 3] smbd/sesssetup.c:806(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2011/01/05 22:40:58.363224, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2011/01/05 22:40:58.363282, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2011/01/05 22:40:58.363329, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2011/01/05 22:40:58.363373, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2011/01/05 22:40:58.363420, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2011/01/05 22:40:58.363468, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2011/01/05 22:40:58.363514, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2011/01/05 22:40:58.363561, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2011/01/05 22:40:58.363610, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2011/01/05 22:40:58.363657, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2011/01/05 22:40:58.363692, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2011/01/05 22:40:58.363729, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2011/01/05 22:40:58.363764, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2011/01/05 22:40:58.363800, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2011/01/05 22:40:58.363834, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2011/01/05 22:40:58.363869, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2011/01/05 22:40:58.363903, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2011/01/05 22:40:58.363939, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2011/01/05 22:40:58.363973, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2011/01/05 22:40:58.364007, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2011/01/05 22:40:58.364044, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2011/01/05 22:40:58.364077, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2011/01/05 22:40:58.364115, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2011/01/05 22:40:58.364149, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2011/01/05 22:40:58.364184, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2011/01/05 22:40:58.364235, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2011/01/05 22:40:58.364438, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2011/01/05 22:40:58.365102, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2011/01/05 22:40:58.365140, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2011/01/05 22:40:58.365184, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2011/01/05 22:40:58.365218, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2011/01/05 22:40:58.365252, 5] ../lib/util/util.c:278(_dump_data) [0000] E6 51 E7 02 52 12 2C 5A .Q..R.,Z [2011/01/05 22:40:58.365616, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : e651e70252122c5a Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2011/01/05 22:40:58.366875, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.366898, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=17969 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2011/01/05 22:40:58.367138, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 E6 51 E7 02 52 12 2C 5A 00 ......`. Q..R.,Z. [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 36 .b.a. .3 ...5...6 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2011/01/05 22:40:58.372337, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2011/01/05 22:40:58.372431, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2011/01/05 22:40:58.372469, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2011/01/05 22:40:58.372504, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.372523, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17969 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2011/01/05 22:40:58.372871, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 C2 C3 8F 42 ........ ...`...B [0050] B7 6D 40 F1 00 00 00 00 00 00 00 00 00 00 00 00 .m@..... ........ [0060] 00 00 00 00 20 CB 19 63 1D CE 34 7A D4 17 29 EF .... ..c ..4z..). [0070] 18 53 12 90 10 EA 80 0D F7 E7 54 BD 4D 00 53 00 .S...... ..T.M.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 8F 0C U.B.A.R. ..S.I... [00B0] 1A EA 22 2C 28 9F 0E 74 0C 72 56 83 BB 3C 00 55 ..",(..t .rV..<.U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2011/01/05 22:40:58.373322, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17970) conn 0x0 [2011/01/05 22:40:58.373361, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.373396, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.373431, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.373489, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.373527, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:58.373562, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:58.373601, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:58.373641, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2011/01/05 22:40:58.373725, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : c2c38f42b76d40f100000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 20cb19631dce347ad41729ef1853129010ea800df7e754bd DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2011/01/05 22:40:58.374306, 10] ../lib/util/util.c:278(_dump_data) [0000] 8F 0C 1A EA 22 2C 28 9F 0E 74 0C 72 56 83 BB 3C ....",(. .t.rV..< NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2011/01/05 22:40:58.375583, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2011/01/05 22:40:58.375631, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2011/01/05 22:40:58.375669, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2011/01/05 22:40:58.375704, 5] ../lib/util/util.c:278(_dump_data) [0000] 4F 43 33 A0 CA CF EA 51 OC3....Q [2011/01/05 22:40:58.517680, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.517793, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2011/01/05 22:40:58.517829, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2011/01/05 22:40:58.518370, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2011/01/05 22:40:58.518548, 3] smbd/oplock.c:895(init_oplocks) init_oplocks: initializing messages. [2011/01/05 22:40:58.518667, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2011/01/05 22:40:58.518706, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2011/01/05 22:40:58.518755, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb78293f8 [2011/01/05 22:40:58.518796, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb787de70 [2011/01/05 22:40:58.518836, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb78211c8 [2011/01/05 22:40:58.518916, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2011/01/05 22:40:58.518989, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2011/01/05 22:40:58.519024, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2011/01/05 22:40:58.519059, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.519079, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17971 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2011/01/05 22:40:58.519266, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2011/01/05 22:40:58.519611, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 17972) conn 0x0 [2011/01/05 22:40:58.519651, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.519690, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.519726, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.519798, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.519894, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2011/01/05 22:40:58.519934, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2011/01/05 22:40:58.519973, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2011/01/05 22:40:58.520008, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2011/01/05 22:40:58.520043, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2011/01/05 22:40:58.520078, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2011/01/05 22:40:58.520113, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2011/01/05 22:40:58.520148, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2011/01/05 22:40:58.520183, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2011/01/05 22:40:58.520218, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2011/01/05 22:40:58.520259, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2011/01/05 22:40:58.520329, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.520405, 5] smbd/connection.c:142(claim_connection) claiming [] [2011/01/05 22:40:58.520521, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 34460000FFFFFFFF0000 [2011/01/05 22:40:58.520571, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb789ec60 [2011/01/05 22:40:58.520642, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 34460000FFFFFFFF0000 [2011/01/05 22:40:58.520776, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.520904, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2011/01/05 22:40:58.520939, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2011/01/05 22:40:58.521000, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2011/01/05 22:40:58.521035, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.521056, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=17971 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=13312 (0x3400) smb_vwv[ 8]= 70 (0x46) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]= 3409 (0xD51) smb_vwv[13]= 8509 (0x213D) smb_vwv[14]=52141 (0xCBAD) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2011/01/05 22:40:58.521469, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2011/01/05 22:40:58.521958, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2011/01/05 22:40:58.522021, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2011/01/05 22:40:58.522057, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2011/01/05 22:40:58.522091, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.522111, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17971 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2011/01/05 22:40:58.522462, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2011/01/05 22:40:58.522700, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17972) conn 0x0 [2011/01/05 22:40:58.522735, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.522770, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.522804, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.522859, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.522899, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:58.522939, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:58.522976, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:58.523014, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2011/01/05 22:40:58.523065, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2011/01/05 22:40:58.523129, 5] smbd/sesssetup.c:754(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2011/01/05 22:40:58.523189, 3] smbd/sesssetup.c:806(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2011/01/05 22:40:58.523242, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2011/01/05 22:40:58.523288, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2011/01/05 22:40:58.523323, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2011/01/05 22:40:58.523357, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2011/01/05 22:40:58.523391, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2011/01/05 22:40:58.523427, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2011/01/05 22:40:58.523461, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2011/01/05 22:40:58.523495, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2011/01/05 22:40:58.523530, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2011/01/05 22:40:58.523565, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2011/01/05 22:40:58.523599, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2011/01/05 22:40:58.523635, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2011/01/05 22:40:58.523670, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2011/01/05 22:40:58.523706, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2011/01/05 22:40:58.523740, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2011/01/05 22:40:58.523775, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2011/01/05 22:40:58.523809, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2011/01/05 22:40:58.523845, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2011/01/05 22:40:58.523879, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2011/01/05 22:40:58.523914, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2011/01/05 22:40:58.523949, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2011/01/05 22:40:58.523984, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2011/01/05 22:40:58.524021, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2011/01/05 22:40:58.524055, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2011/01/05 22:40:58.524090, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2011/01/05 22:40:58.524141, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2011/01/05 22:40:58.524314, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2011/01/05 22:40:58.524998, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2011/01/05 22:40:58.525035, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2011/01/05 22:40:58.525079, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2011/01/05 22:40:58.525114, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2011/01/05 22:40:58.525147, 5] ../lib/util/util.c:278(_dump_data) [0000] 3C B2 72 6C 57 15 80 33 <.rlW..3 [2011/01/05 22:40:58.525494, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : 3cb2726c57158033 Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2011/01/05 22:40:58.526735, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.526758, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=17971 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2011/01/05 22:40:58.526999, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 3C B2 72 6C 57 15 80 33 00 ......`< .rlW..3. [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 36 .b.a. .3 ...5...6 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2011/01/05 22:40:58.527791, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2011/01/05 22:40:58.527837, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2011/01/05 22:40:58.527872, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2011/01/05 22:40:58.527907, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.527926, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17971 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2011/01/05 22:40:58.528297, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 E2 F1 D2 49 ........ ...`...I [0050] D9 07 44 49 00 00 00 00 00 00 00 00 00 00 00 00 ..DI.... ........ [0060] 00 00 00 00 51 3E 6F 06 32 34 07 47 7E C3 55 0F ....Q>o. 24.G~.U. [0070] 7E D0 B9 92 17 A0 C9 00 A1 C9 12 83 4D 00 53 00 ~....... ....M.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 2F 21 U.B.A.R. ..S.I./! [00B0] 37 C7 9F AC 12 79 56 DB 12 8F 48 C2 54 1D 00 55 7....yV. ..H.T..U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2011/01/05 22:40:58.528741, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17972) conn 0x0 [2011/01/05 22:40:58.528776, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.528811, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.528845, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.528900, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.528937, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:58.528971, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:58.529007, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:58.529044, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2011/01/05 22:40:58.529112, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : e2f1d249d907444900000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 513e6f06323407477ec3550f7ed0b99217a0c900a1c91283 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2011/01/05 22:40:58.529685, 10] ../lib/util/util.c:278(_dump_data) [0000] 2F 21 37 C7 9F AC 12 79 56 DB 12 8F 48 C2 54 1D /!7....y V...H.T. NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2011/01/05 22:40:58.530190, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2011/01/05 22:40:58.530234, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2011/01/05 22:40:58.530272, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2011/01/05 22:40:58.530305, 5] ../lib/util/util.c:278(_dump_data) [0000] 41 C0 5C E7 12 DD 68 AC A.\...h. [2011/01/05 22:40:58.714607, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.714717, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2011/01/05 22:40:58.714752, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2011/01/05 22:40:58.715483, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2011/01/05 22:40:58.715664, 3] smbd/oplock.c:895(init_oplocks) init_oplocks: initializing messages. [2011/01/05 22:40:58.715783, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2011/01/05 22:40:58.715824, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2011/01/05 22:40:58.715873, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb78293f8 [2011/01/05 22:40:58.715915, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb787de70 [2011/01/05 22:40:58.715955, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb78211c8 [2011/01/05 22:40:58.716034, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2011/01/05 22:40:58.716077, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2011/01/05 22:40:58.716112, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2011/01/05 22:40:58.716147, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.716167, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17973 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2011/01/05 22:40:58.716350, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2011/01/05 22:40:58.716736, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 17974) conn 0x0 [2011/01/05 22:40:58.716776, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.716817, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.716853, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.716918, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.717010, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2011/01/05 22:40:58.717050, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2011/01/05 22:40:58.717090, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2011/01/05 22:40:58.717125, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2011/01/05 22:40:58.717160, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2011/01/05 22:40:58.717195, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2011/01/05 22:40:58.717230, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2011/01/05 22:40:58.717265, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2011/01/05 22:40:58.717300, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2011/01/05 22:40:58.717334, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2011/01/05 22:40:58.717376, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2011/01/05 22:40:58.717447, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.717524, 5] smbd/connection.c:142(claim_connection) claiming [] [2011/01/05 22:40:58.717640, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 36460000FFFFFFFF0000 [2011/01/05 22:40:58.717690, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb789ec60 [2011/01/05 22:40:58.717762, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 36460000FFFFFFFF0000 [2011/01/05 22:40:58.717897, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.718025, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2011/01/05 22:40:58.718060, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2011/01/05 22:40:58.718094, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2011/01/05 22:40:58.718129, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.718149, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=17973 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=13824 (0x3600) smb_vwv[ 8]= 70 (0x46) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]= 3409 (0xD51) smb_vwv[13]= 8509 (0x213D) smb_vwv[14]=52141 (0xCBAD) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2011/01/05 22:40:58.718604, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2011/01/05 22:40:58.719524, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2011/01/05 22:40:58.719587, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2011/01/05 22:40:58.719623, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2011/01/05 22:40:58.719658, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.719678, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17973 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2011/01/05 22:40:58.720030, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2011/01/05 22:40:58.720273, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17974) conn 0x0 [2011/01/05 22:40:58.720310, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.720345, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.720379, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.720437, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.720479, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:58.720519, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:58.720559, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:58.720596, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2011/01/05 22:40:58.720650, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2011/01/05 22:40:58.720718, 5] smbd/sesssetup.c:754(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2011/01/05 22:40:58.720754, 3] smbd/sesssetup.c:806(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2011/01/05 22:40:58.720809, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2011/01/05 22:40:58.720854, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2011/01/05 22:40:58.720889, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2011/01/05 22:40:58.720923, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2011/01/05 22:40:58.720987, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2011/01/05 22:40:58.721023, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2011/01/05 22:40:58.721058, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2011/01/05 22:40:58.721092, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2011/01/05 22:40:58.721127, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2011/01/05 22:40:58.721161, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2011/01/05 22:40:58.721196, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2011/01/05 22:40:58.721232, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2011/01/05 22:40:58.721267, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2011/01/05 22:40:58.721303, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2011/01/05 22:40:58.721338, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2011/01/05 22:40:58.721371, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2011/01/05 22:40:58.721405, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2011/01/05 22:40:58.721441, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2011/01/05 22:40:58.721476, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2011/01/05 22:40:58.721510, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2011/01/05 22:40:58.721546, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2011/01/05 22:40:58.721580, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2011/01/05 22:40:58.721618, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2011/01/05 22:40:58.721652, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2011/01/05 22:40:58.721688, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2011/01/05 22:40:58.721740, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2011/01/05 22:40:58.721920, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2011/01/05 22:40:58.722615, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2011/01/05 22:40:58.722653, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2011/01/05 22:40:58.722697, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2011/01/05 22:40:58.722732, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2011/01/05 22:40:58.722773, 5] ../lib/util/util.c:278(_dump_data) [0000] 65 AA 9F AA 16 44 50 0B e....DP. [2011/01/05 22:40:58.723165, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : 65aa9faa1644500b Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2011/01/05 22:40:58.724564, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.724588, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=17973 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2011/01/05 22:40:58.724829, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 65 AA 9F AA 16 44 50 0B 00 ......`e ....DP.. [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 36 .b.a. .3 ...5...6 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2011/01/05 22:40:58.728028, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2011/01/05 22:40:58.728089, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2011/01/05 22:40:58.728136, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2011/01/05 22:40:58.728184, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.728210, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17973 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2011/01/05 22:40:58.728686, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 01 6F 26 DE ........ ...`.o&. [0050] 3F AE C8 3E 00 00 00 00 00 00 00 00 00 00 00 00 ?..>.... ........ [0060] 00 00 00 00 56 6E A0 99 27 11 21 F6 03 DC 2D 77 ....Vn.. '.!...-w [0070] 04 69 CD 3E 3A 66 97 37 1F F8 8F D5 4D 00 53 00 .i.>:f.7 ....M.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 4A B9 U.B.A.R. ..S.I.J. [00B0] CC 50 5C 03 F5 49 01 F5 E8 12 9D 9D 3C C5 00 55 .P\..I.. ....<..U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2011/01/05 22:40:58.729399, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17974) conn 0x0 [2011/01/05 22:40:58.729436, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.729471, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.729505, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.729560, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.729597, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:58.729631, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:58.729667, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:58.729704, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2011/01/05 22:40:58.729776, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 016f26de3faec83e00000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 566ea099271121f603dc2d770469cd3e3a6697371ff88fd5 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2011/01/05 22:40:58.730318, 10] ../lib/util/util.c:278(_dump_data) [0000] 4A B9 CC 50 5C 03 F5 49 01 F5 E8 12 9D 9D 3C C5 J..P\..I ......<. NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2011/01/05 22:40:58.730882, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2011/01/05 22:40:58.730944, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2011/01/05 22:40:58.730993, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2011/01/05 22:40:58.731038, 5] ../lib/util/util.c:278(_dump_data) [0000] 65 86 8B 1A 15 41 5F 41 e....A_A [2011/01/05 22:40:58.867316, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.867431, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2011/01/05 22:40:58.867467, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2011/01/05 22:40:58.868079, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2011/01/05 22:40:58.868295, 3] smbd/oplock.c:895(init_oplocks) init_oplocks: initializing messages. [2011/01/05 22:40:58.868425, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2011/01/05 22:40:58.868466, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2011/01/05 22:40:58.868516, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb78293f8 [2011/01/05 22:40:58.868558, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb787de70 [2011/01/05 22:40:58.868597, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb78211c8 [2011/01/05 22:40:58.868679, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2011/01/05 22:40:58.868721, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2011/01/05 22:40:58.868756, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2011/01/05 22:40:58.868791, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.868811, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17975 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2011/01/05 22:40:58.868995, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2011/01/05 22:40:58.869341, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 17976) conn 0x0 [2011/01/05 22:40:58.869425, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.869466, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.869503, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.869573, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.869665, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2011/01/05 22:40:58.869706, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2011/01/05 22:40:58.869746, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2011/01/05 22:40:58.869782, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2011/01/05 22:40:58.869817, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2011/01/05 22:40:58.869852, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2011/01/05 22:40:58.869888, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2011/01/05 22:40:58.869923, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2011/01/05 22:40:58.869958, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2011/01/05 22:40:58.869993, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2011/01/05 22:40:58.870035, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2011/01/05 22:40:58.870103, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.870181, 5] smbd/connection.c:142(claim_connection) claiming [] [2011/01/05 22:40:58.870297, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 38460000FFFFFFFF0000 [2011/01/05 22:40:58.870349, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb789ec60 [2011/01/05 22:40:58.870421, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 38460000FFFFFFFF0000 [2011/01/05 22:40:58.870564, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.870693, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2011/01/05 22:40:58.870727, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2011/01/05 22:40:58.870765, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2011/01/05 22:40:58.870801, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.870821, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=17975 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=14336 (0x3800) smb_vwv[ 8]= 70 (0x46) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]= 3409 (0xD51) smb_vwv[13]= 8509 (0x213D) smb_vwv[14]=52141 (0xCBAD) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2011/01/05 22:40:58.871239, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2011/01/05 22:40:58.872030, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2011/01/05 22:40:58.872080, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2011/01/05 22:40:58.872145, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2011/01/05 22:40:58.872181, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.872201, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17975 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2011/01/05 22:40:58.872550, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2011/01/05 22:40:58.872790, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17976) conn 0x0 [2011/01/05 22:40:58.872826, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.872861, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.872895, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.872950, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.872991, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:58.873031, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:58.873068, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:58.873105, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2011/01/05 22:40:58.873156, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2011/01/05 22:40:58.873219, 5] smbd/sesssetup.c:754(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2011/01/05 22:40:58.873254, 3] smbd/sesssetup.c:806(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2011/01/05 22:40:58.873307, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2011/01/05 22:40:58.873349, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2011/01/05 22:40:58.873384, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2011/01/05 22:40:58.873418, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2011/01/05 22:40:58.873452, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2011/01/05 22:40:58.873488, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2011/01/05 22:40:58.873522, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2011/01/05 22:40:58.873556, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2011/01/05 22:40:58.873591, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2011/01/05 22:40:58.873626, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2011/01/05 22:40:58.873660, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2011/01/05 22:40:58.873720, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2011/01/05 22:40:58.873755, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2011/01/05 22:40:58.873792, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2011/01/05 22:40:58.873826, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2011/01/05 22:40:58.873860, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2011/01/05 22:40:58.873895, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2011/01/05 22:40:58.873931, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2011/01/05 22:40:58.873966, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2011/01/05 22:40:58.874000, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2011/01/05 22:40:58.874036, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2011/01/05 22:40:58.874071, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2011/01/05 22:40:58.874108, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2011/01/05 22:40:58.874142, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2011/01/05 22:40:58.874177, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2011/01/05 22:40:58.874228, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2011/01/05 22:40:58.874403, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2011/01/05 22:40:58.875080, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2011/01/05 22:40:58.875117, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2011/01/05 22:40:58.875183, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2011/01/05 22:40:58.875218, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2011/01/05 22:40:58.875251, 5] ../lib/util/util.c:278(_dump_data) [0000] D0 07 2A 5B FA 1D 0A C4 ..*[.... [2011/01/05 22:40:58.875602, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : d0072a5bfa1d0ac4 Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2011/01/05 22:40:58.876858, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.876880, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=17975 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2011/01/05 22:40:58.877122, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 D0 07 2A 5B FA 1D 0A C4 00 ......`. .*[..... [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 36 .b.a. .3 ...5...6 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2011/01/05 22:40:58.880219, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2011/01/05 22:40:58.880270, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2011/01/05 22:40:58.880306, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2011/01/05 22:40:58.880341, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.880361, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17975 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2011/01/05 22:40:58.880709, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 70 49 BB 3C ........ ...`pI.< [0050] 25 4E 2F BC 00 00 00 00 00 00 00 00 00 00 00 00 %N/..... ........ [0060] 00 00 00 00 43 FE 4F 6A 50 D0 9D AA 0E BA 18 6D ....C.Oj P......m [0070] 2E 99 AE 16 5A 5F B2 13 A2 24 F1 3C 4D 00 53 00 ....Z_.. .$.length = 190 [2011/01/05 22:40:58.881565, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 7049bb3c254e2fbc00000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 43fe4f6a50d09daa0eba186d2e99ae165a5fb213a224f13c DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2011/01/05 22:40:58.882122, 10] ../lib/util/util.c:278(_dump_data) [0000] BD 09 6B 3C 1B 54 C6 FF 6B 52 CE D5 E7 9D 0B 42 ..k<.T.. kR.....B NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2011/01/05 22:40:58.882648, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2011/01/05 22:40:58.882693, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2011/01/05 22:40:58.882730, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2011/01/05 22:40:58.882764, 5] ../lib/util/util.c:278(_dump_data) [0000] 21 6A 82 DA 61 A2 B6 C3 !j..a... [2011/01/05 22:40:58.960353, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.960469, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2011/01/05 22:40:58.960505, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2011/01/05 22:40:58.961071, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2011/01/05 22:40:58.961256, 3] smbd/oplock.c:895(init_oplocks) init_oplocks: initializing messages. [2011/01/05 22:40:58.961371, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2011/01/05 22:40:58.961410, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2011/01/05 22:40:58.961459, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb78293f8 [2011/01/05 22:40:58.961500, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb787de70 [2011/01/05 22:40:58.961540, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb78211c8 [2011/01/05 22:40:58.961622, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2011/01/05 22:40:58.961666, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2011/01/05 22:40:58.961702, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2011/01/05 22:40:58.961736, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.961756, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17977 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2011/01/05 22:40:58.961941, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2011/01/05 22:40:58.962295, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 17978) conn 0x0 [2011/01/05 22:40:58.962335, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.962375, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.962411, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.962481, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.962576, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2011/01/05 22:40:58.962617, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2011/01/05 22:40:58.962691, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2011/01/05 22:40:58.962727, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2011/01/05 22:40:58.962762, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2011/01/05 22:40:58.962797, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2011/01/05 22:40:58.962832, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2011/01/05 22:40:58.962867, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2011/01/05 22:40:58.962902, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2011/01/05 22:40:58.962938, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2011/01/05 22:40:58.962979, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2011/01/05 22:40:58.963053, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.963131, 5] smbd/connection.c:142(claim_connection) claiming [] [2011/01/05 22:40:58.963246, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 3A460000FFFFFFFF0000 [2011/01/05 22:40:58.963296, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb789ec60 [2011/01/05 22:40:58.963368, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 3A460000FFFFFFFF0000 [2011/01/05 22:40:58.963507, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:58.963637, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2011/01/05 22:40:58.963672, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2011/01/05 22:40:58.963706, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2011/01/05 22:40:58.963741, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.963761, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=17977 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=14848 (0x3A00) smb_vwv[ 8]= 70 (0x46) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]= 128 (0x80) smb_vwv[12]= 3409 (0xD51) smb_vwv[13]= 8509 (0x213D) smb_vwv[14]=52141 (0xCBAD) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2011/01/05 22:40:58.964178, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2011/01/05 22:40:58.964676, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2011/01/05 22:40:58.964723, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2011/01/05 22:40:58.964759, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2011/01/05 22:40:58.964793, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.964813, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17977 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2011/01/05 22:40:58.965176, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2011/01/05 22:40:58.965448, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17978) conn 0x0 [2011/01/05 22:40:58.965483, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.965518, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.965552, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.965606, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.965646, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:58.965686, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:58.965723, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:58.965761, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2011/01/05 22:40:58.965813, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2011/01/05 22:40:58.965877, 5] smbd/sesssetup.c:754(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2011/01/05 22:40:58.965912, 3] smbd/sesssetup.c:806(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2011/01/05 22:40:58.965965, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2011/01/05 22:40:58.966007, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2011/01/05 22:40:58.966043, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2011/01/05 22:40:58.966076, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2011/01/05 22:40:58.966110, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2011/01/05 22:40:58.966146, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2011/01/05 22:40:58.966180, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2011/01/05 22:40:58.966214, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2011/01/05 22:40:58.966249, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2011/01/05 22:40:58.966291, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2011/01/05 22:40:58.966325, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2011/01/05 22:40:58.966361, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2011/01/05 22:40:58.966396, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2011/01/05 22:40:58.966432, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2011/01/05 22:40:58.966466, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2011/01/05 22:40:58.966500, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2011/01/05 22:40:58.966535, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2011/01/05 22:40:58.966571, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2011/01/05 22:40:58.966629, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2011/01/05 22:40:58.966663, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2011/01/05 22:40:58.966700, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2011/01/05 22:40:58.966734, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2011/01/05 22:40:58.966772, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2011/01/05 22:40:58.966806, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2011/01/05 22:40:58.966841, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2011/01/05 22:40:58.966893, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2011/01/05 22:40:58.967074, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2011/01/05 22:40:58.967738, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2011/01/05 22:40:58.967775, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2011/01/05 22:40:58.967820, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2011/01/05 22:40:58.967855, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2011/01/05 22:40:58.967889, 5] ../lib/util/util.c:278(_dump_data) [0000] 19 9B FA 47 BD B2 91 8C ...G.... [2011/01/05 22:40:58.968246, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : 199bfa47bdb2918c Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2011/01/05 22:40:58.969494, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.969517, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=17977 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2011/01/05 22:40:58.969757, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 19 9B FA 47 BD B2 91 8C 00 ......`. ..G..... [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 36 .b.a. .3 ...5...6 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2011/01/05 22:40:58.970646, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2011/01/05 22:40:58.970692, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2011/01/05 22:40:58.970728, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2011/01/05 22:40:58.970767, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:58.970787, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17977 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2011/01/05 22:40:58.971132, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 59 6E C8 98 ........ ...`Yn.. [0050] 63 0D 37 F7 00 00 00 00 00 00 00 00 00 00 00 00 c.7..... ........ [0060] 00 00 00 00 A8 22 8C 4C 03 6D E5 4B F0 15 37 B3 .....".L .m.K..7. [0070] 1B D9 1E 41 43 CE 76 FD 42 78 F0 24 4D 00 53 00 ...AC.v. Bx.$M.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 33 C2 U.B.A.R. ..S.I.3. [00B0] 88 31 C3 02 4A 9F CC 86 C1 DF A5 D9 23 52 00 55 .1..J... ....#R.U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2011/01/05 22:40:58.971576, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17978) conn 0x0 [2011/01/05 22:40:58.971612, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:58.971647, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:58.971682, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:58.971738, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:58.971776, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:58.971810, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:58.971847, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:58.971910, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2011/01/05 22:40:58.971984, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 596ec898630d37f700000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : a8228c4c036de54bf01537b31bd91e4143ce76fd4278f024 DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2011/01/05 22:40:58.972534, 10] ../lib/util/util.c:278(_dump_data) [0000] 33 C2 88 31 C3 02 4A 9F CC 86 C1 DF A5 D9 23 52 3..1..J. ......#R NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2011/01/05 22:40:58.973032, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2011/01/05 22:40:58.973075, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2011/01/05 22:40:58.973113, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2011/01/05 22:40:58.973147, 5] ../lib/util/util.c:278(_dump_data) [0000] 45 EF B8 7A 8B 8C 6A A9 E..z..j. [2011/01/05 22:40:59.143819, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:59.143956, 3] lib/access.c:362(only_ipaddrs_in_list) only_ipaddrs_in_list: list has non-ip address (10.1.1.) [2011/01/05 22:40:59.144069, 3] lib/access.c:396(check_access) check_access: hostnames in host allow/deny list. [2011/01/05 22:40:59.144703, 2] lib/access.c:406(check_access) Allowed connection from localhost (127.0.0.1) [2011/01/05 22:40:59.144918, 3] smbd/oplock.c:895(init_oplocks) init_oplocks: initializing messages. [2011/01/05 22:40:59.145069, 3] smbd/oplock_linux.c:224(linux_init_kernel_oplocks) Linux kernel oplocks enabled [2011/01/05 22:40:59.145109, 5] lib/messages.c:329(messaging_deregister) Deregistering messaging pointer for type 1 - private_data=(nil) [2011/01/05 22:40:59.145159, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(keepalive) 0xb78293f8 [2011/01/05 22:40:59.145201, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(deadtime) 0xb787de70 [2011/01/05 22:40:59.145245, 10] smbd/process.c:740(event_add_idle) event_add_idle: idle_evt(housekeeping) 0xb78211c8 [2011/01/05 22:40:59.145334, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 190 [2011/01/05 22:40:59.145382, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xbe [2011/01/05 22:40:59.145421, 3] smbd/process.c:1485(process_smb) Transaction 0 of length 194 (0 toread) [2011/01/05 22:40:59.145456, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:59.145480, 5] lib/util.c:627(show_msg) size=190 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17979 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=155 [2011/01/05 22:40:59.145693, 10] ../lib/util/util.c:278(_dump_data) [0000] 02 50 43 20 4E 45 54 57 4F 52 4B 20 50 52 4F 47 .PC NETW ORK PROG [0010] 52 41 4D 20 31 2E 30 00 02 4D 49 43 52 4F 53 4F RAM 1.0. .MICROSO [0020] 46 54 20 4E 45 54 57 4F 52 4B 53 20 31 2E 30 33 FT NETWO RKS 1.03 [0030] 00 02 4D 49 43 52 4F 53 4F 46 54 20 4E 45 54 57 ..MICROS OFT NETW [0040] 4F 52 4B 53 20 33 2E 30 00 02 4C 41 4E 4D 41 4E ORKS 3.0 ..LANMAN [0050] 31 2E 30 00 02 4C 4D 31 2E 32 58 30 30 32 00 02 1.0..LM1 .2X002.. [0060] 44 4F 53 20 4C 41 4E 4D 41 4E 32 2E 31 00 02 4C DOS LANM AN2.1..L [0070] 41 4E 4D 41 4E 32 2E 31 00 02 53 61 6D 62 61 00 ANMAN2.1 ..Samba. [0080] 02 4E 54 20 4C 41 4E 4D 41 4E 20 31 2E 30 00 02 .NT LANM AN 1.0.. [0090] 4E 54 20 4C 4D 20 30 2E 31 32 00 NT LM 0. 12. [2011/01/05 22:40:59.146066, 3] smbd/process.c:1294(switch_message) switch message SMBnegprot (pid 17980) conn 0x0 [2011/01/05 22:40:59.146111, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:59.146152, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:59.146188, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:59.146261, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:59.146359, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [PC NETWORK PROGRAM 1.0] [2011/01/05 22:40:59.146399, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 1.03] [2011/01/05 22:40:59.146447, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [MICROSOFT NETWORKS 3.0] [2011/01/05 22:40:59.146483, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN1.0] [2011/01/05 22:40:59.146522, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LM1.2X002] [2011/01/05 22:40:59.146562, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [DOS LANMAN2.1] [2011/01/05 22:40:59.146602, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [LANMAN2.1] [2011/01/05 22:40:59.146641, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [Samba] [2011/01/05 22:40:59.146677, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LANMAN 1.0] [2011/01/05 22:40:59.146712, 3] smbd/negprot.c:586(reply_negprot) Requested protocol [NT LM 0.12] [2011/01/05 22:40:59.146792, 10] lib/util.c:1969(set_remote_arch) set_remote_arch: Client arch is 'Samba' [2011/01/05 22:40:59.146863, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:59.146947, 5] smbd/connection.c:142(claim_connection) claiming [] [2011/01/05 22:40:59.147072, 10] lib/dbwrap_tdb.c:100(db_tdb_fetch_locked) Locking key 3C460000FFFFFFFF0000 [2011/01/05 22:40:59.147128, 10] lib/dbwrap_tdb.c:129(db_tdb_fetch_locked) Allocated locked data 0x0xb789ec60 [2011/01/05 22:40:59.147211, 10] lib/dbwrap_tdb.c:42(db_tdb_record_destr) Unlocking key 3C460000FFFFFFFF0000 [2011/01/05 22:40:59.147355, 6] param/loadparm.c:7133(lp_file_list_changed) lp_file_list_changed() file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Wed Jan 5 22:38:13 2011 [2011/01/05 22:40:59.147499, 3] smbd/negprot.c:404(reply_nt1) using SPNEGO [2011/01/05 22:40:59.147533, 3] smbd/negprot.c:691(reply_negprot) Selected protocol NT LANMAN 1.0 [2011/01/05 22:40:59.147576, 5] smbd/negprot.c:698(reply_negprot) negprot index=8 [2011/01/05 22:40:59.147611, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:59.147635, 5] lib/util.c:627(show_msg) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=17979 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 8 (0x8) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=15360 (0x3C00) smb_vwv[ 8]= 70 (0x46) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=42471 (0xA5E7) smb_vwv[13]= 8509 (0x213D) smb_vwv[14]=52141 (0xCBAD) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2011/01/05 22:40:59.148079, 10] ../lib/util/util.c:278(_dump_data) [0000] 6C 69 70 75 73 2E 66 75 62 61 72 2E 73 69 00 00 lipus.fu bar.si.. [0010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ....0... [0020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7..... [0030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.....NO NE [2011/01/05 22:40:59.148563, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 168 [2011/01/05 22:40:59.148614, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0xa8 [2011/01/05 22:40:59.148653, 3] smbd/process.c:1485(process_smb) Transaction 1 of length 172 (0 toread) [2011/01/05 22:40:59.148687, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:59.148707, 5] lib/util.c:627(show_msg) size=168 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17979 smb_uid=0 smb_mid=2 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 86 (0x56) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=109 [2011/01/05 22:40:59.149078, 10] ../lib/util/util.c:278(_dump_data) [0000] 60 54 06 06 2B 06 01 05 05 02 A0 4A 30 48 A0 0E `T..+... ...J0H.. [0010] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A2 36 0...+... ..7....6 [0020] 04 34 4E 54 4C 4D 53 53 50 00 01 00 00 00 15 82 .4NTLMSS P....... [0030] 08 60 06 00 06 00 20 00 00 00 0E 00 0E 00 26 00 .`.... . ......&. [0040] 00 00 4D 53 48 4F 4D 45 4C 49 50 55 53 2E 46 55 ..MSHOME LIPUS.FU [0050] 42 41 52 2E 53 49 00 55 00 6E 00 69 00 78 00 00 BAR.SI.U .n.i.x.. [0060] 00 53 00 61 00 6D 00 62 00 61 00 00 00 .S.a.m.b .a... [2011/01/05 22:40:59.149326, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17980) conn 0x0 [2011/01/05 22:40:59.149366, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:59.149432, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:59.149470, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:59.149530, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:59.149570, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:59.149615, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:59.149653, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:59.149690, 10] smbd/password.c:184(register_initial_vuid) register_initial_vuid: allocated vuid = 100 [2011/01/05 22:40:59.149743, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 86, pblob->length = 86 [2011/01/05 22:40:59.149812, 5] smbd/sesssetup.c:754(parse_spnego_mechanisms) parse_spnego_mechanisms: Got OID 1.3.6.1.4.1.311.2.2.10 [2011/01/05 22:40:59.149852, 3] smbd/sesssetup.c:806(reply_spnego_negotiate) reply_spnego_negotiate: Got secblob of size 52 [2011/01/05 22:40:59.149909, 5] auth/auth.c:487(make_auth_context_subsystem) Making default auth method list for standalone security=user, encrypt passwords = yes [2011/01/05 22:40:59.149957, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam [2011/01/05 22:40:59.149992, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam' [2011/01/05 22:40:59.150032, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend sam_ignoredomain [2011/01/05 22:40:59.150071, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'sam_ignoredomain' [2011/01/05 22:40:59.150111, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend unix [2011/01/05 22:40:59.150145, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'unix' [2011/01/05 22:40:59.150184, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend winbind [2011/01/05 22:40:59.150223, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'winbind' [2011/01/05 22:40:59.150266, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend wbc [2011/01/05 22:40:59.150310, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'wbc' [2011/01/05 22:40:59.150355, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend smbserver [2011/01/05 22:40:59.150389, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'smbserver' [2011/01/05 22:40:59.150425, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend trustdomain [2011/01/05 22:40:59.150460, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'trustdomain' [2011/01/05 22:40:59.150494, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend ntdomain [2011/01/05 22:40:59.150533, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'ntdomain' [2011/01/05 22:40:59.150582, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend guest [2011/01/05 22:40:59.150616, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'guest' [2011/01/05 22:40:59.150655, 5] auth/auth.c:46(smb_register_auth) Attempting to register auth backend netlogond [2011/01/05 22:40:59.150691, 5] auth/auth.c:58(smb_register_auth) Successfully added auth method 'netlogond' [2011/01/05 22:40:59.150729, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match guest [2011/01/05 22:40:59.150771, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method guest has a valid init [2011/01/05 22:40:59.150805, 5] auth/auth.c:383(load_auth_module) load_auth_module: Attempting to find an auth method to match sam [2011/01/05 22:40:59.150863, 5] auth/auth.c:408(load_auth_module) load_auth_module: auth method sam has a valid init [2011/01/05 22:40:59.150915, 3] libsmb/ntlmssp.c:65(debug_ntlmssp_flags) Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH [2011/01/05 22:40:59.151110, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &negotiate: struct NEGOTIATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmNegotiate (1) NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 DomainNameLen : 0x0006 (6) DomainNameMaxLen : 0x0006 (6) DomainName : * DomainName : 'MSHOME' WorkstationLen : 0x000e (14) WorkstationMaxLen : 0x000e (14) Workstation : * Workstation : 'LIPUS.FUBAR.SI' [2011/01/05 22:40:59.151916, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module guest did not want to specify a challenge [2011/01/05 22:40:59.151958, 5] auth/auth.c:97(get_ntlm_challenge) auth_get_challenge: module sam did not want to specify a challenge [2011/01/05 22:40:59.152011, 5] auth/auth.c:132(get_ntlm_challenge) auth_context challenge created by random [2011/01/05 22:40:59.152046, 5] auth/auth.c:133(get_ntlm_challenge) challenge is: [2011/01/05 22:40:59.152080, 5] ../lib/util/util.c:278(_dump_data) [0000] 85 39 46 2A 74 FD 59 5F .9F*t.Y_ [2011/01/05 22:40:59.152449, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &challenge: struct CHALLENGE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmChallenge (0x2) TargetNameLen : 0x001c (28) TargetNameMaxLen : 0x001c (28) TargetName : * TargetName : 'LIPUS.FUBAR.SI' NegotiateFlags : 0x608a8215 (1619690005) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 1: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 1: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 ServerChallenge : 8539462a74fd595f Reserved : 0000000000000000 TargetInfoLen : 0x0056 (86) TargetNameInfoMaxLen : 0x0056 (86) TargetInfo : * TargetInfo: struct AV_PAIR_LIST count : 0x00000005 (5) pair: ARRAY(5) pair: struct AV_PAIR AvId : MsvAvNbDomainName (0x2) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x2) AvNbDomainName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvNbComputerName (0x1) AvLen : 0x001c (28) Value : union ntlmssp_AvValue(case 0x1) AvNbComputerName : 'LIPUS.FUBAR.SI' pair: struct AV_PAIR AvId : MsvAvDnsDomainName (0x4) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x4) AvDnsDomainName : '' pair: struct AV_PAIR AvId : MsvAvDnsComputerName (0x3) AvLen : 0x000a (10) Value : union ntlmssp_AvValue(case 0x3) AvDnsComputerName : 'lipus' pair: struct AV_PAIR AvId : MsvAvEOL (0x0) AvLen : 0x0000 (0) Value : union ntlmssp_AvValue(case 0x0) [2011/01/05 22:40:59.153889, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:59.153916, 5] lib/util.c:627(show_msg) size=284 smb_com=0x73 smb_rcls=22 smb_reh=0 smb_err=49152 smb_flg=136 smb_flg2=51203 smb_tid=0 smb_pid=17979 smb_uid=100 smb_mid=2 smt_wct=4 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]= 0 (0x0) smb_vwv[ 3]= 193 (0xC1) smb_bcc=241 [2011/01/05 22:40:59.154179, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BE 30 81 BB A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+ [0010] 06 01 04 01 82 37 02 02 0A A2 81 A5 04 81 A2 4E .....7.. .......N [0020] 54 4C 4D 53 53 50 00 02 00 00 00 1C 00 1C 00 30 TLMSSP.. .......0 [0030] 00 00 00 15 82 8A 60 85 39 46 2A 74 FD 59 5F 00 ......`. 9F*t.Y_. [0040] 00 00 00 00 00 00 00 56 00 56 00 4C 00 00 00 4C .......V .V.L...L [0050] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0060] 00 41 00 52 00 2E 00 53 00 49 00 02 00 1C 00 4C .A.R...S .I.....L [0070] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [0080] 00 41 00 52 00 2E 00 53 00 49 00 01 00 1C 00 4C .A.R...S .I.....L [0090] 00 49 00 50 00 55 00 53 00 2E 00 46 00 55 00 42 .I.P.U.S ...F.U.B [00A0] 00 41 00 52 00 2E 00 53 00 49 00 04 00 00 00 03 .A.R...S .I...... [00B0] 00 0A 00 6C 00 69 00 70 00 75 00 73 00 00 00 00 ...l.i.p .u.s.... [00C0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m [00D0] 00 62 00 61 00 20 00 33 00 2E 00 35 00 2E 00 36 .b.a. .3 ...5...6 [00E0] 00 00 00 4D 00 53 00 48 00 4F 00 4D 00 45 00 00 ...M.S.H .O.M.E.. [00F0] 00 . [2011/01/05 22:40:59.155015, 10] lib/util_sock.c:726(read_smb_length_return_keepalive) got smb length of 272 [2011/01/05 22:40:59.155069, 6] smbd/process.c:1482(process_smb) got message type 0x0 of len 0x110 [2011/01/05 22:40:59.155104, 3] smbd/process.c:1485(process_smb) Transaction 2 of length 276 (0 toread) [2011/01/05 22:40:59.155137, 5] lib/util.c:617(show_msg) [2011/01/05 22:40:59.155157, 5] lib/util.c:627(show_msg) size=272 smb_com=0x73 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=8 smb_flg2=51201 smb_tid=0 smb_pid=17979 smb_uid=100 smb_mid=3 smt_wct=12 smb_vwv[ 0]= 255 (0xFF) smb_vwv[ 1]= 0 (0x0) smb_vwv[ 2]=65535 (0xFFFF) smb_vwv[ 3]= 2 (0x2) smb_vwv[ 4]= 1 (0x1) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 0 (0x0) smb_vwv[ 7]= 190 (0xBE) smb_vwv[ 8]= 0 (0x0) smb_vwv[ 9]= 0 (0x0) smb_vwv[10]=53340 (0xD05C) smb_vwv[11]=32768 (0x8000) smb_bcc=213 [2011/01/05 22:40:59.155541, 10] ../lib/util/util.c:278(_dump_data) [0000] A1 81 BB 30 81 B8 A2 81 B5 04 81 B2 4E 54 4C 4D ...0.... ....NTLM [0010] 53 53 50 00 03 00 00 00 18 00 18 00 40 00 00 00 SSP..... ....@... [0020] 18 00 18 00 58 00 00 00 0C 00 0C 00 70 00 00 00 ....X... ....p... [0030] 0A 00 0A 00 7C 00 00 00 1C 00 1C 00 86 00 00 00 ....|... ........ [0040] 10 00 10 00 A2 00 00 00 15 82 08 60 70 DF 7C 51 ........ ...`p.|Q [0050] 61 BD AF 5B 00 00 00 00 00 00 00 00 00 00 00 00 a..[.... ........ [0060] 00 00 00 00 70 9F E9 D5 41 AA B4 E3 2C 9D DB E4 ....p... A...,... [0070] 08 71 43 45 49 58 9A EE F7 4C 15 2C 4D 00 53 00 .qCEIX.. .L.,M.S. [0080] 48 00 4F 00 4D 00 45 00 73 00 61 00 6D 00 62 00 H.O.M.E. s.a.m.b. [0090] 61 00 4C 00 49 00 50 00 55 00 53 00 2E 00 46 00 a.L.I.P. U.S...F. [00A0] 55 00 42 00 41 00 52 00 2E 00 53 00 49 00 42 58 U.B.A.R. ..S.I.BX [00B0] 11 4A 6D 3D 37 1E DB AF AB 22 24 97 36 3B 00 55 .Jm=7... ."$.6;.U [00C0] 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D 00 62 .n.i.x.. .S.a.m.b [00D0] 00 61 00 00 00 .a... [2011/01/05 22:40:59.156004, 3] smbd/process.c:1294(switch_message) switch message SMBsesssetupX (pid 17980) conn 0x0 [2011/01/05 22:40:59.156039, 3] smbd/sec_ctx.c:310(set_sec_ctx) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2011/01/05 22:40:59.156073, 5] auth/token_util.c:525(debug_nt_user_token) NT user token: (NULL) [2011/01/05 22:40:59.156107, 5] auth/token_util.c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2011/01/05 22:40:59.156171, 5] smbd/uid.c:369(change_to_root_user) change_to_root_user: now uid=(0,0) gid=(0,0) [2011/01/05 22:40:59.156208, 3] smbd/sesssetup.c:1436(reply_sesssetup_and_X) wct=12 flg2=0xc801 [2011/01/05 22:40:59.156241, 3] smbd/sesssetup.c:1190(reply_sesssetup_and_X_spnego) Doing spnego session setup [2011/01/05 22:40:59.156281, 3] smbd/sesssetup.c:1232(reply_sesssetup_and_X_spnego) NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[] [2011/01/05 22:40:59.156323, 10] smbd/sesssetup.c:1135(check_spnego_blob_complete) check_spnego_blob_complete: needed_len = 190, pblob->length = 190 [2011/01/05 22:40:59.156396, 1] ../librpc/ndr/ndr.c:214(ndr_print_debug) &authenticate: struct AUTHENTICATE_MESSAGE Signature : 'NTLMSSP' MessageType : NtLmAuthenticate (3) LmChallengeResponseLen : 0x0018 (24) LmChallengeResponseMaxLen: 0x0018 (24) LmChallengeResponse : * LmChallengeResponse : union ntlmssp_LM_RESPONSE(case 24) v1: struct LM_RESPONSE Response : 70df7c5161bdaf5b00000000000000000000000000000000 NtChallengeResponseLen : 0x0018 (24) NtChallengeResponseMaxLen: 0x0018 (24) NtChallengeResponse : * NtChallengeResponse : union ntlmssp_NTLM_RESPONSE(case 24) v1: struct NTLM_RESPONSE Response : 709fe9d541aab4e32c9ddbe40871434549589aeef74c152c DomainNameLen : 0x000c (12) DomainNameMaxLen : 0x000c (12) DomainName : * DomainName : 'MSHOME' UserNameLen : 0x000a (10) UserNameMaxLen : 0x000a (10) UserName : * UserName : 'samba' WorkstationLen : 0x001c (28) WorkstationMaxLen : 0x001c (28) Workstation : * Workstation : 'LIPUS.FUBAR.SI' EncryptedRandomSessionKeyLen: 0x0010 (16) EncryptedRandomSessionKeyMaxLen: 0x0010 (16) EncryptedRandomSessionKey: * EncryptedRandomSessionKey: DATA_BLOB length=16 [2011/01/05 22:40:59.157061, 10] ../lib/util/util.c:278(_dump_data) [0000] 42 58 11 4A 6D 3D 37 1E DB AF AB 22 24 97 36 3B BX.Jm=7. ..."$.6; NegotiateFlags : 0x60088215 (1611170325) 1: NTLMSSP_NEGOTIATE_UNICODE 0: NTLMSSP_NEGOTIATE_OEM 1: NTLMSSP_REQUEST_TARGET 1: NTLMSSP_NEGOTIATE_SIGN 0: NTLMSSP_NEGOTIATE_SEAL 0: NTLMSSP_NEGOTIATE_DATAGRAM 0: NTLMSSP_NEGOTIATE_LM_KEY 0: NTLMSSP_NEGOTIATE_NETWARE 1: NTLMSSP_NEGOTIATE_NTLM 0: NTLMSSP_NEGOTIATE_NT_ONLY 0: NTLMSSP_ANONYMOUS 0: NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED 0: NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED 0: NTLMSSP_NEGOTIATE_THIS_IS_LOCAL_CALL 1: NTLMSSP_NEGOTIATE_ALWAYS_SIGN 0: NTLMSSP_TARGET_TYPE_DOMAIN 0: NTLMSSP_TARGET_TYPE_SERVER 0: NTLMSSP_TARGET_TYPE_SHARE 1: NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY 0: NTLMSSP_NEGOTIATE_IDENTIFY 0: NTLMSSP_REQUEST_NON_NT_SESSION_KEY 0: NTLMSSP_NEGOTIATE_TARGET_INFO 0: NTLMSSP_NEGOTIATE_VERSION 1: NTLMSSP_NEGOTIATE_128 1: NTLMSSP_NEGOTIATE_KEY_EXCH 0: NTLMSSP_NEGOTIATE_56 [2011/01/05 22:40:59.157643, 3] libsmb/ntlmssp.c:747(ntlmssp_server_auth) Got user=[samba] domain=[MSHOME] workstation=[LIPUS.FUBAR.SI] len1=24 len2=24 [2011/01/05 22:40:59.157692, 5] auth/auth_ntlmssp.c:70(auth_ntlmssp_set_challenge) auth_context challenge set by NTLMSSP callback (NTLM2) [2011/01/05 22:40:59.157729, 5] auth/auth_ntlmssp.c:71(auth_ntlmssp_set_challenge) challenge is: [2011/01/05 22:40:59.157762, 5] ../lib/util/util.c:278(_dump_data) [0000] 43 DA 2A A1 02 8D 45 B9 C.*...E.